$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/38034f38-ee51-39ae-8b7b-9c9ac94d3590.roa File: 38034f38-ee51-39ae-8b7b-9c9ac94d3590.roa (raw, json) Hash identifier: RTxBVTO8h2h8NSgo9/F71W6lcIXZoktYpk2ySmgYxT4= Subject key identifier: 1D:ED:2C:BB:73:D2:ED:79:83:17:83:7C:DD:18:F1:C2:EB:E5:23:9B Certificate issuer: /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Certificate serial: 010D0C9F432858495F40CE0462345094A5A12180 Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/38034f38-ee51-39ae-8b7b-9c9ac94d3590.roa Signing time: Mon 31 Mar 2025 15:46:11 +0000 ROA not before: Mon 31 Mar 2025 15:46:11 +0000 ROA not after: Sun 29 Jun 2025 15:46:11 +0000 asID: 21782 IP address blocks: 67.209.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5f:40:ce:04:62:34:50:94:a5:a1:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Validity Not Before: Mar 31 15:46:11 2025 GMT Not After : Jun 29 15:46:11 2025 GMT Subject: CN=7792f1de-73ce-4e67-9dac-1200458c742c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:19:3f:e2:85:14:84:38:f8:b3:6a:33:bb:80: 70:04:e2:37:b6:d7:a7:dd:be:df:ff:88:19:74:a3: c2:c8:55:28:95:cf:1d:24:be:34:cc:b9:a6:36:e7: 96:f7:83:aa:93:59:d7:22:33:e6:dc:4b:ea:6f:b7: 3a:41:df:ea:48:38:fa:9a:d6:60:f2:ad:b8:ac:6b: 99:03:84:58:9f:a9:b1:49:84:16:73:96:02:b5:e2: d6:b9:fe:97:23:46:c7:bd:33:9a:44:b1:db:a7:67: 19:bb:3b:d4:ba:0f:bc:1a:f6:96:27:ae:7b:53:49: 35:ba:f6:bc:23:84:45:67:a3:27:60:9a:8f:b4:1a: 6d:01:90:22:17:35:81:01:17:2a:a2:2b:c4:52:02: 5d:6a:89:69:5d:19:62:7e:41:a9:57:33:1f:d9:76: a2:9d:66:c9:6c:7e:6f:1b:76:5e:d4:a2:2d:71:48: 53:ec:de:90:d2:aa:0d:14:6b:b5:1e:2c:46:1f:03: f6:90:f7:be:d9:84:6d:74:68:b0:bc:fe:7f:78:e7: 16:76:12:69:2c:ff:45:d0:03:7e:d0:1b:82:97:9f: 2a:8e:b4:e7:c6:a2:9d:88:44:01:ab:6c:11:20:e0: b6:6e:e5:92:c2:1a:7a:ed:03:ed:aa:46:e0:3c:e0: 6a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:ED:2C:BB:73:D2:ED:79:83:17:83:7C:DD:18:F1:C2:EB:E5:23:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/38034f38-ee51-39ae-8b7b-9c9ac94d3590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl X509v3 Authority Key Identifier: keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer sbgp-ipAddrBlock: critical IPv4: 67.209.