$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4ba7893f-feaf-32c7-b65f-a82d419f63f8.roa File: 4ba7893f-feaf-32c7-b65f-a82d419f63f8.roa (raw, json) Hash identifier: REQowaut0sUFhd69LHCjsVS+F8OxJpI/tvjo4kzmM6Y= Subject key identifier: CC:01:78:9C:64:BF:FC:37:F6:52:C7:00:83:D0:C3:0F:6D:53:13:52 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848F22C6D58BDB15586256BFDE0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4ba7893f-feaf-32c7-b65f-a82d419f63f8.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 46844 IP address blocks: 108.181.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:6d:58:bd:b1:55:86:25:6b:fd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=fae69d28-faa2-4198-9e00-9ef0a42047e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:01:67:90:e9:84:8f:6e:97:8a:c1:90:72:7a: 41:ab:74:4b:ef:b6:ec:14:3a:92:d1:53:71:02:28: 0f:63:3a:72:0d:5b:f1:07:6a:8e:a8:2c:8c:ee:30: 6f:91:f0:6a:80:20:b3:dc:01:0e:7b:73:21:e8:8d: 50:4b:01:cb:6c:99:90:b6:2b:d3:89:be:00:73:53: 7c:cc:0d:36:a5:88:c9:eb:b1:dc:6f:ed:80:43:9e: 52:1d:e8:8e:a2:99:a2:85:e6:b5:7f:e4:d3:a4:d0: 42:4e:71:74:05:b4:bb:fb:41:d4:be:c0:23:4e:f8: e6:7e:1b:bc:d0:40:76:3b:2f:cd:e9:7e:08:de:c9: b3:3d:c7:8f:74:74:58:ba:a0:55:7a:dd:22:8e:d2: 4d:55:4d:a1:57:85:d8:4e:9b:ad:20:0d:68:f5:4c: b2:88:bf:34:d4:d8:0e:c4:a7:3c:ec:b6:05:ad:82: 82:d1:6a:af:89:c9:45:96:fc:71:a5:71:ba:ac:86: 7f:a3:7f:c6:94:d7:2e:9c:cc:4c:8f:e4:0d:bf:7f: 28:9f:8d:d8:c8:d8:d3:b4:cc:9a:5d:ce:40:bf:45: a3:61:e5:9a:64:7c:b7:44:2b:fa:0f:1a:5a:b0:36: 53:b9:e1:9a:0d:74:ec:70:51:c3:1f:ea:aa:ce:1c: a4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:01:78:9C:64:BF:FC:37:F6:52:C7:00:83:D0:C3:0F:6D:53:13:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4ba7893f-feaf-32c7-b65f-a82d419f63f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 108.181.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:92:4f:19:fd:7f:eb:3a:c6:31:f7:0f:07:cf:23:71:c5:da: 23:a3:88:d1:14:9c:03:fc:17:30:e4:df:f0:5a:3c:33:5e:90: 03:43:4c:57:f9:d1:29:53:37:70:52:36:ff:9c:46:0c:17:e0: 93:07:a9:7c:2e:b9:b9:08:b2:84:2c:16:6b:8f:47:6c:9f:ce: f4:27:34:b2:f8:b3:21:38:eb:8f:3f:35:91:53:7a:74:35:4b: d8:df:bf:c5:36:04:34:d9:1f:2f:a6:3d:79:2f:c4:ee:89:32: 0c:c3:92:2f:68:e1:61:41:09:58:31:15:6c:37:5c:98:34:d8: 76:bf:5f:29:a1:72:77:26:87:e9:98:0f:35:04:bf:a2:a9:65: a5:41:42:e6:38:3b:6a:9b:fd:0c:12:de:46:4c:58:7b:9a:67: 00:0b:0f:cf:67:46:3c:ea:40:ed:29:82:13:30:8c:46:75:2a: e1:9e:d0:10:ae:67:1d:a8:e8:00:c9:cf:7b:81:26:cf:f8:88: 65:0d:e3:f6:e9:e8:89:73:07:e6:6f:d8:67:1b:ea:98:2c:4d: 2b:f3:e2:16:1c:21:50:d6:5d:f9:fa:04:e4:53:68:6e:1c:ad: a2:e4:b6:9a:18:b0:a1:3d:0b:60:be:cf:74:29:99:d9:84:dc: d1:a9:e4:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLG1YvbFVhiVr/eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ZmFlNjlkMjgtZmFhMi00MTk4LTllMDAtOWVmMGE0MjA0N2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgFnkOmEj26XisGQcnpBq3RL77bsFDqS0VNx AigPYzpyDVvxB2qOqCyM7jBvkfBqgCCz3AEOe3Mh6I1QSwHLbJmQtivTib4Ac1N8 zA02pYjJ67Hcb+2AQ55SHeiOopmihea1f+TTpNBCTnF0BbS7+0HUvsAjTvjmfhu8 0EB2Oy/N6X4I3smzPcePdHRYuqBVet0ijtJNVU2hV4XYTputIA1o9UyyiL801NgO xKc87LYFrYKC0WqviclFlvxxpXG6rIZ/o3/GlNcunMxMj+QNv38on43YyNjTtMya Xc5Av0WjYeWaZHy3RCv6DxpasDZTueGaDXTscFHDH+qqzhykAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwBeJxkv/w39lLHAIPQww9tUxNSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNGJhNzg5M2YtZmVhZi0z MmM3LWI2NWYtYTgyZDQxOWY2M2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLXkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANSSTxn9f+s6xjH3DwfPI3HF2iOjiNEUnAP8FzDk3/BaPDNekANDTFf5 0SlTN3BSNv+cRgwX4JMHqXwuubkIsoQsFmuPR2yfzvQnNLL4syE4648/NZFTenQ1 S9jfv8U2BDTZHy+mPXkvxO6JMgzDki9o4WFBCVgxFWw3XJg02Ha/Xymhcncmh+mY DzUEv6KpZaVBQuY4O2qb/QwS3kZMWHuaZwALD89nRjzqQO0pghMwjEZ1KuGe0BCu Zx2o6ADJz3uBJs/4iGUN4/bp6IlzB+Zv2Gcb6pgsTSvz4hYcIVDWXfn6BORTaG4c raLktpoYsKE9C2C+z3QpmdmE3NGp5LM= -----END CERTIFICATE-----Generated at Sat Apr 5 20:51:48 2025 by rpki-client