$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/383da4e2-7cce-3739-93cb-6a999f5534e0.roa File: 383da4e2-7cce-3739-93cb-6a999f5534e0.roa (raw, json) Hash identifier: bF2bsvkZiakv+pr/U89gEBkXi7VcONRr1ns4cYNUpco= Subject key identifier: 81:4C:54:B1:01:2A:8A:39:21:B4:19:C0:4D:F1:09:61:5E:5F:C2:78 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848ADC6095CFD1AD25E17145B80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/383da4e2-7cce-3739-93cb-6a999f5534e0.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 19905 IP address blocks: 208.181.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:09:5c:fd:1a:d2:5e:17:14:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=f73cf03d-1763-4da9-a4ae-56864bd5c149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bd:08:3e:4f:1c:b6:ab:93:0a:db:00:2d:5e: 4d:39:7d:c1:c3:b2:50:4b:f7:9d:82:fd:15:06:ab: 56:a6:80:f6:86:6e:98:9f:b3:3a:d9:db:5b:07:84: cb:e7:83:85:1f:ef:c5:d0:a2:4f:bb:34:55:3e:d1: 33:72:8d:05:4d:a1:fa:b3:05:b4:2e:52:4a:f2:1d: 2d:68:15:90:87:81:75:b3:f5:11:a3:25:75:6c:4f: 6a:37:1b:be:6e:46:aa:77:55:4f:96:cf:6f:b5:68: c3:16:04:c1:43:66:da:6e:4e:1e:47:91:56:64:ff: 7d:ec:ef:9b:03:21:3d:93:03:a4:2a:29:e1:c2:e8: 3d:96:cb:8e:80:fd:58:78:40:c2:af:bb:3c:32:8b: c7:55:64:12:80:1a:b7:91:e4:92:03:47:59:fe:0b: 7a:ab:29:b8:79:0e:1f:2d:a1:9b:af:44:7a:a8:f5: 56:f5:e9:5c:1e:d3:c3:6c:fa:e8:79:04:70:2d:e9: 69:63:55:c5:d1:2e:cb:c1:26:2a:e3:78:c5:a5:96: d1:f0:7e:c1:7b:1d:8f:c0:2a:de:03:55:1d:85:67: c9:bf:53:6f:0a:fb:92:dd:51:01:4d:b0:ed:25:d3: 42:94:b5:69:2d:11:0e:2b:10:a4:97:9c:92:6e:fc: 27:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:4C:54:B1:01:2A:8A:39:21:B4:19:C0:4D:F1:09:61:5E:5F:C2:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/383da4e2-7cce-3739-93cb-6a999f5534e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:91:b4:87:a0:08:94:45:ec:73:08:f3:a9:bb:a3:36:0d:df: 2f:75:42:b5:a1:c3:ad:bc:ca:05:50:ca:c0:f2:f8:46:c8:28: 36:80:c7:18:54:7c:d0:b8:7e:1b:63:62:5b:d3:0d:3f:38:44: 5e:5a:89:e1:04:88:be:0f:3b:1a:e0:9b:4c:50:4d:bd:1f:82: b5:ce:76:45:be:9a:27:81:85:02:99:6d:2a:3a:52:39:00:ba: b2:09:3b:35:0c:82:39:03:49:10:3c:34:d9:0d:42:8c:a6:49: 08:d0:ad:ab:96:bb:66:ac:1c:bd:3b:93:3b:f9:0e:6d:09:46: 85:f2:93:c7:cc:39:83:24:71:de:f6:b0:be:16:a8:73:8a:2b: b5:a3:d0:91:35:ca:ef:b2:24:75:69:ba:ef:0c:76:ac:60:8b: d9:4d:30:8e:5c:8a:43:0b:85:db:50:00:e4:cd:c2:59:c5:42: 4d:5c:aa:59:51:a7:7a:9e:38:53:fc:b9:94:9c:4a:e0:46:e3: c2:d6:0b:75:14:4a:28:6f:0a:e0:08:61:0e:4b:48:e6:a5:13: 0f:5d:77:4f:8a:60:7c:e4:cb:1e:40:e8:d3:87:cd:ff:97:6e: fd:01:be:f6:65:1b:41:30:53:34:42:f8:ca:01:3c:b0:69:8a: 66:a8:81:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxglc/RrSXhcUW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk ZjczY2YwM2QtMTc2My00ZGE5LWE0YWUtNTY4NjRiZDVjMTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb0IPk8ctquTCtsALV5NOX3Bw7JQS/edgv0V BqtWpoD2hm6Yn7M62dtbB4TL54OFH+/F0KJPuzRVPtEzco0FTaH6swW0LlJK8h0t aBWQh4F1s/URoyV1bE9qNxu+bkaqd1VPls9vtWjDFgTBQ2babk4eR5FWZP997O+b AyE9kwOkKinhwug9lsuOgP1YeEDCr7s8MovHVWQSgBq3keSSA0dZ/gt6qym4eQ4f LaGbr0R6qPVW9elcHtPDbProeQRwLelpY1XF0S7LwSYq43jFpZbR8H7Bex2PwCre A1UdhWfJv1NvCvuS3VEBTbDtJdNClLVpLREOKxCkl5ySbvwn+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFMVLEBKoo5IbQZwE3xCWFeX8J4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzgzZGE0ZTItN2NjZS0z NzM5LTkzY2ItNmE5OTlmNTUzNGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0LVlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+RtIegCJRF7HMI86m7ozYN3y91QrWhw628ygVQysDy+EbIKDaAxxhU fNC4fhtjYlvTDT84RF5aieEEiL4POxrgm0xQTb0fgrXOdkW+mieBhQKZbSo6UjkA urIJOzUMgjkDSRA8NNkNQoymSQjQrauWu2asHL07kzv5Dm0JRoXyk8fMOYMkcd72 sL4WqHOKK7Wj0JE1yu+yJHVpuu8Mdqxgi9lNMI5cikMLhdtQAOTNwlnFQk1cqllR p3qeOFP8uZScSuBG48LWC3UUSihvCuAIYQ5LSOalEw9dd0+KYHzkyx5A6NOHzf+X bv0BvvZlG0EwUzRC+MoBPLBpimaogco= -----END CERTIFICATE-----Generated at Fri Apr 11 23:28:21 2025 by rpki-client