$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14e020a6-8de9-3b8a-87f2-17a9db1aabdb.roa File: 14e020a6-8de9-3b8a-87f2-17a9db1aabdb.roa (raw, json) Hash identifier: UrArZCRmUxRQUpfIWwtRrozKQA/oTkJGNZYmU88gjDs= Subject key identifier: 24:23:07:6C:DC:E7:11:BB:0D:CD:4B:4C:48:FD:09:9A:96:1F:B6:95 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499829BFACF1AA38F022308780 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14e020a6-8de9-3b8a-87f2-17a9db1aabdb.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 54004 IP address blocks: 68.182.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:bf:ac:f1:aa:38:f0:22:30:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=a7a2120c-899e-4176-8a23-0edbec8cff7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ab:73:5a:88:d4:bb:43:5c:08:ef:c2:12:fc: a0:51:28:b8:51:09:22:bb:ab:f8:28:8b:d1:97:ec: 0c:94:f0:b8:61:5f:ef:79:25:42:a7:ad:f4:4e:80: 07:2e:e7:79:0a:fd:74:df:0c:5d:9c:51:72:83:e1: f9:d8:31:91:31:9e:d3:8b:21:aa:30:ad:3e:01:65: 61:2b:c0:15:4c:32:54:dd:2f:33:2a:ea:7b:d5:63: 91:56:80:11:9e:f4:2c:35:98:fd:e8:86:67:5d:d3: 15:aa:4c:dc:12:0f:3f:b5:40:bf:16:74:d5:72:a2: df:53:b2:4e:39:2b:26:62:06:5a:e3:17:30:3c:fd: 19:cf:bd:24:f5:d4:76:61:d8:67:1d:0b:3e:85:1b: 77:27:3c:dd:d3:cc:4e:96:34:3c:42:9f:cc:20:77: 1c:e8:1f:8a:1c:9e:96:2f:05:d2:f2:1c:52:b1:1c: 83:44:f1:b3:22:c9:d8:96:63:f9:ff:22:1b:7d:f6: ba:af:d9:2b:f9:c0:97:df:18:f3:8b:ef:c1:86:d6: 81:b3:53:9b:8f:fa:ff:b9:52:99:91:e4:1c:d8:19: 05:79:12:8f:e3:16:42:69:3d:3e:cc:de:97:27:79: 8e:bd:4b:2e:64:c7:bd:93:c5:a2:c7:e1:a3:ca:15: 10:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:23:07:6C:DC:E7:11:BB:0D:CD:4B:4C:48:FD:09:9A:96:1F:B6:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14e020a6-8de9-3b8a-87f2-17a9db1aabdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:ba:51:1a:6e:17:83:61:b7:43:81:dd:3a:3b:27:92:80:96: 8a:c6:68:bf:3b:93:d7:8f:a9:e6:82:88:96:ff:8f:2b:7e:66: ed:63:9f:d3:92:9f:38:53:0d:da:a2:18:4e:e1:a0:66:ef:dc: ce:fa:ae:ee:2f:28:01:3a:60:30:5a:8b:a2:be:2a:12:fd:be: 4a:0d:0e:06:1c:0d:be:f6:09:70:5c:4d:3b:39:3f:32:b3:02: e6:b4:9d:81:04:9e:dd:64:fb:0e:b0:fd:50:8d:e3:e5:cb:5a: 37:0b:22:0d:f9:e2:2b:38:a2:b2:2c:24:76:91:1b:20:6b:3d: 99:bd:60:b6:e5:c3:a4:b4:27:cc:a4:17:0b:60:b9:51:09:1d: 46:3d:f4:48:60:0e:7f:e4:36:3d:d3:36:a2:4f:0f:56:59:e7: 29:d2:8e:c0:7e:da:5f:89:1d:56:eb:d1:50:b4:c4:8a:f0:3c: 0b:77:2b:7e:5b:4e:c5:3d:af:af:75:60:ad:99:5c:62:3b:f4: 48:d2:0b:75:0a:77:1d:47:6f:5e:58:ec:2d:38:3d:9d:04:e4: 83:41:9e:81:02:b0:5a:0c:ae:35:e6:54:b8:0f:52:5c:e6:6a: 63:31:cf:bd:f0:0a:7d:73:7c:d8:51:ae:ac:0b:20:b9:2c:36: 48:6c:a1:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKb+s8ao48CIwh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk YTdhMjEyMGMtODk5ZS00MTc2LThhMjMtMGVkYmVjOGNmZjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6tzWojUu0NcCO/CEvygUSi4UQkiu6v4KIvR l+wMlPC4YV/veSVCp630ToAHLud5Cv103wxdnFFyg+H52DGRMZ7TiyGqMK0+AWVh K8AVTDJU3S8zKup71WORVoARnvQsNZj96IZnXdMVqkzcEg8/tUC/FnTVcqLfU7JO OSsmYgZa4xcwPP0Zz70k9dR2YdhnHQs+hRt3Jzzd08xOljQ8Qp/MIHcc6B+KHJ6W LwXS8hxSsRyDRPGzIsnYlmP5/yIbffa6r9kr+cCX3xjzi+/BhtaBs1Obj/r/uVKZ keQc2BkFeRKP4xZCaT0+zN6XJ3mOvUsuZMe9k8Wix+GjyhUQKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQjB2zc5xG7Dc1LTEj9CZqWH7aVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMTRlMDIwYTYtOGRlOS0z YjhhLTg3ZjItMTdhOWRiMWFhYmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRLbcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+6URpuF4Nht0OB3To7J5KAlorGaL87k9ePqeaCiJb/jyt+Zu1jn9OS nzhTDdqiGE7hoGbv3M76ru4vKAE6YDBai6K+KhL9vkoNDgYcDb72CXBcTTs5PzKz Aua0nYEEnt1k+w6w/VCN4+XLWjcLIg354is4orIsJHaRGyBrPZm9YLblw6S0J8yk FwtguVEJHUY99EhgDn/kNj3TNqJPD1ZZ5ynSjsB+2l+JHVbr0VC0xIrwPAt3K35b TsU9r691YK2ZXGI79EjSC3UKdx1Hb15Y7C04PZ0E5INBnoECsFoMrjXmVLgPUlzm amMxz73wCn1zfNhRrqwLILksNkhsoUs= -----END CERTIFICATE-----Generated at Sun Apr 27 04:01:38 2025 by rpki-client