$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/3a3ff72c-b732-3667-ade1-9d63c15074cb.roa File: 3a3ff72c-b732-3667-ade1-9d63c15074cb.roa (raw, json) Hash identifier: dcJUwqq4TtMIpuyuJT8CVuLE7ZVI2qVL2EbSaqL0754= Subject key identifier: CC:15:3C:30:F1:0D:50:B6:E5:22:C3:A1:B6:3D:00:4F:EA:40:3F:AC Certificate issuer: /CN=0b291a85-da3e-420d-8e7f-61b66b323402 Certificate serial: 010D0C9F43285848C6E63C40A5CE86CB86CBA100 Authority key identifier: 8A:94:63:90:8E:24:FB:33:72:32:FC:FA:B4:6C:C0:B7:AD:7C:4D:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/3a3ff72c-b732-3667-ade1-9d63c15074cb.roa Signing time: Wed 05 Feb 2025 02:00:39 +0000 ROA not before: Wed 05 Feb 2025 02:00:39 +0000 ROA not after: Tue 06 May 2025 01:00:39 +0000 asID: 13566 IP address blocks: 204.76.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:e6:3c:40:a5:ce:86:cb:86:cb:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b291a85-da3e-420d-8e7f-61b66b323402 Validity Not Before: Feb 5 02:00:39 2025 GMT Not After : May 6 01:00:39 2025 GMT Subject: CN=b3a4efbb-f68e-43dd-a182-1d3eb193fc0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b5:10:3a:d3:2e:6e:6b:bf:c3:cb:c8:95:f5: fe:3b:88:87:5f:98:7e:e6:d7:5b:60:31:39:fc:9a: 5d:72:40:5d:6d:68:5b:75:a1:79:3a:42:a6:36:fc: 55:8f:3a:e0:e8:23:e5:fc:5b:eb:52:e5:96:9b:43: 79:8b:69:e7:b3:e4:19:0e:14:34:00:02:f6:c8:6f: 0b:53:1b:45:c4:98:cd:3d:ea:d4:20:60:b1:bc:15: 87:53:b8:70:43:36:a8:5b:d8:1d:ac:2f:6c:7b:5c: 98:6a:25:d8:ba:0e:ca:f8:93:43:a2:cf:cc:4f:8f: 8c:15:5e:64:80:7e:4b:e7:60:7c:2d:4d:13:3e:66: b3:6a:3a:08:4d:6b:6d:9b:07:e2:8f:42:9a:b0:47: c2:83:3f:ef:80:09:1b:77:b0:45:83:53:4d:08:5d: a8:b0:70:fc:81:99:bf:5f:50:cf:4d:a8:3d:35:90: 0f:db:2d:13:29:d1:28:f0:e6:96:71:9e:77:de:d8: 4a:a9:4f:56:00:79:30:2f:da:4c:5b:72:a4:3f:35: 3c:6f:34:c9:a2:5d:7a:48:a1:c0:73:6b:c7:83:80: ac:5f:65:b9:f2:df:42:76:52:49:a6:59:25:14:e5: 3e:0f:d1:f0:d7:b6:c9:3b:d5:77:df:fa:eb:8d:c4: 23:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:15:3C:30:F1:0D:50:B6:E5:22:C3:A1:B6:3D:00:4F:EA:40:3F:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/3a3ff72c-b732-3667-ade1-9d63c15074cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.crl X509v3 Authority Key Identifier: keyid:8A:94:63:90:8E:24:FB:33:72:32:FC:FA:B4:6C:C0:B7:AD:7C:4D:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402.cer sbgp-ipAddrBlock: critical IPv4: 204.76.