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:68:3d:54:91:ea:48:d7:1a:8c:ce:1e:cf:9e:85:d9:65:e2: 79:21:62:04:89:65:2b:a5:6f:3f:60:3c:36:cd:2b:b7:8c:91: 95:5b:a0:9d:3d:95:40:63:7c:45:42:61:e3:eb:28:7e:21:cb: a8:f2:da:7f:c9:cc:ca:4a:b9:b3:d1:6b:70:04:33:dc:c6:ad: f2:86:39:01:d3:1a:f0:57:d7:c4:04:c0:9f:f8:de:ae:c4:a6: d6:0e:3e:8a:79:42:2a:52:35:6a:3c:c7:b6:39:24:ca:f0:30: 1f:6f:42:b2:f9:60:81:40:88:aa:6c:9c:5c:15:2f:13:dc:10: 40:74:31:05:72:cf:62:10:b1:e0:2c:64:9e:d8:c0:dc:fc:70: 49:42:6b:11:23:62:5d:90:4b:ae:80:c7:b1:c5:fa:9b:14:54: e4:1c:3b:9c:50:e3:61:5f:08:1b:67:8d:d2:bd:56:a0:5f:a3: 1d:52:d2:e0:f9:d3:81:f3:67:bb:41:df:c7:23:d9:bc:c6:a9: ff:43:e2:c9:68:c3:07:e4:cb:a2:80:60:d8:bd:c9:27:39:53: 3b:9b:fa:d4:da:28:41:5d:5d:8c:70:fa:94:6a:6d:1a:55:97: 62:ee:02:a6:8d:17:68:c0:05:8e:a8:41:43:be:61:44:46:0f: cf:a3:33:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElfQM4EYjRQlKWhIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM3ZGJjZDUtZDZiYi00YTg5LTk4YWUtZTI1NTBlYTNl OTNhMB4XDTI1MDMzMTE1NDYxMVoXDTI1MDYyOTE1NDYxMVowLzEtMCsGA1UEAxMk Nzc5MmYxZGUtNzNjZS00ZTY3LTlkYWMtMTIwMDQ1OGM3NDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRk/4oUUhDj4s2ozu4BwBOI3tten3b7f/4gZ dKPCyFUolc8dJL40zLmmNueW94Oqk1nXIjPm3Evqb7c6Qd/qSDj6mtZg8q24rGuZ A4RYn6mxSYQWc5YCteLWuf6XI0bHvTOaRLHbp2cZuzvUug+8GvaWJ657U0k1uva8 I4RFZ6MnYJqPtBptAZAiFzWBARcqoivEUgJdaolpXRlifkGpVzMf2XainWbJbH5v G3Ze1KItcUhT7N6Q0qoNFGu1HixGHwP2kPe+2YRtdGiwvP5/eOcWdhJpLP9F0AN+ 0BuCl58qjrTnxqKdiEQBq2wRIOC2buWSwhp67QPtqkbgPOBqBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3tLLtz0u15gxeDfN0Y8cLr5SObMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Yzdk YmNkNS1kNmJiLTRhODktOThhZS1lMjU1MGVhM2U5M2EvMzgwMzRmMzgtZWU1MS0z OWFlLThiN2ItOWM5YWM5NGQzNTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM3ZGJjZDUtZDZiYi00YTg5LTk4 YWUtZTI1NTBlYTNlOTNhLzhjN2RiY2Q1LWQ2YmItNGE4OS05OGFlLWUyNTUwZWEz ZTkzYS5jcmwwHwYDVR0jBBgwFoAUAzePKejZd54MxR716MslpAwKWwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YzdkYmNkNS1kNmJiLTRhODktOThhZS1lMjU1 MGVhM2U5M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ9HQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhoPVSR6kjXGozOHs+ehdll4nkhYgSJZSulbz9gPDbNK7eMkZVboJ09 lUBjfEVCYePrKH4hy6jy2n/JzMpKubPRa3AEM9zGrfKGOQHTGvBX18QEwJ/43q7E ptYOPop5QipSNWo8x7Y5JMrwMB9vQrL5YIFAiKpsnFwVLxPcEEB0MQVyz2IQseAs ZJ7YwNz8cElCaxEjYl2QS66Ax7HF+psUVOQcO5xQ42FfCBtnjdK9VqBfox1S0uD5 04HzZ7tB38cj2bzGqf9D4slowwfky6KAYNi9ySc5Uzub+tTaKEFdXYxw+pRqbRpV l2LuAqaNF2jABY6oQUO+YURGD8+jM7Q= -----END CERTIFICATE-----Generated at Sun Apr 6 21:28:19 2025 by rpki-client