$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/49981ea0-1655-3c52-98ab-4de0a45d03b2.roa File: 49981ea0-1655-3c52-98ab-4de0a45d03b2.roa (raw, json) Hash identifier: fftm6C7rDNn1Y9MMnSFm08KUv6BVV5v/4PXnQCqBiQU= Subject key identifier: DF:54:94:CD:FB:4F:3D:59:31:61:20:69:21:A5:76:4F:AB:F8:F8:B7 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848ADC60E4A72236168292B2500 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/49981ea0-1655-3c52-98ab-4de0a45d03b2.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 21723 IP address blocks: 208.181.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:0e:4a:72:23:61:68:29:2b:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=61829e36-3d24-46ce-bb73-c384a0d2d407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:df:da:f9:10:b1:bc:d9:c0:36:72:3b:de:b8: 3a:e8:3e:95:10:87:67:07:df:f8:7a:d2:ba:a8:4d: ec:51:9b:85:7f:ec:36:5d:6c:d7:0b:18:ba:2c:51: 16:ee:be:ae:5b:9d:81:50:ce:af:85:d6:8c:84:9f: f6:8e:af:d3:1f:21:a0:73:46:72:ec:ca:7c:87:56: e1:d2:eb:0f:9e:d4:1a:46:75:c0:5d:b5:f1:e6:c4: 9e:b9:80:d5:d5:ff:dd:46:78:ce:90:d7:00:bf:28: 37:41:71:fd:70:16:b0:6d:71:ae:01:f0:cd:8e:5d: 07:36:12:d6:07:83:94:db:c5:98:8c:47:35:77:83: 3d:65:99:be:38:d7:aa:03:be:c3:8f:8f:45:41:7c: 80:ae:19:e9:ec:4f:48:6b:38:01:92:89:56:2b:b5: 00:49:99:7f:0c:eb:15:e8:ca:58:f8:72:57:0f:df: aa:a3:b5:86:48:d0:8b:c7:8d:a2:3c:3a:f0:0b:00: f8:81:a3:16:05:c4:65:4e:75:a5:94:e0:9e:59:b3: 4f:92:e5:9a:dd:b1:74:50:e0:7f:e4:5a:d1:77:ad: de:3c:41:90:dc:d1:13:59:73:a9:81:47:71:0e:9a: 6c:bb:3b:47:f8:36:78:b8:dd:70:08:ec:64:93:50: 38:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:54:94:CD:FB:4F:3D:59:31:61:20:69:21:A5:76:4F:AB:F8:F8:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/49981ea0-1655-3c52-98ab-4de0a45d03b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:eb:05:bd:91:49:c8:98:38:df:56:f9:8f:28:4c:04:d8:03: f3:2d:ef:f1:4c:9a:50:0b:4d:13:e6:c9:bb:bc:22:35:70:a6: 20:5b:3b:4f:91:12:f4:6f:4c:25:58:23:f5:93:1c:77:65:ae: d5:d3:7e:c8:b6:55:40:c7:b7:34:5c:77:3b:c5:25:93:94:8a: 12:60:f0:ac:d8:68:c3:8f:fd:90:d3:8e:ae:67:0f:60:de:81: 80:95:0b:18:18:07:75:20:08:fe:f7:12:17:d2:d3:92:b3:3f: 9e:a5:97:d7:6b:d9:b5:bb:14:7a:2d:58:01:74:de:fb:f4:b5: d1:b9:54:f8:8a:30:ff:6e:b0:9f:e5:e4:de:05:8a:e6:2c:9a: 50:26:95:21:6d:0d:11:25:9c:fe:5d:61:56:22:aa:24:7b:92: 91:18:14:f9:ee:7a:46:60:3e:d4:bc:75:d3:c2:b3:f3:e5:5c: 9b:3c:86:e3:ee:a9:2b:f1:46:e1:df:98:4a:63:8d:c2:ae:88: a2:e7:aa:4f:e6:4c:8c:43:33:50:6a:66:15:77:11:33:1d:fc: 8a:fe:f9:82:fa:9e:f5:49:50:ab:8b:5c:39:cf:58:41:27:a7: 5a:75:1a:47:66:f9:4b:2c:75:af:f6:0c:8f:5e:37:be:ab:3d: b3:18:03:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxg5KciNhaCkrJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk NjE4MjllMzYtM2QyNC00NmNlLWJiNzMtYzM4NGEwZDJkNDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt/a+RCxvNnANnI73rg66D6VEIdnB9/4etK6 qE3sUZuFf+w2XWzXCxi6LFEW7r6uW52BUM6vhdaMhJ/2jq/THyGgc0Zy7Mp8h1bh 0usPntQaRnXAXbXx5sSeuYDV1f/dRnjOkNcAvyg3QXH9cBawbXGuAfDNjl0HNhLW B4OU28WYjEc1d4M9ZZm+ONeqA77Dj49FQXyArhnp7E9IazgBkolWK7UASZl/DOsV 6MpY+HJXD9+qo7WGSNCLx42iPDrwCwD4gaMWBcRlTnWllOCeWbNPkuWa3bF0UOB/ 5FrRd63ePEGQ3NETWXOpgUdxDppsuztH+DZ4uN1wCOxkk1A4OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9UlM37Tz1ZMWEgaSGldk+r+Pi3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDk5ODFlYTAtMTY1NS0z YzUyLTk4YWItNGRlMGE0NWQwM2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0LVlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrrBb2RSciYON9W+Y8oTATYA/Mt7/FMmlALTRPmybu8IjVwpiBbO0+R EvRvTCVYI/WTHHdlrtXTfsi2VUDHtzRcdzvFJZOUihJg8KzYaMOP/ZDTjq5nD2De gYCVCxgYB3UgCP73EhfS05KzP56ll9dr2bW7FHotWAF03vv0tdG5VPiKMP9usJ/l 5N4FiuYsmlAmlSFtDRElnP5dYVYiqiR7kpEYFPnuekZgPtS8ddPCs/PlXJs8huPu qSvxRuHfmEpjjcKuiKLnqk/mTIxDM1BqZhV3ETMd/Ir++YL6nvVJUKuLXDnPWEEn p1p1Gkdm+Ussda/2DI9eN76rPbMYA7Y= -----END CERTIFICATE-----Generated at Tue Apr 8 07:31:17 2025 by rpki-client