$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b3df106d-b438-3e20-8914-1fe7a07853fe.roa File: b3df106d-b438-3e20-8914-1fe7a07853fe.roa (raw, json) Hash identifier: rtWodwL1JsphaXcaXbDkHjDPQRuTO431DjyQ2MMyhwA= Subject key identifier: 2E:30:13:3B:B9:39:96:FF:44:C0:5A:D1:98:15:B7:8C:E9:EA:07:FF Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499AF47690512799E0778DF980 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b3df106d-b438-3e20-8914-1fe7a07853fe.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 142.59.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:76:90:51:27:99:e0:77:8d:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=9e7f11db-528b-4a4c-b4ea-678644b7ed90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:db:24:b1:b7:0f:cf:43:c1:45:c3:d7:9f:32: 71:ac:49:4c:a4:51:01:c5:6f:58:a7:eb:19:dc:95: 99:76:cd:d6:ac:26:5c:b0:8b:e5:d0:a3:e4:e9:ec: c5:fc:9c:ea:09:41:61:84:aa:55:15:28:81:2c:1b: 2e:5a:70:6e:8a:49:21:b4:82:3b:9c:8a:76:89:d0: ec:2e:37:c4:8d:e3:02:17:25:e6:e5:3f:5a:4a:10: 09:16:bf:a6:5f:ae:6e:a3:17:43:8d:be:5b:d7:76: 09:63:ea:09:84:1d:51:cf:e2:af:47:3d:c7:f8:23: c8:46:1b:b3:0e:82:fa:66:76:61:96:5c:80:1a:eb: 98:2d:6e:0b:c9:b7:a6:14:00:c3:ec:f4:44:7d:ab: 28:12:7e:2a:6e:11:e1:f6:db:f6:d9:aa:7b:03:4d: 96:3c:e8:2b:ca:ec:17:5f:77:50:38:c1:5c:6a:81: 86:ca:ca:fe:84:f1:d7:9d:6e:e0:b3:72:e3:00:8e: 34:7d:31:ae:a8:36:68:5f:77:70:1d:27:68:28:d1: 8c:bd:cc:04:bf:eb:b3:ee:4f:b8:1c:36:fe:7c:a6: 0b:d5:34:40:0b:1a:76:43:4c:7d:ad:ce:bd:92:7b: 58:d1:f6:7e:31:1e:2d:3b:10:a0:a0:0c:dc:4c:4f: be:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:30:13:3B:B9:39:96:FF:44:C0:5A:D1:98:15:B7:8C:E9:EA:07:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b3df106d-b438-3e20-8914-1fe7a07853fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 142.59.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:39:8d:04:43:f0:0c:d5:e1:9a:89:60:14:62:03:b4:42:23: 60:68:4d:22:1b:fb:5e:ba:2f:d4:e8:3a:cb:21:3a:df:8c:99: 4b:af:4d:2b:15:32:08:86:45:70:4a:57:db:1e:fc:2f:2b:be: 29:47:aa:15:48:22:a5:9a:b6:b5:2b:ba:64:e0:2c:91:9d:80: ad:a6:ad:02:fd:ee:d3:64:af:79:a4:7b:43:fd:4b:0e:b0:a1: 5f:5d:38:49:9b:30:11:56:d6:88:41:15:35:83:34:3a:fe:3c: f9:e6:96:9b:6f:52:13:ee:c1:ad:1c:f4:4e:97:c7:f2:dd:de: a4:91:e6:fa:bd:7a:ba:00:0d:fa:52:f1:23:fd:25:78:c2:ca: e0:74:44:63:82:06:22:b3:a3:3b:26:c4:59:96:45:ab:99:e0: 51:20:8e:0d:83:15:19:a0:70:d1:3a:01:92:fb:b3:f8:95:cc: e7:b2:46:bd:72:f6:6f:b9:96:43:18:b1:72:83:10:46:3e:b0: 20:2c:c3:1e:1c:71:21:57:9d:27:73:01:09:11:88:f2:01:9c: f7:5e:a7:a7:ba:8c:2d:e1:d4:c1:6b:97:ce:96:68:46:fe:e8: 2a:e3:26:e8:b0:75:93:68:f0:39:ee:7f:ba:6c:b5:16:a0:4b: 0d:95:a7:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9HaQUSeZ4HeN+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk OWU3ZjExZGItNTI4Yi00YTRjLWI0ZWEtNjc4NjQ0YjdlZDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69sksbcPz0PBRcPXnzJxrElMpFEBxW9Yp+sZ 3JWZds3WrCZcsIvl0KPk6ezF/JzqCUFhhKpVFSiBLBsuWnBuikkhtII7nIp2idDs LjfEjeMCFyXm5T9aShAJFr+mX65uoxdDjb5b13YJY+oJhB1Rz+KvRz3H+CPIRhuz DoL6ZnZhllyAGuuYLW4LybemFADD7PREfasoEn4qbhHh9tv22ap7A02WPOgryuwX X3dQOMFcaoGGysr+hPHXnW7gs3LjAI40fTGuqDZoX3dwHSdoKNGMvcwEv+uz7k+4 HDb+fKYL1TRACxp2Q0x9rc69kntY0fZ+MR4tOxCgoAzcTE++HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4wEzu5OZb/RMBa0ZgVt4zp6gf/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYjNkZjEwNmQtYjQzOC0z ZTIwLTg5MTQtMWZlN2EwNzg1M2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHjjsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ45jQRD8AzV4ZqJYBRiA7RCI2BoTSIb+166L9ToOsshOt+MmUuvTSsV MgiGRXBKV9se/C8rvilHqhVIIqWatrUrumTgLJGdgK2mrQL97tNkr3mke0P9Sw6w oV9dOEmbMBFW1ohBFTWDNDr+PPnmlptvUhPuwa0c9E6Xx/Ld3qSR5vq9eroADfpS 8SP9JXjCyuB0RGOCBiKzozsmxFmWRauZ4FEgjg2DFRmgcNE6AZL7s/iVzOeyRr1y 9m+5lkMYsXKDEEY+sCAswx4ccSFXnSdzAQkRiPIBnPdep6e6jC3h1MFrl86WaEb+ 6CrjJuiwdZNo8Dnuf7pstRagSw2Vp1M= -----END CERTIFICATE-----Generated at Sun Apr 27 00:25:26 2025 by rpki-client