$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/02df042a-7837-3206-aaed-265dbd7ad140.roa File: 02df042a-7837-3206-aaed-265dbd7ad140.roa (raw, json) Hash identifier: N1AR+X83/UdlEzdBRLuCvypTooFrTvFIUV9DBm+ngjU= Subject key identifier: 21:82:83:F4:01:2F:B8:A7:FC:E3:FB:09:4C:E0:C1:E3:F7:DA:BF:C8 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858494303F0540DA735A6B12D0280 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/02df042a-7837-3206-aaed-265dbd7ad140.roa Signing time: Fri 21 Mar 2025 13:00:50 +0000 ROA not before: Fri 21 Mar 2025 13:00:50 +0000 ROA not after: Thu 19 Jun 2025 13:00:50 +0000 asID: 852 IP address blocks: 173.181.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:03:f0:54:0d:a7:35:a6:b1:2d:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 21 13:00:50 2025 GMT Not After : Jun 19 13:00:50 2025 GMT Subject: CN=77a4802f-c02e-4a7f-ae67-8481eda29032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4e:73:e3:e5:1f:f7:6b:0d:7a:36:37:2c:f5: ab:88:92:20:d3:05:80:67:d3:74:51:d0:7b:0c:e6: 96:5a:ea:61:02:e4:6c:6e:9b:27:2e:9f:e1:46:1c: 31:bc:1a:67:47:3e:2f:b3:09:8a:6a:1b:24:22:5e: 0c:c3:0f:1d:c0:11:70:98:49:4f:e4:02:fa:e9:78: cf:bd:58:99:ce:7e:b4:aa:2e:91:b7:ca:12:cb:07: 73:5e:30:2c:26:12:5f:97:e1:c4:c7:7c:22:01:0f: c4:62:c5:17:99:3e:a8:30:56:4f:0c:74:63:d0:f6: 8d:50:d2:2b:b1:ed:be:64:6c:90:5e:7f:64:cf:be: 9e:c7:65:5e:17:5b:f1:0d:1b:31:9f:0c:cc:c2:af: 2b:d3:a5:4b:95:67:a0:83:d9:08:87:78:ed:76:1e: 01:72:cc:06:53:fb:d0:df:13:88:be:8c:aa:ca:72: dc:57:c8:ce:f8:95:d4:93:5c:ce:80:11:00:59:be: 8b:ec:a5:39:7c:90:66:65:6c:b8:1a:01:11:97:25: 8b:98:0b:ab:ec:19:7e:55:f9:aa:d8:10:ad:58:b6: 46:e4:cc:9d:88:db:39:ed:a9:c1:fc:ef:20:bc:5c: 1c:00:0e:8a:5d:30:8a:63:2f:ae:7e:cd:ef:21:93: 8e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:82:83:F4:01:2F:B8:A7:FC:E3:FB:09:4C:E0:C1:E3:F7:DA:BF:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/02df042a-7837-3206-aaed-265dbd7ad140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 173.181.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:6c:37:da:e1:3f:7a:00:b6:84:3d:40:6a:a6:b8:21:c3:17: 78:03:03:4c:03:71:9b:85:47:03:70:50:63:c4:b1:5c:41:cc: af:37:e0:8b:c5:74:1b:f7:ff:f1:d8:89:f1:5d:d0:bd:1d:0b: 07:df:54:2d:13:56:61:7b:ed:f9:1f:8d:50:4d:c2:65:91:2c: 0f:dd:a4:8c:cf:0f:f6:82:f9:5e:65:68:62:ff:f5:68:07:92: 0e:07:64:3d:c7:04:78:97:19:a1:41:80:a1:c7:ae:69:dc:a9: 07:33:c5:25:d3:69:c3:5d:e3:80:7b:41:f4:e0:b5:9e:6c:f4: 73:32:5d:b4:51:71:11:cf:12:44:de:e8:6b:20:7f:4a:2f:cd: ba:54:37:a6:c1:7b:97:c6:61:f9:f0:1b:56:0f:2c:86:1d:e7: 84:de:34:91:69:68:38:2f:ef:da:8d:c1:ba:be:59:9c:0f:2c: f8:68:5b:c7:66:e4:d7:1b:23:a0:0e:b4:6c:20:b2:75:67:bc: 15:4c:a5:94:53:48:9d:2d:ce:0f:ef:24:70:3b:92:5e:87:bc: d3:83:7a:a5:a6:67:a5:a2:df:54:c2:6b:23:12:aa:c2:cb:06: c4:ed:52:a9:d0:38:78:fc:47:75:2d:83:e9:b0:7d:6e:de:f3: 1d:f2:86:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElDA/BUDac1prEtAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDMyMTEzMDA1MFoXDTI1MDYxOTEzMDA1MFowLzEtMCsGA1UEAxMk NzdhNDgwMmYtYzAyZS00YTdmLWFlNjctODQ4MWVkYTI5MDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE5z4+Uf92sNejY3LPWriJIg0wWAZ9N0UdB7 DOaWWuphAuRsbpsnLp/hRhwxvBpnRz4vswmKahskIl4Mww8dwBFwmElP5AL66XjP vViZzn60qi6Rt8oSywdzXjAsJhJfl+HEx3wiAQ/EYsUXmT6oMFZPDHRj0PaNUNIr se2+ZGyQXn9kz76ex2VeF1vxDRsxnwzMwq8r06VLlWegg9kIh3jtdh4BcswGU/vQ 3xOIvoyqynLcV8jO+JXUk1zOgBEAWb6L7KU5fJBmZWy4GgERlyWLmAur7Bl+Vfmq 2BCtWLZG5MydiNs57anB/O8gvFwcAA6KXTCKYy+ufs3vIZOOgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGCg/QBL7in/OP7CUzgweP32r/IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMDJkZjA0MmEtNzgzNy0z MjA2LWFhZWQtMjY1ZGJkN2FkMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtsN9rhP3oAtoQ9QGqmuCHDF3gDA0wDcZuFRwNwUGPEsVxBzK834IvF dBv3//HYifFd0L0dCwffVC0TVmF77fkfjVBNwmWRLA/dpIzPD/aC+V5laGL/9WgH kg4HZD3HBHiXGaFBgKHHrmncqQczxSXTacNd44B7QfTgtZ5s9HMyXbRRcRHPEkTe 6Gsgf0ovzbpUN6bBe5fGYfnwG1YPLIYd54TeNJFpaDgv79qNwbq+WZwPLPhoW8dm 5NcbI6AOtGwgsnVnvBVMpZRTSJ0tzg/vJHA7kl6HvNODeqWmZ6Wi31TCayMSqsLL BsTtUqnQOHj8R3Utg+mwfW7e8x3yhiM= -----END CERTIFICATE-----Generated at Sun Apr 6 06:05:12 2025 by rpki-client