$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0adb33de-3dc5-3875-b62c-4af8c925e837.roa File: 0adb33de-3dc5-3875-b62c-4af8c925e837.roa (raw, json) Hash identifier: y+8V7ZJAHBtf7p4H2jt3REeroPswDTO8B7t2wgf/G8k= Subject key identifier: 17:14:3A:42:79:20:71:03:60:70:BC:79:B3:72:07:F1:50:FD:A8:0D Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499829CAC957BDDEEF1BE83BE0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0adb33de-3dc5-3875-b62c-4af8c925e837.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 173.181.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:ca:c9:57:bd:de:ef:1b:e8:3b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=baef677e-ef38-4b7a-a051-44629bb0a271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:17:40:c7:bf:41:d1:43:5b:8b:20:93:fe:30: 4b:e6:38:fe:fb:b9:a7:73:44:29:2e:c3:cc:c2:0a: a7:06:a2:2a:a8:7c:31:f4:94:64:a1:c7:25:97:1c: a3:3d:08:4f:ed:e0:1e:d2:74:a0:f8:4e:ba:96:52: 7b:81:00:7e:73:5a:0b:82:52:12:70:7f:c8:f9:57: 33:6b:de:ed:57:7f:bb:5b:43:e5:19:1c:6f:30:18: 7f:52:9c:b6:75:8f:8c:04:53:69:8a:42:53:b8:75: 0e:f9:52:c1:f6:48:9e:a7:4f:54:4f:6b:07:68:b3: 33:0b:7d:45:d0:6c:0f:8b:05:b2:a6:25:eb:00:80: 18:66:3f:45:a5:d4:2c:22:d3:bd:06:33:bb:dd:be: e3:d1:f3:93:9a:47:3b:93:83:3b:d6:65:64:8d:c9: 6e:47:52:bc:b1:09:18:ad:f2:da:22:7e:57:5f:77: 3e:3a:51:7d:c2:15:3b:95:7a:b1:a4:41:9a:b6:75: 74:91:ff:e4:3b:59:c8:27:ac:04:35:f2:a1:2a:59: 8c:3f:77:e7:7b:7e:83:36:9a:27:1a:59:18:7d:a7: 3f:01:f3:ab:5c:ed:a9:c9:4b:7b:8a:6c:c6:e8:e3: 7a:e1:c1:d3:02:c8:43:ff:27:6b:2c:14:dd:60:95: 0b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:14:3A:42:79:20:71:03:60:70:BC:79:B3:72:07:F1:50:FD:A8:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0adb33de-3dc5-3875-b62c-4af8c925e837.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 173.181.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:9d:f5:d8:4e:92:ca:48:29:33:70:1c:8f:98:1f:ea:87:0b: 65:31:8a:da:d3:8f:1b:8a:a5:ba:96:91:a9:39:fc:1b:e5:2f: 69:9a:d3:4d:6b:e3:00:8e:20:cc:20:7a:3d:ce:a9:f9:06:d7: 27:6b:45:94:77:ed:e5:87:ac:46:11:a6:87:11:3d:8f:62:e4: f7:35:f6:8a:a7:95:e4:dd:8e:d9:28:ff:d3:37:0c:01:77:f9: ab:76:58:00:8d:63:04:4e:fd:01:33:3a:58:57:66:1c:e6:09: 9d:7e:0d:e5:ef:56:4a:83:ea:68:44:e1:c5:2d:8d:14:e2:20: bf:1e:16:b2:72:a7:80:a8:7f:2d:b0:37:e3:3b:17:b1:12:30: d7:f5:0d:1e:90:06:d1:32:0e:f4:4e:b6:bb:4c:8b:16:5d:fd: 5f:b6:cf:cd:7f:c5:b7:3c:41:90:87:67:d8:6c:1c:26:00:39: 5d:f3:99:3b:0a:c3:ab:76:c3:f5:e9:47:c9:2a:a5:52:2a:a3: af:8a:63:12:79:b0:b4:e0:98:41:5b:bb:f7:5c:87:b1:2f:4e: 74:d4:4b:3a:5e:59:ac:be:97:48:ee:10:80:0b:db:7b:3b:53: 47:e0:d5:17:47:f3:b8:d8:37:58:f7:57:a7:ee:33:87:c5:69: 42:cd:4c:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKcrJV73e7xvoO+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk YmFlZjY3N2UtZWYzOC00YjdhLWEwNTEtNDQ2MjliYjBhMjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRdAx79B0UNbiyCT/jBL5jj++7mnc0QpLsPM wgqnBqIqqHwx9JRkoccllxyjPQhP7eAe0nSg+E66llJ7gQB+c1oLglIScH/I+Vcz a97tV3+7W0PlGRxvMBh/Upy2dY+MBFNpikJTuHUO+VLB9kiep09UT2sHaLMzC31F 0GwPiwWypiXrAIAYZj9FpdQsItO9BjO73b7j0fOTmkc7k4M71mVkjcluR1K8sQkY rfLaIn5XX3c+OlF9whU7lXqxpEGatnV0kf/kO1nIJ6wENfKhKlmMP3fne36DNpon GlkYfac/AfOrXO2pyUt7imzG6ON64cHTAshD/ydrLBTdYJULuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcUOkJ5IHEDYHC8ebNyB/FQ/agNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMGFkYjMzZGUtM2RjNS0z ODc1LWI2MmMtNGFmOGM5MjVlODM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbWUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANGd9dhOkspIKTNwHI+YH+qHC2UxitrTjxuKpbqWkak5/BvlL2ma001r 4wCOIMwgej3OqfkG1ydrRZR37eWHrEYRpocRPY9i5Pc19oqnleTdjtko/9M3DAF3 +at2WACNYwRO/QEzOlhXZhzmCZ1+DeXvVkqD6mhE4cUtjRTiIL8eFrJyp4Cofy2w N+M7F7ESMNf1DR6QBtEyDvROtrtMixZd/V+2z81/xbc8QZCHZ9hsHCYAOV3zmTsK w6t2w/XpR8kqpVIqo6+KYxJ5sLTgmEFbu/dch7EvTnTUSzpeWay+l0juEIAL23s7 U0fg1RdH87jYN1j3V6fuM4fFaULNTPI= -----END CERTIFICATE-----Generated at Sat Apr 26 23:08:02 2025 by rpki-client