$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/770c614f-fc57-3c52-8bae-3ebe33802a8d.roa File: 770c614f-fc57-3c52-8bae-3ebe33802a8d.roa (raw, json) Hash identifier: 9sydkEsR6BIQ/63q6d8gVHVAd0t1v3q2OqVoFYlHDlU= Subject key identifier: 6E:13:C4:AF:5F:19:A9:97:C4:8C:8D:57:7C:98:DA:EA:47:8A:85:47 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B8F0C620D008FDD6EACB7610 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/770c614f-fc57-3c52-8bae-3ebe33802a8d.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 852 IP address blocks: 208.38.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:c6:20:d0:08:fd:d6:ea:cb:76:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=e0e9cd5f-2570-49e5-9753-e890cd805fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7a:9e:27:02:d6:db:06:70:ae:eb:2d:4d:cd: 65:d4:73:02:f6:ed:ef:06:e8:c5:34:50:5f:a4:15: 9e:a8:8b:23:be:14:13:df:a8:3d:4c:30:32:5f:c5: 7d:5b:1d:19:b9:90:8d:81:76:49:af:8e:5f:e8:2d: 2e:56:c4:e9:45:a4:90:dc:a6:e6:ea:17:77:a4:92: 45:08:8f:0f:44:f8:cd:9d:c1:21:68:3f:fc:59:c7: b6:73:75:9b:ed:b6:b4:77:80:86:b2:f5:fa:9c:14: 70:bc:d7:40:0a:88:b1:e8:c5:aa:0a:21:fb:66:96: 50:50:20:86:65:e6:fb:88:7d:a3:76:28:ab:77:89: cf:6a:7f:47:19:94:89:3f:8c:b7:fa:8e:91:76:34: b2:55:ce:17:64:c0:c8:36:f3:5f:48:ee:25:7f:41: fc:f7:b1:51:25:c3:ab:40:bf:88:8d:04:a8:04:a0: 97:7f:e6:4d:8b:aa:b4:2b:9e:61:9c:dd:f5:c1:65: 28:01:2a:c5:95:ef:86:29:6a:0d:cf:ea:92:2c:3c: 42:d5:ed:b2:be:94:15:1f:7d:81:d9:fe:42:e4:a5: 0c:e4:95:85:83:56:c2:d6:19:c3:2d:3c:52:51:ce: df:32:48:9f:0b:b8:f5:e4:a5:82:2e:23:d1:88:62: cf:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:13:C4:AF:5F:19:A9:97:C4:8C:8D:57:7C:98:DA:EA:47:8A:85:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/770c614f-fc57-3c52-8bae-3ebe33802a8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.38.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ad:96:29:9e:8b:d2:2e:05:7d:97:80:a3:ee:8e:4e:1a:24: 24:fc:08:9e:c6:fa:a7:09:11:25:87:bb:7c:76:0b:81:04:69: 8f:78:33:89:84:44:48:59:3a:e8:23:8f:a1:26:8b:28:4e:f9: 4f:22:44:fe:41:a6:e6:61:51:56:e6:a7:46:44:19:13:33:9a: 37:95:29:cf:d2:e7:c5:96:b1:dc:24:f2:87:98:8c:c4:62:67: ec:b2:a4:1f:01:70:62:22:bf:d2:26:9c:a3:24:7b:5d:9b:13: 7a:d5:a7:f4:30:f8:5f:8e:77:86:6d:c4:5a:43:74:09:2f:e5: ad:c6:55:15:20:6d:34:69:aa:f4:11:08:95:78:b0:24:3b:f9: 99:9f:91:3f:8c:0e:b1:75:5c:72:e9:c6:d8:f3:81:e2:d5:54: 14:94:a2:dd:ad:45:43:b0:55:66:72:38:56:47:16:f4:45:e8: 25:f2:64:04:e5:ba:3e:30:01:88:ec:8c:97:bd:75:59:c8:9e: a2:93:9f:41:48:bd:ee:67:a5:c9:ba:61:52:c3:e9:96:74:08: ed:3a:2c:9d:ea:f3:e0:21:d9:b0:64:3f:4c:d3:d8:81:27:0b: 61:9d:a0:75:90:f3:6d:cd:47:83:eb:cc:82:1b:7b:30:51:c5: a7:69:d8:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48MYg0Aj91urLdhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk ZTBlOWNkNWYtMjU3MC00OWU1LTk3NTMtZTg5MGNkODA1ZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3qeJwLW2wZwrustTc1l1HMC9u3vBujFNFBf pBWeqIsjvhQT36g9TDAyX8V9Wx0ZuZCNgXZJr45f6C0uVsTpRaSQ3Kbm6hd3pJJF CI8PRPjNncEhaD/8Wce2c3Wb7ba0d4CGsvX6nBRwvNdACoix6MWqCiH7ZpZQUCCG Zeb7iH2jdiird4nPan9HGZSJP4y3+o6RdjSyVc4XZMDINvNfSO4lf0H897FRJcOr QL+IjQSoBKCXf+ZNi6q0K55hnN31wWUoASrFle+GKWoNz+qSLDxC1e2yvpQVH32B 2f5C5KUM5JWFg1bC1hnDLTxSUc7fMkifC7j15KWCLiPRiGLPzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4TxK9fGamXxIyNV3yY2upHioVHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNzcwYzYxNGYtZmM1Ny0z YzUyLThiYWUtM2ViZTMzODAyYThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0CYuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWtlimei9IuBX2XgKPujk4aJCT8CJ7G+qcJESWHu3x2C4EEaY94M4mE REhZOugjj6EmiyhO+U8iRP5BpuZhUVbmp0ZEGRMzmjeVKc/S58WWsdwk8oeYjMRi Z+yypB8BcGIiv9ImnKMke12bE3rVp/Qw+F+Od4ZtxFpDdAkv5a3GVRUgbTRpqvQR CJV4sCQ7+ZmfkT+MDrF1XHLpxtjzgeLVVBSUot2tRUOwVWZyOFZHFvRF6CXyZATl uj4wAYjsjJe9dVnInqKTn0FIve5npcm6YVLD6ZZ0CO06LJ3q8+Ah2bBkP0zT2IEn C2GdoHWQ823NR4PrzIIbezBRxadp2Go= -----END CERTIFICATE-----Generated at Thu Apr 10 13:40:06 2025 by rpki-client