$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/43eb8afb-4ec0-3a7f-8c9a-2ca2cbff4cc8.roa File: 43eb8afb-4ec0-3a7f-8c9a-2ca2cbff4cc8.roa (raw, json) Hash identifier: GnRzmzzqQGQjED5lAGDoDTCfFuJGl8wZ8o6f58ixgRk= Subject key identifier: 8A:D0:20:95:02:4C:45:36:47:4B:7F:6F:E5:B8:93:E9:BB:DE:E6:B4 Certificate issuer: /CN=3a11a85f-8f37-4b54-8fa2-d6bc09673711 Certificate serial: 010D0C9F432858498769AC32682855D03A12A180 Authority key identifier: 89:F4:56:85:95:09:74:C6:CC:B8:36:F8:BF:F4:B5:F7:67:DB:FF:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/43eb8afb-4ec0-3a7f-8c9a-2ca2cbff4cc8.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 11377 IP address blocks: 223.165.113.0/24 maxlen: 24 223.165.115.0/24 maxlen: 24 223.165.118.0/24 maxlen: 24 223.165.119.0/24 maxlen: 24 223.165.120.0/24 maxlen: 24 223.165.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:ac:32:68:28:55:d0:3a:12:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a11a85f-8f37-4b54-8fa2-d6bc09673711 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=c81022e3-3aa5-4424-8e65-f60afd2cfed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:52:17:05:c9:03:43:c8:80:ad:e2:f3:a9:4d: 2d:3f:3a:37:7b:59:a6:3c:3b:3a:a6:54:4f:d3:c2: c9:9b:d0:25:f9:ec:a9:15:ec:16:ce:4a:01:2c:08: 1a:ad:2a:12:7a:23:33:b3:99:80:19:c7:8a:f8:d7: f4:27:0c:73:af:c9:d1:b4:ee:ad:e1:46:5d:21:fa: 8b:59:3b:b9:a0:b0:ee:bf:62:d6:f8:c9:d7:82:26: f0:fb:57:f7:70:17:0f:ee:34:18:de:e6:bc:ac:6a: 0e:bc:a2:43:5f:eb:92:0f:56:7d:3f:b2:ed:97:14: ce:96:26:39:bd:fd:7e:f9:bc:b1:59:8f:3f:19:7c: 5d:d7:f3:ef:21:94:69:08:66:02:48:40:23:56:43: bd:d5:24:31:de:3f:61:1f:bc:0f:61:b1:68:88:ad: 07:f9:9d:88:e7:f8:90:7f:bb:62:88:c7:b2:59:33: 8b:be:74:5b:ee:b5:38:91:7f:5d:7f:2d:ed:b7:a1: 6d:df:37:bf:e8:85:94:c6:17:f3:4f:91:00:8e:ea: bf:cf:8b:b4:f7:08:be:91:32:a2:c2:f8:85:6e:33: 18:55:e4:e0:1f:21:3b:be:f0:a9:20:e8:8b:95:ed: 8b:c3:cf:d1:ca:3d:ed:2c:01:34:cc:84:7f:cb:99: 5c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D0:20:95:02:4C:45:36:47:4B:7F:6F:E5:B8:93:E9:BB:DE:E6:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/43eb8afb-4ec0-3a7f-8c9a-2ca2cbff4cc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.crl X509v3 Authority Key Identifier: keyid:89:F4:56:85:95:09:74:C6:CC:B8:36:F8:BF:F4:B5:F7:67:DB:FF:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer sbgp-ipAddrBlock: critical IPv4: 223.165.113.0/24 223.165.115.0/24 223.165.118.0-223.165.121.