$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/bbed2abd-3a47-3eb1-9d52-f3993c7f2e42.roa File: bbed2abd-3a47-3eb1-9d52-f3993c7f2e42.roa (raw, json) Hash identifier: rk3Jc++nuTwPfPUsdcND40LqU318EL72g+io8qfBNK0= Subject key identifier: D8:A4:C4:FF:BC:50:AF:A5:64:78:60:EC:93:E9:34:BC:9D:8C:8B:A4 Certificate issuer: /CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87 Certificate serial: 010D0C9F432858497DF3F2B2D6C713816AAB6000 Authority key identifier: 73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/bbed2abd-3a47-3eb1-9d52-f3993c7f2e42.roa Signing time: Fri 11 Apr 2025 15:41:24 +0000 ROA not before: Fri 11 Apr 2025 15:41:24 +0000 ROA not after: Thu 10 Jul 2025 15:41:24 +0000 asID: 199527 IP address blocks: 204.147.224.0/22 maxlen: 22 204.147.228.0/22 maxlen: 22 204.147.232.0/22 maxlen: 22 204.147.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:f3:f2:b2:d6:c7:13:81:6a:ab:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87 Validity Not Before: Apr 11 15:41:24 2025 GMT Not After : Jul 10 15:41:24 2025 GMT Subject: CN=c7583698-3b28-4a5d-b703-a43402d809fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c3:a3:fa:0f:19:48:84:a9:4a:8b:90:4e:3f: 6d:90:85:cc:76:e0:70:3c:74:f2:f0:bc:71:49:25: 84:ae:e4:40:44:1f:40:9c:fe:9a:22:1d:09:b5:a7: 2a:1c:c3:bd:e0:33:b7:79:03:ab:91:98:97:0c:93: 5a:a5:54:24:b4:48:4d:07:14:ae:e6:e4:09:31:81: 8f:bc:bb:d1:d3:c4:94:41:96:ac:6f:b9:91:00:b0: 01:3e:f9:b0:70:2c:38:ae:20:9f:6d:e4:7f:e6:90: d6:29:f9:52:ed:e1:b2:03:a9:27:ac:ac:fc:76:1b: c9:b3:83:a6:7c:77:9b:f5:09:1d:2b:e7:dc:ae:22: be:7a:05:6c:a8:11:1f:ea:43:d8:ef:51:c6:c4:ff: ef:eb:28:d7:86:0a:3b:b5:ef:76:b2:f3:b1:14:43: 06:61:b0:b6:37:2f:41:67:92:24:c0:4a:9c:63:36: f0:d8:bb:8d:6b:d3:38:0d:e6:28:fc:4d:e6:08:f1: cd:36:83:78:d9:a1:81:4f:ed:91:0f:4c:06:8f:db: 4c:78:49:b2:82:e4:1d:67:04:9d:0c:86:7b:f0:5a: 7c:74:d2:d5:19:00:c1:f3:53:5f:bb:ed:2e:8b:1b: f9:85:25:51:e9:8c:d9:f5:72:c0:0a:91:ca:76:d4: f9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A4:C4:FF:BC:50:AF:A5:64:78:60:EC:93:E9:34:BC:9D:8C:8B:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/bbed2abd-3a47-3eb1-9d52-f3993c7f2e42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl X509v3 Authority Key Identifier: keyid:73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer sbgp-ipAddrBlock: critical IPv4: 204.147.