$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6f9619f9-f5ea-3cd1-a331-9d03606f3e35.roa File: 6f9619f9-f5ea-3cd1-a331-9d03606f3e35.roa (raw, json) Hash identifier: FfTnxT9Ks+O455AraEU3Fh+S5VAaQnzlJMIj1GsaNWg= Subject key identifier: 81:63:0B:FD:08:08:D3:8F:81:DA:FD:24:72:2D:86:84:EF:34:D7:3B Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584957F4165E32AADE5027D7C300 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6f9619f9-f5ea-3cd1-a331-9d03606f3e35.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 998 IP address blocks: 72.25.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:16:5e:32:aa:de:50:27:d7:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=8ef98bea-e92e-455b-bfa7-97529d2948fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f3:29:3c:ec:9d:68:77:e9:ea:d1:88:9c:e2: b0:75:3d:e4:6d:ce:5d:2d:37:e6:7f:65:41:a3:d2: f8:1c:72:c3:b3:3d:bb:50:a1:cf:9f:e0:3d:5e:4a: 69:0e:5c:f6:03:96:52:67:ac:e1:1e:79:3b:95:c9: cb:23:35:ac:14:6d:36:63:4d:08:a4:63:cc:3a:69: 11:18:b2:11:02:35:4d:30:6f:be:a2:00:fd:06:c3: 05:e0:90:64:88:98:bc:43:e7:eb:4a:5c:20:bd:0c: 63:37:c8:cf:5f:2e:e6:82:19:2a:5e:74:cb:f1:b3: 48:d7:5a:20:0b:0e:10:dd:7d:8d:22:7a:2a:89:f0: 9b:74:d0:2b:fd:67:3f:4f:db:65:0b:39:7f:3d:bb: 82:01:53:c3:df:bb:b1:ff:18:37:12:1a:53:5a:fa: bc:c6:29:42:1d:75:34:82:d8:68:8b:e9:29:c7:36: b2:92:7e:65:48:46:ef:e3:d3:e4:f0:2b:a4:e1:6d: 69:44:3a:51:fa:23:5e:ad:cb:5b:88:3f:c9:87:2c: d8:2e:04:78:ca:9a:30:98:18:60:e2:75:7b:64:c2: d7:47:c6:28:64:67:ad:12:b1:5a:c5:fc:59:b6:93: bc:6a:5b:9c:69:1e:af:d0:ac:88:af:00:30:cd:0b: a1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:63:0B:FD:08:08:D3:8F:81:DA:FD:24:72:2D:86:84:EF:34:D7:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6f9619f9-f5ea-3cd1-a331-9d03606f3e35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 72.25.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f0:88:e7:13:53:92:36:5c:7a:21:a8:98:1f:c2:c3:c7:76: 8b:c5:cd:05:07:21:e8:da:7b:03:3a:df:df:40:d0:02:e4:47: 30:af:be:5b:d5:fd:69:64:bb:e7:b0:9e:e6:89:b0:d2:a8:a8: 9d:74:2c:dd:b6:3b:5f:d0:30:97:e9:a2:71:5f:e5:4c:74:55: 2c:98:82:d5:fd:8b:45:66:ce:bc:5a:c2:8b:6b:e5:f4:70:85: 21:8f:12:10:1e:56:64:d1:37:d7:25:3a:34:75:9f:64:4c:d1: 48:66:b3:9a:71:43:8b:b7:36:ab:b8:b2:5f:cd:16:75:38:44: 67:39:70:8b:8c:ef:47:f4:f9:73:94:3e:b8:ac:44:8c:09:d9: c4:39:fc:e6:db:22:33:76:5e:8e:58:4e:42:3a:85:87:41:9e: 4d:ee:1a:9e:64:95:6b:92:ab:12:2b:a2:35:5c:10:b4:2b:32: 37:35:5a:f7:3c:ed:e5:67:33:b3:06:6d:07:04:36:cf:c8:fe: 88:23:8e:71:ae:c6:bc:26:7e:b9:35:af:29:4d:00:52:b6:51: 9d:e3:8c:94:43:37:9f:ff:03:24:59:5f:d4:88:9a:e7:75:d1: ef:b0:9c:54:db:bd:d6:c6:ec:6a:ba:d3:8b:7b:60:61:6e:ed: d8:d0:d5:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9BZeMqreUCfXwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk OGVmOThiZWEtZTkyZS00NTViLWJmYTctOTc1MjlkMjk0OGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPMpPOydaHfp6tGInOKwdT3kbc5dLTfmf2VB o9L4HHLDsz27UKHPn+A9XkppDlz2A5ZSZ6zhHnk7lcnLIzWsFG02Y00IpGPMOmkR GLIRAjVNMG++ogD9BsMF4JBkiJi8Q+frSlwgvQxjN8jPXy7mghkqXnTL8bNI11og Cw4Q3X2NInoqifCbdNAr/Wc/T9tlCzl/PbuCAVPD37ux/xg3EhpTWvq8xilCHXU0 gthoi+kpxzaykn5lSEbv49Pk8Cuk4W1pRDpR+iNerctbiD/JhyzYLgR4ypowmBhg 4nV7ZMLXR8YoZGetErFaxfxZtpO8alucaR6v0KyIrwAwzQuhfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFjC/0ICNOPgdr9JHIthoTvNNc7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNmY5NjE5ZjktZjVlYS0z Y2QxLWEzMzEtOWQwMzYwNmYzZTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvwiOcTU5I2XHohqJgfwsPHdovFzQUHIejaewM6399A0ALkRzCvvlvV /Wlku+ewnuaJsNKoqJ10LN22O1/QMJfponFf5Ux0VSyYgtX9i0Vmzrxawotr5fRw hSGPEhAeVmTRN9clOjR1n2RM0Uhms5pxQ4u3Nqu4sl/NFnU4RGc5cIuM70f0+XOU PrisRIwJ2cQ5/ObbIjN2Xo5YTkI6hYdBnk3uGp5klWuSqxIrojVcELQrMjc1Wvc8 7eVnM7MGbQcENs/I/ogjjnGuxrwmfrk1rylNAFK2UZ3jjJRDN5//AyRZX9SImud1 0e+wnFTbvdbG7Gq604t7YGFu7djQ1ec= -----END CERTIFICATE-----Generated at Sat Apr 12 01:09:28 2025 by rpki-client