$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1b8a456e-1d9c-34f7-b516-89ac7b71e8a9.roa File: 1b8a456e-1d9c-34f7-b516-89ac7b71e8a9.roa (raw, json) Hash identifier: f3XwWZRJXKkAeu3TzjO3ESG/kbi14OTBSi/DYC7tRE4= Subject key identifier: 98:BD:B6:A5:B1:2A:E5:0C:6D:BA:A3:B9:73:CC:48:05:BD:2E:8F:BF Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499829CB694421EC8BD85BE880 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1b8a456e-1d9c-34f7-b516-89ac7b71e8a9.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 207.194.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:cb:69:44:21:ec:8b:d8:5b:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=048096fb-115b-470a-afb3-16212c0bad59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7b:71:be:63:b9:a1:23:40:f3:b6:28:02:84: db:50:13:2c:9d:bc:f2:07:29:55:ec:5e:f3:dc:3a: 65:fe:e1:9d:9a:b6:39:48:25:47:ff:8a:c5:91:72: 6a:e5:33:a5:82:e9:73:07:28:7b:ae:cf:5a:cf:0f: bf:e7:53:31:6d:7e:96:d7:24:1b:a4:be:f8:d4:14: 9e:ce:57:2b:5a:7e:f5:8b:34:0a:1e:45:f3:fa:a8: 63:c0:1f:af:d2:94:ce:c4:08:b7:10:d7:38:fa:e6: a5:23:c6:8b:b2:63:11:24:9d:80:13:e1:7f:fe:2b: 7d:53:4c:e6:5c:05:ee:5f:1d:da:19:fc:f3:cf:ba: 91:3f:2d:79:62:f4:e9:c6:10:00:27:35:7e:50:a3: a8:c8:93:98:5a:d1:6b:2f:f1:69:36:ee:e5:8f:fe: 45:4d:91:bd:73:9c:9c:4b:03:25:18:ff:60:40:d6: e6:f6:d7:9e:ad:1c:00:61:b9:31:5b:28:a5:58:a5: 8e:4e:f7:d8:45:09:f3:d5:86:7f:f7:83:32:16:e7: 60:8f:7d:99:c5:3f:64:b5:94:61:de:96:21:df:d8: e4:61:a8:41:02:cc:10:6b:39:4a:b3:8a:7d:dd:4d: 5d:d8:78:7f:ac:9f:48:2e:8e:ad:f1:5e:0c:e8:96: 5e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BD:B6:A5:B1:2A:E5:0C:6D:BA:A3:B9:73:CC:48:05:BD:2E:8F:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1b8a456e-1d9c-34f7-b516-89ac7b71e8a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.194.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:47:9a:0e:e2:e3:d5:6d:f2:b5:6f:a8:03:63:28:fe:32:3a: d2:54:c5:38:23:81:6a:c4:8e:5e:02:9f:bf:14:59:6c:57:84: b3:60:00:b1:cc:b1:b7:e5:f7:f2:60:49:28:c6:ac:8c:2b:e5: bd:97:89:db:39:7c:de:ae:8d:d5:88:40:d2:ce:51:af:fd:57: 72:53:2b:7e:e2:ec:1d:a8:90:08:3e:be:38:65:85:c4:d1:ab: 56:76:ab:99:5b:54:d9:9b:93:6d:91:b9:af:bd:e4:1a:07:84: 98:e8:1a:a4:a0:4b:8c:ce:2f:5d:c9:17:5c:7e:f1:30:17:e3: cb:5f:97:6a:ae:5e:81:52:35:de:9f:cd:16:73:ac:82:cb:93: 12:7e:0d:7a:50:58:6b:7e:c3:85:1f:40:a6:f9:c4:a3:de:bf: ad:41:e9:9b:93:11:db:e7:5c:15:dd:4a:02:2d:cc:18:ad:03: 59:74:2e:8f:c8:ed:6f:ec:af:78:ba:36:48:ce:29:57:9a:5d: da:91:e4:36:90:de:bc:0b:2d:69:65:e9:69:6e:8c:e0:18:7f: 80:d5:c6:8f:d4:22:48:21:ac:85:cd:e0:41:3c:b1:0d:7d:33: 8b:39:62:31:82:63:99:f6:57:f7:1d:a1:e2:77:d3:a2:e8:db: c9:58:83:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKctpRCHsi9hb6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk MDQ4MDk2ZmItMTE1Yi00NzBhLWFmYjMtMTYyMTJjMGJhZDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3txvmO5oSNA87YoAoTbUBMsnbzyBylV7F7z 3Dpl/uGdmrY5SCVH/4rFkXJq5TOlgulzByh7rs9azw+/51MxbX6W1yQbpL741BSe zlcrWn71izQKHkXz+qhjwB+v0pTOxAi3ENc4+ualI8aLsmMRJJ2AE+F//it9U0zm XAXuXx3aGfzzz7qRPy15YvTpxhAAJzV+UKOoyJOYWtFrL/FpNu7lj/5FTZG9c5yc SwMlGP9gQNbm9teerRwAYbkxWyilWKWOTvfYRQnz1YZ/94MyFudgj32ZxT9ktZRh 3pYh39jkYahBAswQazlKs4p93U1d2Hh/rJ9ILo6t8V4M6JZe+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJi9tqWxKuUMbbqjuXPMSAW9Lo+/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMWI4YTQ1NmUtMWQ5Yy0z NGY3LWI1MTYtODlhYzdiNzFlOGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8LgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlHmg7i49Vt8rVvqANjKP4yOtJUxTgjgWrEjl4Cn78UWWxXhLNgALHM sbfl9/JgSSjGrIwr5b2Xids5fN6ujdWIQNLOUa/9V3JTK37i7B2okAg+vjhlhcTR q1Z2q5lbVNmbk22Rua+95BoHhJjoGqSgS4zOL13JF1x+8TAX48tfl2quXoFSNd6f zRZzrILLkxJ+DXpQWGt+w4UfQKb5xKPev61B6ZuTEdvnXBXdSgItzBitA1l0Lo/I 7W/sr3i6NkjOKVeaXdqR5DaQ3rwLLWll6WlujOAYf4DVxo/UIkghrIXN4EE8sQ19 M4s5YjGCY5n2V/cdoeJ306Lo28lYg34= -----END CERTIFICATE-----Generated at Sun Apr 27 01:33:06 2025 by rpki-client