$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b2708acf-f59c-3b4f-9f11-01baaa6b4999.roa File: b2708acf-f59c-3b4f-9f11-01baaa6b4999.roa (raw, json) Hash identifier: zQbetbOYAPBLdMBxQ2WavGaEkWWgKw8KB91ZH/T0iqQ= Subject key identifier: BB:22:78:A9:AF:00:88:5E:29:75:13:2D:6E:D5:2F:BD:69:6F:D1:BB Certificate issuer: /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8 Certificate serial: 010D0C9F4328584953C410F2E14D09D04D682980 Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b2708acf-f59c-3b4f-9f11-01baaa6b4999.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 20055 IP address blocks: 204.11.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:10:f2:e1:4d:09:d0:4d:68:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=ee64949b-9a31-4e48-b2c5-1011ee322ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ec:96:3c:6f:fd:af:b7:69:b1:cd:dc:6d:9e: 38:ef:20:a2:30:a0:b4:8e:99:f3:72:b1:7e:66:94: cd:e6:c5:03:ba:52:d7:cd:c3:d5:a5:b2:b5:fe:a9: 47:9f:a7:43:4c:56:27:91:e1:c8:ce:05:e4:df:93: 17:d5:f9:ba:54:87:0d:f0:cb:57:a9:30:7d:4d:d8: 97:0e:00:c4:bb:17:3c:68:1d:1d:d9:01:75:47:cc: b1:6c:58:ba:63:cd:33:b5:97:fe:57:a8:1c:d7:82: cb:06:87:a0:43:79:2b:f8:19:48:66:d3:1a:ff:7b: 4b:bf:a7:ee:39:2f:b8:95:ea:4c:59:f4:12:08:dd: 0d:36:74:ad:40:04:63:1e:f0:bf:d0:23:eb:aa:36: 12:02:16:d1:89:35:e9:6e:9b:c4:75:89:1e:4f:7c: f9:33:48:77:48:2e:51:c9:95:59:d7:02:43:29:47: c3:55:16:c9:b2:45:90:c5:54:67:5c:6b:18:f8:25: 5d:5c:dc:b7:9b:a5:99:a8:2d:c8:fd:e0:05:5b:26: 70:2d:c6:b0:0c:da:d1:ac:7c:0c:d6:dd:98:10:79: e9:76:70:61:70:a2:76:3a:13:78:bb:7d:4e:00:dc: 56:6f:bf:7a:b1:3d:32:16:8f:63:2f:e7:12:27:d4: a7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:22:78:A9:AF:00:88:5E:29:75:13:2D:6E:D5:2F:BD:69:6F:D1:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b2708acf-f59c-3b4f-9f11-01baaa6b4999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl X509v3 Authority Key Identifier: keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer sbgp-ipAddrBlock: critical IPv4: 204.11.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:94:a8:e0:61:c9:ea:52:32:9e:14:99:b3:8f:c1:9f:2b:ed: 85:56:0d:8b:07:3b:b3:4d:c5:89:78:1c:15:f1:5c:75:79:7b: 11:38:22:94:93:ad:02:80:94:98:3b:6b:85:b6:35:be:e5:53: 4b:85:cd:50:26:49:b4:46:e6:f2:61:b4:c5:0a:87:a8:a5:a1: 69:b8:8b:98:5f:e0:17:ee:65:2c:0b:f1:b4:b2:60:3d:bd:db: fd:33:bd:14:54:14:87:8f:b5:90:5d:d1:15:ca:63:7b:c3:5a: 0d:69:f2:02:cc:c4:d1:15:d6:88:13:e6:1b:5a:82:24:a6:b3: d2:cf:0b:4e:52:00:fb:dd:2b:65:11:22:6b:1e:9a:16:bc:06: 69:41:06:e3:7a:ae:87:e3:54:b8:fe:a0:9d:3b:bf:d9:f5:9e: 97:1e:67:5c:b5:84:d2:a0:f4:4c:6b:c7:7d:10:39:1e:49:05: a2:34:b8:d2:cf:0d:c4:2f:07:57:f2:9a:2b:bf:c2:0c:ac:60: 28:a2:ea:be:4c:d7:d7:7f:7d:f1:db:cd:a5:19:cb:ce:69:8e: 1f:2a:06:1e:ad:db:0d:83:0e:c4:3f:97:4f:0d:b1:f6:70:c2: 5e:e9:41:a1:12:38:fa:d9:bf:7e:ba:17:68:5c:35:06:23:43: 60:82:de:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBDy4U0J0E1oKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMxZmJkOGItNGVkOS00ZjVkLWE4ZjAtNzU1OWQ5MWJm M2M4MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZWU2NDk0OWItOWEzMS00ZTQ4LWIyYzUtMTAxMWVlMzIyYWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeyWPG/9r7dpsc3cbZ447yCiMKC0jpnzcrF+ ZpTN5sUDulLXzcPVpbK1/qlHn6dDTFYnkeHIzgXk35MX1fm6VIcN8MtXqTB9TdiX DgDEuxc8aB0d2QF1R8yxbFi6Y80ztZf+V6gc14LLBoegQ3kr+BlIZtMa/3tLv6fu OS+4lepMWfQSCN0NNnStQARjHvC/0CPrqjYSAhbRiTXpbpvEdYkeT3z5M0h3SC5R yZVZ1wJDKUfDVRbJskWQxVRnXGsY+CVdXNy3m6WZqC3I/eAFWyZwLcawDNrRrHwM 1t2YEHnpdnBhcKJ2OhN4u31OANxWb796sT0yFo9jL+cSJ9SnrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsieKmvAIheKXUTLW7VL71pb9G7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFm YmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5ZDkxYmYzYzgvYjI3MDhhY2YtZjU5Yy0z YjRmLTlmMTEtMDFiYWFhNmI0OTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmMxZmJkOGItNGVkOS00ZjVkLWE4 ZjAtNzU1OWQ5MWJmM2M4L2ZjMWZiZDhiLTRlZDktNGY1ZC1hOGYwLTc1NTlkOTFi ZjNjOC5jcmwwHwYDVR0jBBgwFoAUbKtKsvVYO/RVBP3F8Yue3m5JAT0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFmYmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5 ZDkxYmYzYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6UqOBhyepSMp4UmbOPwZ8r7YVWDYsHO7NNxYl4HBXxXHV5exE4IpST rQKAlJg7a4W2Nb7lU0uFzVAmSbRG5vJhtMUKh6iloWm4i5hf4BfuZSwL8bSyYD29 2/0zvRRUFIePtZBd0RXKY3vDWg1p8gLMxNEV1ogT5htagiSms9LPC05SAPvdK2UR Imsemha8BmlBBuN6rofjVLj+oJ07v9n1npceZ1y1hNKg9Exrx30QOR5JBaI0uNLP DcQvB1fymiu/wgysYCii6r5M19d/ffHbzaUZy85pjh8qBh6t2w2DDsQ/l08NsfZw wl7pQaESOPrZv366F2hcNQYjQ2CC3k8= -----END CERTIFICATE-----Generated at Fri Apr 11 21:00:58 2025 by rpki-client