$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/71f2334d-7dd6-369c-8b74-6b8f01ce196b.roa File: 71f2334d-7dd6-369c-8b74-6b8f01ce196b.roa (raw, json) Hash identifier: PttiiRhlkX/rH1/OvWMbYA/uypK4W2orY+WTiWvX/5k= Subject key identifier: 65:3E:27:DF:ED:39:DA:7E:E8:7E:A5:5B:4B:CB:28:15:F9:B9:3E:3B Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849955F1D4E8BC8053B483BF3C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/71f2334d-7dd6-369c-8b74-6b8f01ce196b.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 208.181.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:1d:4e:8b:c8:05:3b:48:3b:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=1507eba6-5226-4a32-b9aa-05bb3ec8c677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6e:d2:a8:55:95:f9:30:d1:9b:b2:ed:dd:d2: ad:ab:8e:e7:06:3e:a4:a4:3c:e1:3c:39:2a:07:bc: aa:f8:f4:d5:73:e5:68:41:c4:b8:bc:cb:d0:6d:5d: 61:1d:53:69:c8:3a:5f:21:d9:a3:c1:3b:db:79:0e: f0:2e:b2:89:01:ca:fa:3d:4a:9b:7b:4c:f6:3c:20: 2f:95:88:cf:5b:02:41:2c:f7:5c:ba:51:75:a5:dd: b4:14:c3:ea:b6:4d:6a:5a:bd:5c:d7:17:a9:61:13: 76:02:d7:78:15:5a:48:27:92:09:32:5e:27:14:15: 67:d5:23:e5:7a:ee:58:58:bb:f9:a0:94:c1:01:df: 0d:40:80:96:93:79:55:92:e3:fe:55:6e:60:53:28: 15:a8:fc:81:15:ae:62:6c:07:3b:d8:5e:42:e1:0e: 2d:58:af:9e:c2:ea:ee:fb:24:3f:e7:de:4d:fe:66: d1:20:e8:54:d2:71:c0:31:0f:54:00:7a:5f:d3:c7: 7f:03:ee:80:26:38:b7:22:42:2b:4b:b3:5e:9e:99: 1a:7a:d6:83:71:0a:e7:fc:ea:b9:3a:0d:bf:53:44: 6b:f6:c0:dc:d1:e2:74:71:5b:c1:37:6a:d8:01:cf: fb:55:3e:b4:f7:12:57:de:06:92:02:8e:af:65:a8: e8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3E:27:DF:ED:39:DA:7E:E8:7E:A5:5B:4B:CB:28:15:F9:B9:3E:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/71f2334d-7dd6-369c-8b74-6b8f01ce196b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:ac:8b:17:3f:38:50:2f:1a:11:4e:ce:a8:ae:13:a5:b4:b7: cd:18:42:1a:e6:b7:de:4e:3e:1e:18:a6:6d:a3:71:22:04:09: 35:13:44:fe:4c:5f:84:70:d2:b9:37:0e:15:13:76:2d:16:2f: 8d:c1:b7:51:55:8c:74:49:56:49:2d:e4:29:20:60:2a:68:a7: 81:55:a8:29:14:91:c1:b8:ce:a3:23:bc:18:30:b0:38:19:05: ea:47:0f:21:d7:0d:02:89:07:79:e5:30:2d:1f:7b:bd:6b:77: fc:9f:1e:dd:b3:2a:40:52:0c:c8:73:25:f9:97:77:f0:3e:8b: b1:8b:c6:f1:99:11:e2:20:0f:43:16:78:49:a1:a6:ba:6b:c8: d0:f3:7b:85:26:49:c9:48:b1:d9:e7:db:9f:90:32:3b:84:a3: 04:96:86:4e:9f:6e:8f:a4:f3:8c:13:63:a1:1a:a2:1f:da:d4: 47:73:ee:df:b3:0e:09:4a:e5:0e:fb:24:e1:9b:86:b5:77:11: c5:10:84:ca:97:72:40:ff:f5:70:52:4f:39:6f:1d:9f:6e:fa: d3:1a:a4:6d:35:28:e8:e8:bd:37:87:90:58:6f:3b:50:6a:1e: ed:6a:ae:78:a8:a3:72:67:9e:e5:48:42:81:24:4a:8e:6e:e3: a1:cc:40:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXx1Oi8gFO0g788AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk MTUwN2ViYTYtNTIyNi00YTMyLWI5YWEtMDViYjNlYzhjNjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh27SqFWV+TDRm7Lt3dKtq47nBj6kpDzhPDkq B7yq+PTVc+VoQcS4vMvQbV1hHVNpyDpfIdmjwTvbeQ7wLrKJAcr6PUqbe0z2PCAv lYjPWwJBLPdculF1pd20FMPqtk1qWr1c1xepYRN2Atd4FVpIJ5IJMl4nFBVn1SPl eu5YWLv5oJTBAd8NQICWk3lVkuP+VW5gUygVqPyBFa5ibAc72F5C4Q4tWK+ewuru +yQ/595N/mbRIOhU0nHAMQ9UAHpf08d/A+6AJji3IkIrS7NenpkaetaDcQrn/Oq5 Og2/U0Rr9sDc0eJ0cVvBN2rYAc/7VT609xJX3gaSAo6vZajoGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGU+J9/tOdp+6H6lW0vLKBX5uT47MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNzFmMjMzNGQtN2RkNi0z NjljLThiNzQtNmI4ZjAxY2UxOTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0LUCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM2sixc/OFAvGhFOzqiuE6W0t80YQhrmt95OPh4Ypm2jcSIECTUTRP5M X4Rw0rk3DhUTdi0WL43Bt1FVjHRJVkkt5CkgYCpop4FVqCkUkcG4zqMjvBgwsDgZ BepHDyHXDQKJB3nlMC0fe71rd/yfHt2zKkBSDMhzJfmXd/A+i7GLxvGZEeIgD0MW eEmhprpryNDze4UmSclIsdnn25+QMjuEowSWhk6fbo+k84wTY6Eaoh/a1Edz7t+z DglK5Q77JOGbhrV3EcUQhMqXckD/9XBSTzlvHZ9u+tMapG01KOjovTeHkFhvO1Bq Hu1qrnioo3JnnuVIQoEkSo5u46HMQDg= -----END CERTIFICATE-----Generated at Sun Apr 27 00:16:27 2025 by rpki-client