$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2b20bbe5-b7e5-34c7-b2c2-7d08ed829f96.roa File: 2b20bbe5-b7e5-34c7-b2c2-7d08ed829f96.roa (raw, json) Hash identifier: JQ3DK4lZlFH+jlN0hZwAfqLsa9Lz18sl/jGq4D8lRlg= Subject key identifier: 27:8B:45:B4:5A:F9:BE:23:DC:23:64:28:80:BB:1E:4A:65:D7:0F:22 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499AF47BE18CBBC307A5122200 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2b20bbe5-b7e5-34c7-b2c2-7d08ed829f96.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 173.181.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:7b:e1:8c:bb:c3:07:a5:12:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=dcd61c85-6cd5-4cb9-932e-9038c5d15a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:64:fc:de:f5:6e:f8:ad:8e:90:4b:0b:5c:d2: c7:43:b2:a6:ec:a0:42:82:fc:53:b9:45:bd:be:a3: 46:f1:30:d3:1c:f7:ec:57:55:9e:b8:c4:e7:dc:2d: 5f:8d:59:7f:46:95:c6:05:72:e7:d6:0c:0e:02:86: 62:7c:f9:35:78:58:17:72:d6:f8:ee:41:f1:80:82: ce:26:9b:c5:a7:97:68:06:98:f9:be:bb:d8:b5:37: e1:10:af:49:fa:9c:65:c5:d6:30:d3:8b:43:8a:3c: 43:82:55:b8:aa:a6:06:ae:3a:b1:03:68:5d:40:fc: 5f:ee:10:96:66:be:c3:c9:69:ef:6e:f6:3e:ef:a2: 3b:00:35:7d:3a:09:39:53:c5:00:3f:90:22:0c:e5: 26:53:86:de:f2:d5:d5:fe:e7:78:07:83:04:43:82: d4:55:cb:31:77:df:d5:c9:fb:cb:08:0f:f0:73:b7: 6c:b2:6c:bd:e4:8f:a7:38:9d:8a:30:b9:63:78:21: 9b:6e:0b:2c:b2:48:b3:49:e0:19:55:07:1a:4f:8d: 0a:c2:63:c4:95:47:47:75:84:e7:e5:1f:17:f3:8b: 07:ef:bf:50:7a:71:e3:da:eb:e8:02:4d:fe:59:c0: 5c:77:57:95:b5:b6:04:1b:9e:f4:a7:7c:fc:d6:d0: 02:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8B:45:B4:5A:F9:BE:23:DC:23:64:28:80:BB:1E:4A:65:D7:0F:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2b20bbe5-b7e5-34c7-b2c2-7d08ed829f96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 173.181.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:c2:f0:4e:9a:04:b0:ed:b3:b0:ea:39:c6:96:a2:42:de:0a: 3a:c9:e6:ff:4d:85:b2:d8:a3:d6:7b:69:55:c2:74:6f:b9:c8: 60:e4:4b:ba:ae:1a:45:d9:66:c8:a5:bd:69:16:cd:21:9c:82: 58:9f:41:4f:e1:a2:f0:e6:64:1e:76:e7:f4:3d:a5:b1:08:5d: 4d:5f:a8:b0:63:b3:01:6a:ac:cb:a3:2f:f0:23:1b:e3:9d:7f: 3d:dc:e7:28:05:31:db:37:da:b2:b3:cb:48:bb:73:a8:2a:e7: 88:44:15:43:73:05:26:7d:6e:c1:98:72:4e:03:b0:2b:c9:9a: 07:29:58:af:16:75:ff:55:a6:ed:e6:fd:89:bc:45:0c:0f:ec: 42:25:9a:ca:58:ad:67:07:48:b1:14:7f:74:92:76:0f:cf:ba: 11:f7:6f:7e:2e:09:32:13:09:8d:61:5e:fd:2a:a0:94:6e:07: a3:04:af:8c:13:02:c9:59:e9:d5:fb:71:d3:43:1c:3e:a4:10: 27:52:2f:12:29:b6:5d:c0:61:fa:f8:c2:8d:1a:3b:f9:58:cd: f5:35:91:92:5e:b1:8f:d7:48:6d:ea:81:6c:25:e5:eb:12:f3: f1:12:07:b2:cd:0b:7b:c9:1a:f8:ae:19:e9:7e:8a:d3:59:ae: 74:d2:66:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9HvhjLvDB6USIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZGNkNjFjODUtNmNkNS00Y2I5LTkzMmUtOTAzOGM1ZDE1YTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mT83vVu+K2OkEsLXNLHQ7Km7KBCgvxTuUW9 vqNG8TDTHPfsV1WeuMTn3C1fjVl/RpXGBXLn1gwOAoZifPk1eFgXctb47kHxgILO JpvFp5doBpj5vrvYtTfhEK9J+pxlxdYw04tDijxDglW4qqYGrjqxA2hdQPxf7hCW Zr7DyWnvbvY+76I7ADV9Ogk5U8UAP5AiDOUmU4be8tXV/ud4B4MEQ4LUVcsxd9/V yfvLCA/wc7dssmy95I+nOJ2KMLljeCGbbgssskizSeAZVQcaT40KwmPElUdHdYTn 5R8X84sH779QenHj2uvoAk3+WcBcd1eVtbYEG570p3z81tACwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeLRbRa+b4j3CNkKIC7Hkpl1w8iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMmIyMGJiZTUtYjdlNS0z NGM3LWIyYzItN2QwOGVkODI5Zjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXC8E6aBLDts7DqOcaWokLeCjrJ5v9NhbLYo9Z7aVXCdG+5yGDkS7qu GkXZZsilvWkWzSGcglifQU/hovDmZB525/Q9pbEIXU1fqLBjswFqrMujL/AjG+Od fz3c5ygFMds32rKzy0i7c6gq54hEFUNzBSZ9bsGYck4DsCvJmgcpWK8Wdf9Vpu3m /Ym8RQwP7EIlmspYrWcHSLEUf3SSdg/PuhH3b34uCTITCY1hXv0qoJRuB6MEr4wT AslZ6dX7cdNDHD6kECdSLxIptl3AYfr4wo0aO/lYzfU1kZJesY/XSG3qgWwl5esS 8/ESB7LNC3vJGviuGel+itNZrnTSZn8= -----END CERTIFICATE-----Generated at Sun Apr 27 13:05:43 2025 by rpki-client