$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0adb33de-3dc5-3875-b62c-4af8c925e837.roa File: 0adb33de-3dc5-3875-b62c-4af8c925e837.roa (raw, json) Hash identifier: em/8kt32eeVi/BQCn5EdIGm2eBnpn/EnCMffQXB8y78= Subject key identifier: 6B:EF:47:CE:F5:67:11:03:9E:99:4F:2F:EB:A1:69:20:72:14:AF:72 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B8F0C9606745B0338119BA00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0adb33de-3dc5-3875-b62c-4af8c925e837.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 852 IP address blocks: 173.181.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:c9:60:67:45:b0:33:81:19:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=938b1b3c-a589-4f84-97c7-6296017703d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:85:09:32:16:e1:7b:d6:6f:34:26:1e:2f:b7: 6d:24:07:31:ad:d7:26:36:5d:3f:63:2d:8d:cb:34: 5f:d6:13:94:d2:29:fd:6c:94:60:c1:bb:f7:ea:07: 8b:67:b2:8b:9c:29:50:78:27:70:8e:0e:b0:ab:a0: cc:e9:3d:4d:82:17:69:10:8e:26:be:5a:88:bb:1b: 2e:b8:f1:ed:b9:5f:79:38:90:63:1a:04:b8:8e:8f: 54:dc:c3:79:40:48:75:d3:09:04:b9:23:b7:ee:be: a6:67:0e:8b:a8:c3:87:d8:83:96:df:28:29:c2:01: 72:b1:73:7a:f2:77:90:d7:89:52:77:9e:03:6e:a1: d6:e3:af:2f:67:e5:d6:43:72:3c:a2:69:b2:d5:39: 2d:cd:88:9b:6b:2c:93:af:27:73:5d:18:d3:88:b1: db:b0:39:d9:3c:ba:d1:5f:d8:11:02:51:b5:e5:49: f3:61:80:96:1e:8b:f5:f1:58:c3:82:f3:9d:4f:22: b2:6c:bb:84:2f:bd:17:20:7e:d0:d6:0a:04:4c:de: 83:87:28:38:29:ae:9d:19:e2:8f:a1:56:49:4e:ae: 24:32:f2:f5:32:d8:62:b0:67:27:e9:dd:0d:b9:37: c1:ee:af:a8:cb:ec:01:53:4c:bf:2d:4c:5b:98:d5: d6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:EF:47:CE:F5:67:11:03:9E:99:4F:2F:EB:A1:69:20:72:14:AF:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0adb33de-3dc5-3875-b62c-4af8c925e837.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 173.181.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:cf:ce:ab:da:1f:04:a3:ca:26:b0:41:f5:e4:bc:0a:02:77: 70:9a:0f:d9:ec:67:8d:b1:4e:01:2b:73:c1:5c:57:5a:ca:ab: 43:7e:bb:41:df:d8:dd:91:6d:ea:4e:20:6f:e1:9f:de:17:01: 10:45:d1:43:f2:25:73:f2:ae:5e:7a:5f:57:60:62:fa:b5:09: 6f:5f:d6:cf:08:26:c6:b3:bc:b5:00:2b:4a:3a:68:5a:5d:1f: 5f:ed:90:a8:a0:14:d1:67:b2:83:7b:f9:11:9f:be:ee:e1:23: 68:10:5d:e4:a9:ea:1f:67:e3:86:04:b4:2e:6d:02:79:aa:cc: ff:e8:de:bb:62:d8:b4:d6:70:af:68:d5:3d:0e:8d:7b:b0:95: c8:05:42:b4:e4:3c:0d:ed:df:bd:cf:a1:c4:80:ad:f9:21:55: 60:89:3c:50:96:ed:0c:29:9e:dd:8d:48:1c:18:0e:7c:a8:5d: b7:6f:84:9c:5d:d9:20:6f:27:91:63:39:02:81:c8:64:e9:18: 75:ee:ce:9d:10:6c:6c:af:c0:73:6d:17:77:02:e2:84:d1:94: b7:82:cb:2a:58:6d:e5:e6:bc:1b:e0:0f:9f:22:23:d7:c7:8b: 73:aa:41:24:d1:5e:30:83:06:c6:0c:d3:1f:95:58:df:89:b0: 48:4e:25:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48MlgZ0WwM4EZugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk OTM4YjFiM2MtYTU4OS00Zjg0LTk3YzctNjI5NjAxNzcwM2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44UJMhbhe9ZvNCYeL7dtJAcxrdcmNl0/Yy2N yzRf1hOU0in9bJRgwbv36geLZ7KLnClQeCdwjg6wq6DM6T1NghdpEI4mvlqIuxsu uPHtuV95OJBjGgS4jo9U3MN5QEh10wkEuSO37r6mZw6LqMOH2IOW3ygpwgFysXN6 8neQ14lSd54DbqHW468vZ+XWQ3I8ommy1TktzYibayyTrydzXRjTiLHbsDnZPLrR X9gRAlG15UnzYYCWHov18VjDgvOdTyKybLuEL70XIH7Q1goETN6Dhyg4Ka6dGeKP oVZJTq4kMvL1MthisGcn6d0NuTfB7q+oy+wBU0y/LUxbmNXW3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvvR871ZxEDnplPL+uhaSByFK9yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMGFkYjMzZGUtM2RjNS0z ODc1LWI2MmMtNGFmOGM5MjVlODM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbWUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbPzqvaHwSjyiawQfXkvAoCd3CaD9nsZ42xTgErc8FcV1rKq0N+u0Hf 2N2RbepOIG/hn94XARBF0UPyJXPyrl56X1dgYvq1CW9f1s8IJsazvLUAK0o6aFpd H1/tkKigFNFnsoN7+RGfvu7hI2gQXeSp6h9n44YEtC5tAnmqzP/o3rti2LTWcK9o 1T0OjXuwlcgFQrTkPA3t373PocSArfkhVWCJPFCW7Qwpnt2NSBwYDnyoXbdvhJxd 2SBvJ5FjOQKByGTpGHXuzp0QbGyvwHNtF3cC4oTRlLeCyypYbeXmvBvgD58iI9fH i3OqQSTRXjCDBsYM0x+VWN+JsEhOJXQ= -----END CERTIFICATE-----Generated at Sun Apr 6 06:04:59 2025 by rpki-client