$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/889b07c6-b4bd-3cec-be94-4ffd7873c163.roa File: 889b07c6-b4bd-3cec-be94-4ffd7873c163.roa (raw, json) Hash identifier: c8sYdWNGRgVtw1r50gxEKwX2njFt6cH3xz5h83mD6zY= Subject key identifier: D5:91:1C:D4:15:6F:F2:24:28:F4:7D:C0:85:68:B1:93:D0:1F:5C:0B Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848ADC60F072218586033247F80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/889b07c6-b4bd-3cec-be94-4ffd7873c163.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 21723 IP address blocks: 208.181.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:0f:07:22:18:58:60:33:24:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=338ffa0b-6b56-460b-8a9b-2e96f34cb0f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4e:8c:5a:69:d9:ca:9a:0c:22:f6:53:c2:73: d3:99:ce:dd:54:43:83:8b:77:c1:4e:5d:7d:c3:bc: 02:c1:58:34:b8:cd:b6:ba:57:ca:a0:c8:7b:0d:dc: d0:4c:fe:7c:1b:62:89:97:4a:18:2d:41:5a:6e:bb: 05:33:79:62:bb:81:1c:db:a7:fa:8b:9f:ea:41:47: 18:4c:ac:ff:06:ab:63:48:17:ea:65:93:d7:86:50: 56:0b:19:dd:1a:87:de:21:0d:10:9b:a5:53:e5:b3: 41:84:a9:cb:9e:78:fc:94:c7:ac:f3:5a:b6:f6:a4: 4e:55:9a:d6:bb:8b:23:4a:e5:38:78:44:d1:7e:d2: a8:01:39:16:de:03:f9:72:dd:4f:e0:e3:ff:71:2d: b1:9f:ee:61:71:d1:9d:51:a3:d2:ae:af:41:bd:7a: 59:a9:84:b5:4b:80:d7:96:48:4c:ab:b8:77:83:3e: 14:59:f9:57:6b:38:81:72:0f:a0:96:53:7f:b3:c9: ac:5b:6c:1d:41:91:44:f6:40:f1:ec:5a:b8:c4:41: a9:41:39:bb:1f:2d:27:49:4e:6d:e4:56:64:5e:63: 09:6f:be:5a:37:af:e3:a4:11:b4:9d:98:67:fb:8f: 51:f0:a8:81:1e:b1:f5:9f:8c:4f:da:8b:42:72:fe: 5d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:91:1C:D4:15:6F:F2:24:28:F4:7D:C0:85:68:B1:93:D0:1F:5C:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/889b07c6-b4bd-3cec-be94-4ffd7873c163.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:b7:fc:95:bd:02:39:09:41:0c:12:72:9b:a0:f8:82:56:19: 1a:fb:bf:9b:cb:54:56:4d:de:cd:37:1a:98:74:a7:31:81:d0: b2:d1:37:04:c7:31:aa:b2:95:4b:2a:c4:9f:d2:58:71:5d:86: bd:f2:e3:d5:4d:a7:5b:ff:89:3b:55:6b:5f:bf:db:41:42:c2: 63:73:df:70:1a:a2:af:09:70:1a:ff:43:bc:2a:43:c2:e2:85: 8d:21:74:03:14:7a:10:2e:8a:2d:5f:f8:14:99:ab:2f:15:14: 38:4d:aa:ad:46:04:9b:4f:07:18:cc:ae:52:b0:90:66:81:23: 61:be:d1:0c:1e:11:c4:98:df:29:5c:ed:d4:d8:4d:44:1b:4e: f4:61:c3:e5:4b:c7:11:9a:02:a4:5b:2a:2c:81:3e:08:0e:5b: 2e:bb:9a:88:86:f3:54:a6:fa:a8:bf:58:43:92:e9:8c:51:a1: b8:ab:d6:26:26:00:31:1b:c9:96:1c:01:cf:96:22:8d:ec:35: 22:28:09:bd:04:21:89:9f:a4:9c:9d:c2:14:a8:ac:2e:91:73: 57:19:4e:ce:76:51:7d:2d:b4:c2:27:73:1a:31:ff:91:47:77: 22:3c:ea:31:7e:e6:91:71:d7:fc:b6:f7:94:e3:03:99:80:27: 00:b1:9f:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxg8HIhhYYDMkf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk MzM4ZmZhMGItNmI1Ni00NjBiLThhOWItMmU5NmYzNGNiMGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE6MWmnZypoMIvZTwnPTmc7dVEODi3fBTl19 w7wCwVg0uM22ulfKoMh7DdzQTP58G2KJl0oYLUFabrsFM3liu4Ec26f6i5/qQUcY TKz/BqtjSBfqZZPXhlBWCxndGofeIQ0Qm6VT5bNBhKnLnnj8lMes81q29qROVZrW u4sjSuU4eETRftKoATkW3gP5ct1P4OP/cS2xn+5hcdGdUaPSrq9BvXpZqYS1S4DX lkhMq7h3gz4UWflXaziBcg+gllN/s8msW2wdQZFE9kDx7Fq4xEGpQTm7Hy0nSU5t 5FZkXmMJb75aN6/jpBG0nZhn+49R8KiBHrH1n4xP2otCcv5d4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWRHNQVb/IkKPR9wIVosZPQH1wLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODg5YjA3YzYtYjRiZC0z Y2VjLWJlOTQtNGZmZDc4NzNjMTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0LWUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGe3/JW9AjkJQQwScpug+IJWGRr7v5vLVFZN3s03Gph0pzGB0LLRNwTH MaqylUsqxJ/SWHFdhr3y49VNp1v/iTtVa1+/20FCwmNz33Aaoq8JcBr/Q7wqQ8Li hY0hdAMUehAuii1f+BSZqy8VFDhNqq1GBJtPBxjMrlKwkGaBI2G+0QweEcSY3ylc 7dTYTUQbTvRhw+VLxxGaAqRbKiyBPggOWy67moiG81Sm+qi/WEOS6YxRobir1iYm ADEbyZYcAc+WIo3sNSIoCb0EIYmfpJydwhSorC6Rc1cZTs52UX0ttMIncxox/5FH dyI86jF+5pFx1/y295TjA5mAJwCxn6M= -----END CERTIFICATE-----Generated at Tue Apr 8 07:23:53 2025 by rpki-client