$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/49981ea0-1655-3c52-98ab-4de0a45d03b2.roa File: 49981ea0-1655-3c52-98ab-4de0a45d03b2.roa (raw, json) Hash identifier: 7zzQFWzoEPb6Bp4pax6FkdVodrm4gngX1zeaAFDo4WM= Subject key identifier: 30:0F:40:3C:BF:01:C2:A1:D1:C9:A6:69:22:BD:3A:64:2A:4C:FA:F0 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858498CFF0919A8225E1CB48245A0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/49981ea0-1655-3c52-98ab-4de0a45d03b2.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 21723 IP address blocks: 208.181.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:09:19:a8:22:5e:1c:b4:82:45:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=8db01163-4d47-4624-be15-9390125f9099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b3:bb:71:53:d5:70:9d:63:56:fe:b3:87:22: ab:00:12:9d:ac:73:e4:35:de:b7:8e:a6:78:8e:d2: 0d:0d:0b:4e:28:a0:27:25:36:f2:4e:43:21:d9:e4: ee:fd:3e:2f:3e:e6:12:db:d9:e8:ad:a9:60:6d:69: b2:69:f5:09:f1:e1:27:fe:ae:1c:37:8e:d2:e0:25: 0f:9d:41:6c:c2:f8:86:ec:24:18:ab:97:19:9c:0c: 5b:31:67:4e:e2:e3:d7:22:fc:01:0c:82:49:da:af: 7f:75:f1:dd:44:4e:e6:3b:da:7e:17:8b:b9:aa:de: 2b:7c:e2:90:ad:7c:66:5d:b2:09:80:f7:17:31:75: 9d:75:10:de:79:43:f5:1a:fb:e1:58:b5:f0:18:bd: 9b:b2:76:84:ca:cd:49:d4:cc:f1:4b:e2:ea:62:dd: 09:e7:2a:16:6e:9a:72:82:ba:89:68:6f:41:8b:b0: f5:f2:51:e3:4b:d6:11:f4:7d:e7:e3:81:10:10:8f: aa:cd:7a:58:62:ff:a1:07:68:18:0c:21:ca:02:bc: 2b:c9:c3:14:ac:26:5d:59:d8:bf:b6:af:53:5d:23: 06:45:8d:09:7c:09:fd:75:8b:a9:b0:ff:bf:85:28: d2:de:04:6e:71:83:c6:b0:3a:b0:64:3c:2f:5b:ed: da:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:0F:40:3C:BF:01:C2:A1:D1:C9:A6:69:22:BD:3A:64:2A:4C:FA:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/49981ea0-1655-3c52-98ab-4de0a45d03b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:54:e2:1e:1a:3e:a1:74:c2:e4:fb:dc:78:19:cb:15:4d:b7: 32:91:20:81:30:16:ba:2e:07:a3:7a:95:6e:ec:b3:00:f7:30: 67:c4:62:d8:1c:7f:33:d8:45:8f:2c:c4:c1:a0:5e:96:74:a0: 43:d5:e0:93:6c:2b:33:84:16:b5:a3:7f:3d:e6:8f:68:d2:e5: 01:7f:58:10:f3:c9:05:5e:1a:fa:33:7d:7c:a4:ab:0e:e0:4a: c9:1e:f8:54:a3:95:90:c3:81:45:b2:11:4f:8f:3f:3d:92:7c: 98:33:5b:d1:6c:8e:5f:7d:2e:be:00:b0:a8:54:88:c2:3f:73: 32:3d:0a:75:81:d5:ce:19:f1:fe:68:5a:69:c6:ce:a0:76:f9: b9:e1:90:10:14:1b:42:6c:09:e0:07:28:b8:71:a1:0f:51:57: 52:96:85:cd:46:42:38:c8:ac:cd:5d:8b:4c:73:ae:c9:55:f3: 0b:d8:10:be:46:06:eb:2a:aa:52:99:b6:8f:c7:91:89:69:d5: 43:63:d2:36:63:a2:12:7a:9f:9f:cb:8b:65:d3:d0:55:40:3e: 15:6c:a5:12:41:97:c6:af:fa:4e:f7:e0:84:9d:ef:27:55:30: 2a:0a:53:37:b9:3f:6d:c8:db:19:cb:0a:ba:62:4a:9c:16:2e: 9c:37:8f:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/wkZqCJeHLSCRaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk OGRiMDExNjMtNGQ0Ny00NjI0LWJlMTUtOTM5MDEyNWY5MDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbO7cVPVcJ1jVv6zhyKrABKdrHPkNd63jqZ4 jtINDQtOKKAnJTbyTkMh2eTu/T4vPuYS29noralgbWmyafUJ8eEn/q4cN47S4CUP nUFswviG7CQYq5cZnAxbMWdO4uPXIvwBDIJJ2q9/dfHdRE7mO9p+F4u5qt4rfOKQ rXxmXbIJgPcXMXWddRDeeUP1GvvhWLXwGL2bsnaEys1J1MzxS+LqYt0J5yoWbppy grqJaG9Bi7D18lHjS9YR9H3n44EQEI+qzXpYYv+hB2gYDCHKArwrycMUrCZdWdi/ tq9TXSMGRY0JfAn9dYupsP+/hSjS3gRucYPGsDqwZDwvW+3a7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAPQDy/AcKh0cmmaSK9OmQqTPrwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDk5ODFlYTAtMTY1NS0z YzUyLTk4YWItNGRlMGE0NWQwM2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0LVlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANpU4h4aPqF0wuT73HgZyxVNtzKRIIEwFrouB6N6lW7sswD3MGfEYtgc fzPYRY8sxMGgXpZ0oEPV4JNsKzOEFrWjfz3mj2jS5QF/WBDzyQVeGvozfXykqw7g Sske+FSjlZDDgUWyEU+PPz2SfJgzW9Fsjl99Lr4AsKhUiMI/czI9CnWB1c4Z8f5o WmnGzqB2+bnhkBAUG0JsCeAHKLhxoQ9RV1KWhc1GQjjIrM1di0xzrslV8wvYEL5G BusqqlKZto/HkYlp1UNj0jZjohJ6n5/Li2XT0FVAPhVspRJBl8av+k734ISd7ydV MCoKUze5P23I2xnLCrpiSpwWLpw3j5Y= -----END CERTIFICATE-----Generated at Sun Apr 27 04:15:29 2025 by rpki-client