$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b02a6d7a-d28d-3b6b-8751-feb644f7e685.roa File: b02a6d7a-d28d-3b6b-8751-feb644f7e685.roa (raw, json) Hash identifier: cUAC7S0bK7LS5yRjDEtB6Srf4GH+PM7dvZRHr7K6QkY= Subject key identifier: 84:D6:95:05:C3:F9:7C:30:60:0D:C7:6F:64:83:85:56:DC:82:F0:10 Certificate issuer: /CN=b23daa11-4037-452a-934b-684edbefcbf9 Certificate serial: 010D0C9F43285848CC7B94302D4D585BA13A2E00 Authority key identifier: FC:30:9C:C3:3C:A6:E9:C9:D4:7A:91:03:88:4D:F0:1D:00:57:60:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b02a6d7a-d28d-3b6b-8751-feb644f7e685.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 40630 IP address blocks: 204.13.88.0/22 maxlen: 24 208.94.116.0/22 maxlen: 24 2607:ff18::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:94:30:2d:4d:58:5b:a1:3a:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b23daa11-4037-452a-934b-684edbefcbf9 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=ab6eced6-220b-49cf-b4bc-6d98d73649ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8b:24:16:e9:23:8e:d8:a9:24:06:4c:55:1a: d4:af:ce:64:dd:6b:de:5f:87:6a:1d:d3:75:13:0d: 19:dd:c4:88:c8:61:bd:ed:85:71:c4:f9:6b:02:9a: 68:e2:30:82:cc:cf:43:29:d6:2a:06:66:1d:d9:3f: a1:3e:5c:4e:1a:77:c9:40:ee:c6:d0:02:fb:0a:b3: 06:01:39:19:56:1b:d6:66:f4:0f:a7:26:a2:65:e2: 3b:c2:6b:2e:65:09:cd:d6:26:c9:dc:98:e1:f6:bf: 63:0d:67:88:a5:98:58:c7:80:19:c9:37:c9:bc:1f: 1a:07:ac:5f:00:22:de:e3:9b:a0:b9:13:d1:30:9a: 6c:b7:19:10:8b:8c:37:20:a9:ba:e9:46:0e:2b:66: 7b:5f:0b:62:30:e6:bf:a5:3d:36:e2:4f:b4:68:9c: b1:a7:2d:82:e9:d1:69:13:3c:1f:da:ae:a2:d9:8c: d7:52:ac:54:2a:70:d4:02:d2:d8:52:b7:84:91:3f: 69:9a:e6:cc:fa:1b:d2:99:b8:a6:1f:bf:88:d9:85: f8:42:09:63:49:8b:8e:1f:eb:bd:e9:81:f4:5a:5f: e6:a4:7b:d7:39:bc:82:ea:88:05:5d:0b:c6:83:ca: 5c:f2:b1:46:bf:3b:1b:64:a5:57:e1:f2:d3:0e:6d: e7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D6:95:05:C3:F9:7C:30:60:0D:C7:6F:64:83:85:56:DC:82:F0:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b02a6d7a-d28d-3b6b-8751-feb644f7e685.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.crl X509v3 Authority Key Identifier: keyid:FC:30:9C:C3:3C:A6:E9:C9:D4:7A:91:03:88:4D:F0:1D:00:57:60:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer sbgp-ipAddrBlock: critical IPv4: 204.13.88.0/22 208.94.116.0/22 IPv6: 2607:ff18::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:c6:de:3d:33:ef:94:47:e2:96:56:18:4b:af:22:d3:f1:10: f7:7f:c9:ec:c3:40:5f:61:48:ec:33:13:a3:72:14:97:f0:42: 