$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1d5ccce0-3d9c-3565-8482-9f9e6d67c048.roa File: 1d5ccce0-3d9c-3565-8482-9f9e6d67c048.roa (raw, json) Hash identifier: ywEj12v0/46KHaAXm/r72saxW+BlmU284SrKVBKaAHU= Subject key identifier: 90:25:19:43:98:A0:D9:67:BA:9D:0A:92:75:04:23:0D:1C:B0:AE:62 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849955F16685B20BB490F87E59C Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1d5ccce0-3d9c-3565-8482-9f9e6d67c048.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 199.84.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:16:68:5b:20:bb:49:0f:87:e5:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=70095c22-638a-4567-9890-a3ad8b897fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:04:c7:1f:18:80:3e:c7:05:dd:0d:c4:30:53: 0e:7d:ce:5c:86:f1:00:4e:1d:8d:c8:e1:d2:e2:6a: db:2c:56:a1:33:a0:6a:a7:74:51:63:02:87:00:77: 53:7b:f2:a0:93:9d:e8:34:d8:64:66:f9:e7:0f:3c: 48:3c:72:14:5f:07:2a:3f:0b:27:79:6c:fe:d3:82: eb:ec:60:59:c4:21:83:4d:74:39:f1:6e:a3:36:ed: bc:d7:dc:4b:c4:5c:d4:50:22:fc:4f:0b:b2:14:1b: 82:e4:7e:e6:a7:e1:59:6f:4a:c3:d7:ef:97:69:be: e6:f2:da:90:bb:49:d3:f9:d4:c4:ca:3b:57:e2:15: d1:4b:21:f4:71:3c:7d:a5:39:0e:d1:59:de:0b:94: e6:2b:4e:a9:6f:bf:98:d3:94:62:de:b0:a6:d1:b0: 15:cf:2e:e6:85:33:0e:8c:1d:68:10:c1:82:23:91: 3e:26:37:fe:55:78:06:4a:d6:81:44:29:b5:ee:d0: a0:2a:4a:48:bd:12:96:b9:75:f9:c4:a9:22:1c:52: 70:ff:b0:31:14:13:4f:43:c4:88:62:5a:22:d8:89: 91:ec:9b:b7:1a:fe:cb:c0:ad:24:16:b7:da:4f:d8: 1f:d1:83:c3:5c:7a:06:92:5e:0a:c7:7d:c7:df:b2: 32:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:25:19:43:98:A0:D9:67:BA:9D:0A:92:75:04:23:0D:1C:B0:AE:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1d5ccce0-3d9c-3565-8482-9f9e6d67c048.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 199.84.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:23:ee:9a:93:32:be:96:af:3d:74:dd:53:25:f3:bb:0f:33: b9:70:35:42:d4:39:16:55:40:56:5e:5f:57:cc:9b:6e:f0:77: bd:0d:0b:67:10:73:22:ec:02:9c:11:4f:63:2d:6c:ee:15:e1: 79:e4:97:88:84:d5:16:ac:f1:f2:9f:fa:d8:f5:8f:ac:77:84: 84:1c:d4:50:d6:47:42:10:f9:46:ba:72:b5:60:2b:47:53:d2: ac:f2:6e:d5:14:64:4a:29:9f:2d:4b:29:d0:28:29:39:11:8c: 42:5a:36:27:1e:00:0b:2f:c0:b7:0a:91:ed:3d:6b:0a:13:00: a1:fb:ae:4e:f0:8d:ca:61:cc:6a:0d:b6:5e:7e:16:34:90:3d: 9b:7f:dc:e3:8f:9e:7f:9c:97:19:80:16:0c:f7:13:40:6e:6c: eb:5c:b5:c6:db:d2:57:2b:d2:7f:0c:e6:69:3d:4b:fe:25:b5: bc:40:f8:d3:7d:1a:eb:b9:8d:6e:02:d6:5e:1d:6c:c9:05:ca: 17:89:82:ac:4e:d4:24:fc:17:97:c7:50:55:17:3d:09:b6:d6: c7:f1:f7:95:ec:92:88:04:51:32:1a:4a:50:8d:4d:7c:6f:14: 76:04:e0:b5:39:52:2f:65:8c:8d:28:93:e7:c4:6d:82:21:f3: 04:87:07:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXxZoWyC7SQ+H5ZwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk NzAwOTVjMjItNjM4YS00NTY3LTk4OTAtYTNhZDhiODk3ZmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgTHHxiAPscF3Q3EMFMOfc5chvEATh2NyOHS 4mrbLFahM6Bqp3RRYwKHAHdTe/Kgk53oNNhkZvnnDzxIPHIUXwcqPwsneWz+04Lr 7GBZxCGDTXQ58W6jNu2819xLxFzUUCL8TwuyFBuC5H7mp+FZb0rD1++Xab7m8tqQ u0nT+dTEyjtX4hXRSyH0cTx9pTkO0VneC5TmK06pb7+Y05Ri3rCm0bAVzy7mhTMO jB1oEMGCI5E+Jjf+VXgGStaBRCm17tCgKkpIvRKWuXX5xKkiHFJw/7AxFBNPQ8SI Yloi2ImR7Ju3Gv7LwK0kFrfaT9gf0YPDXHoGkl4Kx33H37IyRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAlGUOYoNlnup0KknUEIw0csK5iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMWQ1Y2NjZTAtM2Q5Yy0z NTY1LTg0ODItOWY5ZTZkNjdjMDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1TyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkj7pqTMr6Wrz103VMl87sPM7lwNULUORZVQFZeX1fMm27wd70NC2cQ cyLsApwRT2MtbO4V4Xnkl4iE1Ras8fKf+tj1j6x3hIQc1FDWR0IQ+Ua6crVgK0dT 0qzybtUUZEopny1LKdAoKTkRjEJaNiceAAsvwLcKke09awoTAKH7rk7wjcphzGoN tl5+FjSQPZt/3OOPnn+clxmAFgz3E0BubOtctcbb0lcr0n8M5mk9S/4ltbxA+NN9 Guu5jW4C1l4dbMkFyheJgqxO1CT8F5fHUFUXPQm21sfx95XskogEUTIaSlCNTXxv FHYE4LU5Ui9ljI0ok+fEbYIh8wSHBxk= -----END CERTIFICATE-----Generated at Sun Apr 27 02:22:52 2025 by rpki-client