$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/861286e7-5355-3c1b-abd2-492d05effe19.roa File: 861286e7-5355-3c1b-abd2-492d05effe19.roa (raw, json) Hash identifier: qGks4CJvMasqPtEX0AzMV1Ny70QL3OaNLXsOwXfEmHk= Subject key identifier: 31:88:AA:FD:94:34:39:DF:1F:50:2B:6D:7F:BF:E0:73:2A:18:07:2D Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499AF4788BBE9158BC739EED80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/861286e7-5355-3c1b-abd2-492d05effe19.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 198.166.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:78:8b:be:91:58:bc:73:9e:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=9ddb0f53-173b-46ff-843d-f76e9052be21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f1:ab:67:f6:52:97:df:ed:d4:53:21:19:fe: 09:da:05:1e:77:5a:64:0d:d1:61:e4:56:fc:8f:0a: 85:75:95:51:54:6f:31:b2:cf:c1:f0:65:10:49:5a: 0d:1e:6f:d7:5e:e6:01:65:dd:1f:36:51:20:85:20: 63:bc:b5:36:7e:92:84:69:57:51:d9:08:63:73:86: 50:34:4c:33:77:65:61:7b:21:f0:25:17:7b:20:d5: 91:14:ad:ca:dd:1b:fd:78:7e:b4:bd:2f:9e:05:98: f3:7e:92:43:f3:57:c8:75:13:b6:ff:86:5f:c1:d8: be:8a:ad:ee:95:e0:79:d8:97:bc:63:90:40:7f:64: b6:b0:8f:21:67:36:8d:4f:e2:17:fb:53:3a:7b:9a: 55:46:8d:ef:30:47:90:27:50:ca:03:0f:98:73:ff: ad:17:e7:3a:87:e1:2b:9a:1b:7e:1b:af:ef:5d:40: 75:43:a4:eb:c2:15:f2:2b:1a:4e:b2:08:45:9c:4d: 03:42:95:dd:5f:20:c8:47:cf:41:8a:1b:e3:7c:6c: 39:d4:a1:7c:41:c5:97:b6:e3:a2:17:99:f0:4e:0e: 75:a7:00:70:4e:ee:76:e4:ee:09:3b:33:4e:bf:7d: 90:3d:23:3d:30:0f:3f:68:09:49:3c:c5:34:57:26: 72:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:88:AA:FD:94:34:39:DF:1F:50:2B:6D:7F:BF:E0:73:2A:18:07:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/861286e7-5355-3c1b-abd2-492d05effe19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 198.166.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ca:dd:9e:9d:19:40:4b:f8:e5:56:61:59:e7:ce:fb:f0:f2: 83:48:59:a2:a5:95:bb:44:93:1b:35:12:d6:21:25:3e:eb:0f: 6a:ce:82:2d:69:40:3b:79:c7:21:5f:28:fc:e4:a5:5f:56:f2: 4b:1f:74:45:99:3c:31:92:fb:43:15:15:ef:7c:ce:16:0e:c5: e5:8b:10:0d:02:34:ac:57:e8:22:45:ac:55:db:c4:c7:99:1e: 07:3a:57:55:86:e2:63:12:f8:7f:18:e5:28:ab:64:e6:a6:46: 3d:63:26:f0:ae:36:64:a0:15:f1:07:ee:c7:7b:ba:f2:89:8a: b9:61:78:a8:54:25:d3:57:bf:f2:29:a8:fd:81:03:19:20:39: da:5d:bf:dc:2c:bd:3d:37:d8:af:0d:8c:eb:c7:78:c6:d7:72: d3:db:8b:01:c4:e8:18:bb:87:30:ba:27:c2:f9:a5:0d:e2:61: 07:38:99:02:99:fc:ae:30:38:d8:2c:b3:02:0a:78:f0:c0:a7: b4:2a:f6:b5:a4:4b:0e:f6:b6:da:67:f9:8a:ac:d0:57:9a:aa: 99:51:a8:d5:ab:c7:04:de:10:ab:d3:38:7d:68:05:a0:fe:22: b1:b0:aa:3f:3b:0e:2f:5e:5a:71:69:8e:45:79:81:2a:b3:b5: 30:b9:db:34 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEma9HiLvpFYvHOe7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk OWRkYjBmNTMtMTczYi00NmZmLTg0M2QtZjc2ZTkwNTJiZTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvGrZ/ZSl9/t1FMhGf4J2gUed1pkDdFh5Fb8 jwqFdZVRVG8xss/B8GUQSVoNHm/XXuYBZd0fNlEghSBjvLU2fpKEaVdR2Qhjc4ZQ NEwzd2VheyHwJRd7INWRFK3K3Rv9eH60vS+eBZjzfpJD81fIdRO2/4Zfwdi+iq3u leB52Je8Y5BAf2S2sI8hZzaNT+IX+1M6e5pVRo3vMEeQJ1DKAw+Yc/+tF+c6h+Er mht+G6/vXUB1Q6TrwhXyKxpOsghFnE0DQpXdXyDIR89BihvjfGw51KF8QcWXtuOi F5nwTg51pwBwTu525O4JOzNOv32QPSM9MA8/aAlJPMU0VyZypQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDGIqv2UNDnfH1ArbX+/4HMqGActMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODYxMjg2ZTctNTM1NS0z YzFiLWFiZDItNDkyZDA1ZWZmZTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxqYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAgcrdnp0ZQEv45VZhWefO+/Dyg0hZoqWVu0STGzUS1iElPusPas6CLWlA O3nHIV8o/OSlX1bySx90RZk8MZL7QxUV73zOFg7F5YsQDQI0rFfoIkWsVdvEx5ke BzpXVYbiYxL4fxjlKKtk5qZGPWMm8K42ZKAV8Qfux3u68omKuWF4qFQl01e/8imo /YEDGSA52l2/3Cy9PTfYrw2M68d4xtdy09uLAcToGLuHMLonwvmlDeJhBziZApn8 rjA42CyzAgp48MCntCr2taRLDva22mf5iqzQV5qqmVGo1avHBN4Qq9M4fWgFoP4i sbCqPzsOL15acWmORXmBKrO1MLnbNA== -----END CERTIFICATE-----Generated at Sat Apr 26 22:41:46 2025 by rpki-client