$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aaf7ef7a-bd6a-3284-91cf-cb3db22005d0.roa File: aaf7ef7a-bd6a-3284-91cf-cb3db22005d0.roa (raw, json) Hash identifier: rOS/Hqask7ZvqeAlwKafPLmBNFRoc1B3sxgSiRql3Xs= Subject key identifier: AD:D9:80:18:E4:56:2A:6A:60:16:D8:04:41:FC:F9:F9:E4:5E:10:C5 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849955F1C504673DBFD567D02C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aaf7ef7a-bd6a-3284-91cf-cb3db22005d0.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 207.102.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:1c:50:46:73:db:fd:56:7d:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=c433cafd-a392-45c4-8aa7-7975f1303894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:65:3d:2f:7d:0a:db:da:f8:4d:99:be:e8:0e: 8e:b8:51:a4:bb:23:21:4a:c7:b5:01:40:be:05:c0: d4:63:ca:3b:a6:55:ce:3e:44:67:f9:16:45:a7:38: 95:46:5a:f5:2c:83:2b:3f:ea:fe:57:28:e3:c5:0d: d8:93:f4:35:54:a7:e5:40:5d:79:ad:39:81:68:0a: 74:c0:20:44:95:bd:cd:a3:14:0c:f7:62:8c:59:6c: f8:be:eb:f1:62:c9:ca:af:2d:21:06:e3:7f:21:44: 4a:a9:9e:d6:b2:81:0f:a9:a6:34:03:01:27:ce:c6: b6:83:e5:00:1a:e4:5e:c3:f7:09:85:6d:93:4a:4f: 86:55:b3:d9:d2:3e:05:3d:e6:b7:c3:41:36:e7:57: ac:94:3d:ae:8e:1d:56:70:b5:cb:4e:5f:ac:16:90: 47:bb:1d:1c:e3:35:28:4a:c0:59:f8:67:fc:f0:e4: b2:d7:b2:6a:05:f0:e6:3b:09:18:0b:9c:ba:7f:d5: e3:11:9b:0d:f2:68:5d:e5:77:16:16:90:e6:05:87: e8:ad:dd:8b:f3:34:c9:6f:64:14:6e:cc:59:df:15: ca:23:4b:33:28:9c:8b:d9:ee:b2:87:52:2c:a5:a5: eb:48:73:86:28:4e:d1:16:68:3e:b4:a8:bf:80:ef: 3b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D9:80:18:E4:56:2A:6A:60:16:D8:04:41:FC:F9:F9:E4:5E:10:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aaf7ef7a-bd6a-3284-91cf-cb3db22005d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.102.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:82:0f:88:68:79:46:31:1e:c2:03:da:85:fc:6e:8f:3f:9c: 70:9e:7c:85:01:ee:5a:93:bc:e3:9d:2f:86:d1:52:f9:09:4c: 63:7a:ba:58:ad:42:66:45:33:f6:6d:40:bd:32:e9:b8:31:16: 86:30:e8:5a:a2:6e:43:59:2f:b0:7d:2c:f2:3c:ac:06:3e:2e: e2:a5:f3:e9:2d:7a:a6:f5:25:89:f9:a5:5f:6c:f3:1b:aa:55: 17:59:bf:22:4a:cf:55:7f:a7:61:25:18:8e:87:f2:f7:7d:28: 55:5c:ef:02:1e:b1:82:27:f9:f9:7c:12:06:2b:12:8c:f8:92: 1f:54:2a:3b:af:ed:6b:71:10:b3:4e:e3:8f:c4:e9:f6:2e:03: 5e:2c:0c:1b:3e:a8:09:70:d3:53:17:4c:b1:84:94:03:8c:43: e5:56:2b:d1:1e:b1:4b:f2:71:db:86:2c:b4:77:8f:d0:86:c2: e1:7d:f4:1b:44:84:66:a6:45:83:59:d9:09:54:52:ee:2c:75: bf:77:a1:d1:d2:c0:d6:9d:a0:c9:06:f9:4c:4d:98:55:65:01: af:71:a5:c7:a0:13:43:ca:7d:c0:08:21:ab:8e:19:d3:d4:7e: 3b:f2:cd:45:d7:4e:cb:0f:37:f9:bc:7e:5b:e5:93:d9:9f:e5: f1:8f:7a:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXxxQRnPb/VZ9AsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk YzQzM2NhZmQtYTM5Mi00NWM0LThhYTctNzk3NWYxMzAzODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWU9L30K29r4TZm+6A6OuFGkuyMhSse1AUC+ BcDUY8o7plXOPkRn+RZFpziVRlr1LIMrP+r+VyjjxQ3Yk/Q1VKflQF15rTmBaAp0 wCBElb3NoxQM92KMWWz4vuvxYsnKry0hBuN/IURKqZ7WsoEPqaY0AwEnzsa2g+UA GuRew/cJhW2TSk+GVbPZ0j4FPea3w0E251eslD2ujh1WcLXLTl+sFpBHux0c4zUo SsBZ+Gf88OSy17JqBfDmOwkYC5y6f9XjEZsN8mhd5XcWFpDmBYford2L8zTJb2QU bsxZ3xXKI0szKJyL2e6yh1IspaXrSHOGKE7RFmg+tKi/gO879QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3ZgBjkVipqYBbYBEH8+fnkXhDFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYWFmN2VmN2EtYmQ2YS0z Mjg0LTkxY2YtY2IzZGIyMjAwNWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz2bZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+CD4hoeUYxHsID2oX8bo8/nHCefIUB7lqTvOOdL4bRUvkJTGN6ulit QmZFM/ZtQL0y6bgxFoYw6FqibkNZL7B9LPI8rAY+LuKl8+kteqb1JYn5pV9s8xuq VRdZvyJKz1V/p2ElGI6H8vd9KFVc7wIesYIn+fl8EgYrEoz4kh9UKjuv7WtxELNO 44/E6fYuA14sDBs+qAlw01MXTLGElAOMQ+VWK9EesUvycduGLLR3j9CGwuF99BtE hGamRYNZ2QlUUu4sdb93odHSwNadoMkG+UxNmFVlAa9xpcegE0PKfcAIIauOGdPU fjvyzUXXTssPN/m8flvlk9mf5fGPenY= -----END CERTIFICATE-----Generated at Sat Apr 26 22:43:50 2025 by rpki-client