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:99:2e:2f:46:e3:bb:ec:bd:8f:b6:a3:e9:24:ed:cd:0f:9a: 6d:9e:a3:4e:81:6a:ef:b2:40:30:6e:89:49:eb:a4:32:89:1c: 41:4c:f5:89:0c:ce:fc:2e:2c:83:c8:ae:ad:42:f1:9d:47:62: 82:c4:f0:7c:6f:46:7a:ce:d8:69:8c:19:09:6f:cb:61:3f:d7: 3b:26:da:6a:a0:1e:3e:ad:17:a3:4d:67:9d:30:a3:35:9e:fe: 37:36:3e:00:43:bd:bd:fd:e0:7d:2e:4a:36:e6:e5:cd:c2:52: 29:af:57:fe:65:65:30:31:a7:0b:fb:31:2a:c4:37:33:ec:1f: d0:b8:7e:b7:2c:93:ae:48:3c:82:62:3e:72:be:23:89:2e:a4: 59:43:ec:dd:d3:35:bd:3b:c8:f1:38:16:da:b9:6f:49:11:64: 3a:6a:42:d4:21:28:40:4c:da:87:2b:d3:11:40:de:a1:e1:e6: 37:7a:fa:73:2f:69:8f:73:cd:ab:f8:c2:7c:8b:f9:65:49:4a: 5e:a8:09:f7:33:26:07:78:cb:de:d4:92:f1:66:e4:25:86:fa: 23:9b:b5:13:58:db:2c:a3:86:99:d8:22:9a:64:59:8c:58:b9: 8f:3d:37:14:86:71:a5:7f:ad:de:cc:d2:1d:1e:fb:11:0f:e1: 8f:7f:40:43 -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEmHaawyaChV0DoSoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ExMWE4NWYtOGYzNy00YjU0LThmYTItZDZiYzA5Njcz NzExMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk YzgxMDIyZTMtM2FhNS00NDI0LThlNjUtZjYwYWZkMmNmZWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVIXBckDQ8iAreLzqU0tPzo3e1mmPDs6plRP 08LJm9Al+eypFewWzkoBLAgarSoSeiMzs5mAGceK+Nf0Jwxzr8nRtO6t4UZdIfqL WTu5oLDuv2LW+MnXgibw+1f3cBcP7jQY3ua8rGoOvKJDX+uSD1Z9P7LtlxTOliY5 vf1++byxWY8/GXxd1/PvIZRpCGYCSEAjVkO91SQx3j9hH7wPYbFoiK0H+Z2I5/iQ f7tiiMeyWTOLvnRb7rU4kX9dfy3tt6Ft3ze/6IWUxhfzT5EAjuq/z4u09wi+kTKi wviFbjMYVeTgHyE7vvCpIOiLle2Lw8/Ryj3tLAE0zIR/y5lcjQIDAQABo4IDaTCC A2UwHQYDVR0OBBYEFIrQIJUCTEU2R0t/b+W4k+m73ua0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYTEx YTg1Zi04ZjM3LTRiNTQtOGZhMi1kNmJjMDk2NzM3MTEvNDNlYjhhZmItNGVjMC0z YTdmLThjOWEtMmNhMmNiZmY0Y2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ExMWE4NWYtOGYzNy00YjU0LThm YTItZDZiYzA5NjczNzExLzNhMTFhODVmLThmMzctNGI1NC04ZmEyLWQ2YmMwOTY3 MzcxMS5jcmwwHwYDVR0jBBgwFoAUifRWhZUJdMbMuDb4v/S192fb/zUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYTExYTg1Zi04ZjM3LTRiNTQtOGZhMi1kNmJj MDk2NzM3MTEuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQA36VxAwQA 36VzMAwDBAHfpXYDBAHfpXgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANpkuL0bju+y9j7aj6STtzQ+abZ6j ToFq77JAMG6JSeukMokcQUz1iQzO/C4sg8iurULxnUdigsTwfG9Ges7YaYwZCW/L YT/XOybaaqAePq0Xo01nnTCjNZ7+NzY+AEO9vf3gfS5KNublzcJSKa9X/mVlMDGn C/sxKsQ3M+wf0Lh+tyyTrkg8gmI+cr4jiS6kWUPs3dM1vTvI8TgW2rlvSRFkOmpC 1CEoQEzahyvTEUDeoeHmN3r6cy9pj3PNq/jCfIv5ZUlKXqgJ9zMmB3jL3tSS8Wbk JYb6I5u1E1jbLKOGmdgimmRZjFi5jz03FIZxpX+t3szSHR77EQ/hj39AQw== -----END CERTIFICATE-----Generated at Thu Apr 17 09:51:35 2025 by rpki-client