$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d8250a82-42c8-3463-b657-35c42e18025c.roa File: d8250a82-42c8-3463-b657-35c42e18025c.roa (raw, json) Hash identifier: OMX3MERxzujJxUo8JJ+HSjPgPzDVRLRXCPnbD2X06y0= Subject key identifier: AC:28:62:D4:75:22:4B:4B:F1:BF:90:38:36:D4:B5:50:2A:25:DF:85 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849955F1CD2F26BB0D0145F4FC0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d8250a82-42c8-3463-b657-35c42e18025c.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 207.194.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:1c:d2:f2:6b:b0:d0:14:5f:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=cc24b3e1-1dd5-4285-aef4-7682f3ec20c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ca:cd:3e:d4:ab:a9:48:fe:ac:f8:9f:2b:d1: 8b:bc:e2:64:bb:07:91:82:68:b6:da:50:52:6d:ea: fe:ff:af:83:ca:73:89:55:9d:7d:45:a9:87:71:72: 80:95:20:83:09:bc:6f:de:32:41:ea:f8:53:c0:66: 57:ed:93:c2:29:4a:0c:d7:26:f4:5a:66:d6:b0:33: 28:d8:b4:cd:5c:d6:5b:68:63:ec:0c:e3:9e:8d:c2: 97:0e:3c:dd:4b:2f:88:6e:be:09:94:ce:b5:d5:2b: a5:2b:ae:1c:82:93:1a:7d:a5:4b:73:e8:dc:ca:84: a8:39:64:5a:8e:8b:81:45:94:66:af:78:98:61:00: 36:31:d9:40:53:63:5e:63:9b:61:f3:fe:98:b2:19: 53:f4:b7:7f:32:ae:43:8e:54:eb:a4:b5:5d:59:9b: 6c:ac:bd:9b:a3:a8:8a:f1:a1:27:37:46:53:67:76: 6a:3a:0e:80:db:77:19:11:9b:ae:c6:23:dd:7d:92: 80:9e:c6:50:67:07:6a:f8:20:c9:f5:42:56:e0:25: b5:02:5b:df:14:0c:a7:79:30:9b:b7:60:f1:1a:05: 77:b7:d6:23:ed:8b:69:f8:7e:f0:23:1f:5f:83:d6: a3:8a:a0:1a:bb:60:00:81:bf:cb:93:c9:4d:4f:41: aa:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:28:62:D4:75:22:4B:4B:F1:BF:90:38:36:D4:B5:50:2A:25:DF:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d8250a82-42c8-3463-b657-35c42e18025c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.194.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:c5:b7:f4:e6:c5:f1:81:11:53:ab:00:8f:2b:ce:5a:43:a9: 2f:87:36:e3:6d:fa:9d:5f:89:d9:3b:0a:f4:29:81:cf:b2:c4: cf:34:9c:4b:41:51:4d:8c:14:c2:5a:d0:e1:12:57:c6:50:73: 11:3e:44:f7:35:38:b1:0b:16:d3:dc:b7:5d:e0:f1:94:63:c3: 32:26:73:6c:c7:8e:67:7b:95:40:11:54:31:fa:63:38:eb:75: c4:08:5a:0d:d9:bc:38:60:64:0b:c5:e6:c9:b2:cc:ac:dc:5f: 2d:23:63:4d:2c:ba:40:0e:24:94:08:8f:c9:4d:93:8c:f9:96: 4b:b1:14:d8:39:b3:94:df:55:60:81:fb:5e:84:56:f7:e8:df: 07:36:6a:a2:a0:48:16:cb:2e:7f:d6:59:54:06:7e:ed:01:c7: f6:47:c5:2d:38:df:79:e9:74:ce:0b:9e:86:83:d6:de:a5:b9: 62:8a:a0:a7:06:b8:04:95:7a:5c:44:46:21:e2:24:b3:30:bd: 41:e4:9b:33:de:63:5b:b2:7c:13:12:20:04:b0:e1:d7:39:47: 15:55:7c:c4:a5:bc:73:4b:aa:93:ad:40:de:0f:84:c1:46:a2: 40:58:58:ce:a9:94:18:10:88:b2:42:8a:aa:54:fa:75:8c:e6: ba:ec:7b:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXxzS8muw0BRfT8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk Y2MyNGIzZTEtMWRkNS00Mjg1LWFlZjQtNzY4MmYzZWMyMGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisrNPtSrqUj+rPifK9GLvOJkuweRgmi22lBS ber+/6+DynOJVZ19RamHcXKAlSCDCbxv3jJB6vhTwGZX7ZPCKUoM1yb0WmbWsDMo 2LTNXNZbaGPsDOOejcKXDjzdSy+Ibr4JlM611SulK64cgpMafaVLc+jcyoSoOWRa jouBRZRmr3iYYQA2MdlAU2NeY5th8/6YshlT9Ld/Mq5DjlTrpLVdWZtsrL2bo6iK 8aEnN0ZTZ3ZqOg6A23cZEZuuxiPdfZKAnsZQZwdq+CDJ9UJW4CW1AlvfFAyneTCb t2DxGgV3t9Yj7Ytp+H7wIx9fg9ajiqAau2AAgb/Lk8lNT0GquwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwoYtR1IktL8b+QODbUtVAqJd+FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDgyNTBhODItNDJjOC0z NDYzLWI2NTctMzVjNDJlMTgwMjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8KmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjFt/TmxfGBEVOrAI8rzlpDqS+HNuNt+p1fidk7CvQpgc+yxM80nEtB UU2MFMJa0OESV8ZQcxE+RPc1OLELFtPct13g8ZRjwzImc2zHjmd7lUARVDH6Yzjr dcQIWg3ZvDhgZAvF5smyzKzcXy0jY00sukAOJJQIj8lNk4z5lkuxFNg5s5TfVWCB +16EVvfo3wc2aqKgSBbLLn/WWVQGfu0Bx/ZHxS0433npdM4LnoaD1t6luWKKoKcG uASVelxERiHiJLMwvUHkmzPeY1uyfBMSIASw4dc5RxVVfMSlvHNLqpOtQN4PhMFG okBYWM6plBgQiLJCiqpU+nWM5rrse4M= -----END CERTIFICATE-----Generated at Mon Apr 28 22:42:23 2025 by rpki-client