$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/889b07c6-b4bd-3cec-be94-4ffd7873c163.roa File: 889b07c6-b4bd-3cec-be94-4ffd7873c163.roa (raw, json) Hash identifier: C3eS1MJnaXWIAhuiYyEBPU2bs8cx4iW+MqQZ7kvJyC4= Subject key identifier: 38:37:45:55:F6:EF:F5:1A:E9:31:E3:36:DE:6C:78:A7:9F:A3:24:D0 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858498CFF09E71A6D07799365B5E0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/889b07c6-b4bd-3cec-be94-4ffd7873c163.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 21723 IP address blocks: 208.181.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:09:e7:1a:6d:07:79:93:65:b5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=dfa8960b-1163-46d8-9a76-48e50a97dea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a0:01:b2:0d:54:f1:e5:4d:fa:14:88:fd:a0: 00:5e:ad:49:7d:1a:e8:99:1a:61:b9:6d:72:ed:fe: 68:d6:d4:2b:1f:b4:69:cc:da:3f:df:51:c1:8f:8a: 46:e5:c0:9d:76:51:51:ba:bd:37:3e:e7:a9:e3:1c: 73:ab:d6:a7:fb:29:09:66:45:33:80:54:76:98:cc: b3:8e:f5:48:d2:3f:ef:92:24:5a:13:23:ba:eb:0f: 7a:a2:59:ae:63:83:45:dd:2d:05:24:43:54:57:23: 03:37:65:6c:41:4e:23:46:1b:87:9b:f4:c1:83:a9: f8:6b:d0:2e:d7:27:b9:6e:61:7b:ce:3e:24:ae:bf: 80:65:91:9b:14:35:36:54:93:77:ed:1a:18:f3:5f: 1b:51:88:ef:f0:e5:90:32:04:33:fb:06:2c:6f:46: a9:b7:24:77:d5:a0:60:bf:86:8c:d7:39:1e:d8:82: f2:10:6e:9d:95:a2:47:a5:ea:ab:09:81:a5:a7:9c: 3d:48:f5:3b:6a:9b:d6:67:da:96:97:f2:0b:4a:36: cc:d7:ca:62:ac:d2:db:6e:63:5e:05:a4:c7:ab:d7: e6:b3:b8:2d:61:f5:84:ea:cc:78:55:c7:4e:ca:4e: 1e:d6:ec:35:42:31:e8:db:6a:de:3a:9d:40:ca:e6: e5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:37:45:55:F6:EF:F5:1A:E9:31:E3:36:DE:6C:78:A7:9F:A3:24:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/889b07c6-b4bd-3cec-be94-4ffd7873c163.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:ce:0d:60:66:0a:af:84:44:3e:f2:2a:9d:05:88:67:5a:2f: b7:11:90:39:79:d6:ae:de:0f:fc:78:3b:71:a5:d8:e1:34:be: c9:e9:9d:48:0c:73:aa:9a:81:35:b3:d1:94:03:45:4d:26:18: b4:58:68:5b:30:c9:ce:6f:e0:d6:9d:17:c5:dc:bc:da:b6:67: 42:60:f2:fd:08:e3:05:f5:fb:80:4e:b3:29:67:aa:e6:c8:b8: 42:2b:6f:f9:2d:95:d1:13:84:49:34:c6:e1:24:df:92:8e:7b: 2f:a8:a5:ec:6f:f3:af:90:84:5f:6b:3f:ee:7c:83:ef:c3:eb: df:d4:30:1e:16:4e:82:be:5b:3b:54:60:82:3c:fe:aa:bc:61: 5e:f1:b3:8d:ee:7f:d3:58:d9:7c:e9:ab:95:f6:90:50:d5:9a: 9d:c7:f0:6d:9f:f1:ed:50:9c:1d:4c:c2:61:75:c2:87:df:8e: cf:4f:28:37:32:08:c8:84:25:75:d0:d1:46:d3:03:82:02:2e: 10:83:ea:1b:49:d1:d5:33:16:d8:8a:1b:fc:79:ad:3e:fd:bb: 6f:24:b3:6e:af:9a:5f:60:01:dd:ff:eb:88:50:63:31:1d:2d: 6b:23:86:49:6e:01:b0:75:24:2b:df:cd:0d:9b:0d:3c:b4:2f: c6:aa:ab:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/wnnGm0HeZNlteAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk ZGZhODk2MGItMTE2My00NmQ4LTlhNzYtNDhlNTBhOTdkZWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqABsg1U8eVN+hSI/aAAXq1JfRromRphuW1y 7f5o1tQrH7RpzNo/31HBj4pG5cCddlFRur03Puep4xxzq9an+ykJZkUzgFR2mMyz jvVI0j/vkiRaEyO66w96olmuY4NF3S0FJENUVyMDN2VsQU4jRhuHm/TBg6n4a9Au 1ye5bmF7zj4krr+AZZGbFDU2VJN37RoY818bUYjv8OWQMgQz+wYsb0aptyR31aBg v4aM1zke2ILyEG6dlaJHpeqrCYGlp5w9SPU7apvWZ9qWl/ILSjbM18pirNLbbmNe BaTHq9fms7gtYfWE6sx4VcdOyk4e1uw1QjHo22reOp1AyublsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDg3RVX27/Ua6THjNt5seKefoyTQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODg5YjA3YzYtYjRiZC0z Y2VjLWJlOTQtNGZmZDc4NzNjMTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0LWUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHODWBmCq+ERD7yKp0FiGdaL7cRkDl51q7eD/x4O3Gl2OE0vsnpnUgM c6qagTWz0ZQDRU0mGLRYaFswyc5v4NadF8XcvNq2Z0Jg8v0I4wX1+4BOsylnqubI uEIrb/ktldEThEk0xuEk35KOey+opexv86+QhF9rP+58g+/D69/UMB4WToK+WztU YII8/qq8YV7xs43uf9NY2Xzpq5X2kFDVmp3H8G2f8e1QnB1MwmF1woffjs9PKDcy CMiEJXXQ0UbTA4ICLhCD6htJ0dUzFtiKG/x5rT79u28ks26vml9gAd3/64hQYzEd LWsjhkluAbB1JCvfzQ2bDTy0L8aqqxs= -----END CERTIFICATE-----Generated at Sat Apr 26 22:40:21 2025 by rpki-client