$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b43a3f2-d9b2-3134-88cf-1563d35e6541.roa File: 3b43a3f2-d9b2-3134-88cf-1563d35e6541.roa (raw, json) Hash identifier: lVI/TFPUGnvRFujYG7hvuqkaIxl2GQv+RA/NiRv9rFY= Subject key identifier: 16:64:7E:F5:08:B8:B2:49:C8:98:A1:BB:4D:35:5C:1B:B6:BE:FE:4B Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848ADC611D2B5BC6F50632B0880 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b43a3f2-d9b2-3134-88cf-1563d35e6541.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 376 IP address blocks: 205.250.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:11:d2:b5:bc:6f:50:63:2b:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=a0efa2b5-c9e9-46dc-a2dc-c67503c23895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:23:65:12:3a:db:21:93:2f:1e:77:df:24:2c: da:c2:13:55:d0:a7:02:c7:d3:1e:a6:fa:68:80:ef: c4:a4:e7:27:90:90:93:eb:c9:82:69:62:b1:67:ba: d7:4a:dc:9d:3f:3d:64:00:30:55:42:3b:1c:46:7b: 8e:89:27:3a:95:c2:bc:20:fc:f3:55:86:97:f6:3f: bf:ea:90:c1:20:da:fd:d2:1f:f9:d1:e4:d3:37:50: 44:63:42:8a:b7:8a:c0:12:db:a1:74:c2:2d:c6:42: 04:7f:3c:ef:75:09:6a:2d:ab:c9:e4:db:70:54:0e: 06:bb:8b:7c:8d:a6:6b:c2:d6:3c:5f:a0:c9:fd:e4: ea:b7:4e:a3:41:b1:e0:d8:af:b2:f1:79:e6:fe:9e: df:8e:62:cb:b0:66:8f:f5:f5:bb:53:bf:5a:35:41: 52:2c:bc:ae:6d:6a:21:de:5a:16:41:c9:1c:77:fe: a7:fd:9c:05:8d:79:b4:35:5b:cf:48:90:7f:1a:fd: ac:e9:06:ea:af:57:63:5b:2f:7e:9c:a6:9b:0e:b6: a0:ce:1c:82:80:a2:61:fd:fb:3a:16:30:eb:5a:a2: 86:38:85:03:1f:e3:de:09:f6:82:57:6c:e3:97:a2: 4f:e0:ec:30:a9:66:66:a1:26:1a:0a:0c:13:29:54: 88:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:64:7E:F5:08:B8:B2:49:C8:98:A1:BB:4D:35:5C:1B:B6:BE:FE:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b43a3f2-d9b2-3134-88cf-1563d35e6541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 205.250.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:32:2b:25:f4:5b:93:ea:35:27:04:0a:e9:94:55:0a:8a:bf: 46:1b:9a:fc:46:02:5d:df:16:77:08:36:ec:20:f8:c3:e6:c6: 06:16:be:2e:5c:60:38:34:68:46:5e:bf:c9:66:f9:06:d7:3f: 30:b6:0c:55:ae:d7:78:ca:87:b8:b6:7f:04:7a:19:4e:78:92: d9:ff:83:b2:3e:80:7c:77:d3:a4:80:9c:64:a0:52:97:59:07: ef:ae:5e:d0:ba:fb:c5:b9:b2:a3:f6:17:c0:e6:2a:e4:15:a7: c1:e6:0b:48:92:ba:6b:e9:7c:a6:d8:66:61:4f:7a:20:5c:d4: 4c:07:fd:17:09:97:ee:e2:c1:92:cb:00:ec:e5:c2:eb:86:0a: f4:08:0c:36:eb:bb:8b:27:fa:26:fd:f7:72:93:48:aa:6c:b4: 52:64:27:77:cd:39:86:4a:0a:ba:17:40:e7:f7:1d:b7:89:18: 32:dc:4d:8c:ca:0f:61:27:1e:bf:ba:6d:f8:b4:ff:bc:de:6b: 72:77:be:2c:2d:81:70:d7:48:0a:d8:31:fc:0f:7c:1b:b6:52: 60:7d:60:fd:30:f2:de:9d:fd:63:d6:53:62:1f:83:db:e6:89: 34:c1:30:3d:e0:4a:e4:8b:bd:63:f6:ec:34:b3:70:95:14:bd: 7a:71:38:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxhHStbxvUGMrCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk YTBlZmEyYjUtYzllOS00NmRjLWEyZGMtYzY3NTAzYzIzODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiNlEjrbIZMvHnffJCzawhNV0KcCx9Mepvpo gO/EpOcnkJCT68mCaWKxZ7rXStydPz1kADBVQjscRnuOiSc6lcK8IPzzVYaX9j+/ 6pDBINr90h/50eTTN1BEY0KKt4rAEtuhdMItxkIEfzzvdQlqLavJ5NtwVA4Gu4t8 jaZrwtY8X6DJ/eTqt06jQbHg2K+y8Xnm/p7fjmLLsGaP9fW7U79aNUFSLLyubWoh 3loWQckcd/6n/ZwFjXm0NVvPSJB/Gv2s6Qbqr1djWy9+nKabDragzhyCgKJh/fs6 FjDrWqKGOIUDH+PeCfaCV2zjl6JP4OwwqWZmoSYaCgwTKVSIqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZkfvUIuLJJyJihu001XBu2vv5LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2I0M2EzZjItZDliMi0z MTM0LTg4Y2YtMTU2M2QzNWU2NTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzfrCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0yKyX0W5PqNScECumUVQqKv0YbmvxGAl3fFncINuwg+MPmxgYWvi5c YDg0aEZev8lm+QbXPzC2DFWu13jKh7i2fwR6GU54ktn/g7I+gHx306SAnGSgUpdZ B++uXtC6+8W5sqP2F8DmKuQVp8HmC0iSumvpfKbYZmFPeiBc1EwH/RcJl+7iwZLL AOzlwuuGCvQIDDbru4sn+ib993KTSKpstFJkJ3fNOYZKCroXQOf3HbeJGDLcTYzK D2EnHr+6bfi0/7zea3J3viwtgXDXSArYMfwPfBu2UmB9YP0w8t6d/WPWU2Ifg9vm iTTBMD3gSuSLvWP27DSzcJUUvXpxOLE= -----END CERTIFICATE-----Generated at Sun Feb 16 20:27:37 2025 by rpki-client