$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4b1d6209-af2d-37a6-b920-f4bdab8ca729.roa File: 4b1d6209-af2d-37a6-b920-f4bdab8ca729.roa (raw, json) Hash identifier: xGIKjPyMGG5fSt1XMKPRNLJvkhnTp8212lWZPGoL254= Subject key identifier: EB:ED:DD:96:BD:78:93:1D:EC:D1:98:85:FE:2F:CD:6F:D0:3F:4D:41 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848F22BE5F3E6CFA9CD3152CF40 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4b1d6209-af2d-37a6-b920-f4bdab8ca729.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 852 IP address blocks: 68.182.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2b:e5:f3:e6:cf:a9:cd:31:52:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=2bd4c2b4-3f24-441e-83e1-13f84485b0e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2d:34:8b:85:e8:0a:5f:75:21:14:f8:ed:b4: dd:4b:4b:18:7a:b6:15:c0:39:97:f1:08:72:85:1a: 25:39:87:1d:86:cd:1b:07:ad:78:b5:db:3b:ab:97: 04:9b:8b:80:4a:07:52:16:e8:c5:ec:12:6b:eb:2c: 6b:17:d9:ad:87:d0:07:e3:31:7f:79:0e:a5:e0:61: 12:32:d5:45:ce:d4:77:61:2f:75:35:ef:c6:7d:b5: a9:10:a2:9a:c5:17:23:be:c2:e9:a7:7f:2b:53:0b: db:c1:1e:23:91:dd:db:91:03:9c:81:55:b4:55:c9: 15:e2:88:df:19:41:69:28:65:40:3a:15:cb:30:40: 33:1e:e6:86:65:6d:26:07:5c:a7:12:4e:99:79:4b: 23:6e:2a:8d:cc:c9:8e:76:cf:01:4e:9b:53:b6:91: 1b:57:09:dc:21:99:d2:68:fd:23:63:cb:d2:32:a8: a4:b8:46:73:f8:e0:5f:2b:3e:5d:f6:6c:9e:c0:cf: a7:08:f7:c7:b1:c0:7d:82:f6:ae:c5:b8:6c:e9:18: d4:6a:78:80:5d:0a:f5:13:98:ab:0a:13:a7:5b:d5: b2:67:e5:25:40:06:57:73:e2:90:c1:8a:81:8a:1b: af:fa:00:b0:f8:99:35:e3:f9:db:77:c3:76:35:98: 04:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:ED:DD:96:BD:78:93:1D:EC:D1:98:85:FE:2F:CD:6F:D0:3F:4D:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4b1d6209-af2d-37a6-b920-f4bdab8ca729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:b5:b1:a7:b3:01:70:d5:d2:e2:bc:a7:da:5a:89:5c:9b:15: 71:dd:4d:2a:d5:39:27:53:96:c4:da:e9:32:b8:fd:93:9c:3a: a2:b0:5e:26:79:9f:a2:d3:5f:7a:b4:47:b2:52:e3:df:b9:aa: d9:22:9f:80:02:45:5b:b5:57:fc:fd:91:ce:fe:5b:93:45:89: 18:50:d4:0c:d9:35:4e:d3:06:13:60:5f:17:b3:c6:24:ab:82: c5:13:62:c9:86:2f:13:30:fd:6a:b6:11:ee:06:5c:f0:cb:7f: 4b:1c:f1:69:d2:6e:6c:2c:46:75:d7:10:63:87:81:95:1a:bf: cf:88:a7:6d:9c:9c:a5:38:2a:07:e3:13:04:84:a8:96:14:71: 4f:a2:81:a9:ee:1f:ed:5d:e3:d6:85:33:9f:9e:6b:bf:96:f8: 6f:c2:9f:bd:a7:27:e4:fb:5e:df:71:94:89:82:91:ca:be:ea: 08:05:c6:83:4b:02:f0:36:26:a3:20:78:d1:4d:3f:87:17:a3: 47:e5:a8:a8:46:a4:69:9a:02:1d:36:7c:f2:55:cf:b5:35:b6: 3f:7f:73:12:dd:2d:a4:64:24:3a:5f:f0:ce:62:d2:1c:bd:61: 7a:e7:17:a0:db:29:87:ef:56:b7:cc:68:13:b0:cc:f3:a4:fa: 3e:1e:34:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyK+Xz5s+pzTFSz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk MmJkNGMyYjQtM2YyNC00NDFlLTgzZTEtMTNmODQ0ODViMGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS00i4XoCl91IRT47bTdS0sYerYVwDmX8Qhy hRolOYcdhs0bB614tds7q5cEm4uASgdSFujF7BJr6yxrF9mth9AH4zF/eQ6l4GES MtVFztR3YS91Ne/GfbWpEKKaxRcjvsLpp38rUwvbwR4jkd3bkQOcgVW0VckV4ojf GUFpKGVAOhXLMEAzHuaGZW0mB1ynEk6ZeUsjbiqNzMmOds8BTptTtpEbVwncIZnS aP0jY8vSMqikuEZz+OBfKz5d9myewM+nCPfHscB9gvauxbhs6RjUaniAXQr1E5ir ChOnW9WyZ+UlQAZXc+KQwYqBihuv+gCw+Jk14/nbd8N2NZgEEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvt3Za9eJMd7NGYhf4vzW/QP01BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNGIxZDYyMDktYWYyZC0z N2E2LWI5MjAtZjRiZGFiOGNhNzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERLagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIq1saezAXDV0uK8p9paiVybFXHdTSrVOSdTlsTa6TK4/ZOcOqKwXiZ5 n6LTX3q0R7JS49+5qtkin4ACRVu1V/z9kc7+W5NFiRhQ1AzZNU7TBhNgXxezxiSr gsUTYsmGLxMw/Wq2Ee4GXPDLf0sc8WnSbmwsRnXXEGOHgZUav8+Ip22cnKU4Kgfj EwSEqJYUcU+iganuH+1d49aFM5+ea7+W+G/Cn72nJ+T7Xt9xlImCkcq+6ggFxoNL AvA2JqMgeNFNP4cXo0flqKhGpGmaAh02fPJVz7U1tj9/cxLdLaRkJDpf8M5i0hy9 YXrnF6DbKYfvVrfMaBOwzPOk+j4eNA8= -----END CERTIFICATE-----Generated at Thu Apr 10 06:20:52 2025 by rpki-client