$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/850c851f-a2f0-39ea-8b04-db5609732a44.roa File: 850c851f-a2f0-39ea-8b04-db5609732a44.roa (raw, json) Hash identifier: 2FVbBM3GIah+vCvBHj9/sgPi/PrBDaXSbqzJWiK4Xl4= Subject key identifier: 1B:75:23:48:CF:52:13:2F:6E:29:8C:11:65:BD:C7:5C:71:13:88:F2 Certificate issuer: /CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Certificate serial: 010D0C9F4328584900216969E49328D703BFA580 Authority key identifier: 9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/850c851f-a2f0-39ea-8b04-db5609732a44.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 46979 IP address blocks: 173.225.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:69:69:e4:93:28:d7:03:bf:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=df676aca-b899-4b94-b1b1-7303c158c212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8e:03:51:4c:60:61:64:84:67:90:a7:29:3a: 38:ac:1b:d6:05:a7:95:e0:fa:29:27:d9:4e:1b:58: 86:17:6f:24:cc:be:8e:2f:a0:51:e8:e9:98:bc:1e: ba:aa:f4:0a:0c:c6:0a:63:36:bd:37:b4:a3:9a:8a: 87:05:a3:8e:4e:4e:fd:c4:ce:7c:47:7b:78:6a:a4: c1:5f:5d:66:2b:e5:7b:e5:a2:7f:dc:ac:27:7b:a5: b7:29:ec:77:68:fb:91:f9:36:32:89:94:ca:c1:69: db:17:1d:f0:41:d5:0b:23:af:b9:97:7d:98:53:2f: 85:89:4d:a2:29:b6:87:0a:81:c0:29:d4:ba:84:dd: ec:54:21:15:41:de:64:64:ba:c9:7f:b6:8f:b3:fd: 22:73:5a:06:ea:fc:1b:6c:cf:45:ec:d6:fe:12:ab: de:05:72:c4:c7:6c:f1:a2:45:30:04:0a:59:44:eb: 34:9c:75:83:f8:d7:c9:76:45:83:0e:49:94:bc:3d: 7b:79:09:c1:51:4e:7b:7b:d3:fd:ce:18:ff:fc:dd: 97:dc:59:7a:10:07:8b:26:9b:a7:ab:db:cd:53:5f: 8b:f0:a3:77:fc:1d:47:29:6e:93:f7:54:80:ad:42: 8f:3b:f5:e4:d9:8d:03:d3:77:85:ef:b9:3a:4f:5d: 3a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:75:23:48:CF:52:13:2F:6E:29:8C:11:65:BD:C7:5C:71:13:88:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/850c851f-a2f0-39ea-8b04-db5609732a44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl X509v3 Authority Key Identifier: keyid:9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer sbgp-ipAddrBlock: critical IPv4: 173.225.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:22:f0:a9:47:3d:35:15:14:8f:90:a7:91:9f:6a:2e:d3:e1: 13:68:49:61:e6:f7:15:8f:ec:4f:fa:b0:4d:1b:9a:72:f6:d4: 64:e0:78:8c:36:b0:96:6a:2f:41:e2:12:cc:6e:2a:6f:5f:8c: 67:eb:4a:67:4a:8d:3d:d9:c3:9c:5d:f0:06:e9:3b:94:b4:8d: 80:ca:e1:43:4e:f1:a6:3e:fa:14:db:a0:52:13:ee:fd:32:c3: f7:a3:30:37:22:99:32:2f:c2:e1:4e:98:5d:52:7d:5d:fa:1f: 19:f0:36:f9:90:63:ba:e7:3b:fb:88:2c:46:ad:c1:72:ed:5d: c4:08:ad:68:a8:90:16:15:1e:c9:fb:24:de:0b:93:81:d3:08: 1f:99:79:3d:b5:cd:dd:a0:2e:ed:b0:d4:f3:12:77:e4:ef:b1: b7:e3:6f:b0:cb:91:e8:7c:34:31:75:c4:6e:eb:40:bd:36:07: 5f:62:27:db:72:18:81:fd:42:f4:77:2b:d9:16:66:f5:d0:59: f9:39:20:33:64:46:bf:62:2e:fc:ab:cc:aa:2e:1c:62:f9:5f: 05:fb:3e:44:42:9b:0d:1f:ae:d0:fb:fb:73:85:9a:9a:3c:07: 9e:c9:11:01:00:56:f3:ca:cf:39:f4:81:d7:36:30:4a:33:e5: bd:19:0a:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIWlp5JMo1wO/pYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZkM2I5MzgtNjY0ZC00MGEyLWI1ODQtMWZlMmQ2MDAy ODE5MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk ZGY2NzZhY2EtYjg5OS00Yjk0LWIxYjEtNzMwM2MxNThjMjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY4DUUxgYWSEZ5CnKTo4rBvWBaeV4PopJ9lO G1iGF28kzL6OL6BR6OmYvB66qvQKDMYKYza9N7SjmoqHBaOOTk79xM58R3t4aqTB X11mK+V75aJ/3Kwne6W3Kex3aPuR+TYyiZTKwWnbFx3wQdULI6+5l32YUy+FiU2i KbaHCoHAKdS6hN3sVCEVQd5kZLrJf7aPs/0ic1oG6vwbbM9F7Nb+EqveBXLEx2zx okUwBApZROs0nHWD+NfJdkWDDkmUvD17eQnBUU57e9P9zhj//N2X3Fl6EAeLJpun q9vNU1+L8KN3/B1HKW6T91SArUKPO/Xk2Y0D03eF77k6T106kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBt1I0jPUhMvbimMEWW9x1xxE4jyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQz YjkzOC02NjRkLTQwYTItYjU4NC0xZmUyZDYwMDI4MTkvODUwYzg1MWYtYTJmMC0z OWVhLThiMDQtZGI1NjA5NzMyYTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2ZkM2I5MzgtNjY0ZC00MGEyLWI1 ODQtMWZlMmQ2MDAyODE5LzNmZDNiOTM4LTY2NGQtNDBhMi1iNTg0LTFmZTJkNjAw MjgxOS5jcmwwHwYDVR0jBBgwFoAUnP8u1bePqJIw34qfkGB789ZAolcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQzYjkzOC02NjRkLTQwYTItYjU4NC0xZmUy ZDYwMDI4MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEreEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4i8KlHPTUVFI+Qp5Gfai7T4RNoSWHm9xWP7E/6sE0bmnL21GTgeIw2 sJZqL0HiEsxuKm9fjGfrSmdKjT3Zw5xd8AbpO5S0jYDK4UNO8aY++hTboFIT7v0y w/ejMDcimTIvwuFOmF1SfV36HxnwNvmQY7rnO/uILEatwXLtXcQIrWiokBYVHsn7 JN4Lk4HTCB+ZeT21zd2gLu2w1PMSd+Tvsbfjb7DLkeh8NDF1xG7rQL02B19iJ9ty GIH9QvR3K9kWZvXQWfk5IDNkRr9iLvyrzKouHGL5XwX7PkRCmw0frtD7+3OFmpo8 B57JEQEAVvPKzzn0gdc2MEoz5b0ZCto= -----END CERTIFICATE-----Generated at Sat Apr 5 22:31:04 2025 by rpki-client