$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8892a56b-b42f-3e9e-9415-db3e66493158.roa File: 8892a56b-b42f-3e9e-9415-db3e66493158.roa (raw, json) Hash identifier: 3IMKnpQJQKZFy7MW8mHsn56+tMVpRKFkEQrelzqkXJ8= Subject key identifier: 65:00:9A:4D:9C:E8:9E:F7:2E:2F:EE:14:87:34:86:1C:9D:BC:1E:16 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B7CCE6891A7DC23F9E259740 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8892a56b-b42f-3e9e-9415-db3e66493158.roa Signing time: Thu 30 Jan 2025 16:12:40 +0000 ROA not before: Thu 30 Jan 2025 16:12:40 +0000 ROA not after: Wed 30 Apr 2025 15:12:40 +0000 asID: 54004 IP address blocks: 68.182.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:cc:e6:89:1a:7d:c2:3f:9e:25:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 30 16:12:40 2025 GMT Not After : Apr 30 15:12:40 2025 GMT Subject: CN=0d0eaf49-f025-48b6-b06c-13377978382a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:06:9a:b4:68:29:d9:5d:33:92:ca:4e:a1:4a: a4:04:ce:6c:9a:e0:12:72:7f:80:1b:95:06:d0:67: 51:2e:05:b3:1e:4d:5d:84:e6:e2:ba:06:c5:a7:d1: ca:2e:f7:fb:c8:d3:9c:36:a3:b9:dd:67:eb:08:d7: 6d:ad:ab:63:c1:26:e9:c1:ec:73:41:9a:e0:5f:55: 88:b5:bf:df:cf:21:9a:67:bb:44:f7:40:50:1c:49: f4:d5:39:49:25:fc:94:85:da:34:9f:05:d2:55:a9: 0b:b0:09:38:19:05:5c:5d:39:1f:8f:39:e7:4d:ee: 6a:a3:56:51:9d:c6:d7:e6:28:74:43:e4:7f:28:43: 42:bd:73:d7:ba:57:6e:a9:85:4e:00:01:c6:28:ce: ff:16:50:58:ca:d6:31:0b:67:d1:18:c3:58:2c:b6: 84:7b:fa:21:28:40:42:c1:9d:8a:9d:a5:69:1a:eb: 7c:8f:77:32:3c:17:db:c9:89:8d:84:e7:a9:3f:81: e8:80:ce:b3:57:45:de:42:b8:d9:4e:96:d6:f0:86: 72:a5:82:20:8e:95:00:7c:3c:58:3d:85:74:7f:c5: 32:ee:50:be:84:d1:5e:bd:4c:ad:4f:e8:9b:da:cc: 5e:d0:f6:f9:c4:b9:c2:b5:c1:9a:e1:d9:e4:9a:15: b2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:00:9A:4D:9C:E8:9E:F7:2E:2F:EE:14:87:34:86:1C:9D:BC:1E:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8892a56b-b42f-3e9e-9415-db3e66493158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:a1:76:8e:2b:d6:ad:30:f9:31:bf:75:50:05:00:2e:bc:79: 50:7d:24:6f:2a:da:7a:1c:07:f5:b4:96:a4:56:f1:12:0a:5b: ae:58:8b:57:19:ef:93:69:35:78:66:b8:f5:ce:7b:82:3f:85: f4:28:7e:15:64:e2:a3:b3:e6:e9:7f:ac:3b:4b:d7:9c:95:7f: cc:67:8e:75:f9:a7:0a:17:66:d4:f8:77:9d:f5:4f:ea:38:5d: 07:30:6a:67:11:51:d6:e1:00:0b:03:8d:bf:26:e4:c3:d6:37: 35:10:a9:3d:45:c0:31:8c:d9:65:e6:0c:dc:70:70:b0:30:e5: 46:9b:06:f3:ee:45:a5:5b:20:af:68:40:05:03:af:f5:14:d5: 55:c2:a0:4b:b8:b8:f9:d4:64:60:11:7b:b9:24:8e:74:1e:98: bd:4b:c3:3d:7a:50:7f:31:fb:33:76:55:87:a6:d9:52:4c:ac: e7:57:f6:2b:e7:44:48:2b:5b:1a:fb:2a:47:1b:10:ef:aa:ab: 6a:28:b3:62:67:f2:f2:82:dc:58:71:15:8c:70:75:dc:62:ad: 04:67:48:f0:d1:f2:b1:03:a2:86:38:71:18:5b:bc:f6:b4:06: e0:f6:d6:40:58:a6:c9:ba:93:8a:00:00:50:94:67:84:91:50: 4a:62:ab:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3zOaJGn3CP54ll0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEzMDE2MTI0MFoXDTI1MDQzMDE1MTI0MFowLzEtMCsGA1UEAxMk MGQwZWFmNDktZjAyNS00OGI2LWIwNmMtMTMzNzc5NzgzODJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQaatGgp2V0zkspOoUqkBM5smuAScn+AG5UG 0GdRLgWzHk1dhObiugbFp9HKLvf7yNOcNqO53WfrCNdtratjwSbpwexzQZrgX1WI tb/fzyGaZ7tE90BQHEn01TlJJfyUhdo0nwXSVakLsAk4GQVcXTkfjznnTe5qo1ZR ncbX5ih0Q+R/KENCvXPXulduqYVOAAHGKM7/FlBYytYxC2fRGMNYLLaEe/ohKEBC wZ2KnaVpGut8j3cyPBfbyYmNhOepP4HogM6zV0XeQrjZTpbW8IZypYIgjpUAfDxY PYV0f8Uy7lC+hNFevUytT+ib2sxe0Pb5xLnCtcGa4dnkmhWy5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUAmk2c6J73Li/uFIc0hhydvB4WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODg5MmE1NmItYjQyZi0z ZTllLTk0MTUtZGIzZTY2NDkzMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRLbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmhdo4r1q0w+TG/dVAFAC68eVB9JG8q2nocB/W0lqRW8RIKW65Yi1cZ 75NpNXhmuPXOe4I/hfQofhVk4qOz5ul/rDtL15yVf8xnjnX5pwoXZtT4d531T+o4 XQcwamcRUdbhAAsDjb8m5MPWNzUQqT1FwDGM2WXmDNxwcLAw5UabBvPuRaVbIK9o QAUDr/UU1VXCoEu4uPnUZGARe7kkjnQemL1Lwz16UH8x+zN2VYem2VJMrOdX9ivn REgrWxr7KkcbEO+qq2oos2Jn8vKC3FhxFYxwddxirQRnSPDR8rEDooY4cRhbvPa0 BuD21kBYpsm6k4oAAFCUZ4SRUEpiq70= -----END CERTIFICATE-----Generated at Tue Apr 15 05:54:30 2025 by rpki-client