$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/b9f66f1a-b09d-364e-ad81-be3f7aca7cc2.roa File: b9f66f1a-b09d-364e-ad81-be3f7aca7cc2.roa (raw, json) Hash identifier: WNtg+BUmv7wuo3fjJZUNvdTbaJWfUwGarYoDU3B8iLs= Subject key identifier: 72:DA:BF:13:18:63:9D:54:8A:22:8E:68:6B:1B:8A:D3:77:BA:DF:1E Certificate issuer: /CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87 Certificate serial: 010D0C9F432858497DF833212B9306745F8127A0 Authority key identifier: 73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/b9f66f1a-b09d-364e-ad81-be3f7aca7cc2.roa Signing time: Fri 11 Apr 2025 15:49:58 +0000 ROA not before: Fri 11 Apr 2025 15:49:58 +0000 ROA not after: Thu 10 Jul 2025 15:49:58 +0000 asID: 64289 IP address blocks: 204.139.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:f8:33:21:2b:93:06:74:5f:81:27:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87 Validity Not Before: Apr 11 15:49:58 2025 GMT Not After : Jul 10 15:49:58 2025 GMT Subject: CN=ecb2655b-1721-4a70-bc43-e8189805dfd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5e:f7:d6:f3:49:e0:ec:44:a3:97:28:ab:f6: 43:58:81:32:30:85:40:27:4f:55:a3:dd:67:34:be: 23:64:6a:ea:03:f7:1c:77:98:ec:82:e7:fd:82:8a: 16:0d:b5:a4:31:88:7a:bf:c6:b8:ae:e5:5b:d5:78: aa:ae:02:08:7a:74:e4:76:6a:35:c8:6a:03:e9:36: ec:90:e3:77:09:a2:93:79:52:fe:e6:5b:29:ce:08: 7a:25:29:bd:93:e2:f4:85:94:da:70:6f:11:1a:a7: b6:7e:96:0c:42:0a:de:36:f9:56:c1:40:3c:91:7e: 8d:84:05:2f:4b:d5:0b:e3:60:8f:51:83:ba:58:07: 33:09:4c:b9:1c:fa:5e:15:03:fe:82:46:03:cd:a8: e8:36:3c:a0:8d:9b:42:cd:4a:3b:13:fd:27:30:ff: b0:35:6c:9b:d9:d5:cc:fd:16:38:88:0f:cf:a3:d2: d0:31:fc:1c:2c:50:1e:47:6a:09:6c:06:c1:a8:1a: 45:08:b1:80:fd:38:ab:72:93:c0:c7:e7:34:83:97: 93:e4:56:3c:34:8b:93:db:85:be:29:05:6c:7a:94: 53:d3:31:d1:34:38:af:96:a9:b2:e3:91:5e:43:a7: 45:7f:ef:8c:d6:a1:49:f5:76:b3:e2:34:b1:ce:ee: 74:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DA:BF:13:18:63:9D:54:8A:22:8E:68:6B:1B:8A:D3:77:BA:DF:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/b9f66f1a-b09d-364e-ad81-be3f7aca7cc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl X509v3 Authority Key Identifier: keyid:73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer sbgp-ipAddrBlock: critical IPv4: 204.139.