$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/89772c28-8eb2-3845-a823-2fc46db1e47d.roa File: 89772c28-8eb2-3845-a823-2fc46db1e47d.roa (raw, json) Hash identifier: mL+/DhtTZW/86VTTlN+srbQlCmLF7sVSycmb6orCJ+I= Subject key identifier: DA:F7:BA:A0:8A:BB:19:92:3D:16:99:32:F0:CF:DD:5D:6E:3D:76:09 Certificate issuer: /CN=9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0 Certificate serial: 010D0C9F4328584961C725907E25A5FF3C367280 Authority key identifier: ED:FB:E1:A5:2A:1B:91:EF:C8:F6:A5:CE:0D:CC:62:BC:25:5D:14:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/89772c28-8eb2-3845-a823-2fc46db1e47d.roa Signing time: Tue 01 Apr 2025 13:28:29 +0000 ROA not before: Tue 01 Apr 2025 13:28:29 +0000 ROA not after: Mon 30 Jun 2025 13:28:29 +0000 asID: 5056 IP address blocks: 136.242.64.0/20 maxlen: 24 208.90.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:c7:25:90:7e:25:a5:ff:3c:36:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0 Validity Not Before: Apr 1 13:28:29 2025 GMT Not After : Jun 30 13:28:29 2025 GMT Subject: CN=f6d3ee76-c0b6-4c72-b472-a70b8a7c3438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:73:ec:2e:07:05:6e:ba:a6:7c:14:8f:07:fd: 5a:fd:30:31:64:81:3c:7f:83:c6:11:67:99:40:f0: bd:a6:82:47:b7:ef:5f:c3:b4:78:66:e3:e1:d5:9e: 6b:63:dd:51:ba:c5:9b:13:22:72:e6:32:ba:1a:79: 71:86:31:25:df:3a:d7:c9:53:ed:3a:58:49:46:a7: c3:04:fa:a0:05:35:64:bd:12:67:63:81:6a:d9:73: 15:cf:0c:0a:91:44:00:12:14:2a:c2:8d:6f:3d:9a: 08:61:fd:28:e0:d2:ec:65:5e:87:5e:fc:63:ce:99: 36:86:98:74:cd:78:36:40:75:2b:a3:69:ed:08:b5: 1c:7b:99:85:66:ac:3d:df:a8:da:df:c9:ab:16:fc: 17:e4:94:29:2e:ea:1a:19:fe:66:22:db:af:4b:72: 2f:38:3c:ad:c9:c7:1e:13:0b:c1:6e:52:d0:cd:86: 74:26:70:39:55:b6:de:c2:88:1e:10:c5:ca:84:d0: 9c:9c:63:09:4a:96:e8:0b:81:5f:99:6f:bd:0f:93: b6:5b:b6:8c:c7:c1:43:ce:fb:6a:c5:32:15:52:bb: 05:35:bb:e9:7d:d7:c2:12:1f:0f:41:0b:57:87:e8: 00:40:c9:62:5c:45:e2:0d:bd:9d:fe:16:b4:0c:c3: 76:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F7:BA:A0:8A:BB:19:92:3D:16:99:32:F0:CF:DD:5D:6E:3D:76:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/89772c28-8eb2-3845-a823-2fc46db1e47d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.crl X509v3 Authority Key Identifier: keyid:ED:FB:E1:A5:2A:1B:91:EF:C8:F6:A5:CE:0D:CC:62:BC:25:5D:14:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.cer sbgp-ipAddrBlock: critical IPv4: 136.242.64.0/20 208.90.