$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b53281a-a0ba-38f4-bc44-32aa7e758304.roa File: 3b53281a-a0ba-38f4-bc44-32aa7e758304.roa (raw, json) Hash identifier: +qnnHIPRLBpkENLXhuJiQxW6safBVdhfPS5rulOj1KQ= Subject key identifier: 0E:9E:6F:C1:9D:89:D4:77:FE:D4:37:AA:9A:AF:A1:37:FC:E4:0B:4D Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499AF47B8E083546CF8134C9C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b53281a-a0ba-38f4-bc44-32aa7e758304.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 142.59.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:7b:8e:08:35:46:cf:81:34:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=3fce92f6-712a-4443-992b-ed12f88d6fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d8:29:e2:21:ab:4f:09:d1:cb:33:11:07:f6: 8e:ea:b4:3a:6d:04:f7:f4:b9:97:89:f7:f1:bd:90: 68:fe:0b:11:1b:69:42:ec:6c:56:f5:1d:13:e4:49: 15:55:d4:fe:6e:f1:d6:f0:9c:b8:69:da:87:af:c8: 23:4c:ff:6a:48:47:f1:98:8a:67:b2:47:b2:f7:23: b5:f3:4c:a0:ca:d7:03:f6:99:09:a0:77:2e:81:45: dd:ac:30:18:b1:a9:cd:a5:67:c5:89:f1:4f:20:8e: b7:6b:22:45:4c:83:a0:ba:57:01:ea:e6:09:c1:52: 04:98:a3:41:9a:66:f2:8b:32:8f:d4:1b:cf:de:c7: 0b:ea:43:b6:3f:71:d8:55:0a:9c:84:0b:d3:03:1f: 65:2f:04:4a:dc:37:1d:aa:39:68:67:70:b4:c3:dd: 46:d7:b5:11:8b:2e:66:20:ad:a9:65:ed:27:fc:a4: c1:89:f9:e6:74:a5:40:df:46:a3:a2:b7:64:57:84: 1c:ea:3e:b8:95:1d:4a:b5:9d:18:1f:1d:dd:1f:a2: b4:6a:cf:d3:3d:07:d2:11:6b:f0:a7:fb:8c:db:73: 0a:f0:fb:0b:8e:cb:31:da:50:1b:73:fd:8f:4f:2b: 24:7e:54:9f:ef:bd:9b:5a:40:68:63:b2:3f:f2:59: 5a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9E:6F:C1:9D:89:D4:77:FE:D4:37:AA:9A:AF:A1:37:FC:E4:0B:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b53281a-a0ba-38f4-bc44-32aa7e758304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 142.59.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:55:36:a2:8d:c5:49:bb:5a:5b:61:69:9c:23:ea:c8:7c:20: 54:be:98:95:7d:ad:b2:12:f3:0b:65:ea:37:25:6b:fb:61:fa: 57:2f:84:41:a2:c5:8a:32:e9:ac:77:79:02:52:ed:77:70:4d: bd:89:6c:0b:a2:01:20:45:8a:6b:7e:cc:f6:9e:c9:b0:52:61: 52:6e:95:7b:a3:de:ee:0b:20:4b:ca:3d:88:37:24:78:54:a8: 76:6f:e7:58:6b:12:9b:8a:2b:7c:d0:0d:74:ae:c8:fd:81:d3: 38:0c:71:b3:70:0a:97:ba:fc:ed:00:ea:da:97:90:6f:67:61: 9a:ac:d4:61:bf:37:38:81:f0:37:9f:4e:18:35:cb:6a:c8:db: bf:16:4a:0b:d6:03:41:28:df:0e:aa:92:74:00:62:da:74:3c: 2c:6c:72:ca:04:50:29:53:cf:8a:00:8c:d7:63:a0:b6:14:ae: 44:dd:13:0f:1f:f4:44:d6:c6:26:47:e0:a3:a9:91:5a:7c:bd: f4:9b:41:1a:36:23:c2:d5:36:1c:54:0a:79:d6:3b:96:e6:c8: 93:3d:c9:70:63:67:45:96:e5:70:aa:e3:4a:2a:eb:ab:f0:74: a7:bc:4e:81:c0:d1:56:da:da:bc:5a:56:5c:72:c4:fc:43:6e: 16:fc:9c:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9HuOCDVGz4E0ycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk M2ZjZTkyZjYtNzEyYS00NDQzLTk5MmItZWQxMmY4OGQ2ZmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9gp4iGrTwnRyzMRB/aO6rQ6bQT39LmXiffx vZBo/gsRG2lC7GxW9R0T5EkVVdT+bvHW8Jy4adqHr8gjTP9qSEfxmIpnskey9yO1 80ygytcD9pkJoHcugUXdrDAYsanNpWfFifFPII63ayJFTIOgulcB6uYJwVIEmKNB mmbyizKP1BvP3scL6kO2P3HYVQqchAvTAx9lLwRK3DcdqjloZ3C0w91G17URiy5m IK2pZe0n/KTBifnmdKVA30ajordkV4Qc6j64lR1KtZ0YHx3dH6K0as/TPQfSEWvw p/uM23MK8PsLjssx2lAbc/2PTyskflSf772bWkBoY7I/8lla8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6eb8GdidR3/tQ3qpqvoTf85AtNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2I1MzI4MWEtYTBiYS0z OGY0LWJjNDQtMzJhYTdlNzU4MzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjjuwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMRVNqKNxUm7WlthaZwj6sh8IFS+mJV9rbIS8wtl6jcla/th+lcvhEGi xYoy6ax3eQJS7XdwTb2JbAuiASBFimt+zPaeybBSYVJulXuj3u4LIEvKPYg3JHhU qHZv51hrEpuKK3zQDXSuyP2B0zgMcbNwCpe6/O0A6tqXkG9nYZqs1GG/NziB8Def Thg1y2rI278WSgvWA0Eo3w6qknQAYtp0PCxscsoEUClTz4oAjNdjoLYUrkTdEw8f 9ETWxiZH4KOpkVp8vfSbQRo2I8LVNhxUCnnWO5bmyJM9yXBjZ0WW5XCq40oq66vw dKe8ToHA0Vba2rxaVlxyxPxDbhb8nJU= -----END CERTIFICATE-----Generated at Sun Apr 27 00:20:27 2025 by rpki-client