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:38:ca:00:c6:80:cc:a4:7a:1e:df:c1:74:30:3f:b8:58:4c: 0e:c0:45:84:be:2b:e5:ed:65:c7:b8:1d:72:dc:01:55:1a:b3: 37:8f:52:50:39:b2:93:b4:73:1a:73:e2:71:dc:0b:b2:a6:b2: b4:2d:0d:76:63:0c:3e:b6:ab:e6:d2:a5:65:ff:e9:5e:c8:5e: 00:c2:b1:4c:2f:09:77:90:ce:54:ce:11:89:93:b9:50:c8:35: 1d:3a:1d:1a:1b:18:b7:66:3e:f5:3c:83:e6:b9:eb:0a:43:0e: 40:bb:02:06:e5:d9:40:e4:3b:69:13:f4:9b:06:0d:bb:2c:e2: 48:f5:59:d6:e8:f8:69:32:0a:f7:08:1a:e6:2f:de:03:26:54: 72:01:d0:8b:38:81:3f:41:9f:0d:a8:9c:75:fe:4e:67:a6:20: 29:a1:4a:84:4e:c0:45:b5:2a:e4:d9:e9:c4:66:c0:f6:1b:c0: 1f:8a:92:59:eb:2b:b4:35:46:04:08:80:00:1c:ac:ba:4c:b0: 7b:bb:c7:fb:0c:b4:27:62:9a:74:11:41:77:63:d4:35:c6:b2: 1f:88:e7:3f:f6:d1:69:14:92:2d:75:13:22:39:26:4b:79:c6: 3b:a0:fb:78:58:80:ba:5e:b3:46:49:b8:bf:b2:7c:8b:fa:d2: 36:e2:80:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9+DMhK5MGdF+BJ6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNiNTkwZTgtMzBjNS00OTk3LWJiZjMtZjJmZTEwYTI5 ZTg3MB4XDTI1MDQxMTE1NDk1OFoXDTI1MDcxMDE1NDk1OFowLzEtMCsGA1UEAxMk ZWNiMjY1NWItMTcyMS00YTcwLWJjNDMtZTgxODk4MDVkZmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61731vNJ4OxEo5coq/ZDWIEyMIVAJ09Vo91n NL4jZGrqA/ccd5jsguf9gooWDbWkMYh6v8a4ruVb1XiqrgIIenTkdmo1yGoD6Tbs kON3CaKTeVL+5lspzgh6JSm9k+L0hZTacG8RGqe2fpYMQgreNvlWwUA8kX6NhAUv S9UL42CPUYO6WAczCUy5HPpeFQP+gkYDzajoNjygjZtCzUo7E/0nMP+wNWyb2dXM /RY4iA/Po9LQMfwcLFAeR2oJbAbBqBpFCLGA/TircpPAx+c0g5eT5FY8NIuT24W+ KQVsepRT0zHRNDivlqmy45FeQ6dFf++M1qFJ9Xaz4jSxzu50CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLavxMYY51UiiKOaGsbitN3ut8eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yM2I1 OTBlOC0zMGM1LTQ5OTctYmJmMy1mMmZlMTBhMjllODcvYjlmNjZmMWEtYjA5ZC0z NjRlLWFkODEtYmUzZjdhY2E3Y2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjNiNTkwZTgtMzBjNS00OTk3LWJi ZjMtZjJmZTEwYTI5ZTg3LzIzYjU5MGU4LTMwYzUtNDk5Ny1iYmYzLWYyZmUxMGEy OWU4Ny5jcmwwHwYDVR0jBBgwFoAUcy1hwgTHlLBjGpuuELFhCs6jUygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yM2I1OTBlOC0zMGM1LTQ5OTctYmJmMy1mMmZl MTBhMjllODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzIsMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFg4ygDGgMykeh7fwXQwP7hYTA7ARYS+K+XtZce4HXLcAVUaszePUlA5 spO0cxpz4nHcC7KmsrQtDXZjDD62q+bSpWX/6V7IXgDCsUwvCXeQzlTOEYmTuVDI NR06HRobGLdmPvU8g+a56wpDDkC7Agbl2UDkO2kT9JsGDbss4kj1Wdbo+GkyCvcI GuYv3gMmVHIB0Is4gT9Bnw2onHX+TmemICmhSoROwEW1KuTZ6cRmwPYbwB+Kklnr K7Q1RgQIgAAcrLpMsHu7x/sMtCdimnQRQXdj1DXGsh+I5z/20WkUki11EyI5Jkt5 xjug+3hYgLpes0ZJuL+yfIv60jbigE8= -----END CERTIFICATE-----Generated at Tue Apr 15 11:34:19 2025 by rpki-client