$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33822373-4922-3288-a12b-b20810f6304a.roa File: 33822373-4922-3288-a12b-b20810f6304a.roa (raw, json) Hash identifier: 9WHyzESlVNKVitSKeE6/Rgc2P+7yN0HhOHN2oNy7oG4= Subject key identifier: 35:06:77:DF:4B:A1:D7:64:A0:DD:73:76:34:36:B6:63:6D:0C:E1:C9 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499AF477A1037010A28FB7D200 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33822373-4922-3288-a12b-b20810f6304a.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 75.157.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:77:a1:03:70:10:a2:8f:b7:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=9cfeb34d-0a8e-4fbf-94a2-25251e4ce4f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:18:0b:c7:8f:75:b5:ae:c0:da:b2:49:63:93: 06:44:63:5b:64:a8:14:80:66:c3:56:bc:44:1b:6c: 9c:75:d7:9a:b4:9b:8d:4c:2f:f1:ac:fd:bc:fd:16: 8b:33:0d:92:7d:1d:f1:18:98:79:f5:7b:f4:de:1e: 66:e1:13:17:e8:fd:02:7d:e8:00:d6:74:2c:cc:a3: 7e:b0:33:95:f9:a3:38:49:93:08:39:cc:fc:f1:12: 2a:fa:99:30:fe:6a:e9:2c:6d:e5:49:4a:6f:8e:b5: 4b:c2:e4:75:e1:92:dc:2b:b5:03:2c:7a:38:26:99: 6e:27:b1:92:d3:e4:e9:6c:f0:b3:33:19:d5:83:9e: 04:bf:7c:7c:47:01:26:cb:8f:d4:43:60:fc:8c:71: a1:09:ce:0b:3c:12:a2:b9:7c:51:c8:9f:08:3f:08: 93:c9:c0:9d:81:94:1d:5a:37:29:7d:e9:80:b9:c6: 7e:3a:45:58:8c:7a:0d:c3:25:7c:2a:cd:87:6d:8d: fb:c0:a2:a5:31:6b:41:4b:d6:ea:87:74:ea:7d:5e: 88:f1:b1:33:77:d0:44:52:13:1a:bb:60:94:2e:10: 45:0e:d0:fd:df:82:32:86:21:30:a2:48:61:f0:46: 2e:85:29:27:40:62:3c:9d:19:0c:5e:d7:9e:e2:a1: 2a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:06:77:DF:4B:A1:D7:64:A0:DD:73:76:34:36:B6:63:6D:0C:E1:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33822373-4922-3288-a12b-b20810f6304a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 75.157.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:b3:d5:3a:66:a5:61:91:ae:f8:26:b1:07:6a:17:05:6e:9b: 91:bc:aa:6d:fe:b1:82:38:98:93:6b:cc:61:b0:7f:0b:7d:84: c6:65:32:8c:b6:6f:93:23:ff:8e:c4:5a:08:73:10:28:19:c6: 45:16:52:dc:4f:60:dc:cc:da:2a:cb:25:f2:44:93:3d:58:98: 0e:58:9b:b9:7d:0e:a2:4b:ad:aa:12:b0:b3:d4:5d:20:fa:a3: c0:55:45:f4:c5:cd:22:8c:44:9c:24:dd:95:f2:fa:d7:0d:ff: a1:ea:f9:d8:21:37:17:53:c0:db:bd:a0:1f:0a:37:6a:8e:6e: c2:59:8f:ea:e4:b9:d7:65:b1:71:54:a5:80:04:e9:9a:a8:32: ad:66:00:d5:4b:38:5c:9d:6e:26:bc:e1:52:10:d6:30:b7:0b: 52:d6:f6:9a:4a:ec:6d:54:a3:2b:f2:fb:d5:62:17:e1:d3:6c: 26:d8:24:c5:d6:65:cb:34:c4:fe:62:67:e0:29:b0:89:04:0b: 17:bc:05:e1:74:ba:f2:65:81:2d:91:a8:8e:1b:1c:ab:e0:25: 1b:f5:9f:48:a1:38:a6:45:60:b4:59:69:de:0d:de:db:0b:a0: c8:f4:12:9e:d5:14:0b:11:b7:7b:dd:a7:ab:19:d0:65:8a:68: f7:ac:0f:8f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEma9HehA3AQoo+30gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk OWNmZWIzNGQtMGE4ZS00ZmJmLTk0YTItMjUyNTFlNGNlNGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRgLx491ta7A2rJJY5MGRGNbZKgUgGbDVrxE G2ycddeatJuNTC/xrP28/RaLMw2SfR3xGJh59Xv03h5m4RMX6P0CfegA1nQszKN+ sDOV+aM4SZMIOcz88RIq+pkw/mrpLG3lSUpvjrVLwuR14ZLcK7UDLHo4JpluJ7GS 0+TpbPCzMxnVg54Ev3x8RwEmy4/UQ2D8jHGhCc4LPBKiuXxRyJ8IPwiTycCdgZQd WjcpfemAucZ+OkVYjHoNwyV8Ks2HbY37wKKlMWtBS9bqh3TqfV6I8bEzd9BEUhMa u2CULhBFDtD934IyhiEwokhh8EYuhSknQGI8nRkMXtee4qEqBQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDUGd99LoddkoN1zdjQ2tmNtDOHJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzM4MjIzNzMtNDkyMi0z Mjg4LWExMmItYjIwODEwZjYzMDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAS50wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAwrPVOmalYZGu+CaxB2oXBW6bkbyqbf6xgjiYk2vMYbB/C32ExmUyjLZv kyP/jsRaCHMQKBnGRRZS3E9g3MzaKssl8kSTPViYDlibuX0OokutqhKws9RdIPqj wFVF9MXNIoxEnCTdlfL61w3/oer52CE3F1PA272gHwo3ao5uwlmP6uS512WxcVSl gATpmqgyrWYA1Us4XJ1uJrzhUhDWMLcLUtb2mkrsbVSjK/L71WIX4dNsJtgkxdZl yzTE/mJn4CmwiQQLF7wF4XS68mWBLZGojhscq+AlG/WfSKE4pkVgtFlp3g3e2wug yPQSntUUCxG3e92nqxnQZYpo96wPjw== -----END CERTIFICATE-----Generated at Wed Apr 30 14:46:35 2025 by rpki-client