$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/383da4e2-7cce-3739-93cb-6a999f5534e0.roa File: 383da4e2-7cce-3739-93cb-6a999f5534e0.roa (raw, json) Hash identifier: 6t2k18LxGt1hPMvI+NmWrWbEWMDvYj0JEp+ve9fDUU4= Subject key identifier: C2:3E:9E:FD:51:74:82:F9:F8:5F:CD:A6:42:A9:91:A6:C5:BF:AB:D3 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858498CFF02B1412CE5810A0324E0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/383da4e2-7cce-3739-93cb-6a999f5534e0.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 19905 IP address blocks: 208.181.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:02:b1:41:2c:e5:81:0a:03:24:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=b3a7a19b-56d1-4737-afb7-abbe7c933549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:27:25:1e:ed:00:11:f9:93:14:ac:e4:a9:56: ba:e6:9f:d9:0e:6d:dc:b3:77:80:91:d6:de:c9:82: 17:7f:6e:28:ac:62:0d:7b:9c:1f:af:af:b5:58:e5: b6:ce:ba:4a:92:16:26:f0:45:a5:4e:b9:9e:15:f9: 44:c7:46:b7:3b:1d:f6:c0:4c:ae:8f:c9:59:27:76: 99:bc:99:70:d4:5c:94:94:e9:2e:3c:4d:21:4a:76: 5e:4c:e0:e0:50:5d:27:05:f0:4e:28:6f:71:42:d6: 95:4f:08:8d:df:e7:03:ec:44:9a:67:9d:34:ad:bc: 69:d7:16:8b:ba:87:d2:cb:a9:e9:f7:3b:fe:af:59: f6:41:fa:81:0f:a5:49:a4:f5:32:10:80:a7:8d:0e: 00:98:5c:f8:d0:ae:28:ed:2d:bd:72:60:ab:9b:66: 97:f2:7f:a1:bc:08:03:1a:97:8f:6b:78:d1:c0:e0: ac:44:83:47:c7:bf:e3:0d:c6:d2:31:ef:cc:54:a3: 5c:e4:76:ee:13:d3:af:cb:d3:b0:5d:dd:22:ef:a5: ef:b0:8c:ba:e3:84:c2:8d:1b:c3:e3:dc:2d:42:60: 9a:73:44:f6:e8:6b:4d:eb:d7:1f:19:51:fb:16:48: 5c:a9:a8:97:84:90:d6:e2:a0:e1:e1:2d:75:fb:e0: 84:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3E:9E:FD:51:74:82:F9:F8:5F:CD:A6:42:A9:91:A6:C5:BF:AB:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/383da4e2-7cce-3739-93cb-6a999f5534e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:4d:8d:f1:74:3c:c5:2c:a3:51:c9:34:92:a4:b2:32:2c:31: eb:47:0b:5c:50:26:b1:64:be:d5:a7:6e:bd:e9:3c:f0:13:ec: 98:f8:2d:1c:c6:47:a0:45:a7:ce:12:c9:0b:c0:ec:95:e6:88: 74:4d:f5:6a:7f:b8:29:27:87:bc:bc:b4:49:d2:a8:53:90:43: a9:99:25:ff:4c:50:7d:97:25:cd:17:b8:c7:34:4d:5c:dc:53: cb:b9:47:dc:59:49:39:c7:c5:bf:13:d6:6b:9c:1e:ae:d6:ac: 1d:61:fc:e8:b3:4b:44:e1:87:2a:24:9c:77:b1:8e:c5:e0:aa: b8:9e:82:43:60:28:05:b6:e4:89:71:75:b8:83:69:e5:2f:7c: 7a:2d:4c:80:19:68:7d:7e:ba:fb:71:93:ff:99:6b:3b:43:2a: 66:22:99:aa:45:c1:da:bd:00:7a:52:94:6a:52:40:1c:57:e7: 40:ec:b4:51:c6:4e:21:cf:d1:43:e1:32:ed:7a:21:9b:3a:2a: d0:ed:58:96:6f:e6:72:50:3b:b8:ef:9b:58:a8:af:dc:bd:21: 04:55:b3:fd:a3:db:15:aa:d1:ae:ab:8e:8c:6d:c0:7d:4c:d8: e8:87:cc:1d:0d:2b:58:22:f5:75:95:88:4b:a0:e3:17:b5:ef: 23:11:d3:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/wKxQSzlgQoDJOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk YjNhN2ExOWItNTZkMS00NzM3LWFmYjctYWJiZTdjOTMzNTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyclHu0AEfmTFKzkqVa65p/ZDm3cs3eAkdbe yYIXf24orGINe5wfr6+1WOW2zrpKkhYm8EWlTrmeFflEx0a3Ox32wEyuj8lZJ3aZ vJlw1FyUlOkuPE0hSnZeTODgUF0nBfBOKG9xQtaVTwiN3+cD7ESaZ500rbxp1xaL uofSy6np9zv+r1n2QfqBD6VJpPUyEICnjQ4AmFz40K4o7S29cmCrm2aX8n+hvAgD GpePa3jRwOCsRINHx7/jDcbSMe/MVKNc5HbuE9Ovy9OwXd0i76XvsIy644TCjRvD 49wtQmCac0T26GtN69cfGVH7FkhcqaiXhJDW4qDh4S11++CEuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMI+nv1RdIL5+F/NpkKpkabFv6vTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzgzZGE0ZTItN2NjZS0z NzM5LTkzY2ItNmE5OTlmNTUzNGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0LVlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMtNjfF0PMUso1HJNJKksjIsMetHC1xQJrFkvtWnbr3pPPAT7Jj4LRzG R6BFp84SyQvA7JXmiHRN9Wp/uCknh7y8tEnSqFOQQ6mZJf9MUH2XJc0XuMc0TVzc U8u5R9xZSTnHxb8T1mucHq7WrB1h/OizS0ThhyoknHexjsXgqriegkNgKAW25Ilx dbiDaeUvfHotTIAZaH1+uvtxk/+ZaztDKmYimapFwdq9AHpSlGpSQBxX50DstFHG TiHP0UPhMu16IZs6KtDtWJZv5nJQO7jvm1ior9y9IQRVs/2j2xWq0a6rjoxtwH1M 2OiHzB0NK1gi9XWViEug4xe17yMR06Q= -----END CERTIFICATE-----Generated at Sat Apr 26 12:24:19 2025 by rpki-client