$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/30baad33-ed81-3ee8-9ad8-d03d892b9187.roa File: 30baad33-ed81-3ee8-9ad8-d03d892b9187.roa (raw, json) Hash identifier: EgkkHTgebBuVt9dfLBC8ruGNN/TG9IcRdfqa3VXxMCA= Subject key identifier: 88:F1:AD:BD:FA:89:F3:1B:F0:FA:12:CB:B1:89:50:A9:77:0C:C7:D9 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499AF4781DABFF0C7AA65D3D80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/30baad33-ed81-3ee8-9ad8-d03d892b9187.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 142.169.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:78:1d:ab:ff:0c:7a:a6:5d:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=bae3c1b4-f08e-4831-bcc5-7174be265e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:07:a2:c2:7f:2d:ec:67:8d:a8:1a:46:5f:25: bc:19:32:85:69:a2:d3:62:df:28:b7:a4:65:a6:cf: 9e:6a:ed:c8:17:d8:e7:2b:41:57:1d:27:65:62:98: 90:81:c5:6d:ab:77:8a:cc:86:8b:b7:a3:4a:ff:89: 54:07:d5:88:f1:db:2a:2f:32:86:a8:a0:d0:af:a2: f0:64:a3:f0:c5:7c:84:b2:eb:8a:2b:73:aa:d1:9d: 2e:65:88:4b:33:ab:ac:6a:b2:5f:bb:8d:b1:f8:59: 4f:ad:c8:b0:31:47:c0:64:d8:ce:e6:7b:d6:5a:c2: d4:f9:29:3f:ed:20:3c:8e:43:da:f6:2b:4e:5f:60: 66:58:24:d0:34:5b:b1:53:22:39:f9:9e:c9:9b:91: 0f:e3:de:51:b0:36:fa:a1:b4:55:fe:27:8f:b1:2d: a5:4f:8e:26:1f:df:07:b3:44:c6:d3:21:fa:df:ef: e0:38:53:65:7b:10:8d:e4:82:a1:22:af:28:2e:a4: aa:3b:cc:2c:c4:1b:a5:fb:dc:5d:af:8b:84:26:a3: 91:3e:17:97:bc:39:56:0d:31:07:86:0f:06:6f:94: 70:82:31:9a:02:55:ab:62:ce:04:8f:b4:c3:15:06: 74:1a:ca:be:64:23:56:61:0c:54:7f:df:65:e0:38: 71:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F1:AD:BD:FA:89:F3:1B:F0:FA:12:CB:B1:89:50:A9:77:0C:C7:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/30baad33-ed81-3ee8-9ad8-d03d892b9187.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 142.169.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:20:6d:d5:b6:33:3a:b7:f0:52:9f:4d:7d:fa:71:cc:ae:b0: fd:4c:33:dd:e1:69:59:70:2d:e5:65:01:11:ca:17:15:68:f7: 66:72:d8:51:7f:37:cc:fe:96:43:c4:37:f0:3c:a6:8e:55:28: 05:2f:78:3b:21:a9:b9:82:aa:1e:95:29:94:f1:78:0c:b6:1a: 56:0c:dd:86:db:7a:6d:93:8d:ba:f1:76:ce:45:95:a8:5a:1e: 72:36:03:5f:a3:88:7d:4f:7d:35:38:2d:ab:cc:c7:43:75:a7: ef:cc:ee:b6:f9:32:1d:0d:58:d8:f1:a8:6f:c1:53:ab:49:57: 97:44:96:5f:f2:22:a8:3b:07:0a:b9:dd:23:5a:88:e3:11:83: c3:4e:49:2b:a2:d6:d3:c8:9e:5c:25:f2:ac:c2:79:35:8a:4e: 73:c8:07:e0:62:72:b4:e3:5c:ad:89:cf:8c:8e:dd:6a:e7:ed: 00:1a:8f:11:fa:26:5a:d8:d8:fe:b7:fd:3d:8a:2c:ae:60:da: e5:85:63:4b:c6:e8:ed:fc:19:bf:5d:9c:f1:83:71:03:6e:5b: 63:23:c5:c6:f5:68:91:0e:7e:9a:83:05:fb:d9:4e:20:83:62: 73:db:d8:8a:92:2a:e2:83:08:49:81:ff:76:ca:77:88:3c:85: 4b:58:cb:3f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEma9Hgdq/8MeqZdPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk YmFlM2MxYjQtZjA4ZS00ODMxLWJjYzUtNzE3NGJlMjY1ZTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgweiwn8t7GeNqBpGXyW8GTKFaaLTYt8ot6Rl ps+eau3IF9jnK0FXHSdlYpiQgcVtq3eKzIaLt6NK/4lUB9WI8dsqLzKGqKDQr6Lw ZKPwxXyEsuuKK3Oq0Z0uZYhLM6usarJfu42x+FlPrciwMUfAZNjO5nvWWsLU+Sk/ 7SA8jkPa9itOX2BmWCTQNFuxUyI5+Z7Jm5EP495RsDb6obRV/iePsS2lT44mH98H s0TG0yH63+/gOFNlexCN5IKhIq8oLqSqO8wsxBul+9xdr4uEJqORPheXvDlWDTEH hg8Gb5RwgjGaAlWrYs4Ej7TDFQZ0Gsq+ZCNWYQxUf99l4Dhx3QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIjxrb36ifMb8PoSy7GJUKl3DMfZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzBiYWFkMzMtZWQ4MS0z ZWU4LTlhZDgtZDAzZDg5MmI5MTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjqkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAECBt1bYzOrfwUp9NffpxzK6w/Uwz3eFpWXAt5WUBEcoXFWj3ZnLYUX83 zP6WQ8Q38DymjlUoBS94OyGpuYKqHpUplPF4DLYaVgzdhtt6bZONuvF2zkWVqFoe cjYDX6OIfU99NTgtq8zHQ3Wn78zutvkyHQ1Y2PGob8FTq0lXl0SWX/IiqDsHCrnd I1qI4xGDw05JK6LW08ieXCXyrMJ5NYpOc8gH4GJytONcrYnPjI7dauftABqPEfom WtjY/rf9PYosrmDa5YVjS8bo7fwZv12c8YNxA25bYyPFxvVokQ5+moMF+9lOIINi c9vYipIq4oMISYH/dsp3iDyFS1jLPw== -----END CERTIFICATE-----Generated at Mon Apr 28 13:04:44 2025 by rpki-client