$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1305e690-4ec0-32a8-a8df-6e1a11067218.roa File: 1305e690-4ec0-32a8-a8df-6e1a11067218.roa (raw, json) Hash identifier: d3BpYrfO1NjCb6/xO/0Rn5EwMS8H7vKafRZj32PaCgs= Subject key identifier: 1F:B9:98:F6:DE:30:99:9A:8D:34:52:7E:82:47:46:99:17:C4:F9:41 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499AF478A054E7D53D61AE7380 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1305e690-4ec0-32a8-a8df-6e1a11067218.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 204.191.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:78:a0:54:e7:d5:3d:61:ae:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=c795d9c5-cda3-4ce7-aa9b-43bc0ad9fc64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ef:ce:af:37:f5:9c:96:0b:54:49:03:e8:40: 34:3c:39:14:a8:21:c4:b6:42:e5:b1:fd:1e:2b:60: c7:7b:4a:5c:76:d2:b7:b9:4a:30:b7:88:e0:ca:9c: 42:03:33:23:07:3b:17:d9:eb:6e:ea:ba:05:ed:da: 44:08:ec:79:19:3f:4c:b1:be:15:69:29:5f:c9:20: b9:f2:24:40:96:a2:25:3b:8f:83:8f:f5:d5:20:ee: e5:76:fd:30:db:b5:05:ac:60:f3:5c:6b:1a:fe:d0: bf:69:bb:d4:b4:b2:52:31:a8:bb:ec:1c:cc:48:87: a7:e2:54:88:a2:2d:41:c2:9c:20:36:a5:1d:19:76: 3a:9a:ad:26:4b:e7:b9:14:9b:c6:b4:4c:ca:cf:7a: 4d:91:23:0e:5c:3b:9d:d5:bb:61:e5:c0:da:bc:42: b2:45:c7:89:32:bf:90:bd:c3:82:03:a7:8b:04:e7: 84:b0:2b:0e:95:13:b0:50:93:f9:d6:7e:9f:4b:6f: 47:1c:22:dd:4b:67:e8:0d:24:25:64:69:67:b9:d3: 73:a1:dc:af:16:a0:06:c7:ec:ee:c1:7d:05:8d:d8: 11:c6:89:b9:94:28:58:45:56:09:eb:cc:e9:ac:e4: ba:e7:e4:f0:63:49:f8:66:d6:b8:ef:a7:3e:27:e3: e7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B9:98:F6:DE:30:99:9A:8D:34:52:7E:82:47:46:99:17:C4:F9:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1305e690-4ec0-32a8-a8df-6e1a11067218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 204.191.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e3:53:29:d8:59:c4:19:6a:b3:b2:d2:86:bb:e1:97:82:f2:e1: 7f:a7:46:b9:cd:c0:fb:53:0f:dc:13:1f:ef:07:98:3b:a2:08: 47:20:57:92:fd:7a:1d:5b:4a:fc:06:55:13:8e:3d:e0:02:12: cd:23:8f:f8:de:90:95:83:34:34:d5:c1:f9:e8:a2:38:07:0c: 4a:de:39:98:0e:fb:34:e7:c6:83:4e:07:df:7e:b7:20:b7:98: c6:11:0f:cc:ef:96:f4:3f:c6:8e:54:d1:dd:82:c1:36:46:25: 42:83:17:09:34:ab:39:ab:d2:ce:3e:22:43:de:df:5c:d2:04: 92:e0:ca:9f:65:f4:3b:6a:d6:c2:8b:3d:f9:5a:89:d4:9f:6e: a2:9e:12:57:23:98:d8:41:34:b0:bb:19:ef:e1:c0:99:be:e6: b9:dc:38:9e:92:21:e2:e0:7f:13:b3:9e:eb:3f:98:32:7c:73: 4b:f9:54:20:3d:9d:09:84:cf:7b:d2:81:8d:9d:fe:18:0b:3c: ce:b1:fe:05:f5:15:cc:64:e9:4b:bf:f3:74:05:9f:1c:5f:16: 4d:ee:91:49:3f:7e:5d:d4:5d:d7:1f:10:9a:cb:c0:e1:e7:b6: b4:27:38:c7:8c:6f:3b:c0:72:d8:ac:ca:e3:49:6b:9b:86:56: 0a:81:8d:a0 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEma9HigVOfVPWGuc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk Yzc5NWQ5YzUtY2RhMy00Y2U3LWFhOWItNDNiYzBhZDlmYzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO/Orzf1nJYLVEkD6EA0PDkUqCHEtkLlsf0e K2DHe0pcdtK3uUowt4jgypxCAzMjBzsX2etu6roF7dpECOx5GT9Msb4VaSlfySC5 8iRAlqIlO4+Dj/XVIO7ldv0w27UFrGDzXGsa/tC/abvUtLJSMai77BzMSIen4lSI oi1BwpwgNqUdGXY6mq0mS+e5FJvGtEzKz3pNkSMOXDud1bth5cDavEKyRceJMr+Q vcOCA6eLBOeEsCsOlROwUJP51n6fS29HHCLdS2foDSQlZGlnudNzodyvFqAGx+zu wX0FjdgRxom5lChYRVYJ68zprOS65+TwY0n4Zta476c+J+Pn1wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFB+5mPbeMJmajTRSfoJHRpkXxPlBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMTMwNWU2OTAtNGVjMC0z MmE4LWE4ZGYtNmUxYTExMDY3MjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzL8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEA41Mp2FnEGWqzstKGu+GXgvLhf6dGuc3A+1MP3BMf7weYO6IIRyBXkv16 HVtK/AZVE4494AISzSOP+N6QlYM0NNXB+eiiOAcMSt45mA77NOfGg04H3363ILeY xhEPzO+W9D/GjlTR3YLBNkYlQoMXCTSrOavSzj4iQ97fXNIEkuDKn2X0O2rWwos9 +VqJ1J9uop4SVyOY2EE0sLsZ7+HAmb7mudw4npIh4uB/E7Oe6z+YMnxzS/lUID2d CYTPe9KBjZ3+GAs8zrH+BfUVzGTpS7/zdAWfHF8WTe6RST9+XdRd1x8QmsvA4ee2 tCc4x4xvO8By2KzK40lrm4ZWCoGNoA== -----END CERTIFICATE-----Generated at Mon Apr 28 16:38:18 2025 by rpki-client