$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c2732a11-37c3-37c2-9591-4654376ee597.roa File: c2732a11-37c3-37c2-9591-4654376ee597.roa (raw, json) Hash identifier: 3SHq/PRVQl/7oYu22zZguP5oCeForQW5/KZCrdpZBtw= Subject key identifier: AB:3F:87:BB:46:CF:8D:37:87:C4:82:81:A1:A8:E4:EB:E3:40:74:A2 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848D7A64F284753DB4B5B836580 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c2732a11-37c3-37c2-9591-4654376ee597.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 40676 IP address blocks: 108.181.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:4f:28:47:53:db:4b:5b:83:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=2ae3c6aa-9e2a-42d7-8408-9a5da9fe5f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:10:cc:5f:dd:f4:8a:01:76:78:4e:98:06:01: 54:76:0f:ba:5f:4c:e5:52:2c:96:15:be:3a:e4:14: 56:88:e7:94:b4:b0:65:f4:b8:58:65:79:79:81:34: 58:25:da:bc:0b:4c:63:91:d0:84:65:d1:36:69:73: 7f:01:21:c2:e6:40:fd:61:6e:ae:d8:06:ba:bc:49: 34:55:a5:d3:cb:de:63:a2:b7:6a:aa:1e:ce:29:dd: 07:d3:43:1c:3d:44:b0:fc:e7:04:9b:75:64:cc:cc: 6a:9b:46:b0:fa:f4:a7:be:c6:eb:78:38:5e:9b:de: a2:33:a6:fc:2c:1b:b9:a9:12:3a:e1:b1:15:7d:aa: 12:a8:8a:f6:4d:c9:3c:b7:8c:d7:84:a2:4b:f5:78: ba:fb:cf:3a:26:f0:7a:5f:bb:94:c2:89:ae:86:41: 9c:ad:43:72:44:90:c5:a5:5f:40:a4:b9:95:08:4c: 19:88:de:79:7e:be:d5:f0:24:5d:ee:40:41:2f:da: a1:27:15:b1:6b:ce:90:4f:65:fc:82:09:08:c2:2f: 21:3e:8a:0c:31:84:5b:f3:69:b0:38:c5:71:e2:78: 1d:8e:47:4b:5e:65:7c:ee:f4:7a:69:86:15:f3:0a: fe:06:f1:1c:8f:ea:4c:76:bb:1b:b6:cf:7e:ab:e8: 23:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:3F:87:BB:46:CF:8D:37:87:C4:82:81:A1:A8:E4:EB:E3:40:74:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c2732a11-37c3-37c2-9591-4654376ee597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 108.181.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:11:db:c0:32:1b:05:77:c9:a7:9f:70:2c:1c:e8:f0:ac:57: 2e:ea:47:5c:d1:2e:ac:ab:c0:97:f8:8a:6a:11:af:35:ef:d0: b3:89:f0:1f:44:7a:05:6d:d9:9b:75:bf:f8:10:bb:bb:76:0a: be:17:e0:c7:50:a7:c3:70:07:06:5b:ba:86:d5:f4:e5:de:79: 03:7a:b9:a4:96:18:e1:25:61:02:c1:99:00:a1:0d:b6:ea:4d: 4d:f2:8d:ab:e4:e2:fe:ca:d5:51:39:a1:02:0a:23:4a:c8:c4: 9f:75:54:c2:ac:66:23:cd:f1:0c:99:d6:4d:9c:f7:60:1e:22: b9:d2:91:42:c9:24:da:f9:79:a9:f3:10:8f:98:bc:27:cd:d8: 70:06:02:7e:ac:5d:14:bf:f7:da:86:72:99:21:92:9b:9b:e7: b2:9e:ed:ee:e0:be:68:6a:54:27:f5:d2:ee:d8:1d:e0:a4:17: 73:4c:3c:22:61:ea:5b:31:72:9a:89:30:e4:e7:03:d8:96:e5: 23:a5:5c:bd:7e:a7:de:b9:ad:41:68:79:82:5a:e2:3b:26:ff: 96:48:f3:7f:6d:65:8a:cd:6d:22:0e:e9:bb:28:f6:22:ef:2b: ae:00:b4:d6:7a:62:83:ad:7c:c3:1c:e9:f8:05:be:d3:53:fe: 00:22:a0:b5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjXpk8oR1PbS1uDZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk MmFlM2M2YWEtOWUyYS00MmQ3LTg0MDgtOWE1ZGE5ZmU1ZjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBDMX930igF2eE6YBgFUdg+6X0zlUiyWFb46 5BRWiOeUtLBl9LhYZXl5gTRYJdq8C0xjkdCEZdE2aXN/ASHC5kD9YW6u2Aa6vEk0 VaXTy95jordqqh7OKd0H00McPUSw/OcEm3VkzMxqm0aw+vSnvsbreDhem96iM6b8 LBu5qRI64bEVfaoSqIr2Tck8t4zXhKJL9Xi6+886JvB6X7uUwomuhkGcrUNyRJDF pV9ApLmVCEwZiN55fr7V8CRd7kBBL9qhJxWxa86QT2X8ggkIwi8hPooMMYRb82mw OMVx4ngdjkdLXmV87vR6aYYV8wr+BvEcj+pMdrsbts9+q+gjyQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKs/h7tGz403h8SCgaGo5OvjQHSiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzI3MzJhMTEtMzdjMy0z N2MyLTk1OTEtNDY1NDM3NmVlNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAbLUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEASBHbwDIbBXfJp59wLBzo8KxXLupHXNEurKvAl/iKahGvNe/Qs4nwH0R6 BW3Zm3W/+BC7u3YKvhfgx1Cnw3AHBlu6htX05d55A3q5pJYY4SVhAsGZAKENtupN TfKNq+Ti/srVUTmhAgojSsjEn3VUwqxmI83xDJnWTZz3YB4iudKRQskk2vl5qfMQ j5i8J83YcAYCfqxdFL/32oZymSGSm5vnsp7t7uC+aGpUJ/XS7tgd4KQXc0w8ImHq WzFymokw5OcD2JblI6VcvX6n3rmtQWh5glriOyb/lkjzf21lis1tIg7puyj2Iu8r rgC01npig618wxzp+AW+01P+ACKgtQ== -----END CERTIFICATE-----Generated at Sat Apr 26 16:50:08 2025 by rpki-client