$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/8883f6a0-cd35-3a1a-a3cf-dfd8f7e87101.roa File: 8883f6a0-cd35-3a1a-a3cf-dfd8f7e87101.roa (raw, json) Hash identifier: 0xKWUuw54/57SULiEkNmKLkFFL4WLQi4Yv1SNtmx1O4= Subject key identifier: C0:4C:C7:F1:13:CE:FB:60:8A:19:00:10:52:F3:33:1A:5E:05:74:B4 Certificate issuer: /CN=b8a0e292-3e8f-447b-81c6-cedef4747341 Certificate serial: 010D0C9F4328584921840CA8C04CD5EB91991300 Authority key identifier: 83:A3:6C:9B:30:E5:DE:80:EC:B3:A4:FC:42:E5:52:72:23:88:DA:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/8883f6a0-cd35-3a1a-a3cf-dfd8f7e87101.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 54511 IP address blocks: 64.202.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/b8a0e292-3e8f-447b-81c6-cedef4747341.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/b8a0e292-3e8f-447b-81c6-cedef4747341.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:0c:a8:c0:4c:d5:eb:91:99:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8a0e292-3e8f-447b-81c6-cedef4747341 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=ba6feafc-6bda-488a-9556-e66172fbf34a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:32:17:ca:d5:89:d9:ea:dc:18:cf:b4:7d:61: 98:74:4d:9b:8f:30:c8:8d:ca:1d:06:e9:4e:18:44: b9:09:f7:52:2c:84:a4:26:fe:a0:8f:62:97:88:1d: f3:74:e4:e6:a2:7c:b3:c9:8a:73:7c:47:04:26:19: bc:03:e9:00:f0:ae:da:dc:ed:54:ef:85:fa:69:64: 21:72:41:ef:26:72:e7:ae:8b:9a:78:ac:8a:67:62: be:ea:16:69:a4:a3:42:ac:23:39:b2:ae:6f:78:fd: 37:a6:67:42:37:db:23:9b:4a:c2:3f:8d:36:5a:c1: fc:db:32:09:57:2d:c6:66:59:ec:92:c2:2a:c2:80: 20:52:52:f1:77:4a:32:b0:9b:b4:fe:7a:fc:64:ba: 10:57:00:81:34:49:19:9e:01:20:52:6d:60:3c:94: cc:05:12:f8:07:27:b7:2c:91:55:7a:af:40:af:7a: 80:22:84:6c:7a:b2:2f:66:1f:11:23:2c:17:e3:23: 2a:d0:08:78:6c:9d:25:da:18:0c:35:22:b8:e2:3c: 6b:aa:06:71:66:18:a9:e6:14:11:ec:cf:00:05:06: 15:29:b4:86:1f:22:68:45:90:36:23:54:6e:89:c7: c8:f3:e7:54:99:f7:cd:39:c8:06:1d:c3:e9:c0:80: 05:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4C:C7:F1:13:CE:FB:60:8A:19:00:10:52:F3:33:1A:5E:05:74:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/8883f6a0-cd35-3a1a-a3cf-dfd8f7e87101.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/b8a0e292-3e8f-447b-81c6-cedef4747341.crl X509v3 Authority Key Identifier: keyid:83:A3:6C:9B:30:E5:DE:80:EC:B3:A4:FC:42:E5:52:72:23:88:DA:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer sbgp-ipAddrBlock: critical IPv4: 64.202.