$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e1765a92-9888-36f9-85ed-a357dbd30cf6.roa File: e1765a92-9888-36f9-85ed-a357dbd30cf6.roa (raw, json) Hash identifier: lIaZgXuNI90oX+elNlQOsS2xgY+eOTKW4mXK6LuedHo= Subject key identifier: 60:4D:79:18:51:B2:D2:C0:F4:BC:60:63:AD:C5:EF:12:FD:5A:1B:D3 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499AF47BCF12FB6403E3DE1990 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e1765a92-9888-36f9-85ed-a357dbd30cf6.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 173.181.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:7b:cf:12:fb:64:03:e3:de:19:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=83bc3ddc-b681-4182-aff4-5f6a26524c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:77:83:c5:7a:db:10:5f:b9:89:f3:28:88:8b: b2:a8:13:df:79:70:1b:e4:57:33:fa:75:7a:a2:36: 89:e4:1b:53:c5:c3:c2:70:b9:fd:8c:77:92:68:9c: ab:55:9b:37:02:c4:66:59:7a:e7:e2:b6:4d:c1:c5: ac:1d:db:20:51:a5:3a:05:7e:a4:62:1d:77:d3:9e: b9:3e:f4:83:8c:a0:36:de:45:3e:f9:9f:6b:c6:ca: 6f:d1:ba:17:2b:a7:05:d0:27:3f:ef:6e:c5:2a:2f: 03:25:9a:ec:70:ab:a0:c6:86:71:e4:93:a3:68:93: 89:ce:1d:71:13:4a:70:85:4b:8f:73:b5:ea:b1:76: 9c:e7:02:f3:69:64:25:a9:e9:4e:be:76:69:ff:1c: 4d:0a:50:38:1c:d0:89:3d:8a:2e:74:9d:47:08:f9: fa:34:f1:b8:af:68:9b:de:40:c7:53:0c:d3:a9:e0: b9:83:fb:58:03:41:76:36:de:eb:fd:ca:e7:8c:cf: c1:35:9d:d4:b8:14:44:45:78:3b:50:a3:80:43:a4: 70:f8:1a:16:d4:66:ca:e5:56:2d:f3:5f:3e:b6:b3: df:a9:e2:24:2e:1b:37:5b:1d:ea:ce:f8:d4:76:be: 7b:3d:45:67:68:3c:66:66:a3:7a:27:62:ec:bb:d9: 66:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4D:79:18:51:B2:D2:C0:F4:BC:60:63:AD:C5:EF:12:FD:5A:1B:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e1765a92-9888-36f9-85ed-a357dbd30cf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 173.181.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption eb:ee:52:0a:5f:d2:e0:e2:8b:46:7c:14:5e:c5:e3:39:50:d6: 21:55:88:0f:f6:5e:2d:49:72:9d:d0:0d:f5:e4:5a:de:2f:3d: 7b:96:df:99:87:8d:64:7d:8a:d1:c5:1a:95:c9:96:a2:5b:30: 00:b9:1a:2b:f9:b9:ec:d2:3d:42:22:9e:3c:5f:32:8a:29:eb: 6e:58:7c:86:ba:5e:ab:97:f1:95:05:d1:f1:db:2f:8e:fb:6a: 8d:9d:d9:35:46:d1:08:a9:3e:ae:3c:b4:90:30:9d:41:00:9d: 76:d9:9a:56:80:85:bf:3f:35:ab:54:5c:38:98:41:92:75:2c: 92:13:7e:f4:61:77:5f:fd:92:6c:75:48:f8:cf:d7:d2:e3:e6: 34:7c:a6:81:c1:e0:c1:30:94:76:97:75:e2:51:50:ab:73:86: 77:44:85:7e:20:83:f3:17:53:67:13:f1:77:87:6f:35:8a:83: 8d:1e:b4:5b:32:a1:d1:67:4b:d7:df:49:98:a4:4e:2b:a8:f1: c4:ee:1c:1d:b3:56:4f:8a:48:b3:e8:eb:2a:3f:d3:42:15:fb: ec:47:01:a1:40:0c:2c:ad:af:83:2e:80:a6:87:f0:e8:5f:3f: b0:62:1d:3b:eb:40:fd:0e:79:97:71:25:93:4e:c2:21:b4:0b: 1f:23:e5:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9HvPEvtkA+PeGZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ODNiYzNkZGMtYjY4MS00MTgyLWFmZjQtNWY2YTI2NTI0YzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXeDxXrbEF+5ifMoiIuyqBPfeXAb5Fcz+nV6 ojaJ5BtTxcPCcLn9jHeSaJyrVZs3AsRmWXrn4rZNwcWsHdsgUaU6BX6kYh130565 PvSDjKA23kU++Z9rxspv0boXK6cF0Cc/727FKi8DJZrscKugxoZx5JOjaJOJzh1x E0pwhUuPc7XqsXac5wLzaWQlqelOvnZp/xxNClA4HNCJPYoudJ1HCPn6NPG4r2ib 3kDHUwzTqeC5g/tYA0F2Nt7r/crnjM/BNZ3UuBRERXg7UKOAQ6Rw+BoW1GbK5VYt 818+trPfqeIkLhs3Wx3qzvjUdr57PUVnaDxmZqN6J2Lsu9lm3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBNeRhRstLA9LxgY63F7xL9WhvTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZTE3NjVhOTItOTg4OC0z NmY5LTg1ZWQtYTM1N2RiZDMwY2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOvuUgpf0uDii0Z8FF7F4zlQ1iFViA/2Xi1Jcp3QDfXkWt4vPXuW35mH jWR9itHFGpXJlqJbMAC5Giv5uezSPUIinjxfMoop625YfIa6XquX8ZUF0fHbL477 ao2d2TVG0QipPq48tJAwnUEAnXbZmlaAhb8/NatUXDiYQZJ1LJITfvRhd1/9kmx1 SPjP19Lj5jR8poHB4MEwlHaXdeJRUKtzhndEhX4gg/MXU2cT8XeHbzWKg40etFsy odFnS9ffSZikTiuo8cTuHB2zVk+KSLPo6yo/00IV++xHAaFADCytr4MugKaH8Ohf P7BiHTvrQP0OeZdxJZNOwiG0Cx8j5T8= -----END CERTIFICATE-----Generated at Sun Apr 27 03:50:34 2025 by rpki-client