$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/3fa4ab0e-1b26-304b-acec-041abcbc93a3.roa File: 3fa4ab0e-1b26-304b-acec-041abcbc93a3.roa (raw, json) Hash identifier: 7TQ8LKtGUOnvFAY3yx4eVdc1Be4yF7R87I8r46MFQE4= Subject key identifier: 19:FE:27:52:3E:90:0C:E2:C5:24:20:A1:DF:8A:12:A8:FD:2F:83:07 Certificate issuer: /CN=0605680b-ca76-43b6-81d9-2ac50993c59e Certificate serial: 010D0C9F432858497DA46D16FBC9EE66F9547E00 Authority key identifier: 49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/3fa4ab0e-1b26-304b-acec-041abcbc93a3.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 18934 IP address blocks: 204.29.13.240/28 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:6d:16:fb:c9:ee:66:f9:54:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0605680b-ca76-43b6-81d9-2ac50993c59e Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=f802fa0a-bf01-449e-9d8a-313bdacc02a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:15:00:88:99:3b:c7:c9:90:3f:14:2c:e4:93: 74:9b:fe:85:7d:78:9b:ac:5c:1c:ba:af:f6:79:35: 3d:56:14:c4:2d:22:dc:95:e0:4a:b5:8d:26:db:c1: 9c:21:3b:5e:67:4f:bc:31:f7:e0:f7:60:b3:53:15: ad:06:80:85:5e:a5:ba:14:b1:10:e3:3e:2b:ad:10: fd:9f:91:31:35:e7:6c:c1:a9:b1:c6:80:5b:44:00: 10:f1:8b:60:60:ea:42:e3:43:cd:62:34:5b:b0:2f: c3:17:67:57:91:59:ff:fa:ba:e6:94:c3:85:c9:31: 57:bb:45:37:fb:c0:51:36:17:9a:5a:41:87:5b:32: 7b:27:8f:4e:1d:9a:d3:01:dd:3b:06:e8:68:66:18: e0:56:29:f8:f0:3f:a6:b2:8c:b7:bd:d4:a5:f3:8f: 57:67:cd:69:c1:b1:cb:81:dd:15:67:0a:97:a4:54: 09:f4:21:ed:ec:09:a5:7b:6a:0c:be:b4:63:3d:ee: 87:af:0c:43:83:44:c4:44:46:a8:cd:4e:c9:92:a1: 83:ac:3a:de:42:95:be:37:66:c9:89:d3:63:5e:10: 8a:60:bd:17:ad:a1:02:1d:62:41:48:3c:c1:4b:ea: 30:28:db:47:a8:30:20:42:14:22:89:67:52:2b:c4: 64:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FE:27:52:3E:90:0C:E2:C5:24:20:A1:DF:8A:12:A8:FD:2F:83:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/3fa4ab0e-1b26-304b-acec-041abcbc93a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl X509v3 Authority Key Identifier: keyid:49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer sbgp-ipAddrBlock: critical IPv4: 204.29.13.240/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:85:77:39:24:1b:96:13:24:1e:32:5b:a6:aa:0b:54:b7:f3: 53:bc:19:c8:42:c5:36:0f:d0:1b:e6:f0:56:1e:24:0a:41:c5: 67:c2:3e:1b:7a:78:ce:4f:4f:34:5d:aa:cb:46:58:a7:bf:8a: 75:6f:76:12:79:72:27:03:34:d1:65:1d:33:04:7c:3c:04:74: d8:7e:90:89:eb:b1:6d:f4:10:7e:12:04:82:93:fe:96:d6:e8: 71:0f:3f:7f:1e:eb:09:33:de:02:45:b6:66:85:a9:38:6b:04: 2a:50:bf:d4:be:9e:e9:dc:9d:1a:6e:52:de:ec:99:3e:a5:b1: 4a:7b:f8:15:52:11:be:4c:0d:62:98:e7:a4:c8:d2:13:b9:21: 48:f1:d7:6f:c4:c9:34:5e:b5:06:7a:f8:03:5c:b9:8f:77:ac: bb:d3:1f:05:22:d6:ea:b0:42:29:4c:4f:18:10:dd:d7:43:a4: 90:6d:79:a9:ab:7c:75:19:c9:05:55:ba:0a:09:88:dc:48:07: d6:45:63:75:bf:e2:59:ee:75:b9:ad:55:4a:0c:c1:72:32:28: 2d:88:18:38:24:65:88:41:8f:76:30:6c:68:a6:30:45:87:55: cb:a9:7d:75:32:af:d4:81:e2:a3:0a:04:6c:c2:59:35:88:0a: 03:45:6a:f9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEl9pG0W+8nuZvlUfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYwNTY4MGItY2E3Ni00M2I2LTgxZDktMmFjNTA5OTNj NTllMB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZjgwMmZhMGEtYmYwMS00NDllLTlkOGEtMzEzYmRhY2MwMmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBUAiJk7x8mQPxQs5JN0m/6FfXibrFwcuq/2 eTU9VhTELSLcleBKtY0m28GcITteZ0+8Mffg92CzUxWtBoCFXqW6FLEQ4z4rrRD9 n5ExNedswamxxoBbRAAQ8YtgYOpC40PNYjRbsC/DF2dXkVn/+rrmlMOFyTFXu0U3 +8BRNheaWkGHWzJ7J49OHZrTAd07BuhoZhjgVin48D+msoy3vdSl849XZ81pwbHL gd0VZwqXpFQJ9CHt7Amle2oMvrRjPe6HrwxDg0TEREaozU7JkqGDrDreQpW+N2bJ idNjXhCKYL0XraECHWJBSDzBS+owKNtHqDAgQhQiiWdSK8Rk9QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBn+J1I+kAzixSQgod+KEqj9L4MHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNjA1 NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1MDk5M2M1OWUvM2ZhNGFiMGUtMWIyNi0z MDRiLWFjZWMtMDQxYWJjYmM5M2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDYwNTY4MGItY2E3Ni00M2I2LTgx ZDktMmFjNTA5OTNjNTllLzA2MDU2ODBiLWNhNzYtNDNiNi04MWQ5LTJhYzUwOTkz YzU5ZS5jcmwwHwYDVR0jBBgwFoAUSUhmydhN2RQ18NBnqAdbMJX69FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNjA1NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1 MDk5M2M1OWUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEzB0N8DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCbhXc5JBuWEyQeMlumqgtUt/NTvBnIQsU2D9Ab5vBWHiQKQcVnwj4b enjOT080XarLRlinv4p1b3YSeXInAzTRZR0zBHw8BHTYfpCJ67Ft9BB+EgSCk/6W 1uhxDz9/HusJM94CRbZmhak4awQqUL/Uvp7p3J0ablLe7Jk+pbFKe/gVUhG+TA1i mOekyNITuSFI8ddvxMk0XrUGevgDXLmPd6y70x8FItbqsEIpTE8YEN3XQ6SQbXmp q3x1GckFVboKCYjcSAfWRWN1v+JZ7nW5rVVKDMFyMigtiBg4JGWIQY92MGxopjBF h1XLqX11Mq/UgeKjCgRswlk1iAoDRWr5 -----END CERTIFICATE-----Generated at Sat Apr 12 12:32:17 2025 by rpki-client