$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/661e319d-f202-3bc1-bec8-797d7d57a136.roa File: 661e319d-f202-3bc1-bec8-797d7d57a136.roa (raw, json) Hash identifier: qDqi6yiC93RJxC49OTQgT1rLzizP1EDuUHSmTbEbJ0A= Subject key identifier: 31:8E:CD:F7:0F:34:15:8A:99:CF:95:98:74:75:5F:81:82:48:EB:07 Certificate issuer: /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Certificate serial: 010D0C9F43285848E9CBD91341870BB392BCC080 Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/661e319d-f202-3bc1-bec8-797d7d57a136.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 62707 IP address blocks: 173.243.224.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:d9:13:41:87:0b:b3:92:bc:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=893cc6c2-93a1-4759-a3c9-609bf2fb7a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:dd:00:9f:79:99:cf:1c:35:08:2c:31:c8:09: be:aa:c1:9b:36:57:9d:59:fa:bf:ad:64:12:d9:64: 23:98:88:70:f3:f0:fc:97:37:62:9c:32:13:ae:a1: 01:3d:94:be:a4:47:77:91:3d:10:e8:be:66:50:53: c6:fb:ba:ba:97:0f:72:94:13:1f:42:44:2c:8c:46: 02:e6:b0:55:24:9b:16:4a:e3:ac:34:84:de:69:5d: 38:bb:63:84:8b:ad:ff:c7:c5:3f:f1:fc:68:0e:8c: 5e:6b:53:55:5f:e6:b6:cc:73:44:ee:ef:fd:f4:b9: a2:90:f6:3d:f9:1a:1a:9d:0f:a7:01:82:14:4b:ba: ea:55:b6:02:30:bc:91:f1:c3:aa:fb:e9:f8:92:07: ba:4f:ab:dd:b0:49:01:21:a7:1c:09:cc:ec:90:ca: d8:62:fa:15:90:1a:38:b4:dd:cf:0d:33:25:08:85: 33:ab:b4:aa:e0:e5:43:04:49:33:83:29:32:37:8e: 27:70:cb:25:11:1a:dc:8d:71:89:57:3b:c3:3e:ab: e3:36:75:13:dc:c8:2b:9b:2f:bc:44:f3:51:9a:d7: aa:b6:eb:33:45:e0:b1:92:8d:ac:89:a6:8c:e5:b8: 78:84:80:b1:f9:23:ce:c6:71:11:1f:fc:2f:26:c7: f4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:8E:CD:F7:0F:34:15:8A:99:CF:95:98:74:75:5F:81:82:48:EB:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/661e319d-f202-3bc1-bec8-797d7d57a136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl X509v3 Authority Key Identifier: keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer sbgp-ipAddrBlock: critical IPv4: 173.243.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:12:27:e7:c1:67:ac:0d:a7:4b:12:d6:87:56:ac:eb:e8:46: fc:14:0a:92:e5:ad:bd:0c:00:c4:17:2e:c6:1e:f5:e2:7c:9f: af:23:6e:4f:51:de:bd:e0:c0:b5:ed:34:b6:86:28:83:41:e6: cc:4f:cd:a2:87:83:47:af:1f:50:ce:92:60:4d:33:45:f5:43: 5c:69:3e:71:fa:d3:db:2e:71:6c:1b:63:f8:c2:a7:a9:96:6d: 5c:1a:f7:ba:dc:82:c1:3d:af:34:1a:ad:14:63:ad:3f:28:8d: ca:3a:73:ef:e6:65:f0:1d:ca:0c:76:35:71:23:39:34:95:4b: 20:f3:31:d8:5a:d7:d8:d6:95:65:5c:f4:91:24:f2:1f:a4:bf: 47:b7:5b:86:f8:f8:52:8f:cf:47:40:d2:a9:1b:cd:d9:c5:7c: 96:47:a3:d8:c4:e4:56:f5:a0:a1:6b:dc:4a:31:be:3e:24:e7: 11:95:67:3b:41:d0:c0:72:7c:d3:93:3f:ce:49:b9:85:ae:7e: 01:c0:2d:9a:97:d3:d3:23:ea:18:8c:3f:46:0d:16:b5:24:85: 86:09:66:77:5a:66:70:e8:9a:89:19:d7:28:f2:a6:af:18:a2: 18:e9:30:e2:5e:1c:a8:99:f8:63:29:83:5b:5a:74:f8:84:cc: 9a:b6:2b:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy9kTQYcLs5K8wIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWYzZWM5MzgtN2I0NS00YzQ3LTkxZDItOWY3ZDE4NDEx NTE5MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk ODkzY2M2YzItOTNhMS00NzU5LWEzYzktNjA5YmYyZmI3YTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd0An3mZzxw1CCwxyAm+qsGbNledWfq/rWQS 2WQjmIhw8/D8lzdinDITrqEBPZS+pEd3kT0Q6L5mUFPG+7q6lw9ylBMfQkQsjEYC 5rBVJJsWSuOsNITeaV04u2OEi63/x8U/8fxoDoxea1NVX+a2zHNE7u/99LmikPY9 +RoanQ+nAYIUS7rqVbYCMLyR8cOq++n4kge6T6vdsEkBIaccCczskMrYYvoVkBo4 tN3PDTMlCIUzq7Sq4OVDBEkzgykyN44ncMslERrcjXGJVzvDPqvjNnUT3Mgrmy+8 RPNRmteqtuszReCxko2siaaM5bh4hICx+SPOxnERH/wvJsf0EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGOzfcPNBWKmc+VmHR1X4GCSOsHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNl YzkzOC03YjQ1LTRjNDctOTFkMi05ZjdkMTg0MTE1MTkvNjYxZTMxOWQtZjIwMi0z YmMxLWJlYzgtNzk3ZDdkNTdhMTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWYzZWM5MzgtN2I0NS00YzQ3LTkx ZDItOWY3ZDE4NDExNTE5L2VmM2VjOTM4LTdiNDUtNGM0Ny05MWQyLTlmN2QxODQx MTUxOS5jcmwwHwYDVR0jBBgwFoAUkanyxG7l5rwGtdG4Yq1QTfPopywwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNlYzkzOC03YjQ1LTRjNDctOTFkMi05Zjdk MTg0MTE1MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrfPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgSJ+fBZ6wNp0sS1odWrOvoRvwUCpLlrb0MAMQXLsYe9eJ8n68jbk9R 3r3gwLXtNLaGKINB5sxPzaKHg0evH1DOkmBNM0X1Q1xpPnH609sucWwbY/jCp6mW bVwa97rcgsE9rzQarRRjrT8ojco6c+/mZfAdygx2NXEjOTSVSyDzMdha19jWlWVc 9JEk8h+kv0e3W4b4+FKPz0dA0qkbzdnFfJZHo9jE5Fb1oKFr3Eoxvj4k5xGVZztB 0MByfNOTP85JuYWufgHALZqX09Mj6hiMP0YNFrUkhYYJZndaZnDomokZ1yjypq8Y ohjpMOJeHKiZ+GMpg1tadPiEzJq2K7Y= -----END CERTIFICATE-----Generated at Sun Apr 27 01:44:37 2025 by rpki-client