$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1d5ccce0-3d9c-3565-8482-9f9e6d67c048.roa File: 1d5ccce0-3d9c-3565-8482-9f9e6d67c048.roa (raw, json) Hash identifier: eFqbRwRgu6z8bIiKTVSRo6tIq+WhgzMLUGrZ2UsxCOw= Subject key identifier: 6C:F6:89:73:BE:72:40:36:FE:C4:9A:0D:5C:6B:60:3F:03:56:58:D3 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B6261043DAD174FD13706300 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1d5ccce0-3d9c-3565-8482-9f9e6d67c048.roa Signing time: Thu 30 Jan 2025 02:00:40 +0000 ROA not before: Thu 30 Jan 2025 02:00:40 +0000 ROA not after: Wed 30 Apr 2025 01:00:40 +0000 asID: 852 IP address blocks: 199.84.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:26:10:43:da:d1:74:fd:13:70:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 30 02:00:40 2025 GMT Not After : Apr 30 01:00:40 2025 GMT Subject: CN=b2b5800f-7142-4279-abc7-b2301513da2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ea:88:0d:2f:a7:bb:e3:ce:d4:3d:18:97:09: 46:2d:78:91:4e:04:89:dd:af:e4:6b:b4:20:c3:9f: a4:db:a7:19:16:61:44:b6:27:19:1f:67:57:60:4e: cc:63:b5:f4:aa:be:19:3c:fd:e6:c0:79:7d:1b:77: fa:25:0e:c7:c9:42:66:d7:24:42:ee:dc:20:d7:82: a8:de:a0:1a:e1:44:a7:f8:97:4f:67:62:7c:a1:04: 65:39:b0:9e:87:e0:41:79:83:ea:8a:e0:64:13:5c: 6b:03:4d:d1:30:d0:af:26:97:ea:84:e6:9f:85:11: 34:f7:94:35:75:8c:e9:44:89:66:b5:55:b4:8a:76: 7b:98:94:31:b2:ea:59:05:4f:92:7d:1d:e0:a7:8d: 1c:68:8c:6b:44:e6:5f:76:32:78:c5:f3:20:52:0f: 39:86:a4:36:38:03:a1:06:0a:8b:f0:c1:f8:76:37: 6d:7a:76:f6:93:a4:29:b7:da:4f:e9:f3:dd:ae:4f: 08:8b:85:b7:38:e1:b8:10:cc:15:c9:55:50:71:bd: 77:be:40:08:37:ce:17:1d:0f:ce:07:d8:30:a8:6a: 03:02:4d:73:b4:03:ac:6f:03:35:0c:2f:39:ff:97: 7e:d0:ad:92:4d:ca:1e:91:ba:b6:13:04:33:b2:61: 78:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F6:89:73:BE:72:40:36:FE:C4:9A:0D:5C:6B:60:3F:03:56:58:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1d5ccce0-3d9c-3565-8482-9f9e6d67c048.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 199.84.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:0a:b9:76:b7:13:2c:ac:78:d9:dc:24:45:0a:14:d7:9f:8f: ef:ba:9c:e8:0d:d1:df:4e:ab:91:aa:79:31:f4:34:87:60:cc: 7b:9b:91:c3:c5:73:55:2f:02:7f:c2:d0:7d:20:81:cb:f3:06: d0:e6:45:0a:e7:48:f0:8d:56:24:64:e4:17:45:96:eb:7d:8d: 53:89:71:2c:e7:b8:df:8d:95:14:47:11:f3:53:0b:a1:81:50: 85:27:f3:4b:4b:56:7e:45:d9:dc:5a:71:b3:4c:1d:31:1e:2e: 9d:63:05:23:5c:cd:7e:ff:3a:02:48:12:53:98:fe:b7:80:98: 1d:08:34:fc:5b:4a:43:86:26:6b:65:e0:f2:d2:85:3a:54:fa: 0a:02:00:ae:a6:3e:74:01:ca:c0:cb:e8:78:61:f5:53:0a:7b: 59:3b:8e:ac:78:15:04:5f:ed:23:99:a0:aa:04:ae:86:35:9b: 01:5b:1e:ba:65:9a:0d:fb:94:d1:11:dd:91:6a:99:97:c0:58: d1:d0:37:a5:97:72:a2:66:b5:28:0e:d1:1c:0b:63:fc:56:a9: b7:31:29:8f:00:44:bb:db:93:e5:0c:f8:5c:f4:6c:d0:fd:e8: f3:b2:37:db:e0:2e:f0:ab:c4:01:08:04:2f:a2:21:3f:0e:28: df:d9:cf:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi2JhBD2tF0/RNwYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEzMDAyMDA0MFoXDTI1MDQzMDAxMDA0MFowLzEtMCsGA1UEAxMk YjJiNTgwMGYtNzE0Mi00Mjc5LWFiYzctYjIzMDE1MTNkYTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOqIDS+nu+PO1D0YlwlGLXiRTgSJ3a/ka7Qg w5+k26cZFmFEticZH2dXYE7MY7X0qr4ZPP3mwHl9G3f6JQ7HyUJm1yRC7twg14Ko 3qAa4USn+JdPZ2J8oQRlObCeh+BBeYPqiuBkE1xrA03RMNCvJpfqhOafhRE095Q1 dYzpRIlmtVW0inZ7mJQxsupZBU+SfR3gp40caIxrROZfdjJ4xfMgUg85hqQ2OAOh BgqL8MH4djdtenb2k6Qpt9pP6fPdrk8Ii4W3OOG4EMwVyVVQcb13vkAIN84XHQ/O B9gwqGoDAk1ztAOsbwM1DC85/5d+0K2STcoekbq2EwQzsmF4jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGz2iXO+ckA2/sSaDVxrYD8DVljTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMWQ1Y2NjZTAtM2Q5Yy0z NTY1LTg0ODItOWY5ZTZkNjdjMDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1TyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkKuXa3EyyseNncJEUKFNefj++6nOgN0d9Oq5GqeTH0NIdgzHubkcPF c1UvAn/C0H0ggcvzBtDmRQrnSPCNViRk5BdFlut9jVOJcSznuN+NlRRHEfNTC6GB UIUn80tLVn5F2dxacbNMHTEeLp1jBSNczX7/OgJIElOY/reAmB0INPxbSkOGJmtl 4PLShTpU+goCAK6mPnQBysDL6Hhh9VMKe1k7jqx4FQRf7SOZoKoEroY1mwFbHrpl mg37lNER3ZFqmZfAWNHQN6WXcqJmtSgO0RwLY/xWqbcxKY8ARLvbk+UM+Fz0bND9 6POyN9vgLvCrxAEIBC+iIT8OKN/Zz3M= -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:56 2025 by rpki-client