$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/956cee3a-4407-3b22-a099-0422e4180296.roa File: 956cee3a-4407-3b22-a099-0422e4180296.roa (raw, json) Hash identifier: JQz0E3kYADgnq/2pzdu4Iq92a2najjqQCqihPtfDhfU= Subject key identifier: 1C:EE:4C:31:7F:19:02:0E:3F:BE:03:D0:61:A8:19:6C:5E:92:33:25 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584988CF25F21BFE03BBC6204580 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/956cee3a-4407-3b22-a099-0422e4180296.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 25668 IP address blocks: 207.194.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:25:f2:1b:fe:03:bb:c6:20:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=0d1af8ca-2be8-4dac-8199-4838f08cea76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d4:dc:67:4e:41:2d:b5:8f:4d:b9:51:49:99: 73:22:77:78:2c:33:52:c6:cf:40:c5:aa:fa:a4:e2: dc:94:b2:4d:da:0b:ae:58:cd:29:6a:96:3c:0d:f2: dd:bc:32:b0:56:ab:99:29:fc:b0:fe:12:19:56:2c: 38:1f:55:6a:aa:4a:2b:4b:79:12:39:1b:d7:3a:c1: 17:d1:72:41:79:35:c5:fa:bc:46:32:48:7b:db:a8: 34:7f:18:3f:fc:46:11:c6:4f:3f:bc:00:5e:47:fd: 0b:6d:92:be:24:90:14:fb:c9:74:df:26:00:f7:72: f0:e7:be:71:9c:30:7f:c5:bc:fa:39:19:84:b9:57: b5:c7:0e:b3:13:5f:f3:66:f0:24:ce:30:c0:bf:90: 8f:a9:09:c5:cd:4d:5c:81:75:b9:3a:bc:60:b1:5a: 11:15:a7:9e:02:0a:8c:0d:4a:1c:c5:17:dd:0c:6e: f0:52:03:94:83:02:89:91:63:c5:03:8e:db:1b:7b: d0:87:28:8d:66:43:cf:dd:12:96:43:4d:af:c2:88: 1f:b6:8e:be:da:66:56:d9:b0:c8:6d:00:d2:e7:06: 5d:3c:18:eb:c6:35:35:14:53:87:ce:be:80:86:ac: ce:39:ea:47:b3:36:80:9d:67:d0:4d:8a:5e:8c:16: 55:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EE:4C:31:7F:19:02:0E:3F:BE:03:D0:61:A8:19:6C:5E:92:33:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/956cee3a-4407-3b22-a099-0422e4180296.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.194.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:f1:4a:37:43:83:72:0b:b3:fb:69:00:26:4d:ef:e3:a5:86: f8:e6:87:d6:a6:44:bb:09:6e:46:a7:37:d8:98:d1:4a:28:bf: 7a:ba:60:88:ab:36:cf:d3:d9:3a:cd:41:3c:18:52:3f:d8:5b: 66:f5:7f:de:13:28:1e:9f:19:24:20:6f:b1:98:92:25:29:d7: c1:4f:9b:d7:75:2f:e1:c8:71:b5:87:99:96:14:dd:ab:e6:89: cb:c1:e6:c4:aa:ef:ae:d9:aa:7d:2c:78:54:f4:5a:42:00:96: ee:5e:3f:27:b2:72:b2:f0:f8:17:49:6f:96:4b:e0:bb:b4:d6: 46:65:ea:1c:8c:da:61:2e:59:05:26:51:d7:f4:3c:5f:a1:85: 61:17:55:ba:cc:5d:c0:aa:36:5b:0c:7f:e9:4d:e9:fa:d1:c8: d8:d6:78:55:66:70:e1:4c:0e:3e:e1:cf:1e:37:88:14:d7:c8: 33:c2:04:09:54:36:62:3d:9c:3c:bf:f4:08:fc:3d:31:45:dd: 06:4b:2e:3c:0f:b8:8f:9a:89:4f:4a:3b:d1:73:f6:21:5b:6d: a7:47:a2:7b:c1:9d:67:8c:79:d6:cf:6f:a0:fa:11:82:6d:6f: d7:b6:b3:b1:ad:1a:1a:e6:aa:d5:ba:38:71:3e:6b:55:05:ef: 6c:14:50:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzyXyG/4Du8YgRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MGQxYWY4Y2EtMmJlOC00ZGFjLTgxOTktNDgzOGYwOGNlYTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tTcZ05BLbWPTblRSZlzInd4LDNSxs9Axar6 pOLclLJN2guuWM0papY8DfLdvDKwVquZKfyw/hIZViw4H1VqqkorS3kSORvXOsEX 0XJBeTXF+rxGMkh726g0fxg//EYRxk8/vABeR/0LbZK+JJAU+8l03yYA93Lw575x nDB/xbz6ORmEuVe1xw6zE1/zZvAkzjDAv5CPqQnFzU1cgXW5OrxgsVoRFaeeAgqM DUocxRfdDG7wUgOUgwKJkWPFA47bG3vQhyiNZkPP3RKWQ02vwogfto6+2mZW2bDI bQDS5wZdPBjrxjU1FFOHzr6AhqzOOepHszaAnWfQTYpejBZVaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzuTDF/GQIOP74D0GGoGWxekjMlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOTU2Y2VlM2EtNDQwNy0z YjIyLWEwOTktMDQyMmU0MTgwMjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8KAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTxSjdDg3ILs/tpACZN7+Olhvjmh9amRLsJbkanN9iY0Uoov3q6YIir Ns/T2TrNQTwYUj/YW2b1f94TKB6fGSQgb7GYkiUp18FPm9d1L+HIcbWHmZYU3avm icvB5sSq767Zqn0seFT0WkIAlu5ePyeycrLw+BdJb5ZL4Lu01kZl6hyM2mEuWQUm Udf0PF+hhWEXVbrMXcCqNlsMf+lN6frRyNjWeFVmcOFMDj7hzx43iBTXyDPCBAlU NmI9nDy/9Aj8PTFF3QZLLjwPuI+aiU9KO9Fz9iFbbadHonvBnWeMedbPb6D6EYJt b9e2s7GtGhrmqtW6OHE+a1UF72wUUKQ= -----END CERTIFICATE-----Generated at Tue Apr 29 12:12:18 2025 by rpki-client