$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d4cc3d9c-1d43-376d-8888-30e7aad244f2.roa File: d4cc3d9c-1d43-376d-8888-30e7aad244f2.roa (raw, json) Hash identifier: KQ+LFCER9ttVkRI++Ypi/u/3qFRj7GgoWEoaYrk+mPE= Subject key identifier: BE:75:D8:82:3C:45:7C:48:BF:99:5B:73:60:28:A8:74:B8:08:C1:F4 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B8F0C5D2378250BE39D4A2A0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d4cc3d9c-1d43-376d-8888-30e7aad244f2.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 852 IP address blocks: 207.194.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:c5:d2:37:82:50:be:39:d4:a2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=885536ff-15ec-4688-b278-3265782a1919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d0:a3:39:2e:9a:3a:48:93:aa:ef:94:d4:ed: 1f:91:a1:b0:21:56:cd:e0:00:74:f2:c5:82:ed:ec: 16:c1:9a:4b:b7:4d:eb:07:b0:5b:0d:bc:54:5f:a7: f1:fb:a1:77:93:e8:b0:51:7d:51:e1:e1:dd:03:22: c4:26:ba:04:85:05:a7:70:1f:01:ba:e2:dc:de:49: 5a:5c:e3:75:10:0b:ae:86:54:dd:de:f5:80:e3:10: 6d:52:58:0d:56:10:ba:34:5a:0c:df:9b:97:a0:4f: 8e:8f:30:9c:c3:a7:1f:50:7e:d2:5b:4d:1a:0a:4f: d4:d3:de:24:69:38:28:c7:57:bc:f4:d0:4a:48:44: 2f:64:ce:0c:5d:4f:9f:2c:a7:6a:06:7d:37:40:6b: e2:f3:88:c2:1f:2f:d1:83:a7:29:94:7a:b6:15:a3: 4b:a9:e8:a8:37:34:40:fa:d3:a5:d7:49:74:d0:2b: 64:db:56:cf:4e:2a:33:28:99:c6:dc:65:e7:c8:25: 1c:ff:ab:8e:cc:68:d5:bb:4f:06:94:72:b3:ea:cc: 93:fe:95:0d:8c:ad:31:25:5d:13:b9:2e:eb:7b:01: 05:5f:0a:3b:bb:0d:18:c6:cb:95:a7:89:a1:3a:aa: 63:92:94:8d:da:1a:b5:92:af:c4:a4:30:2b:bf:2a: 60:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:75:D8:82:3C:45:7C:48:BF:99:5B:73:60:28:A8:74:B8:08:C1:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d4cc3d9c-1d43-376d-8888-30e7aad244f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.194.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:33:7a:fc:42:90:6c:17:93:af:52:3f:80:0a:55:6f:45:54: b4:51:93:33:13:a5:47:4b:8f:b2:bd:fa:9f:7c:53:80:65:71: fe:86:47:e6:58:62:27:86:45:02:f0:ba:92:91:33:63:64:e2: 82:11:eb:75:fb:0c:17:6b:b9:3a:dc:64:c8:db:9e:f4:35:96: 64:fb:f0:ed:8d:58:a9:bf:57:94:9a:80:05:c8:25:c9:f8:f4: ec:e1:92:ea:e5:13:0f:30:63:a5:37:89:b7:15:7a:5c:9a:c4: 64:a2:a6:c9:e8:76:e3:8f:c4:c9:cc:cf:e6:61:a2:98:f4:f4: f1:d6:01:63:81:fe:c2:b9:2c:f4:67:e1:4e:78:72:c1:ed:5a: d7:64:fc:87:c7:81:77:0c:89:a9:10:3a:d2:7d:f4:7d:f7:bd: 78:c2:94:67:06:7c:65:59:b8:9f:6f:18:a2:2b:77:0e:8e:86: 47:c6:7a:68:3c:6b:dd:47:29:69:d1:69:d6:51:23:76:23:ae: ea:ad:15:2c:ed:1c:aa:03:8c:c4:01:99:43:42:bd:9f:e1:68: 77:54:d2:52:96:14:85:c7:64:b0:66:5d:5e:54:41:71:fa:b9: 9a:d9:04:06:97:fb:50:4e:1b:f4:b5:63:cd:6d:7c:52:fd:b7: 37:1e:5d:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48MXSN4JQvjnUoqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk ODg1NTM2ZmYtMTVlYy00Njg4LWIyNzgtMzI2NTc4MmExOTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstCjOS6aOkiTqu+U1O0fkaGwIVbN4AB08sWC 7ewWwZpLt03rB7BbDbxUX6fx+6F3k+iwUX1R4eHdAyLEJroEhQWncB8BuuLc3kla XON1EAuuhlTd3vWA4xBtUlgNVhC6NFoM35uXoE+OjzCcw6cfUH7SW00aCk/U094k aTgox1e89NBKSEQvZM4MXU+fLKdqBn03QGvi84jCHy/Rg6cplHq2FaNLqeioNzRA +tOl10l00Ctk21bPTiozKJnG3GXnyCUc/6uOzGjVu08GlHKz6syT/pUNjK0xJV0T uS7rewEFXwo7uw0YxsuVp4mhOqpjkpSN2hq1kq/EpDArvypgdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL512II8RXxIv5lbc2AoqHS4CMH0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDRjYzNkOWMtMWQ0My0z NzZkLTg4ODgtMzBlN2FhZDI0NGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz8JOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYzevxCkGwXk69SP4AKVW9FVLRRkzMTpUdLj7K9+p98U4Blcf6GR+ZY YieGRQLwupKRM2Nk4oIR63X7DBdruTrcZMjbnvQ1lmT78O2NWKm/V5SagAXIJcn4 9OzhkurlEw8wY6U3ibcVelyaxGSipsnoduOPxMnMz+Zhopj09PHWAWOB/sK5LPRn 4U54csHtWtdk/IfHgXcMiakQOtJ99H33vXjClGcGfGVZuJ9vGKIrdw6OhkfGemg8 a91HKWnRadZRI3YjruqtFSztHKoDjMQBmUNCvZ/haHdU0lKWFIXHZLBmXV5UQXH6 uZrZBAaX+1BOG/S1Y81tfFL9tzceXa4= -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:42 2025 by rpki-client