$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/43efcacb-514e-315a-9a6b-0959bf9e9dcf.roa File: 43efcacb-514e-315a-9a6b-0959bf9e9dcf.roa (raw, json) Hash identifier: o+wMuaoMr7DZ6xHcsXNBDyKnLOnwMM1rVZM2Xjx2jos= Subject key identifier: 23:DA:CF:0A:10:C3:00:FF:E2:58:90:0A:5C:92:04:B7:E6:F1:8C:6D Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499AF4783EBECA3845C06B9600 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/43efcacb-514e-315a-9a6b-0959bf9e9dcf.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 154.20.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:78:3e:be:ca:38:45:c0:6b:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=0d0336f7-ad91-4546-97fe-4609571b3b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:26:3e:5e:b5:50:02:98:c9:8b:4c:9e:45:15: e7:14:d5:be:f5:d2:46:43:24:9f:24:a9:b6:8e:d3: 81:91:00:95:21:a5:85:9e:fd:bf:99:e6:55:cb:e2: 77:30:40:0f:a4:42:ff:13:65:29:e3:95:f0:e6:57: 91:ea:a8:27:a6:c8:0e:83:40:71:a5:1a:8d:5c:16: 11:cc:03:fc:4a:18:d6:85:c7:01:c8:2f:bc:3a:07: 2b:3b:e0:11:b3:bd:e7:a9:10:6b:af:41:19:35:8a: 41:6e:e4:1c:ce:fd:d5:56:6c:de:0e:c3:77:96:37: f5:fe:c6:c0:15:4d:10:75:9d:26:21:c7:e9:88:24: 4e:88:45:c4:4b:ba:85:c1:54:d1:47:b7:0d:20:f6: 42:03:be:10:2e:ed:ea:57:46:ce:41:79:a1:68:72: 74:59:df:2f:ac:18:3f:cc:9e:88:92:c6:19:31:a1: b7:02:41:44:b0:3f:5a:8a:52:2e:13:15:80:25:db: c7:6c:db:79:30:de:b6:41:8d:65:04:1d:2d:f7:ad: 08:77:18:b1:c1:19:2c:ec:6c:e8:89:82:d6:37:ae: 3f:6e:7f:2a:0b:45:91:4f:e0:de:3d:7e:02:27:3d: 95:e5:e1:10:9f:bb:01:e3:0a:ab:e2:bb:bc:90:94: f7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DA:CF:0A:10:C3:00:FF:E2:58:90:0A:5C:92:04:B7:E6:F1:8C:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/43efcacb-514e-315a-9a6b-0959bf9e9dcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 154.20.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ae:ce:cb:4f:13:e5:8e:c7:32:b4:c5:aa:26:89:45:d6:70: 61:70:d1:de:69:96:a7:80:8f:89:55:a4:7f:d9:a2:31:37:cb: 02:82:64:f3:3e:18:3a:92:0f:a8:55:3e:7a:c7:64:09:b9:a9: 84:42:b4:90:1d:89:a9:0f:f3:75:49:2d:1c:2a:2c:6c:0d:57: be:84:a7:c1:03:fa:e5:ef:cb:b4:63:fc:d8:ae:34:6a:62:2b: 97:8e:12:19:34:7f:eb:08:2b:fe:ad:83:fa:88:4c:5a:bc:6a: 2c:1f:cb:d6:a6:94:ab:fa:ac:57:41:c6:1f:c3:da:2e:af:f6: dd:2d:c5:25:09:b2:6e:79:42:e5:ff:8a:3b:12:00:b9:5d:04: 5e:ea:02:2a:f0:04:d1:25:3a:32:e3:f7:8b:07:d1:83:e2:15: 64:27:01:27:9c:2d:d7:84:d6:ff:98:f6:63:19:d3:ea:4f:5a: 95:ac:4e:d0:d2:c5:ec:bd:7b:82:65:84:13:a1:47:ec:53:97: a7:98:98:e3:1f:47:1b:9c:78:87:c1:80:e5:bf:9c:c8:17:d0: 49:fa:f3:29:58:1e:d6:15:06:dc:08:20:ea:32:7d:1f:b1:dc: ac:fd:26:d5:4c:1e:49:3d:97:9e:d7:92:3b:9b:f4:27:8c:6b: 8b:99:30:55 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEma9Hg+vso4RcBrlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MGQwMzM2ZjctYWQ5MS00NTQ2LTk3ZmUtNDYwOTU3MWIzYjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SY+XrVQApjJi0yeRRXnFNW+9dJGQySfJKm2 jtOBkQCVIaWFnv2/meZVy+J3MEAPpEL/E2Up45Xw5leR6qgnpsgOg0BxpRqNXBYR zAP8ShjWhccByC+8OgcrO+ARs73nqRBrr0EZNYpBbuQczv3VVmzeDsN3ljf1/sbA FU0QdZ0mIcfpiCROiEXES7qFwVTRR7cNIPZCA74QLu3qV0bOQXmhaHJ0Wd8vrBg/ zJ6IksYZMaG3AkFEsD9ailIuExWAJdvHbNt5MN62QY1lBB0t960IdxixwRks7Gzo iYLWN64/bn8qC0WRT+DePX4CJz2V5eEQn7sB4wqr4ru8kJT37wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCPazwoQwwD/4liQClySBLfm8YxtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDNlZmNhY2ItNTE0ZS0z MTVhLTlhNmItMDk1OWJmOWU5ZGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmhQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAKK7Oy08T5Y7HMrTFqiaJRdZwYXDR3mmWp4CPiVWkf9miMTfLAoJk8z4Y OpIPqFU+esdkCbmphEK0kB2JqQ/zdUktHCosbA1XvoSnwQP65e/LtGP82K40amIr l44SGTR/6wgr/q2D+ohMWrxqLB/L1qaUq/qsV0HGH8PaLq/23S3FJQmybnlC5f+K OxIAuV0EXuoCKvAE0SU6MuP3iwfRg+IVZCcBJ5wt14TW/5j2YxnT6k9alaxO0NLF 7L17gmWEE6FH7FOXp5iY4x9HG5x4h8GA5b+cyBfQSfrzKVge1hUG3Agg6jJ9H7Hc rP0m1UweST2XnteSO5v0J4xri5kwVQ== -----END CERTIFICATE-----Generated at Sat Apr 26 22:55:06 2025 by rpki-client