$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33c1c010-cd03-3010-9b9a-7fb2fd1236b5.roa File: 33c1c010-cd03-3010-9b9a-7fb2fd1236b5.roa (raw, json) Hash identifier: aKH7XBN9zUCTfGRVzDoZxP0AqngUTZ7R2MGwZ8NWGo0= Subject key identifier: C2:04:2F:A9:90:04:E7:FB:2F:9A:49:A3:F4:E0:B6:E4:58:CD:0A:42 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499AF4745E2B45F673143D1F00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33c1c010-cd03-3010-9b9a-7fb2fd1236b5.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 199.212.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:74:5e:2b:45:f6:73:14:3d:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=945fa17e-eda5-4e1a-a72e-2dd49e85cde6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8a:52:72:0e:30:2a:db:85:41:45:d8:7e:20: 8f:0b:c9:73:09:bd:6f:6e:c5:75:c0:46:9d:9a:af: 30:8c:2d:6a:61:5b:ac:59:bd:7e:6d:17:05:7b:52: 38:6f:2c:fc:46:e7:e7:16:b5:34:e1:9d:40:c1:ef: f0:a9:60:fc:6d:32:95:61:02:5a:f4:09:0a:5a:1f: dc:25:97:1e:a3:4c:7b:79:7d:03:e9:64:93:12:65: 75:5b:5b:3a:28:d4:66:2b:f3:80:1a:6f:f1:b8:47: 08:e5:ae:be:47:41:e6:33:ee:bb:43:9d:7c:d6:e2: 36:9e:e7:23:fe:11:cf:82:e8:a6:5f:ff:72:88:74: b3:0c:55:47:02:91:ed:03:91:ec:3e:8d:50:19:4f: 05:21:74:14:ce:1f:2d:da:75:83:a3:2c:a0:e1:67: 9a:4e:c6:7e:ee:b8:05:8b:4a:a7:c4:75:98:f4:b8: 64:b3:03:3a:74:1b:94:d2:33:6d:0a:90:25:13:db: d2:66:7c:cd:04:5e:a3:97:01:9c:93:7d:2f:3a:7d: ce:37:3d:3e:25:fb:6a:d3:e6:f9:1a:ed:ef:58:0e: 31:4b:b8:64:bb:50:0c:70:31:de:28:e7:cd:81:99: 4d:ab:bf:06:8f:c4:2b:b6:2d:36:34:a8:48:35:5f: b8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:04:2F:A9:90:04:E7:FB:2F:9A:49:A3:F4:E0:B6:E4:58:CD:0A:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33c1c010-cd03-3010-9b9a-7fb2fd1236b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 199.212.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:3e:1d:45:d3:87:49:f8:11:28:71:be:47:4b:1d:ac:8d:65: 23:28:dc:1f:79:aa:9b:63:03:1b:c3:1b:9f:25:90:ad:80:73: 45:e6:9a:33:6d:31:e9:67:09:17:0f:ff:47:14:90:51:2a:3f: 1b:16:17:23:02:b0:e8:36:7c:ff:f4:a3:a9:bf:a7:ea:d8:61: 0f:6c:31:8a:5c:b9:3a:b7:0d:c4:4d:25:ed:47:2e:c6:cd:78: 74:80:7e:2b:f6:f8:ea:ad:ac:72:03:12:10:bb:3c:3f:c8:77: 3a:e4:38:ff:82:54:46:a9:91:a6:32:d6:1d:2a:32:6f:cc:2b: 5f:b8:97:0e:be:3d:7b:72:75:b7:05:86:ff:44:d8:47:96:53: ae:55:35:10:88:20:c9:1a:4c:74:78:69:2f:2a:0b:ff:3f:b5: b6:c0:c9:05:2e:f1:44:07:46:4c:cc:0c:c6:aa:90:af:d3:94: d2:83:46:d2:f1:25:5b:2b:50:b8:3a:78:f3:a4:b9:a6:a3:2b: 7a:ae:1c:35:7a:75:57:38:fb:94:a7:09:2f:10:18:86:be:35: e1:4d:98:1a:28:91:d0:a6:9c:f3:9f:4f:e3:af:77:d5:45:0d: a1:11:43:4c:8c:e1:67:ae:40:34:78:e9:88:9c:39:0c:ae:88: 8c:c5:2f:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9HReK0X2cxQ9HwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk OTQ1ZmExN2UtZWRhNS00ZTFhLWE3MmUtMmRkNDllODVjZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYpScg4wKtuFQUXYfiCPC8lzCb1vbsV1wEad mq8wjC1qYVusWb1+bRcFe1I4byz8RufnFrU04Z1Awe/wqWD8bTKVYQJa9AkKWh/c JZceo0x7eX0D6WSTEmV1W1s6KNRmK/OAGm/xuEcI5a6+R0HmM+67Q5181uI2nucj /hHPguimX/9yiHSzDFVHApHtA5HsPo1QGU8FIXQUzh8t2nWDoyyg4WeaTsZ+7rgF i0qnxHWY9LhkswM6dBuU0jNtCpAlE9vSZnzNBF6jlwGck30vOn3ONz0+Jftq0+b5 Gu3vWA4xS7hku1AMcDHeKOfNgZlNq78Gj8Qrti02NKhINV+4dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIEL6mQBOf7L5pJo/TgtuRYzQpCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzNjMWMwMTAtY2QwMy0z MDEwLTliOWEtN2ZiMmZkMTIzNmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx9SYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALY+HUXTh0n4EShxvkdLHayNZSMo3B95qptjAxvDG58lkK2Ac0XmmjNt MelnCRcP/0cUkFEqPxsWFyMCsOg2fP/0o6m/p+rYYQ9sMYpcuTq3DcRNJe1HLsbN eHSAfiv2+OqtrHIDEhC7PD/IdzrkOP+CVEapkaYy1h0qMm/MK1+4lw6+PXtydbcF hv9E2EeWU65VNRCIIMkaTHR4aS8qC/8/tbbAyQUu8UQHRkzMDMaqkK/TlNKDRtLx JVsrULg6ePOkuaajK3quHDV6dVc4+5SnCS8QGIa+NeFNmBookdCmnPOfT+Ovd9VF DaERQ0yM4WeuQDR46YicOQyuiIzFL7g= -----END CERTIFICATE-----Generated at Tue Apr 29 00:19:45 2025 by rpki-client