$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/eb49753a-762d-3b45-a7d4-dbc145992e77.roa File: eb49753a-762d-3b45-a7d4-dbc145992e77.roa (raw, json) Hash identifier: tLCwyX5he7Xy2b07dY21WJ64hdIiCWHSdwNxZ3VZTuI= Subject key identifier: BB:35:37:12:73:D5:A7:27:23:C3:31:F4:68:F0:F6:65:50:2C:C7:59 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858498CFF01E713A6A0F081FF1B80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/eb49753a-762d-3b45-a7d4-dbc145992e77.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 21723 IP address blocks: 208.181.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:01:e7:13:a6:a0:f0:81:ff:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=d9aa95f5-0fe1-487d-86f0-6807e90cfccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:88:c2:b7:07:8b:26:16:2b:1a:9f:60:30:1a: 2e:c2:d6:38:b4:b5:6e:21:de:c1:9b:86:ac:5e:d8: 13:54:86:69:a9:08:93:ce:c7:b9:08:0b:6a:75:00: 84:ec:5a:bb:7b:02:fd:52:8f:9b:bc:e1:71:9a:09: 39:87:24:05:18:b2:19:49:32:36:e5:fd:c6:70:53: 6f:f2:99:93:d5:da:a5:de:43:86:db:a6:aa:77:96: a7:a1:49:a1:95:ad:b2:5e:50:ca:18:1c:39:94:e7: 6b:c5:cd:f0:cc:ce:b3:0a:60:f8:93:82:e5:34:00: d0:fa:a7:46:a2:3a:d3:c7:b3:fa:b4:6f:1c:19:14: bc:fc:39:8d:4c:7c:b5:1c:78:61:27:91:d3:2e:4b: a0:b5:05:64:98:25:f7:c2:08:a5:80:77:fd:12:f5: 02:99:92:3c:23:42:b2:45:65:6e:13:0c:8d:2f:e7: 73:6e:ee:d7:23:1d:22:b4:2f:fc:44:d5:46:58:0a: c9:57:e4:f2:8c:8a:de:00:14:82:c5:b9:b3:01:3a: 1e:ba:82:03:61:a2:e9:06:77:2e:8b:fa:99:d6:19: e7:fd:43:05:ba:1e:42:b9:71:c8:a5:bd:e9:de:b9: 63:a8:51:ca:bc:74:af:e2:b6:40:c2:e0:b1:33:6b: 7c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:35:37:12:73:D5:A7:27:23:C3:31:F4:68:F0:F6:65:50:2C:C7:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/eb49753a-762d-3b45-a7d4-dbc145992e77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:cf:41:e8:5d:4b:90:b4:9e:d3:11:e6:2a:6a:8f:ca:aa:f7: 5d:c0:db:87:e1:bc:2a:38:b2:44:03:81:e9:5c:63:b5:e2:10: 24:32:dc:b2:c4:e1:b6:55:12:a3:fe:9e:e1:1c:a1:a9:05:c2: 5b:bf:e4:17:ce:e9:f8:62:36:3e:86:ec:8b:f9:0a:b6:70:93: c4:b8:67:bb:20:19:46:45:f3:c6:76:83:ab:d5:c7:b4:fa:3c: eb:3e:bf:6e:14:37:47:54:9a:d3:20:5c:fc:39:dd:b2:ec:74: 89:f6:fe:20:5c:5f:43:8c:1a:5b:15:35:78:bf:10:55:c4:62: 54:f3:88:1e:bf:3f:a5:a7:7e:e1:a0:85:5d:ee:9d:43:77:3c: 88:ea:87:b3:1a:bf:3c:9c:ae:66:6d:b4:d7:4a:c7:e9:ae:74: ee:ec:13:a0:a1:54:35:47:af:07:24:44:4c:c0:ec:18:b8:db: 88:21:13:30:1a:29:cd:7b:32:af:16:a9:c4:9c:3a:57:b0:4a: 6b:59:b5:cf:92:ed:0c:0b:51:bf:44:ac:d2:a1:17:7b:82:54: 58:7a:1f:ae:fd:14:96:0f:ec:6b:20:54:0b:d8:dc:1a:b9:9d: 6a:3e:30:24:77:2b:cf:6c:7b:bc:9d:0d:0c:0d:d3:27:6c:57: 1c:55:d1:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/wHnE6ag8IH/G4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk ZDlhYTk1ZjUtMGZlMS00ODdkLTg2ZjAtNjgwN2U5MGNmY2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYjCtweLJhYrGp9gMBouwtY4tLVuId7Bm4as XtgTVIZpqQiTzse5CAtqdQCE7Fq7ewL9Uo+bvOFxmgk5hyQFGLIZSTI25f3GcFNv 8pmT1dql3kOG26aqd5anoUmhla2yXlDKGBw5lOdrxc3wzM6zCmD4k4LlNADQ+qdG ojrTx7P6tG8cGRS8/DmNTHy1HHhhJ5HTLkugtQVkmCX3wgilgHf9EvUCmZI8I0Ky RWVuEwyNL+dzbu7XIx0itC/8RNVGWArJV+TyjIreABSCxbmzAToeuoIDYaLpBncu i/qZ1hnn/UMFuh5CuXHIpb3p3rljqFHKvHSv4rZAwuCxM2t8iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLs1NxJz1acnI8Mx9Gjw9mVQLMdZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZWI0OTc1M2EtNzYyZC0z YjQ1LWE3ZDQtZGJjMTQ1OTkyZTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0LVmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArPQehdS5C0ntMR5ipqj8qq913A24fhvCo4skQDgelcY7XiECQy3LLE 4bZVEqP+nuEcoakFwlu/5BfO6fhiNj6G7Iv5CrZwk8S4Z7sgGUZF88Z2g6vVx7T6 POs+v24UN0dUmtMgXPw53bLsdIn2/iBcX0OMGlsVNXi/EFXEYlTziB6/P6WnfuGg hV3unUN3PIjqh7MavzycrmZttNdKx+mudO7sE6ChVDVHrwckREzA7Bi424ghEzAa Kc17Mq8WqcScOlewSmtZtc+S7QwLUb9ErNKhF3uCVFh6H679FJYP7GsgVAvY3Bq5 nWo+MCR3K89se7ydDQwN0ydsVxxV0Zk= -----END CERTIFICATE-----Generated at Sun Apr 27 12:33:26 2025 by rpki-client