$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/59f5126e-72cf-3651-9a57-181267472a62.roa File: 59f5126e-72cf-3651-9a57-181267472a62.roa (raw, json) Hash identifier: uQvZwl4kV14aW8gXBDPwUFAUY7vvaz8haZJIGzUAMLg= Subject key identifier: 11:CD:07:DA:E3:21:2D:93:EE:3C:9F:7C:49:C1:C1:4D:9E:65:FF:C4 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499DBF386E7DF742F14DCF4600 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/59f5126e-72cf-3651-9a57-181267472a62.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 395096 IP address blocks: 204.174.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:38:6e:7d:f7:42:f1:4d:cf:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=99d67a95-4c2e-4d5a-819a-9edc5b996c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e0:50:37:c9:c5:64:a1:8f:8a:5f:e0:73:87: 40:f1:6c:de:fa:7d:b3:f7:86:bd:88:a8:93:93:54: a7:d8:ad:bc:16:00:2f:55:dc:86:a4:09:16:f4:68: 4f:53:bf:4f:82:b0:85:82:e1:66:4e:01:ea:db:00: 58:76:22:e1:b7:f0:d4:7a:d1:fa:53:a7:06:24:ba: 6a:57:6f:64:b9:aa:4d:0a:d9:23:25:f4:1a:8e:0c: 8d:84:ac:6c:84:80:e1:38:8b:a0:19:cb:0d:6d:bb: 0b:48:f4:ca:fa:fe:a0:43:19:8d:a5:33:dc:6e:ec: 6d:91:63:54:34:31:55:d3:dc:f5:15:d0:25:47:98: e9:c2:76:ba:8d:02:27:39:d4:7c:3d:ed:ec:c2:cc: fe:c2:2f:96:7c:85:99:25:df:e7:28:4f:5c:d6:2f: 53:10:9a:80:00:59:33:f4:09:18:66:62:b6:63:4a: 89:6e:cd:f6:1f:34:55:97:f2:b9:24:0f:f4:36:3c: 05:5f:76:08:00:2e:8f:4d:f6:1f:8e:ac:5d:7c:3f: aa:06:48:1c:d5:8d:47:91:c9:d1:ae:9b:76:e5:90: 3d:dc:5a:d0:5b:ff:2f:71:0c:f5:37:0f:d9:c1:51: fd:34:90:97:ae:0f:d2:79:fc:93:f2:de:33:ca:bd: 35:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CD:07:DA:E3:21:2D:93:EE:3C:9F:7C:49:C1:C1:4D:9E:65:FF:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/59f5126e-72cf-3651-9a57-181267472a62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 204.174.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e4:d9:2d:90:1e:7e:e5:11:a8:85:5e:72:09:78:fc:7c:6c:c0: ca:71:e8:5f:71:7d:64:d1:bc:66:ac:8e:0e:12:bd:dc:50:88: 5b:df:4b:f2:48:00:5a:30:ce:c9:55:6f:65:6e:e6:a4:09:bc: 5e:30:da:6b:74:ef:0e:4e:aa:55:18:7c:2a:f7:31:80:d1:0b: d9:52:a3:6d:bd:62:ea:3a:39:f0:e6:cc:c4:8a:ed:90:68:35: 86:a3:9a:29:c0:35:8b:3a:62:98:64:be:93:fc:d9:ad:46:6d: 73:c6:29:58:86:40:f1:95:05:c5:07:cb:6b:3b:41:bb:ca:9f: 14:73:a4:eb:5f:c1:eb:8a:2a:3d:9e:7d:f6:4c:35:0d:32:e6: d6:dd:a9:79:95:8d:c1:ae:e7:00:d2:dd:57:5c:30:04:b0:25: aa:97:c6:3c:d1:43:74:e7:67:92:50:cd:36:2d:9f:3b:64:18: cb:5f:0b:1f:3c:31:3f:94:84:40:63:bf:bc:8e:26:fc:d8:3e: 18:a0:7a:38:58:24:de:be:12:55:15:b1:a4:58:13:f9:1f:de: cd:ae:ca:3e:a4:e2:60:db:a8:97:98:2f:82:3c:12:56:5b:c6: 2d:4a:a9:85:e0:85:dc:35:f8:a7:b5:00:01:33:b5:50:1a:00: 41:78:77:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzhuffdC8U3PRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk OTlkNjdhOTUtNGMyZS00ZDVhLTgxOWEtOWVkYzViOTk2YzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOBQN8nFZKGPil/gc4dA8Wze+n2z94a9iKiT k1Sn2K28FgAvVdyGpAkW9GhPU79PgrCFguFmTgHq2wBYdiLht/DUetH6U6cGJLpq V29kuapNCtkjJfQajgyNhKxshIDhOIugGcsNbbsLSPTK+v6gQxmNpTPcbuxtkWNU NDFV09z1FdAlR5jpwna6jQInOdR8Pe3swsz+wi+WfIWZJd/nKE9c1i9TEJqAAFkz 9AkYZmK2Y0qJbs32HzRVl/K5JA/0NjwFX3YIAC6PTfYfjqxdfD+qBkgc1Y1HkcnR rpt25ZA93FrQW/8vcQz1Nw/ZwVH9NJCXrg/SefyT8t4zyr010QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHNB9rjIS2T7jyffEnBwU2eZf/EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNTlmNTEyNmUtNzJjZi0z NjUxLTlhNTctMTgxMjY3NDcyYTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzK5CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOTZLZAefuURqIVecgl4/HxswMpx6F9xfWTRvGasjg4SvdxQiFvfS/JI AFowzslVb2Vu5qQJvF4w2mt07w5OqlUYfCr3MYDRC9lSo229Yuo6OfDmzMSK7ZBo NYajminANYs6YphkvpP82a1GbXPGKViGQPGVBcUHy2s7QbvKnxRzpOtfweuKKj2e ffZMNQ0y5tbdqXmVjcGu5wDS3VdcMASwJaqXxjzRQ3TnZ5JQzTYtnztkGMtfCx88 MT+UhEBjv7yOJvzYPhigejhYJN6+ElUVsaRYE/kf3s2uyj6k4mDbqJeYL4I8ElZb xi1KqYXghdw1+Ke1AAEztVAaAEF4d58= -----END CERTIFICATE-----Generated at Sat Apr 26 23:35:20 2025 by rpki-client