$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3d98b180-c14e-32ba-a412-5f2a48cff052.roa File: 3d98b180-c14e-32ba-a412-5f2a48cff052.roa (raw, json) Hash identifier: avLVPeqbd6LupQr9HEOObQsZpaGK/eSwrg5hxSAsnCM= Subject key identifier: 7A:BB:CD:53:EE:F3:7B:AF:A9:B1:94:B8:43:D4:D5:33:92:89:65:36 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848ADC60B5C36FE388013D6D600 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3d98b180-c14e-32ba-a412-5f2a48cff052.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 15247 IP address blocks: 208.181.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:0b:5c:36:fe:38:80:13:d6:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=46e3b16b-f569-4f9c-a017-6362e2d78b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:aa:09:3f:8b:7d:4c:8e:58:d1:18:89:37:d6: ea:6c:88:d8:fc:97:f0:1e:e7:52:c6:f5:61:d7:ae: ae:30:0d:03:f4:32:f2:b8:a8:0d:a5:b4:84:39:60: e7:3b:9a:16:ed:7e:c3:c1:db:af:88:03:6a:68:cd: 1e:9a:b8:c2:1e:a1:97:87:fe:6c:c3:95:9c:cc:37: 6e:40:b2:8d:28:17:3d:14:4a:f7:af:ee:3f:e0:ad: a8:3e:48:8f:12:fc:09:40:6f:60:e2:47:97:a8:e4: 8b:09:82:36:5d:c2:0f:04:2b:0d:37:87:91:ab:49: 29:49:c7:19:32:d6:3a:62:b7:f5:fc:e8:01:fb:bf: a5:fa:ee:0c:9b:26:21:a0:35:f6:8a:c3:ec:0f:67: 05:23:0c:17:89:0e:84:e2:e9:41:45:34:77:04:d1: 0b:fb:9d:02:8f:74:13:e6:3b:90:42:26:1d:61:f5: 93:f4:f5:79:ac:96:50:08:8b:f3:e0:8d:50:3d:8a: d4:ca:a6:6a:bf:0b:29:c3:41:19:06:41:2c:62:61: 2e:13:8b:db:82:6e:27:d5:9f:cd:ff:21:a1:a4:0b: ee:bf:6f:57:3f:17:7b:f2:26:45:15:82:ff:3f:a3: 6c:10:d2:eb:4b:06:bb:04:51:74:b8:a3:3d:f0:68: 5f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BB:CD:53:EE:F3:7B:AF:A9:B1:94:B8:43:D4:D5:33:92:89:65:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3d98b180-c14e-32ba-a412-5f2a48cff052.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:34:07:58:bf:0e:cb:dc:c2:54:b9:48:ce:31:5b:4d:7d:bf: d0:68:23:23:01:3b:28:8c:2f:e1:ba:e0:7d:78:dc:82:d6:ee: 0c:8c:a5:43:4a:8c:5c:c3:b7:1b:a3:eb:58:21:54:19:cd:46: 16:60:b7:83:5c:a0:e2:af:fc:d6:27:42:a8:ba:79:6a:f4:53: 07:2c:f7:d3:f2:b3:d5:73:ae:6f:87:ba:80:15:1d:b1:34:32: 58:e2:47:13:52:b0:5e:ac:32:73:36:c2:7c:48:e3:2e:44:c1: c4:9b:8a:7d:41:e2:38:03:c5:8a:45:e0:1e:5d:c4:8e:d1:63: 45:63:97:de:eb:72:de:76:64:6a:6a:ff:4e:fe:3f:73:2c:ca: 67:03:71:ee:dc:62:d7:a2:bb:fa:c4:af:68:07:67:f7:a6:07: 29:b9:51:db:96:a6:2a:4f:58:dd:4e:f2:56:c1:47:c6:bc:58: cc:24:0b:01:15:c1:3a:c6:5b:0a:84:23:ff:3a:fc:99:45:4d: 7b:72:9d:3a:00:00:4b:23:d1:36:b7:bc:c8:82:34:3a:70:7e: a1:c1:67:41:88:e7:34:7e:9d:e7:44:26:75:7c:2d:45:d3:e6: 2d:e0:d2:98:eb:e9:cd:d3:b0:ed:65:54:4d:3e:81:dc:d0:cf: 7d:02:d7:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxgtcNv44gBPW1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk NDZlM2IxNmItZjU2OS00ZjljLWEwMTctNjM2MmUyZDc4YjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6oJP4t9TI5Y0RiJN9bqbIjY/JfwHudSxvVh 166uMA0D9DLyuKgNpbSEOWDnO5oW7X7DwduviANqaM0emrjCHqGXh/5sw5WczDdu QLKNKBc9FEr3r+4/4K2oPkiPEvwJQG9g4keXqOSLCYI2XcIPBCsNN4eRq0kpSccZ MtY6Yrf1/OgB+7+l+u4MmyYhoDX2isPsD2cFIwwXiQ6E4ulBRTR3BNEL+50Cj3QT 5juQQiYdYfWT9PV5rJZQCIvz4I1QPYrUyqZqvwspw0EZBkEsYmEuE4vbgm4n1Z/N /yGhpAvuv29XPxd78iZFFYL/P6NsENLrSwa7BFF0uKM98GhfZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHq7zVPu83uvqbGUuEPU1TOSiWU2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2Q5OGIxODAtYzE0ZS0z MmJhLWE0MTItNWYyYTQ4Y2ZmMDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0LXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFE0B1i/DsvcwlS5SM4xW019v9BoIyMBOyiML+G64H143ILW7gyMpUNK jFzDtxuj61ghVBnNRhZgt4NcoOKv/NYnQqi6eWr0Uwcs99Pys9Vzrm+HuoAVHbE0 MljiRxNSsF6sMnM2wnxI4y5EwcSbin1B4jgDxYpF4B5dxI7RY0Vjl97rct52ZGpq /07+P3MsymcDce7cYteiu/rEr2gHZ/emBym5UduWpipPWN1O8lbBR8a8WMwkCwEV wTrGWwqEI/86/JlFTXtynToAAEsj0Ta3vMiCNDpwfqHBZ0GI5zR+nedEJnV8LUXT 5i3g0pjr6c3TsO1lVE0+gdzQz30C12g= -----END CERTIFICATE-----Generated at Wed Feb 19 20:34:38 2025 by rpki-client