$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/46ab1af1-a77c-32bc-ad68-faa4060a7937.roa File: 46ab1af1-a77c-32bc-ad68-faa4060a7937.roa (raw, json) Hash identifier: mr1Ixb+is/eR/5iyXAAHdhvAy9LajvYi74XTISKrd4I= Subject key identifier: 80:9A:61:98:A2:F1:B0:C4:BC:D2:09:00:A3:ED:17:2E:99:AD:23:E5 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F432858499BFFE019E3C9596520627780 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/46ab1af1-a77c-32bc-ad68-faa4060a7937.roa Signing time: Tue 22 Apr 2025 09:59:41 +0000 ROA not before: Tue 22 Apr 2025 09:59:41 +0000 ROA not after: Mon 21 Jul 2025 09:59:41 +0000 asID: 32043 IP address blocks: 173.213.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9b:ff:e0:19:e3:c9:59:65:20:62:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Apr 22 09:59:41 2025 GMT Not After : Jul 21 09:59:41 2025 GMT Subject: CN=0a4f8fd0-f14e-4a6e-aae7-ffdfef9c3d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5d:4c:cd:5a:2f:c4:82:16:5c:8b:c2:51:49: f2:a5:98:9f:ab:5b:ec:45:e8:52:6e:b0:2b:24:cd: 2e:29:65:73:27:4a:9f:5f:c3:5c:7f:f7:98:fe:29: 4e:54:e6:6a:f0:e2:86:f0:65:b9:f8:e9:54:07:59: 35:b4:ae:fa:9a:0f:ff:96:55:19:4c:05:95:c2:c2: ad:64:7a:e5:30:f2:91:1e:a5:b4:52:49:14:c7:b2: ad:6c:a0:b3:12:68:3a:b9:63:08:64:a1:69:fb:8a: 5e:0c:26:b6:80:60:5a:d5:23:eb:1e:f4:c5:56:38: 4f:7f:65:48:67:73:e0:0e:71:ae:e4:6b:d3:bc:56: 21:4a:e0:45:f4:87:60:28:63:f4:76:93:03:e7:6b: 77:3b:6b:8f:f2:9b:01:63:18:61:8a:73:59:d5:7e: 09:f9:3f:f1:02:5b:ef:ce:7e:f7:37:27:05:b5:c2: d3:fa:cc:c0:aa:4d:aa:65:6f:ac:e0:25:03:f2:c6: b3:6e:71:07:4a:f8:00:9c:c1:c7:44:a1:40:16:d5: cb:a1:4d:95:0b:cd:53:4a:c6:29:a7:ae:79:39:1a: 65:6a:34:4d:87:f1:47:14:c8:63:59:ce:4d:87:db: df:29:27:da:00:43:7e:ea:a0:71:1a:07:ba:8e:09: 3c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9A:61:98:A2:F1:B0:C4:BC:D2:09:00:A3:ED:17:2E:99:AD:23:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/46ab1af1-a77c-32bc-ad68-faa4060a7937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.213.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:5f:4c:dd:67:e9:b5:f3:4d:a5:4b:e2:b1:0b:d7:4e:ff:11: 8c:fc:fe:5c:29:4d:43:21:d5:52:b0:ea:36:ac:88:b0:4a:82: 4f:fb:3f:69:fe:12:ea:1f:32:c1:02:e0:e5:62:64:dd:40:aa: d1:b8:bc:79:4c:dd:0c:03:fb:b5:ca:e0:0e:c1:1b:54:a3:47: 53:a7:1c:42:ab:7c:21:20:46:60:f3:28:fc:65:62:4c:de:b0: 6b:bd:00:3e:31:b0:ee:cf:6d:5a:92:2b:b4:51:19:7e:21:83: 37:c6:a5:e9:b4:73:27:45:24:83:9e:18:8c:b6:35:bd:5d:8c: 88:53:ee:1a:25:bb:b7:a9:a0:32:87:51:b2:ba:6d:a0:14:d4: 4f:60:79:ee:d6:69:07:eb:d1:df:6b:6e:7e:a3:bb:9c:c3:f9: c3:7d:59:82:87:76:0a:eb:27:02:f6:f0:d0:df:ca:1b:9a:0c: d5:d8:ea:d6:f8:8e:9d:3a:b7:a0:56:d7:98:e3:5f:2e:31:1c: 2b:bf:07:32:ab:ae:9e:27:3a:09:db:67:d7:e5:a5:42:10:a5: cc:25:39:61:a2:74:af:2f:4e:b8:c7:c4:8f:74:08:93:57:56: ba:b0:a9:a6:21:c4:30:97:7a:5e:3a:35:e6:3b:ac:43:2b:59: 8b:da:ec:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmb/+AZ48lZZSBid4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDQyMjA5NTk0MVoXDTI1MDcyMTA5NTk0MVowLzEtMCsGA1UEAxMk MGE0ZjhmZDAtZjE0ZS00YTZlLWFhZTctZmZkZmVmOWMzZDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF1MzVovxIIWXIvCUUnypZifq1vsRehSbrAr JM0uKWVzJ0qfX8Ncf/eY/ilOVOZq8OKG8GW5+OlUB1k1tK76mg//llUZTAWVwsKt ZHrlMPKRHqW0UkkUx7KtbKCzEmg6uWMIZKFp+4peDCa2gGBa1SPrHvTFVjhPf2VI Z3PgDnGu5GvTvFYhSuBF9IdgKGP0dpMD52t3O2uP8psBYxhhinNZ1X4J+T/xAlvv zn73NycFtcLT+szAqk2qZW+s4CUD8sazbnEHSvgAnMHHRKFAFtXLoU2VC81TSsYp p655ORplajRNh/FHFMhjWc5Nh9vfKSfaAEN+6qBxGge6jgk8UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICaYZii8bDEvNIJAKPtFy6ZrSPlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNDZhYjFhZjEtYTc3Yy0z MmJjLWFkNjgtZmFhNDA2MGE3OTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdVrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFfTN1n6bXzTaVL4rEL107/EYz8/lwpTUMh1VKw6jasiLBKgk/7P2n+ EuofMsEC4OViZN1AqtG4vHlM3QwD+7XK4A7BG1SjR1OnHEKrfCEgRmDzKPxlYkze sGu9AD4xsO7PbVqSK7RRGX4hgzfGpem0cydFJIOeGIy2Nb1djIhT7holu7epoDKH UbK6baAU1E9gee7WaQfr0d9rbn6ju5zD+cN9WYKHdgrrJwL28NDfyhuaDNXY6tb4 jp06t6BW15jjXy4xHCu/BzKrrp4nOgnbZ9flpUIQpcwlOWGidK8vTrjHxI90CJNX VrqwqaYhxDCXel46NeY7rEMrWYva7CQ= -----END CERTIFICATE-----Generated at Sun Apr 27 04:01:01 2025 by rpki-client