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:fd:db:4c:cd:a9:74:49:5a:c5:a8:4e:84:01:a9:2c:99:5b: 0c:eb:64:e2:33:c4:4c:18:e2:5d:11:30:93:46:46:76:65:78: ca:24:d6:9e:7c:54:33:89:5a:3f:87:e1:02:cd:1a:69:9e:58: ec:dd:9f:57:99:e7:d9:4f:3b:b8:66:2b:63:57:09:90:30:79: 1d:95:a7:bc:52:f2:0a:b8:35:06:35:7a:be:32:e9:c6:f5:93: ca:e1:7e:6e:85:a6:5c:b9:d1:a9:39:5e:c0:6e:f6:d6:c7:21: d7:ae:76:c7:38:df:06:e8:4f:11:c2:c1:ba:7c:9a:1e:4b:cf: e0:a3:d5:21:61:32:b8:6b:24:38:60:97:64:4d:d6:4e:49:1e: 3b:ad:da:d3:56:b7:52:0d:3d:62:55:e3:b9:9e:21:44:dc:57: 0f:d7:1e:39:f1:aa:d7:3b:5e:f4:97:d0:e8:a9:1e:21:c6:22: dd:25:b8:0e:c2:2f:72:b7:0e:a8:92:0b:2f:92:dd:2e:76:89: 87:e1:9c:b6:a4:e0:02:31:a9:7a:26:15:67:0d:fe:ab:01:d5: 72:9e:a2:0d:d9:ed:64:bd:6c:8b:bc:34:47:9a:15:67:1a:ef: 7d:54:d3:61:12:41:77:47:a8:9d:e2:e5:98:f3:e5:13:0e:97: 5f:bb:59:e5 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElhxyWQfiWl/zw2coAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0MGE1ZTctZGZiYi00YmMwLWFmZDktNjBiZjBjMDc5 ZWIwMB4XDTI1MDQwMTEzMjgyOVoXDTI1MDYzMDEzMjgyOVowLzEtMCsGA1UEAxMk ZjZkM2VlNzYtYzBiNi00YzcyLWI0NzItYTcwYjhhN2MzNDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3PsLgcFbrqmfBSPB/1a/TAxZIE8f4PGEWeZ QPC9poJHt+9fw7R4ZuPh1Z5rY91RusWbEyJy5jK6GnlxhjEl3zrXyVPtOlhJRqfD BPqgBTVkvRJnY4Fq2XMVzwwKkUQAEhQqwo1vPZoIYf0o4NLsZV6HXvxjzpk2hph0 zXg2QHUro2ntCLUce5mFZqw936ja38mrFvwX5JQpLuoaGf5mItuvS3IvODytycce EwvBblLQzYZ0JnA5VbbewogeEMXKhNCcnGMJSpboC4FfmW+9D5O2W7aMx8FDzvtq xTIVUrsFNbvpfdfCEh8PQQtXh+gAQMliXEXiDb2d/ha0DMN2/wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNr3uqCKuxmSPRaZMvDP3V1uPXYJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85OTQw YTVlNy1kZmJiLTRiYzAtYWZkOS02MGJmMGMwNzllYjAvODk3NzJjMjgtOGViMi0z ODQ1LWE4MjMtMmZjNDZkYjFlNDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOTk0MGE1ZTctZGZiYi00YmMwLWFm ZDktNjBiZjBjMDc5ZWIwLzk5NDBhNWU3LWRmYmItNGJjMC1hZmQ5LTYwYmYwYzA3 OWViMC5jcmwwHwYDVR0jBBgwFoAU7fvhpSobke/I9qXODcxivCVdFOowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy85OTQwYTVlNy1kZmJiLTRiYzAtYWZkOS02MGJm MGMwNzllYjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEiPJAAwQC 0FrkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHL920zNqXRJWsWoToQBqSyZWwzrZOIzxEwY4l0RMJNGRnZl eMok1p58VDOJWj+H4QLNGmmeWOzdn1eZ59lPO7hmK2NXCZAweR2Vp7xS8gq4NQY1 er4y6cb1k8rhfm6Fply50ak5XsBu9tbHIdeudsc43wboTxHCwbp8mh5Lz+Cj1SFh MrhrJDhgl2RN1k5JHjut2tNWt1INPWJV47meIUTcVw/XHjnxqtc7XvSX0OipHiHG It0luA7CL3K3DqiSCy+S3S52iYfhnLak4AIxqXomFWcN/qsB1XKeog3Z7WS9bIu8 NEeaFWca731U02ESQXdHqJ3i5Zjz5RMOl1+7WeU= -----END CERTIFICATE-----Generated at Sat Apr 19 00:40:31 2025 by rpki-client