$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0a4c4834-cf8a-32d7-b594-07e8357b5836.roa File: 0a4c4834-cf8a-32d7-b594-07e8357b5836.roa (raw, json) Hash identifier: LUTNN2eCMhkOJ0IFvCQxrG17hHkvV1Liu6UtRfvB7UA= Subject key identifier: B0:B4:E7:D8:FF:F6:E9:86:0C:61:DF:19:B8:28:21:7A:E0:90:C7:6A Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849955F1CAE1B73A7372FC10A00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0a4c4834-cf8a-32d7-b594-07e8357b5836.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 207.194.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:1c:ae:1b:73:a7:37:2f:c1:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=3e0ab487-3eb9-41fd-bf44-3d33ec3ba6d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8d:62:0a:85:ec:45:8a:1d:dd:5b:60:66:cb: ea:99:16:1c:a2:b5:5a:70:c7:9f:86:b1:62:b3:61: c5:21:34:d9:9d:5d:9b:fc:b7:6e:e3:90:21:4d:19: f6:be:58:a1:a2:7a:14:87:7f:36:24:ec:ed:3d:f3: 87:31:91:37:6c:1c:e0:28:56:e2:38:58:97:3c:f4: 9f:7c:07:7a:39:ae:5c:7b:ab:39:42:b8:5b:c0:d0: 93:7c:07:ac:27:11:8a:b4:8e:ad:e9:61:80:bc:c3: 98:26:2c:b0:eb:2d:28:ee:b3:c0:38:92:75:fc:51: 66:16:bd:8f:48:af:e6:03:87:f9:12:86:56:e2:e3: e2:5b:ab:00:13:5c:51:51:ed:ad:68:5b:da:07:d6: 71:30:d6:7a:27:c7:6c:e5:cc:20:25:dd:0b:82:59: 8d:36:4e:f3:2a:a3:45:29:f6:75:cd:5f:fb:20:25: 63:12:f0:24:06:db:5c:00:1d:a1:eb:51:e9:d0:6d: f9:a8:9b:9f:f8:70:8a:d5:55:eb:02:05:f4:31:22: 5d:f1:01:03:27:16:64:89:61:82:6e:0b:7f:aa:63: 01:c2:86:1b:ff:e8:09:9e:02:b6:54:fd:16:02:0b: 82:bb:c1:b5:90:ba:fd:32:00:1f:b2:f1:a2:0f:c3: 7e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B4:E7:D8:FF:F6:E9:86:0C:61:DF:19:B8:28:21:7A:E0:90:C7:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0a4c4834-cf8a-32d7-b594-07e8357b5836.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.194.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:62:81:9c:a1:a6:de:67:2e:fc:8a:b9:7d:c0:98:22:8c:11: 58:26:0b:dd:58:65:79:ba:8b:e9:36:e8:b5:ef:34:c3:29:61: fd:1f:ba:ea:b3:f3:2f:ac:a0:a1:25:36:08:75:9b:5f:bc:72: 34:ed:0a:7b:69:1c:31:e8:82:de:40:87:22:a6:a4:e0:be:a2: 6f:98:75:e3:29:ac:90:c7:00:43:1f:3f:7e:8f:cd:17:06:c4: b7:70:eb:d5:f0:d1:d4:4c:37:4e:89:4d:94:05:f7:18:18:03: 06:05:90:23:6a:43:f6:21:15:1a:7f:a7:70:10:41:ae:68:15: ac:85:5f:7b:dc:f9:19:ef:ca:3b:d1:e8:c5:46:3b:0f:ea:0d: 42:69:60:2e:2b:4d:59:62:93:6a:cc:9e:08:2e:30:1f:f5:f1: d2:50:44:eb:91:6d:ee:9a:b8:a5:c8:0f:3e:19:57:80:56:89: e3:2f:da:37:2c:da:43:9c:4e:ab:3a:36:5f:68:16:4a:a3:6a: b2:9a:db:c5:ce:62:ed:39:dc:40:48:b1:3b:da:4f:da:7d:bc: 79:05:32:be:09:de:0e:8d:ca:1b:61:66:ac:d5:7b:a2:3b:9d: 0d:b3:55:5a:57:73:66:5d:7c:fb:ba:17:27:2d:12:cd:93:5e: eb:97:d4:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXxyuG3OnNy/BCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk M2UwYWI0ODctM2ViOS00MWZkLWJmNDQtM2QzM2VjM2JhNmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI1iCoXsRYod3VtgZsvqmRYcorVacMefhrFi s2HFITTZnV2b/Ldu45AhTRn2vlihonoUh382JOztPfOHMZE3bBzgKFbiOFiXPPSf fAd6Oa5ce6s5QrhbwNCTfAesJxGKtI6t6WGAvMOYJiyw6y0o7rPAOJJ1/FFmFr2P SK/mA4f5EoZW4uPiW6sAE1xRUe2taFvaB9ZxMNZ6J8ds5cwgJd0LglmNNk7zKqNF KfZ1zV/7ICVjEvAkBttcAB2h61Hp0G35qJuf+HCK1VXrAgX0MSJd8QEDJxZkiWGC bgt/qmMBwoYb/+gJngK2VP0WAguCu8G1kLr9MgAfsvGiD8N+0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLC059j/9umGDGHfGbgoIXrgkMdqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMGE0YzQ4MzQtY2Y4YS0z MmQ3LWI1OTQtMDdlODM1N2I1ODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8KeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRigZyhpt5nLvyKuX3AmCKMEVgmC91YZXm6i+k26LXvNMMpYf0fuuqz 8y+soKElNgh1m1+8cjTtCntpHDHogt5AhyKmpOC+om+YdeMprJDHAEMfP36PzRcG xLdw69Xw0dRMN06JTZQF9xgYAwYFkCNqQ/YhFRp/p3AQQa5oFayFX3vc+RnvyjvR 6MVGOw/qDUJpYC4rTVlik2rMngguMB/18dJQROuRbe6auKXIDz4ZV4BWieMv2jcs 2kOcTqs6Nl9oFkqjarKa28XOYu053EBIsTvaT9p9vHkFMr4J3g6NyhthZqzVe6I7 nQ2zVVpXc2ZdfPu6FyctEs2TXuuX1B0= -----END CERTIFICATE-----Generated at Sun Apr 27 03:55:38 2025 by rpki-client