$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/658d4b54-37a5-3db1-8aa0-8b2d91d6e9c7.roa File: 658d4b54-37a5-3db1-8aa0-8b2d91d6e9c7.roa (raw, json) Hash identifier: TbWrqAZ6KdwJyN+1Y9QB1YUYKqfbsPMB8mybOm0biSs= Subject key identifier: A5:45:34:51:C3:DA:FF:69:85:5A:ED:3F:E3:94:A2:ED:11:44:C4:07 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499AF47C5AFB277CF0E6DE0500 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/658d4b54-37a5-3db1-8aa0-8b2d91d6e9c7.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 75.152.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:7c:5a:fb:27:7c:f0:e6:de:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=9e007afe-f1de-47e2-85e5-85cee36549de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bc:b1:1b:c7:41:52:d5:cd:dd:76:6c:8f:d2: ca:ae:e4:9c:28:f4:f1:56:b7:6c:22:bc:5c:25:1c: 7b:7d:0e:3b:2c:c7:b3:97:38:be:1a:a6:0d:9f:44: 90:f8:f5:71:47:7f:01:33:de:9c:54:dd:a7:b3:80: 60:2d:0f:72:d9:2b:c8:6b:6e:2d:4c:95:05:96:54: 80:b6:73:db:42:65:3c:c5:ac:9c:33:b5:8d:b0:ad: ba:df:e5:12:29:a9:52:61:49:40:49:4b:03:10:82: 0a:b4:c6:8e:73:23:32:ca:59:c1:a4:90:28:cd:42: eb:c7:61:c4:45:96:5d:07:ad:b2:d0:e2:1f:57:e7: 42:f4:3f:d8:a2:29:63:2b:3a:14:27:61:56:85:3d: c8:f4:4b:21:aa:74:05:af:e1:31:95:0b:ac:42:31: 3b:e6:8d:9d:e3:de:d2:77:b7:4b:59:b9:f7:72:48: c8:3b:33:20:24:86:0c:00:32:cb:da:98:07:d3:ac: 0b:75:c2:df:7a:8c:9c:36:f6:d2:2b:13:83:36:0c: f8:f3:b8:4c:03:54:18:4c:c8:8d:97:40:11:83:34: 21:07:6c:48:40:f0:66:6f:8a:7b:64:a1:4b:29:35: ca:9d:2d:d0:86:f6:3b:9e:5f:ff:2e:fd:3d:c6:12: d4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:45:34:51:C3:DA:FF:69:85:5A:ED:3F:E3:94:A2:ED:11:44:C4:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/658d4b54-37a5-3db1-8aa0-8b2d91d6e9c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 75.152.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:90:65:d4:6c:c1:ed:5f:38:3c:76:e8:4f:0e:4b:71:77:20: 66:20:53:49:1b:9c:35:5c:74:ba:4f:07:b5:0d:84:af:50:9b: c5:e5:e3:c4:24:fd:f9:d0:00:bf:c3:d9:38:ca:3a:73:f8:d8: 0e:2b:ab:44:60:4b:06:05:d4:9b:b8:e1:cd:70:bf:d6:5c:67: 2f:6c:22:58:2c:6e:d8:4a:af:0f:a8:7a:ce:08:e8:15:c3:bb: 5a:88:53:0c:90:46:30:38:03:dd:5d:71:fd:e7:5e:43:0b:f8: 4e:a0:b2:8f:fa:c7:ca:4d:00:d4:b9:bc:a2:c4:7e:26:b9:9f: 43:6d:fc:2c:7d:81:3f:38:86:9d:c0:5b:3d:70:0e:bc:12:59: 3f:07:fc:e0:15:e7:08:e5:87:13:be:32:eb:ca:17:92:6a:cf: 98:41:a7:36:64:15:3c:80:fc:26:99:f7:23:e6:a5:5b:4a:ab: 00:2d:0d:4c:8b:a6:10:06:7b:dc:9d:58:c4:0b:b1:9d:c8:1f: 15:c2:a3:dd:ba:54:a9:2b:1b:18:46:71:17:99:27:e6:6a:85: 78:2a:b8:32:51:71:bc:3c:e1:e8:bf:a9:89:02:f6:7d:cb:95: 86:b6:83:87:8a:3d:53:db:9b:34:b6:f5:27:0f:6b:aa:f5:93: 53:99:ac:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9Hxa+yd88ObeBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk OWUwMDdhZmUtZjFkZS00N2UyLTg1ZTUtODVjZWUzNjU0OWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbyxG8dBUtXN3XZsj9LKruScKPTxVrdsIrxc JRx7fQ47LMezlzi+GqYNn0SQ+PVxR38BM96cVN2ns4BgLQ9y2SvIa24tTJUFllSA tnPbQmU8xaycM7WNsK263+USKalSYUlASUsDEIIKtMaOcyMyylnBpJAozULrx2HE RZZdB62y0OIfV+dC9D/YoiljKzoUJ2FWhT3I9EshqnQFr+ExlQusQjE75o2d497S d7dLWbn3ckjIOzMgJIYMADLL2pgH06wLdcLfeoycNvbSKxODNgz487hMA1QYTMiN l0ARgzQhB2xIQPBmb4p7ZKFLKTXKnS3QhvY7nl//Lv09xhLU9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVFNFHD2v9phVrtP+OUou0RRMQHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNjU4ZDRiNTQtMzdhNS0z ZGIxLThhYTAtOGIyZDkxZDZlOWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFS5hAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCQZdRswe1fODx26E8OS3F3IGYgU0kbnDVcdLpPB7UNhK9Qm8Xl48Qk /fnQAL/D2TjKOnP42A4rq0RgSwYF1Ju44c1wv9ZcZy9sIlgsbthKrw+oes4I6BXD u1qIUwyQRjA4A91dcf3nXkML+E6gso/6x8pNANS5vKLEfia5n0Nt/Cx9gT84hp3A Wz1wDrwSWT8H/OAV5wjlhxO+MuvKF5Jqz5hBpzZkFTyA/CaZ9yPmpVtKqwAtDUyL phAGe9ydWMQLsZ3IHxXCo926VKkrGxhGcReZJ+ZqhXgquDJRcbw84ei/qYkC9n3L lYa2g4eKPVPbmzS29ScPa6r1k1OZrCI= -----END CERTIFICATE-----Generated at Sun Apr 27 16:35:28 2025 by rpki-client