$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9f72cc23-0614-3fe5-b39a-53cb504dfa92.roa File: 9f72cc23-0614-3fe5-b39a-53cb504dfa92.roa (raw, json) Hash identifier: Zfyo4fj+RxfcRlL6LL2BZjXcb3D31Qf8zVBtUIZiHRw= Subject key identifier: AC:6E:35:BD:B8:70:BF:21:53:3D:E9:29:26:F8:8A:4E:AD:1B:1E:DD Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B6261CF902F641D8F8639980 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9f72cc23-0614-3fe5-b39a-53cb504dfa92.roa Signing time: Thu 30 Jan 2025 02:00:40 +0000 ROA not before: Thu 30 Jan 2025 02:00:40 +0000 ROA not after: Wed 30 Apr 2025 01:00:40 +0000 asID: 53735 IP address blocks: 207.194.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:26:1c:f9:02:f6:41:d8:f8:63:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 30 02:00:40 2025 GMT Not After : Apr 30 01:00:40 2025 GMT Subject: CN=79fdfaee-ccc0-4140-8ee6-8488e32ae292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:93:1f:36:5a:9f:26:83:34:18:8a:60:35:10: 2a:36:47:8b:b0:c3:fa:c1:9a:9a:81:25:b0:68:10: 16:7c:f0:47:67:db:44:43:5a:83:9f:f6:22:91:3e: eb:dc:da:3a:f3:f4:20:78:96:47:c4:a0:3b:51:93: 47:a2:3c:82:2d:fc:26:f8:c8:5e:97:39:ea:87:26: a1:5e:fc:df:cd:5f:c4:97:1b:36:bf:c0:f7:07:fd: d7:3e:8e:1d:76:fa:66:e7:c8:66:50:f8:32:44:30: 4b:c9:77:e3:1a:77:c8:cd:5c:61:e2:49:94:a2:9c: 5f:09:ce:7b:2f:20:b8:31:83:9a:77:e6:30:11:72: ae:ff:e2:01:bc:85:eb:5d:9a:c2:bd:dd:e1:95:51: e7:f4:a9:e0:07:18:cf:48:5f:68:4e:11:b2:d9:23: e9:25:59:bc:54:e5:97:87:62:0e:42:72:23:4a:33: 88:9d:6f:17:28:5b:7c:f8:56:ef:2a:a5:fd:b6:d5: 85:0f:4e:20:b9:4e:e1:a6:d1:80:92:3a:42:8b:d4: ce:ca:33:3e:16:0b:da:46:3c:18:f7:93:7b:9d:47: 74:b8:8e:64:6e:b2:0b:1f:3c:00:c2:68:49:2d:cb: 40:fe:50:e6:83:26:a7:90:a0:4b:01:e6:c8:6e:6e: dd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:6E:35:BD:B8:70:BF:21:53:3D:E9:29:26:F8:8A:4E:AD:1B:1E:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9f72cc23-0614-3fe5-b39a-53cb504dfa92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.194.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:4f:3d:e8:fc:c7:8d:47:f0:bb:1d:2e:4b:1a:f0:75:60:fa: ab:4f:20:b4:6a:3f:dd:40:52:c6:1b:76:19:35:16:13:d3:92: 23:0e:50:ed:e8:da:1a:f9:31:e9:05:f7:84:18:27:ae:8c:c1: fe:bc:d5:18:1c:cd:9b:43:63:d7:6d:ff:01:89:91:66:fa:5a: 09:ce:98:ee:55:ba:ad:35:e0:e7:eb:aa:8c:57:7d:ca:be:84: b4:3c:20:e8:f2:42:ea:f5:db:a1:b5:76:a7:12:8c:27:c4:45: 5a:3c:a8:04:ed:76:68:32:20:84:3f:ee:62:b2:e1:39:45:4b: 5e:08:7b:e6:37:a7:0d:bf:2b:49:36:0f:0b:fe:95:6c:0b:62: 2d:c5:28:f6:31:36:a1:41:c3:6d:a4:74:ba:12:10:45:a1:f1: 90:46:d6:a6:77:88:0a:dc:7f:c1:b7:96:12:17:3f:66:99:fa: c2:8f:1a:25:f3:bd:59:7e:03:18:27:a9:69:c8:74:e0:5a:8c: 16:b9:77:f7:13:50:d8:d9:f5:11:a2:a4:a1:39:2c:c7:01:0e: 07:34:05:2e:46:5a:95:82:47:5d:f1:e3:3b:d5:90:d9:57:35: f8:c2:bb:fc:3b:9a:17:c0:27:ad:35:44:49:f1:82:66:4d:15: 74:0a:83:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi2Jhz5AvZB2PhjmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEzMDAyMDA0MFoXDTI1MDQzMDAxMDA0MFowLzEtMCsGA1UEAxMk NzlmZGZhZWUtY2NjMC00MTQwLThlZTYtODQ4OGUzMmFlMjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpMfNlqfJoM0GIpgNRAqNkeLsMP6wZqagSWw aBAWfPBHZ9tEQ1qDn/YikT7r3No68/QgeJZHxKA7UZNHojyCLfwm+Mhelznqhyah XvzfzV/Elxs2v8D3B/3XPo4ddvpm58hmUPgyRDBLyXfjGnfIzVxh4kmUopxfCc57 LyC4MYOad+YwEXKu/+IBvIXrXZrCvd3hlVHn9KngBxjPSF9oThGy2SPpJVm8VOWX h2IOQnIjSjOInW8XKFt8+FbvKqX9ttWFD04guU7hptGAkjpCi9TOyjM+FgvaRjwY 95N7nUd0uI5kbrILHzwAwmhJLctA/lDmgyankKBLAebIbm7dpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxuNb24cL8hUz3pKSb4ik6tGx7dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOWY3MmNjMjMtMDYxNC0z ZmU1LWIzOWEtNTNjYjUwNGRmYTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8IBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9PPej8x41H8LsdLksa8HVg+qtPILRqP91AUsYbdhk1FhPTkiMOUO3o 2hr5MekF94QYJ66Mwf681RgczZtDY9dt/wGJkWb6WgnOmO5Vuq014OfrqoxXfcq+ hLQ8IOjyQur126G1dqcSjCfERVo8qATtdmgyIIQ/7mKy4TlFS14Ie+Y3pw2/K0k2 Dwv+lWwLYi3FKPYxNqFBw22kdLoSEEWh8ZBG1qZ3iArcf8G3lhIXP2aZ+sKPGiXz vVl+AxgnqWnIdOBajBa5d/cTUNjZ9RGipKE5LMcBDgc0BS5GWpWCR13x4zvVkNlX NfjCu/w7mhfAJ601REnxgmZNFXQKg6U= -----END CERTIFICATE-----Generated at Tue Apr 15 05:59:59 2025 by rpki-client