$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3457cbf8-275f-3daa-96d5-6ee8d534386e.roa File: 3457cbf8-275f-3daa-96d5-6ee8d534386e.roa (raw, json) Hash identifier: sMgBNA9WU5WD/FiMojer6Vl+jhuXMv2+SIGh/HdGTOA= Subject key identifier: F8:C3:A2:85:66:08:91:10:D6:D9:17:64:FB:3D:FA:C0:97:A7:9D:52 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499AF47E0DBA51E7CD2C16A7C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3457cbf8-275f-3daa-96d5-6ee8d534386e.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 137.186.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:7e:0d:ba:51:e7:cd:2c:16:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=198fdc06-aa09-426a-91ad-e707c955f023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:48:66:c0:78:75:a6:57:54:d4:28:14:cb:d1: 6e:9e:da:df:1f:2e:08:11:26:31:df:ce:7a:4b:0f: 7d:fb:f3:e7:bf:40:bb:ef:c8:1f:39:74:d6:63:1e: 18:3b:37:9e:1e:5d:45:5a:e7:72:2f:ef:a6:55:a0: df:e5:6b:4d:3a:52:4b:20:64:41:ff:b1:27:4a:d0: 4a:f6:47:7f:7f:4a:ec:9f:f8:05:4b:f5:fd:3b:e9: 8c:99:6f:e7:0d:c6:a3:23:3c:f9:2f:c6:27:ba:be: 0e:77:a6:4f:c3:56:62:f5:c7:99:c9:9a:7e:1c:66: 3d:33:6f:a9:22:44:43:79:d7:53:93:44:aa:2a:a1: 0e:5d:ab:8f:f3:c1:5a:0d:08:cd:2d:85:47:a0:82: 71:35:99:12:0f:79:de:98:ee:1b:ef:71:f3:f4:c5: bb:05:95:0e:ef:3e:dd:2e:e6:07:e5:d5:c0:17:e5: 5d:db:4e:08:75:a0:dd:bd:ea:76:4c:48:98:26:44: 6e:1e:7e:48:d7:9e:73:14:70:1d:be:3d:0f:60:f0: dd:cb:3e:6a:d9:15:89:44:0a:1b:fb:39:04:b3:f2: 40:99:47:ee:2a:1e:a7:2a:b9:87:2a:40:c6:50:03: 70:b7:c2:a5:e4:2f:c3:af:bf:e7:0e:aa:08:dd:41: 5b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C3:A2:85:66:08:91:10:D6:D9:17:64:FB:3D:FA:C0:97:A7:9D:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3457cbf8-275f-3daa-96d5-6ee8d534386e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 137.186.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ed:54:e2:ca:6f:56:d2:8b:32:81:d6:0b:45:06:a2:ab:25: cc:2e:12:b5:6d:19:1a:d9:b1:ee:e7:06:ba:5a:c3:3d:2a:19: 61:19:8c:1a:46:d8:ce:93:54:44:51:80:eb:4c:be:e2:49:be: 67:a6:4d:3c:22:74:2c:06:7c:44:5b:e2:2b:8d:e1:07:8e:01: cd:4e:16:4f:ae:68:69:db:fb:22:e1:2e:55:4b:70:b9:70:87: c8:b0:c1:d8:22:6e:41:52:e1:5c:67:51:5d:0f:85:d9:86:62: c9:cd:14:c2:c0:a9:fc:ec:21:da:3d:01:cb:0c:60:fc:24:70: e3:42:02:00:13:67:8c:96:89:cf:a4:0e:a6:89:c1:7d:0e:d9: ab:ab:9a:d6:8c:5b:ee:6b:16:33:ec:73:43:09:b0:84:7c:15: 51:ba:d9:03:2a:36:f9:8e:93:cf:7b:4f:0e:b9:7c:8f:81:75: 8f:29:1f:63:d1:e3:55:56:81:fc:3b:56:59:4f:60:9f:91:7e: 76:eb:f1:6e:03:03:f0:b1:f3:7f:61:87:63:8c:e0:ae:0e:2a: 09:b5:9f:f8:b3:4a:f8:7e:65:b9:e3:6a:1f:4b:e2:a0:a5:ce: 12:18:b4:2c:f6:b5:32:5e:36:a5:fc:73:5f:39:0d:a5:d3:b9: b9:d3:ab:b8 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEma9H4NulHnzSwWp8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MTk4ZmRjMDYtYWEwOS00MjZhLTkxYWQtZTcwN2M5NTVmMDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3khmwHh1pldU1CgUy9FuntrfHy4IESYx3856 Sw99+/Pnv0C778gfOXTWYx4YOzeeHl1FWudyL++mVaDf5WtNOlJLIGRB/7EnStBK 9kd/f0rsn/gFS/X9O+mMmW/nDcajIzz5L8Ynur4Od6ZPw1Zi9ceZyZp+HGY9M2+p IkRDeddTk0SqKqEOXauP88FaDQjNLYVHoIJxNZkSD3nemO4b73Hz9MW7BZUO7z7d LuYH5dXAF+Vd204IdaDdvep2TEiYJkRuHn5I155zFHAdvj0PYPDdyz5q2RWJRAob +zkEs/JAmUfuKh6nKrmHKkDGUANwt8Kl5C/Dr7/nDqoI3UFbHQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPjDooVmCJEQ1tkXZPs9+sCXp51SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzQ1N2NiZjgtMjc1Zi0z ZGFhLTk2ZDUtNmVlOGQ1MzQzODZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAibowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAPu1U4spvVtKLMoHWC0UGoqslzC4StW0ZGtmx7ucGulrDPSoZYRmMGkbY zpNURFGA60y+4km+Z6ZNPCJ0LAZ8RFviK43hB44BzU4WT65oadv7IuEuVUtwuXCH yLDB2CJuQVLhXGdRXQ+F2YZiyc0UwsCp/Owh2j0Bywxg/CRw40ICABNnjJaJz6QO ponBfQ7Zq6ua1oxb7msWM+xzQwmwhHwVUbrZAyo2+Y6Tz3tPDrl8j4F1jykfY9Hj VVaB/DtWWU9gn5F+duvxbgMD8LHzf2GHY4zgrg4qCbWf+LNK+H5lueNqH0vioKXO Ehi0LPa1Ml42pfxzXzkNpdO5udOruA== -----END CERTIFICATE-----Generated at Sun Apr 27 00:19:44 2025 by rpki-client