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:24:f7:38:4e:b9:45:25:10:4e:b5:89:d7:13:6d:e0:60:e9: 88:35:45:15:c3:7e:b8:59:c2:d1:70:27:09:9c:51:c4:04:b5: 83:ba:ed:8f:1d:01:51:65:f1:80:78:58:98:39:5a:f8:76:b6: e8:58:25:17:bb:02:d0:0a:02:26:1a:1a:7a:28:86:e2:e1:c8: cb:8b:a0:dc:40:df:3e:f7:97:eb:de:a1:a6:81:16:3a:10:67: 10:80:38:bd:16:a4:0a:e8:5f:ac:f4:88:b3:6b:80:bd:7e:dc: 36:45:d1:9e:17:25:47:f1:78:13:ef:1c:7d:60:11:38:e8:94: 91:a3:a3:08:e4:36:1a:cf:9c:30:7f:11:dc:37:86:5b:69:f8: c6:4f:75:d9:53:ce:03:2e:f7:a6:e0:8c:56:00:94:1f:48:e8: d5:0d:5e:6e:5b:1a:46:9e:89:36:69:99:9b:08:0c:04:5f:67: 57:68:56:18:c4:99:c2:e6:2b:86:1f:27:f4:9b:3d:b8:f6:fc: 4e:ae:d9:75:33:9c:a9:3b:a0:c5:63:fa:ed:b9:7a:2e:66:36: 1c:71:55:56:e6:4f:bd:9d:e0:bb:f9:e3:1c:a8:6d:9c:6b:38: df:cb:7c:e9:b1:42:cd:b8:46:38:20:fd:be:41:54:e0:36:24: 21:a5:02:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhAyowEzV65GZEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhhMGUyOTItM2U4Zi00NDdiLTgxYzYtY2VkZWY0NzQ3 MzQxMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk YmE2ZmVhZmMtNmJkYS00ODhhLTk1NTYtZTY2MTcyZmJmMzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjIXytWJ2ercGM+0fWGYdE2bjzDIjcodBulO GES5CfdSLISkJv6gj2KXiB3zdOTmonyzyYpzfEcEJhm8A+kA8K7a3O1U74X6aWQh ckHvJnLnrouaeKyKZ2K+6hZppKNCrCM5sq5veP03pmdCN9sjm0rCP402WsH82zIJ Vy3GZlnsksIqwoAgUlLxd0oysJu0/nr8ZLoQVwCBNEkZngEgUm1gPJTMBRL4Bye3 LJFVeq9Ar3qAIoRserIvZh8RIywX4yMq0Ah4bJ0l2hgMNSK44jxrqgZxZhip5hQR 7M8ABQYVKbSGHyJoRZA2I1RuicfI8+dUmffNOcgGHcPpwIAFJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBMx/ETzvtgihkAEFLzMxpeBXS0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iOGEw ZTI5Mi0zZThmLTQ0N2ItODFjNi1jZWRlZjQ3NDczNDEvODg4M2Y2YTAtY2QzNS0z YTFhLWEzY2YtZGZkOGY3ZTg3MTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjhhMGUyOTItM2U4Zi00NDdiLTgx YzYtY2VkZWY0NzQ3MzQxL2I4YTBlMjkyLTNlOGYtNDQ3Yi04MWM2LWNlZGVmNDc0 NzM0MS5jcmwwHwYDVR0jBBgwFoAUg6NsmzDl3oDss6T8QuVSciOI2g8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iOGEwZTI5Mi0zZThmLTQ0N2ItODFjNi1jZWRl ZjQ3NDczNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQMrcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEk9zhOuUUlEE61idcTbeBg6Yg1RRXDfrhZwtFwJwmcUcQEtYO67Y8d AVFl8YB4WJg5Wvh2tuhYJRe7AtAKAiYaGnoohuLhyMuLoNxA3z73l+veoaaBFjoQ ZxCAOL0WpAroX6z0iLNrgL1+3DZF0Z4XJUfxeBPvHH1gETjolJGjowjkNhrPnDB/ Edw3hltp+MZPddlTzgMu96bgjFYAlB9I6NUNXm5bGkaeiTZpmZsIDARfZ1doVhjE mcLmK4YfJ/SbPbj2/E6u2XUznKk7oMVj+u25ei5mNhxxVVbmT72d4Lv54xyobZxr ON/LfOmxQs24Rjgg/b5BVOA2JCGlApU= -----END CERTIFICATE-----Generated at Fri Apr 4 16:02:43 2025 by rpki-client