$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3457cbf8-275f-3daa-96d5-6ee8d534386e.roa File: 3457cbf8-275f-3daa-96d5-6ee8d534386e.roa (raw, json) Hash identifier: jrNp2vn7xouyWA0tSBefEAItieJYOH+cVXp5Z0n9OOE= Subject key identifier: 8F:5A:17:CE:CF:7A:81:89:3E:66:87:47:5B:01:14:52:F5:97:61:A8 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848BBBB7D0BCD24436EC4183680 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3457cbf8-275f-3daa-96d5-6ee8d534386e.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 852 IP address blocks: 137.186.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:7d:0b:cd:24:43:6e:c4:18:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=a419c23c-e01e-4a51-99d9-d53d59b9af74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:93:24:6a:57:de:a1:c2:0f:e5:b4:db:53:57: 24:14:11:30:02:18:0b:05:b9:88:68:f9:19:d0:a5: 2f:1b:6d:f8:e0:b3:c5:8e:54:cd:d0:6a:a1:e1:4d: 2a:05:01:fd:e3:dd:db:69:a3:f5:99:e0:61:3b:47: 86:31:c4:86:58:81:10:9f:f5:63:64:ce:84:4d:10: 3c:ab:7c:20:39:f1:67:81:f5:47:03:2a:e4:76:36: 4f:09:6e:d6:ab:05:da:e1:f1:75:4f:5b:c5:0f:7e: 25:a3:fb:63:2c:8b:c5:01:1b:5b:45:67:90:84:63: b3:5b:2c:9d:d7:d2:09:8b:ba:7d:a2:6f:e9:58:ac: a9:8e:5e:27:7c:47:fb:82:87:3b:df:b8:eb:6d:ec: c5:2a:2d:f7:e7:eb:3f:74:ea:98:c5:0f:43:01:d5: b3:6f:31:8e:c2:81:bb:b0:e7:a6:1b:2c:e6:aa:1e: fa:43:51:f6:a0:6e:1b:25:f5:58:b2:d0:60:f7:4f: bf:cd:5b:69:4b:77:70:98:65:62:99:9c:32:aa:07: 32:f1:0b:ec:a1:d8:0c:ae:a2:35:09:f6:7a:b9:81: 1d:56:c2:af:4f:46:3f:2a:a2:96:70:da:d7:dc:e4: 8c:e4:4c:c9:9f:52:bb:d0:9e:73:df:80:6e:54:99: 4e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:5A:17:CE:CF:7A:81:89:3E:66:87:47:5B:01:14:52:F5:97:61:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3457cbf8-275f-3daa-96d5-6ee8d534386e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 137.186.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:2f:a5:f6:fa:1f:86:e3:84:fb:16:a4:e7:74:92:14:7b:ab: 88:06:39:64:72:65:7e:a8:1c:8c:77:57:7c:c5:21:02:01:a9: 15:48:1b:b3:49:f9:5a:0b:fa:75:34:3e:6f:2b:93:ad:d3:fc: 9d:41:fd:57:ce:16:14:29:9a:04:dd:fd:4d:53:ba:24:23:fd: e9:05:38:ea:b5:75:85:b2:91:2d:aa:40:b2:4a:7e:25:39:1e: 1d:82:49:63:c9:f1:ec:d2:0e:a4:fc:03:d2:86:59:9e:e2:e8: 33:77:59:92:a6:fa:d5:43:5b:74:e5:bc:d7:74:b1:68:b0:d0: 39:4f:90:3d:56:7e:ac:49:72:5f:45:60:51:90:46:f1:b2:c6: 74:2a:7a:1a:01:90:8e:7a:fa:03:98:0f:bd:a2:d0:ce:4d:6c: e3:30:ee:27:6c:ac:82:46:b6:b5:d3:c4:bb:9d:18:df:f5:22: 07:97:7d:3e:47:3e:94:0f:9e:a2:4f:bc:ec:18:d3:c4:79:f8: ca:14:14:cb:2a:fe:fc:a0:7e:45:c3:17:ec:12:29:a5:48:3a: 8a:6b:3e:53:88:7a:cb:63:35:5d:78:0b:58:f3:fa:49:99:8c: 60:fc:9e:d9:4b:52:56:ad:70:20:65:76:a2:06:7a:7c:49:d7: 7e:2b:49:32 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEi7u30LzSRDbsQYNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk YTQxOWMyM2MtZTAxZS00YTUxLTk5ZDktZDUzZDU5YjlhZjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pMkalfeocIP5bTbU1ckFBEwAhgLBbmIaPkZ 0KUvG2344LPFjlTN0Gqh4U0qBQH9493baaP1meBhO0eGMcSGWIEQn/VjZM6ETRA8 q3wgOfFngfVHAyrkdjZPCW7WqwXa4fF1T1vFD34lo/tjLIvFARtbRWeQhGOzWyyd 19IJi7p9om/pWKypjl4nfEf7goc737jrbezFKi335+s/dOqYxQ9DAdWzbzGOwoG7 sOemGyzmqh76Q1H2oG4bJfVYstBg90+/zVtpS3dwmGVimZwyqgcy8QvsodgMrqI1 CfZ6uYEdVsKvT0Y/KqKWcNrX3OSM5EzJn1K70J5z34BuVJlOpwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFI9aF87PeoGJPmaHR1sBFFL1l2GoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzQ1N2NiZjgtMjc1Zi0z ZGFhLTk2ZDUtNmVlOGQ1MzQzODZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAibowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAvS+l9vofhuOE+xak53SSFHuriAY5ZHJlfqgcjHdXfMUhAgGpFUgbs0n5 Wgv6dTQ+byuTrdP8nUH9V84WFCmaBN39TVO6JCP96QU46rV1hbKRLapAskp+JTke HYJJY8nx7NIOpPwD0oZZnuLoM3dZkqb61UNbdOW813SxaLDQOU+QPVZ+rElyX0Vg UZBG8bLGdCp6GgGQjnr6A5gPvaLQzk1s4zDuJ2ysgka2tdPEu50Y3/UiB5d9Pkc+ lA+eok+87BjTxHn4yhQUyyr+/KB+RcMX7BIppUg6ims+U4h6y2M1XXgLWPP6SZmM YPye2UtSVq1wIGV2ogZ6fEnXfitJMg== -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:38 2025 by rpki-client