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:24:9a:c7:17:c6:45:5f:b9:98:1e:18:85:97:54:27:6f:7f: dc:5f:10:e5:54:43:83:51:40:f8:50:67:85:cb:c2:a8:0f:c2: be:df:09:ea:b1:5e:9e:59:de:3d:a8:d6:88:ee:a7:e5:12:e5: 1c:6e:d0:80:49:5f:4a:87:cd:6d:8e:71:06:c5:f9:e6:6f:54: cf:37:0e:c6:38:22:ab:ec:9f:d0:43:f0:d1:11:71:36:69:87: 9e:34:85:05:4c:36:1a:38:44:15:96:18:2d:d6:fa:b7:08:9d: 7a:b5:59:94:46:62:1f:5f:3d:99:2f:61:28:d1:b4:3b:af:69: 37:79:53:56:bd:4e:9b:52:3d:b7:d0:f1:b9:09:49:ad:27:e8: 25:64:56:87:02:1f:77:2f:fe:c9:0a:cf:2f:79:ff:78:63:fd: 36:21:0f:34:ba:2b:e7:33:3f:59:2d:c9:99:ce:86:e2:95:07: 9f:ea:b2:f8:d5:cb:ba:1e:3b:7f:3a:02:53:6a:d7:7a:c5:63: bf:d3:4e:d5:36:ac:ba:7d:05:a0:b7:63:4d:63:e4:a1:65:e4: 51:dd:24:5e:36:6a:f9:a9:57:63:e8:20:4a:a7:ed:aa:39:75: fc:28:da:c2:fa:f9:89:bc:be:72:9a:1e:b4:8b:25:c9:4a:7e: 37:81:61:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl98/Ky1scTgWqrYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNiNTkwZTgtMzBjNS00OTk3LWJiZjMtZjJmZTEwYTI5 ZTg3MB4XDTI1MDQxMTE1NDEyNFoXDTI1MDcxMDE1NDEyNFowLzEtMCsGA1UEAxMk Yzc1ODM2OTgtM2IyOC00YTVkLWI3MDMtYTQzNDAyZDgwOWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8Oj+g8ZSISpSouQTj9tkIXMduBwPHTy8Lxx SSWEruRARB9AnP6aIh0JtacqHMO94DO3eQOrkZiXDJNapVQktEhNBxSu5uQJMYGP vLvR08SUQZasb7mRALABPvmwcCw4riCfbeR/5pDWKflS7eGyA6knrKz8dhvJs4Om fHeb9QkdK+fcriK+egVsqBEf6kPY71HGxP/v6yjXhgo7te92svOxFEMGYbC2Ny9B Z5IkwEqcYzbw2LuNa9M4DeYo/E3mCPHNNoN42aGBT+2RD0wGj9tMeEmyguQdZwSd DIZ78Fp8dNLVGQDB81Nfu+0uixv5hSVR6YzZ9XLACpHKdtT5xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNikxP+8UK+lZHhg7JPpNLydjIukMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yM2I1 OTBlOC0zMGM1LTQ5OTctYmJmMy1mMmZlMTBhMjllODcvYmJlZDJhYmQtM2E0Ny0z ZWIxLTlkNTItZjM5OTNjN2YyZTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjNiNTkwZTgtMzBjNS00OTk3LWJi ZjMtZjJmZTEwYTI5ZTg3LzIzYjU5MGU4LTMwYzUtNDk5Ny1iYmYzLWYyZmUxMGEy OWU4Ny5jcmwwHwYDVR0jBBgwFoAUcy1hwgTHlLBjGpuuELFhCs6jUygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yM2I1OTBlOC0zMGM1LTQ5OTctYmJmMy1mMmZl MTBhMjllODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzJPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0kmscXxkVfuZgeGIWXVCdvf9xfEOVUQ4NRQPhQZ4XLwqgPwr7fCeqx Xp5Z3j2o1ojup+US5Rxu0IBJX0qHzW2OcQbF+eZvVM83DsY4Iqvsn9BD8NERcTZp h540hQVMNho4RBWWGC3W+rcInXq1WZRGYh9fPZkvYSjRtDuvaTd5U1a9TptSPbfQ 8bkJSa0n6CVkVocCH3cv/skKzy95/3hj/TYhDzS6K+czP1ktyZnOhuKVB5/qsvjV y7oeO386AlNq13rFY7/TTtU2rLp9BaC3Y01j5KFl5FHdJF42avmpV2PoIEqn7ao5 dfwo2sL6+Ym8vnKaHrSLJclKfjeBYSE= -----END CERTIFICATE-----Generated at Mon Apr 14 09:41:48 2025 by rpki-client