$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d38fbc1c-f507-303b-b2a2-33a124b143ca.roa File: d38fbc1c-f507-303b-b2a2-33a124b143ca.roa (raw, json) Hash identifier: a+oZgoAgnI0eW1XAoDKnmHbyndIYwzfp0yLZks4AGHM= Subject key identifier: DD:D3:F5:9A:6A:D4:33:52:29:F1:CB:18:CE:C2:2C:63:78:E9:81:06 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499DBF24F43BCC260F92F75880 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d38fbc1c-f507-303b-b2a2-33a124b143ca.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 852 IP address blocks: 216.232.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:24:f4:3b:cc:26:0f:92:f7:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=5b8344f0-6503-4152-bfd0-5e1be5a44f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:75:6b:8e:98:c8:94:c4:53:fc:9a:03:b1:ff: 22:a3:d1:4d:01:e2:bb:21:1e:87:d4:ea:c7:8c:89: 5c:e2:58:67:0e:ec:f7:a9:18:79:13:03:89:b7:07: 8c:cb:54:62:70:06:04:6e:c8:4b:6d:40:eb:19:b1: 87:cf:86:8f:d9:33:bf:3a:ff:dc:44:29:60:9d:fd: e3:7b:71:9b:f8:7d:d3:00:b8:3e:80:79:d7:5d:3e: 61:91:33:cf:09:93:0b:3b:3a:39:c5:b4:73:64:4a: f0:21:36:c8:97:a6:6d:6e:3f:a7:f8:87:1b:f8:5e: 6a:cf:eb:80:76:19:c6:e1:c1:8e:33:f9:a4:84:50: 26:77:2f:39:a9:8f:ed:f6:ca:e7:c0:3e:57:d1:b2: 07:0a:c3:7c:d5:e7:c4:3c:06:db:22:f0:aa:48:5d: 52:17:cb:87:51:f7:5c:ec:2c:4b:f1:ff:32:0e:4f: ba:cd:0d:64:ef:d5:4a:b2:22:fd:69:58:bd:65:9d: de:41:8c:15:95:86:16:e4:bd:a0:a2:59:b0:7b:f2: a0:9c:67:a2:01:0a:19:7d:5e:d8:17:27:94:19:d3: 45:60:de:0d:44:1b:3b:a5:77:92:58:b2:f8:3e:2f: 12:78:0a:a9:8d:f4:b6:86:9a:bc:e5:be:b4:7e:e5: a2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D3:F5:9A:6A:D4:33:52:29:F1:CB:18:CE:C2:2C:63:78:E9:81:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d38fbc1c-f507-303b-b2a2-33a124b143ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 216.232.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:1b:df:af:df:f8:e3:b0:69:6b:6e:9b:56:88:4a:00:a7:83: b1:cd:3d:ed:82:50:dc:02:8d:76:fa:3a:f4:55:c6:e4:c5:4b: ff:00:de:62:99:a3:f9:9c:0b:89:ce:5d:44:e2:11:df:d1:45: b6:46:05:bc:6f:b0:ce:b4:30:14:53:89:41:d0:3a:8d:d2:f8: 1c:de:69:c0:96:e1:a9:65:7b:68:73:da:ff:10:a4:f1:c6:67: af:97:c7:7f:28:fa:f8:94:99:17:c5:fb:22:86:d1:97:c3:8c: 40:37:43:52:60:89:42:04:5d:7f:88:e7:78:80:89:3c:cb:b1: f6:aa:54:9a:52:51:76:1d:52:d9:2e:26:24:3f:76:29:1d:51: 45:bb:9c:7d:0e:87:ba:de:95:4b:23:9e:40:d5:6c:80:6d:38: 73:43:f8:9a:68:5b:86:43:cb:36:3a:a5:5f:6d:38:0e:c4:89: a3:99:cb:e1:ab:cf:e9:c4:3d:0c:4d:70:ea:6f:9a:f2:99:32: fb:4b:65:68:8a:29:29:2b:a1:d7:6d:75:50:32:5b:cf:cd:88: c9:eb:c8:22:a1:68:24:16:13:a1:2b:2a:e6:6e:25:47:ed:19: 40:45:7e:9f:fd:7b:4c:4d:d3:2b:e4:7d:2b:64:05:10:fa:8b: a1:cf:43:da -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmdvyT0O8wmD5L3WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk NWI4MzQ0ZjAtNjUwMy00MTUyLWJmZDAtNWUxYmU1YTQ0Zjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3VrjpjIlMRT/JoDsf8io9FNAeK7IR6H1OrH jIlc4lhnDuz3qRh5EwOJtweMy1RicAYEbshLbUDrGbGHz4aP2TO/Ov/cRClgnf3j e3Gb+H3TALg+gHnXXT5hkTPPCZMLOzo5xbRzZErwITbIl6Ztbj+n+Icb+F5qz+uA dhnG4cGOM/mkhFAmdy85qY/t9srnwD5X0bIHCsN81efEPAbbIvCqSF1SF8uHUfdc 7CxL8f8yDk+6zQ1k79VKsiL9aVi9ZZ3eQYwVlYYW5L2golmwe/KgnGeiAQoZfV7Y FyeUGdNFYN4NRBs7pXeSWLL4Pi8SeAqpjfS2hpq85b60fuWiFwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFN3T9Zpq1DNSKfHLGM7CLGN46YEGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDM4ZmJjMWMtZjUwNy0z MDNiLWIyYTItMzNhMTI0YjE0M2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA2OgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAURvfr9/447Bpa26bVohKAKeDsc097YJQ3AKNdvo69FXG5MVL/wDeYpmj +ZwLic5dROIR39FFtkYFvG+wzrQwFFOJQdA6jdL4HN5pwJbhqWV7aHPa/xCk8cZn r5fHfyj6+JSZF8X7IobRl8OMQDdDUmCJQgRdf4jneICJPMux9qpUmlJRdh1S2S4m JD92KR1RRbucfQ6Hut6VSyOeQNVsgG04c0P4mmhbhkPLNjqlX204DsSJo5nL4avP 6cQ9DE1w6m+a8pky+0tlaIopKSuh1211UDJbz82IyevIIqFoJBYToSsq5m4lR+0Z QEV+n/17TE3TK+R9K2QFEPqLoc9D2g== -----END CERTIFICATE-----Generated at Mon Apr 28 02:41:46 2025 by rpki-client