$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1fbae556-b2fb-3db2-b00d-cba5e4368cc9.roa File: 1fbae556-b2fb-3db2-b00d-cba5e4368cc9.roa (raw, json) Hash identifier: W3s4co3P7lXlLhAOc81hF/E7+7a97vh1j4eLBJSGBw4= Subject key identifier: F5:55:B1:C9:86:E5:C5:9E:03:C3:82:CF:38:91:1B:49:A9:41:A7:01 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848A9962077C32A35DC072E7A60 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1fbae556-b2fb-3db2-b00d-cba5e4368cc9.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 25668 IP address blocks: 207.34.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:20:77:c3:2a:35:dc:07:2e:7a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=03239a13-9015-4b99-8304-70cb6ca6aa30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:02:18:fb:b0:76:51:bd:91:5f:71:83:f9:11: 21:33:b3:4a:92:f5:13:9b:4d:b2:a3:05:53:d7:4f: 01:66:17:79:0e:68:4f:28:5e:a1:a7:ba:51:00:e1: bd:25:4b:b1:9d:1e:c8:d6:20:75:b8:03:84:f0:57: 52:c4:8d:a9:2d:2c:92:19:d8:70:85:99:46:72:d9: 12:04:ec:a3:9b:ef:c7:f7:8c:f7:cf:4a:64:fc:9c: 42:33:9f:59:0e:14:ce:cd:a6:ef:99:a6:25:7b:61: f4:45:56:1e:26:39:a2:0e:e0:6d:bb:1b:28:6d:08: bc:1b:e7:4c:51:8d:df:5c:c8:83:63:14:87:89:e7: a1:72:5f:1e:5b:af:92:b9:2c:3e:39:d8:35:35:b3: 05:56:cc:8e:18:ca:d4:0c:3e:9c:28:91:a6:fe:10: b2:95:d3:3c:aa:0d:74:0f:92:ad:30:21:bf:55:9c: d7:88:90:e6:e1:8c:b5:fc:56:71:74:db:d9:a5:f6: 14:bd:3b:8a:60:2f:77:3d:ed:51:4c:0b:53:92:ad: d4:b9:1b:1c:70:59:46:a6:ac:bd:69:b8:27:09:9f: 47:bd:f4:01:4a:47:59:16:5c:c5:c5:42:06:ba:bd: 04:2d:41:1d:0a:c1:5d:e7:1d:cb:80:eb:fc:fa:8d: e6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:55:B1:C9:86:E5:C5:9E:03:C3:82:CF:38:91:1B:49:A9:41:A7:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1fbae556-b2fb-3db2-b00d-cba5e4368cc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.34.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:b1:88:73:e9:4a:41:3b:95:e5:c7:cf:eb:7b:ed:99:ae:3b: dc:20:cb:27:ed:d3:5c:1b:77:10:b5:26:0e:12:f1:ed:e7:a7: 9b:e7:69:fc:39:38:96:80:4a:1f:0e:80:46:53:54:f1:9f:b2: ca:6e:5c:46:49:ac:c6:9a:56:ba:0a:cf:4a:36:24:a2:bf:4f: be:b0:3c:4b:af:10:0c:4d:d1:96:c8:da:8d:e2:49:45:76:ee: 28:c4:64:e3:e8:9f:44:79:0e:03:68:b3:8d:dc:15:17:93:0d: 72:d9:32:c1:64:01:f5:80:c2:f5:87:18:56:4d:9f:1d:eb:06: ca:c3:b9:ad:fa:99:c3:80:76:42:cd:91:c7:a4:4a:11:33:11: 49:e7:2a:33:88:a1:3f:b4:d4:8e:33:a4:e7:aa:3d:ad:b4:ed: 2c:14:01:95:0b:22:39:0e:eb:7f:bb:71:d0:79:4f:74:56:46: 51:67:7c:70:4a:6b:fb:24:c6:d3:16:9e:43:dd:fa:f6:38:92: b3:e7:68:cc:d1:08:0f:c1:bc:98:4b:27:4c:e8:66:50:56:99: 71:69:89:33:c1:c5:44:7f:cf:24:5e:78:56:fb:b0:8b:01:ab: 8f:6f:de:95:e4:4d:16:7f:37:e4:b6:7d:5d:0e:97:7f:96:e2: 94:35:92:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipliB3wyo13AcuemAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MDMyMzlhMTMtOTAxNS00Yjk5LTgzMDQtNzBjYjZjYTZhYTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQIY+7B2Ub2RX3GD+REhM7NKkvUTm02yowVT 108BZhd5DmhPKF6hp7pRAOG9JUuxnR7I1iB1uAOE8FdSxI2pLSySGdhwhZlGctkS BOyjm+/H94z3z0pk/JxCM59ZDhTOzabvmaYle2H0RVYeJjmiDuBtuxsobQi8G+dM UY3fXMiDYxSHieehcl8eW6+SuSw+Odg1NbMFVsyOGMrUDD6cKJGm/hCyldM8qg10 D5KtMCG/VZzXiJDm4Yy1/FZxdNvZpfYUvTuKYC93Pe1RTAtTkq3UuRsccFlGpqy9 abgnCZ9HvfQBSkdZFlzFxUIGur0ELUEdCsFd5x3LgOv8+o3mXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVVscmG5cWeA8OCzziRG0mpQacBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMWZiYWU1NTYtYjJmYi0z ZGIyLWIwMGQtY2JhNWU0MzY4Y2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzyKUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuxiHPpSkE7leXHz+t77ZmuO9wgyyft01wbdxC1Jg4S8e3np5vnafw5 OJaASh8OgEZTVPGfsspuXEZJrMaaVroKz0o2JKK/T76wPEuvEAxN0ZbI2o3iSUV2 7ijEZOPon0R5DgNos43cFReTDXLZMsFkAfWAwvWHGFZNnx3rBsrDua36mcOAdkLN kcekShEzEUnnKjOIoT+01I4zpOeqPa207SwUAZULIjkO63+7cdB5T3RWRlFnfHBK a/skxtMWnkPd+vY4krPnaMzRCA/BvJhLJ0zoZlBWmXFpiTPBxUR/zyReeFb7sIsB q49v3pXkTRZ/N+S2fV0Ol3+W4pQ1kos= -----END CERTIFICATE-----Generated at Fri Apr 11 23:55:26 2025 by rpki-client