$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c0b91861-fa15-3af0-bde8-8c3dc29dd4d6.roa File: c0b91861-fa15-3af0-bde8-8c3dc29dd4d6.roa (raw, json) Hash identifier: uCiqNZNA2RmKWsimOCZ3/Uyxil3yzZdUJh9ifcio1i8= Subject key identifier: 0D:24:7D:A7:98:74:F2:6D:55:83:E6:6C:9E:AF:EE:21:96:97:DA:BF Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499829CAD9152659218B90B780 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c0b91861-fa15-3af0-bde8-8c3dc29dd4d6.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 173.181.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:ca:d9:15:26:59:21:8b:90:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=b13081a6-f4a6-477c-b5c0-5dc793b39cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:86:d3:99:ea:bb:b2:55:2e:4f:a3:5c:a5:09: cf:fa:0d:45:5d:d5:6e:22:4c:c7:d4:89:a2:13:db: c7:a1:53:41:a5:a8:ad:5a:b3:e2:52:30:6b:d5:ac: 8f:88:67:a5:b2:ae:76:28:b2:f3:21:c1:24:85:2a: f3:f2:f0:11:c4:84:30:46:37:53:c1:ba:70:9d:4d: 75:2a:3e:0c:ef:4f:a2:60:f9:15:ad:6a:df:2c:50: 23:a4:29:fd:2a:df:83:0f:44:3a:37:78:48:70:cc: 2c:07:22:cc:ff:00:4a:75:5a:fd:b5:b3:72:73:f6: fd:6d:1c:56:06:8c:4e:4b:f4:9e:67:52:73:01:f7: ea:6d:94:bf:89:6b:6f:09:9a:0d:ac:d0:74:33:b4: 61:da:89:1f:49:f4:bf:d6:c3:ed:c3:1a:6c:de:d2: 3b:dc:4e:e1:50:1a:a4:e1:85:d5:5e:6f:9d:2e:9c: 05:cd:64:f6:9c:92:44:61:cb:4e:ea:d7:9d:49:e5: 09:da:ad:d2:ef:a7:d7:11:11:1d:d7:ee:c8:e4:0f: 15:42:b9:95:15:70:91:5f:cf:73:9d:7e:25:28:52: 0b:d0:37:04:53:9c:b5:32:85:90:b2:93:25:83:ce: 77:7a:19:4d:92:78:96:59:63:55:24:7c:48:c3:19: d1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:24:7D:A7:98:74:F2:6D:55:83:E6:6C:9E:AF:EE:21:96:97:DA:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c0b91861-fa15-3af0-bde8-8c3dc29dd4d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 173.181.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:a7:3a:f1:78:de:06:4c:c7:c6:e7:62:d6:e0:da:9f:bd:5c: e0:02:54:ed:b8:ef:70:3c:96:48:f6:53:3e:4d:9c:d3:b8:5b: 1b:94:e4:db:b7:58:74:fc:2c:51:4a:3e:49:a0:3d:b8:03:5c: 7e:67:3b:00:66:60:33:0a:d0:90:e8:5f:2d:49:47:39:1c:5c: 07:c7:39:de:d5:f1:27:4b:69:7a:f3:e2:5e:93:97:2b:ee:5a: 55:00:e3:46:6d:95:a3:ce:8b:67:38:32:6b:2c:e6:9a:1e:ed: 0c:21:01:37:0e:01:89:9b:83:7a:f5:e0:6c:53:5a:b2:af:a3: 1e:9f:9f:41:89:b2:75:1c:c3:16:e4:5c:0b:d4:12:55:17:45: 8c:2a:d9:b4:f8:c1:f4:b1:b6:eb:65:25:2e:d4:37:f6:f6:84: ee:21:21:2e:97:92:f8:10:fc:aa:fd:52:9c:93:63:3b:b5:a7: d7:61:d2:0b:88:4e:7a:fe:ed:69:a5:2a:33:6d:6a:74:c2:2a: 43:13:a7:29:f4:84:b9:b3:74:2c:07:8d:3e:a4:00:e2:4a:04: 04:7d:a1:75:d2:9f:5c:39:df:50:a4:58:33:79:c5:36:ce:4a: 37:18:27:7f:2d:90:18:5b:7c:4c:82:6c:3b:3a:c0:1d:06:16: 9f:0c:24:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKcrZFSZZIYuQt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk YjEzMDgxYTYtZjRhNi00NzdjLWI1YzAtNWRjNzkzYjM5Y2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIbTmeq7slUuT6NcpQnP+g1FXdVuIkzH1Imi E9vHoVNBpaitWrPiUjBr1ayPiGelsq52KLLzIcEkhSrz8vARxIQwRjdTwbpwnU11 Kj4M70+iYPkVrWrfLFAjpCn9Kt+DD0Q6N3hIcMwsByLM/wBKdVr9tbNyc/b9bRxW BoxOS/SeZ1JzAffqbZS/iWtvCZoNrNB0M7Rh2okfSfS/1sPtwxps3tI73E7hUBqk 4YXVXm+dLpwFzWT2nJJEYctO6tedSeUJ2q3S76fXEREd1+7I5A8VQrmVFXCRX89z nX4lKFIL0DcEU5y1MoWQspMlg853ehlNkniWWWNVJHxIwxnRaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0kfaeYdPJtVYPmbJ6v7iGWl9q/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzBiOTE4NjEtZmExNS0z YWYwLWJkZTgtOGMzZGMyOWRkNGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6nOvF43gZMx8bnYtbg2p+9XOACVO2473A8lkj2Uz5NnNO4WxuU5Nu3 WHT8LFFKPkmgPbgDXH5nOwBmYDMK0JDoXy1JRzkcXAfHOd7V8SdLaXrz4l6Tlyvu WlUA40ZtlaPOi2c4Mmss5poe7QwhATcOAYmbg3r14GxTWrKvox6fn0GJsnUcwxbk XAvUElUXRYwq2bT4wfSxtutlJS7UN/b2hO4hIS6XkvgQ/Kr9UpyTYzu1p9dh0guI Tnr+7WmlKjNtanTCKkMTpyn0hLmzdCwHjT6kAOJKBAR9oXXSn1w531CkWDN5xTbO SjcYJ38tkBhbfEyCbDs6wB0GFp8MJIs= -----END CERTIFICATE-----Generated at Sat Apr 26 22:34:26 2025 by rpki-client