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:f7:b0:e6:29:42:a6:4c:04:c3:84:57:f9:a6:36:21:a5:30: 1c:53:7b:01:0a:4d:dc:4f:fc:30:f8:c8:6b:1d:ed:bb:7b:7b: 86:63:a1:1d:4a:36:d9:76:02:2a:7d:5a:02:c8:2d:2e:cf:1e: bd:dc:98:4c:9f:aa:4b:b7:b2:a4:18:37:88:3d:ad:e9:f4:a9: 63:d8:be:fc:06:2b:8d:29:d1:b3:ba:70:fd:c2:99:4c:a1:bb: 41:33:98:7a:14:5e:04:e3:cd:c1:b8:c3:f5:62:79:a0:23:7d: b6:ac:a0:1d:3c:58:d0:aa:a9:00:97:93:74:ac:63:87:d7:36: 82:89:4d:2f:27:2e:05:c6:1b:41:66:ae:17:a9:4e:06:52:09: be:ca:dc:c7:bb:1d:da:2b:bb:1f:ff:83:5a:4d:4a:9e:ab:de: 90:5b:e1:bf:1c:57:dc:1f:02:dd:8f:95:f5:7b:f6:e4:58:fd: bf:5d:00:9c:2f:20:2f:6e:0f:b4:33:69:14:c6:f0:52:1e:aa: fd:44:34:58:02:f7:f9:26:b7:e6:5b:78:2a:36:b1:f6:20:96: b1:af:af:7a:50:af:07:10:e5:a1:6e:51:5a:b9:c0:df:8c:e2: 17:5f:a5:0f:df:c6:7f:c1:f5:21:ea:7b:a2:82:4b:83:7f:d2: dc:7d:25:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5jxApc6Gy4bLoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGIyOTFhODUtZGEzZS00MjBkLThlN2YtNjFiNjZiMzIz NDAyMB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk YjNhNGVmYmItZjY4ZS00M2RkLWExODItMWQzZWIxOTNmYzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLUQOtMubmu/w8vIlfX+O4iHX5h+5tdbYDE5 /JpdckBdbWhbdaF5OkKmNvxVjzrg6CPl/FvrUuWWm0N5i2nns+QZDhQ0AAL2yG8L UxtFxJjNPerUIGCxvBWHU7hwQzaoW9gdrC9se1yYaiXYug7K+JNDos/MT4+MFV5k gH5L52B8LU0TPmazajoITWttmwfij0KasEfCgz/vgAkbd7BFg1NNCF2osHD8gZm/ X1DPTag9NZAP2y0TKdEo8OaWcZ533thKqU9WAHkwL9pMW3KkPzU8bzTJol16SKHA c2vHg4CsX2W58t9CdlJJplklFOU+D9Hw17bJO9V33/rrjcQjAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwVPDDxDVC25SLDobY9AE/qQD+sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYjI5 MWE4NS1kYTNlLTQyMGQtOGU3Zi02MWI2NmIzMjM0MDIvM2EzZmY3MmMtYjczMi0z NjY3LWFkZTEtOWQ2M2MxNTA3NGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGIyOTFhODUtZGEzZS00MjBkLThl N2YtNjFiNjZiMzIzNDAyLzBiMjkxYTg1LWRhM2UtNDIwZC04ZTdmLTYxYjY2YjMy MzQwMi5jcmwwHwYDVR0jBBgwFoAUipRjkI4k+zNyMvz6tGzAt618TWwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYjI5MWE4NS1kYTNlLTQyMGQtOGU3Zi02MWI2 NmIzMjM0MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzEyuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIH3sOYpQqZMBMOEV/mmNiGlMBxTewEKTdxP/DD4yGsd7bt7e4ZjoR1K Ntl2Aip9WgLILS7PHr3cmEyfqku3sqQYN4g9ren0qWPYvvwGK40p0bO6cP3CmUyh u0EzmHoUXgTjzcG4w/VieaAjfbasoB08WNCqqQCXk3SsY4fXNoKJTS8nLgXGG0Fm rhepTgZSCb7K3Me7Hdorux//g1pNSp6r3pBb4b8cV9wfAt2PlfV79uRY/b9dAJwv IC9uD7QzaRTG8FIeqv1ENFgC9/kmt+ZbeCo2sfYglrGvr3pQrwcQ5aFuUVq5wN+M 4hdfpQ/fxn/B9SHqe6KCS4N/0tx9JVI= -----END CERTIFICATE-----Generated at Fri Apr 11 23:01:01 2025 by rpki-client