$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4d1caa7e-bc43-3eea-8cd1-913f8700410c.roa File: 4d1caa7e-bc43-3eea-8cd1-913f8700410c.roa (raw, json) Hash identifier: ATiq12R8S6Lz9EwB8FvU48jmVrZ/XFTD8TDb2mL54Jg= Subject key identifier: DD:7B:86:0F:F7:15:71:79:E0:A1:86:46:E2:1B:8F:C8:93:46:87:C9 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858490CB16EB5EA0B9971BE032700 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4d1caa7e-bc43-3eea-8cd1-913f8700410c.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 21723 IP address blocks: 68.182.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:6e:b5:ea:0b:99:71:be:03:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=dd147f9f-a6b4-4f7b-91da-c4a3c53b5c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3c:4f:01:a1:d6:46:1f:40:5d:6c:db:b6:23: 85:30:df:23:7a:a6:9c:a5:bc:8d:4f:57:93:b1:ff: 68:53:f7:3d:25:b1:dc:12:63:06:3a:25:27:88:1e: 5b:c4:03:6e:77:07:81:fa:0d:6e:7b:42:e8:47:3e: 53:1d:5b:f1:5f:39:bb:bb:93:c5:9b:ee:72:cd:ba: c2:f7:c9:7f:6b:07:65:89:f4:37:eb:b2:40:20:2a: c0:39:3c:1e:2b:73:18:c7:aa:66:71:2f:da:4b:a5: ae:04:66:bc:5e:b9:d6:b6:a3:e4:a7:38:95:9c:93: c1:8c:00:0a:93:50:e5:a9:9e:cd:6f:de:ce:2c:8b: c5:ce:8d:c0:67:36:ed:17:e6:8f:cb:55:d9:a0:81: 66:e3:84:90:a3:b2:88:32:ee:ee:d6:8e:a9:ff:76: bb:c4:1d:7a:7a:14:5b:71:e3:2b:e5:db:bf:dc:28: e9:87:df:72:d2:42:a2:cd:8a:be:c6:87:5c:fa:dc: a3:87:4c:9d:83:99:01:95:19:9d:9c:ea:58:53:eb: 39:e5:a1:3b:7c:a1:fc:8b:48:db:e3:3e:e0:e6:1e: 9b:1b:c7:6f:f1:50:41:8f:59:24:cf:d9:7b:ff:b3: a4:7b:be:f4:7c:5a:32:b4:1a:99:86:c3:08:17:99: 19:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7B:86:0F:F7:15:71:79:E0:A1:86:46:E2:1B:8F:C8:93:46:87:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4d1caa7e-bc43-3eea-8cd1-913f8700410c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:ea:ec:e3:fe:8f:70:60:0c:06:11:80:8a:f2:50:ea:36:2b: 5e:c1:43:78:31:24:7b:ea:d2:4e:ad:17:c5:b8:22:3f:ea:f7: 5b:e0:d4:b0:c0:b8:0f:e7:b7:66:30:97:79:cf:c8:fc:3b:63: 97:2e:cb:bc:01:20:1b:b4:23:75:56:22:b3:b3:68:3f:9d:7e: b4:1f:67:87:11:67:27:4b:6d:cb:eb:a9:c6:c5:1e:b3:61:8e: 24:69:3f:2c:e2:76:07:4a:db:b7:d1:8c:38:65:7a:d6:a0:5d: 55:b8:3e:c1:78:5f:2d:42:cf:fb:f0:1d:e9:46:98:3a:62:65: e6:e5:7e:03:32:50:a0:9c:59:62:a9:7f:64:2e:5a:30:e0:5c: 65:88:40:29:38:59:63:6f:d3:f1:53:3c:ca:f5:c6:0e:0c:13: d2:ea:87:cb:f6:ba:6c:49:22:26:79:93:5c:23:34:32:47:c3: 5b:2c:9d:d0:25:b3:a6:33:21:f7:9d:ab:4e:88:c5:e4:a3:23: 1b:da:4b:20:80:09:64:f3:67:8c:39:c9:8e:2d:bb:b9:16:a2: 6d:44:78:19:4c:a7:1a:a1:bb:88:41:db:6f:aa:25:4f:e7:ce: ed:5e:a1:c0:eb:ec:74:8d:f3:e2:cf:af:38:f2:21:2b:13:9c: 4b:b0:72:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsW616guZcb4DJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk ZGQxNDdmOWYtYTZiNC00ZjdiLTkxZGEtYzRhM2M1M2I1YzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjxPAaHWRh9AXWzbtiOFMN8jeqacpbyNT1eT sf9oU/c9JbHcEmMGOiUniB5bxANudweB+g1ue0LoRz5THVvxXzm7u5PFm+5yzbrC 98l/awdlifQ367JAICrAOTweK3MYx6pmcS/aS6WuBGa8XrnWtqPkpziVnJPBjAAK k1DlqZ7Nb97OLIvFzo3AZzbtF+aPy1XZoIFm44SQo7KIMu7u1o6p/3a7xB16ehRb ceMr5du/3Cjph99y0kKizYq+xodc+tyjh0ydg5kBlRmdnOpYU+s55aE7fKH8i0jb 4z7g5h6bG8dv8VBBj1kkz9l7/7Oke770fFoytBqZhsMIF5kZKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN17hg/3FXF54KGGRuIbj8iTRofJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNGQxY2FhN2UtYmM0My0z ZWVhLThjZDEtOTEzZjg3MDA0MTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERLbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM/q7OP+j3BgDAYRgIryUOo2K17BQ3gxJHvq0k6tF8W4Ij/q91vg1LDA uA/nt2Ywl3nPyPw7Y5cuy7wBIBu0I3VWIrOzaD+dfrQfZ4cRZydLbcvrqcbFHrNh jiRpPyzidgdK27fRjDhletagXVW4PsF4Xy1Cz/vwHelGmDpiZeblfgMyUKCcWWKp f2QuWjDgXGWIQCk4WWNv0/FTPMr1xg4ME9Lqh8v2umxJIiZ5k1wjNDJHw1ssndAl s6YzIfedq06IxeSjIxvaSyCACWTzZ4w5yY4tu7kWom1EeBlMpxqhu4hB22+qJU/n zu1eocDr7HSN8+LPrzjyISsTnEuwchQ= -----END CERTIFICATE-----Generated at Tue Apr 8 07:16:27 2025 by rpki-client