17:3c:e4:6c:3c:57:69:7a:16:1a:9c:1a:1f:f4:44:fa:d2:20: 34:25:22:76:fd:a1:2d:d2:65:8f:7f:04:28:44:75:cf:2b:98: 37:b2:d8:7b:50:db:d8:30:d5:10:34:37:9b:b9:a6:8c:f3:ec: 6e:22:bd:7e:dc:f0:6f:f7:95:48:fe:3c:3a:a8:a2:1f:2c:07: c2:cd:5e:e7:3c:57:c1:ce:0c:12:ee:f5:21:39:b7:7b:e8:33: 6b:28:ad:dd:95:4b:01:2f:68:fd:c1:27:33:3f:06:3e:14:f9: 2e:83:8d:53:b8:b2:ed:69:64:f0:de:c4:e0:ce:a2:47:d4:b9: 53:f4:00:46:4b:f5:b2:a4:3b:92:f3:df:9d:41:60:92:53:cc: 6b:17:e0:09:d9:37:82:44:de:f2:be:e9:85:2b:89:ac:37:49: 28:54:6c:98:5f:eb:4d:23:3f:f3:d4:41:1c:03:5c:b0:52:f4: 72:2d:fc:be:18:22:5f:91:86:47:dc:a2:51:7a:5d:f3:6a:32: 9d:a3:a6:15:55:8f:a0:2e:a8:a6:c7:35:19:c8:45:df:96:42: 21:56:5b:f4 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEjMe5QwLU1YW6E6LgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjIzZGFhMTEtNDAzNy00NTJhLTkzNGItNjg0ZWRiZWZj YmY5MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk YWI2ZWNlZDYtMjIwYi00OWNmLWI0YmMtNmQ5OGQ3MzY0OWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioskFukjjtipJAZMVRrUr85k3WveX4dqHdN1 Ew0Z3cSIyGG97YVxxPlrAppo4jCCzM9DKdYqBmYd2T+hPlxOGnfJQO7G0AL7CrMG ATkZVhvWZvQPpyaiZeI7wmsuZQnN1ibJ3Jjh9r9jDWeIpZhYx4AZyTfJvB8aB6xf ACLe45uguRPRMJpstxkQi4w3IKm66UYOK2Z7XwtiMOa/pT024k+0aJyxpy2C6dFp Ezwf2q6i2YzXUqxUKnDUAtLYUreEkT9pmubM+hvSmbimH7+I2YX4QgljSYuOH+u9 6YH0Wl/mpHvXObyC6ogFXQvGg8pc8rFGvzsbZKVX4fLTDm3n7QIDAQABo4IDajCC A2YwHQYDVR0OBBYEFITWlQXD+XwwYA3Hb2SDhVbcgvAQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMjNk YWExMS00MDM3LTQ1MmEtOTM0Yi02ODRlZGJlZmNiZjkvYjAyYTZkN2EtZDI4ZC0z YjZiLTg3NTEtZmViNjQ0ZjdlNjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjIzZGFhMTEtNDAzNy00NTJhLTkz NGItNjg0ZWRiZWZjYmY5L2IyM2RhYTExLTQwMzctNDUyYS05MzRiLTY4NGVkYmVm Y2JmOS5jcmwwHwYDVR0jBBgwFoAU/DCcwzym6cnUepEDiE3wHQBXYFUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMjNkYWExMS00MDM3LTQ1MmEtOTM0Yi02ODRl ZGJlZmNiZjkuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCzA1YAwQC 0F50MA0EAgACMAcDBQAmB/8YMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAATG3j0z75RH4pZWGEuvItPxEPd/ yezDQF9hSOwzE6NyFJfwQhc85Gw8V2l6FhqcGh/0RPrSIDQlInb9oS3SZY9/BChE dc8rmDey2HtQ29gw1RA0N5u5pozz7G4ivX7c8G/3lUj+PDqooh8sB8LNXuc8V8HO DBLu9SE5t3voM2sord2VSwEvaP3BJzM/Bj4U+S6DjVO4su1pZPDexODOokfUuVP0 AEZL9bKkO5Lz351BYJJTzGsX4AnZN4JE3vK+6YUriaw3SShUbJhf600jP/PUQRwD XLBS9HIt/L4YIl+RhkfcolF6XfNqMp2jphVVj6AuqKbHNRnIRd+WQiFWW/Q= -----END CERTIFICATE-----Generated at Sat Apr 12 14:56:16 2025 by rpki-client