$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d964238c-9fa3-3f4c-ba7b-d1aa53fc869d.roa File: d964238c-9fa3-3f4c-ba7b-d1aa53fc869d.roa (raw, json) Hash identifier: QMrFjoXmqSnCvv82bMKseLIpgwMFlJsgCCwREearWck= Subject key identifier: BD:C6:30:20:ED:5D:62:C9:37:19:63:B6:26:48:43:1C:73:88:F3:C6 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B626100610CAF40391F92980 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d964238c-9fa3-3f4c-ba7b-d1aa53fc869d.roa Signing time: Thu 30 Jan 2025 02:00:40 +0000 ROA not before: Thu 30 Jan 2025 02:00:40 +0000 ROA not after: Wed 30 Apr 2025 01:00:40 +0000 asID: 852 IP address blocks: 192.197.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:26:10:06:10:ca:f4:03:91:f9:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 30 02:00:40 2025 GMT Not After : Apr 30 01:00:40 2025 GMT Subject: CN=d89b9267-4078-45ab-9120-40f874b95fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a8:45:f5:c2:49:ba:22:1a:07:57:cb:4a:dc: 51:4d:29:c6:c7:95:11:6c:05:56:41:d9:2e:7c:33: 80:f9:92:16:65:9b:5e:fe:34:75:91:3a:b9:1e:ca: e7:08:55:30:fb:3c:6a:7b:e4:18:43:69:10:16:05: 0f:fd:0e:e7:d6:9e:aa:22:fc:29:30:69:6b:7c:6f: 3a:cc:7e:19:3f:4a:71:3d:65:96:f1:ca:34:e5:23: 1a:80:a0:aa:e4:72:84:42:45:cd:3a:84:d8:04:78: fe:2e:fe:5d:c5:e8:a0:aa:93:83:8a:73:81:61:7c: 57:53:ea:16:59:f5:07:82:89:f1:7b:76:d9:38:4d: cd:be:77:60:6e:f1:aa:cc:9e:1f:6d:58:8f:45:c4: 30:ed:6d:fe:b5:ef:cd:f1:9b:c7:65:8f:3f:b4:83: 93:66:a4:b4:f1:2c:81:66:60:2d:86:08:e7:0c:b3: 17:23:2e:1d:79:57:76:29:e1:1b:89:a1:bb:d4:55: 0c:13:f5:db:c7:9c:67:0e:8a:42:e4:2f:65:68:3e: 0f:18:d1:1e:88:a4:65:27:2b:9c:31:25:de:b2:50: a8:07:b0:f7:1d:a1:1c:54:70:a4:d8:34:3d:50:e9: 07:e3:3a:1e:eb:b8:78:ce:87:79:90:43:3f:1d:6c: 56:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C6:30:20:ED:5D:62:C9:37:19:63:B6:26:48:43:1C:73:88:F3:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d964238c-9fa3-3f4c-ba7b-d1aa53fc869d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 192.197.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:49:7a:99:47:ce:0e:c5:f6:36:a3:a6:36:fe:cd:c5:86:4d: 31:80:6b:c6:3d:e4:e3:1f:47:7e:e5:d5:39:8d:78:67:4e:b7: b6:f1:a1:78:af:9e:cb:b9:5f:60:f7:3c:5a:cb:75:63:23:3e: 91:21:2d:e1:7c:69:55:5a:d9:63:56:64:de:c0:d2:c6:b3:e4: a4:db:9f:b0:29:84:a1:8a:ab:99:39:51:cd:8e:f6:bf:19:70: 0b:dc:3b:ac:0c:52:2e:91:f5:89:82:a9:e3:a8:d4:80:29:6a: 9d:2b:f4:a2:42:76:18:c2:d3:25:32:14:46:9e:6f:de:2b:3a: b3:76:6a:3a:26:fb:7d:4d:24:c3:b4:ce:a9:2c:bb:5b:88:b0: 09:2c:f5:95:a2:23:a7:96:0d:16:01:ce:b0:dc:b4:3d:48:d6: 9f:c8:30:ab:8e:1b:e5:ca:e3:a6:07:3c:bb:8c:9c:8f:57:de: f9:9e:84:07:ad:47:4e:38:10:cb:14:2e:96:ee:df:cc:9c:da: 8c:59:69:a1:72:bc:e8:0d:1f:62:ee:61:45:ea:c6:b2:6b:00: 61:5a:db:12:9c:bf:6b:d5:74:36:73:6c:2a:c3:61:40:ad:18: 4f:f6:16:df:6d:c1:d3:7c:ce:7d:30:78:c3:17:95:e4:32:53: 21:13:9f:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi2JhAGEMr0A5H5KYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEzMDAyMDA0MFoXDTI1MDQzMDAxMDA0MFowLzEtMCsGA1UEAxMk ZDg5YjkyNjctNDA3OC00NWFiLTkxMjAtNDBmODc0Yjk1ZmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6hF9cJJuiIaB1fLStxRTSnGx5URbAVWQdku fDOA+ZIWZZte/jR1kTq5HsrnCFUw+zxqe+QYQ2kQFgUP/Q7n1p6qIvwpMGlrfG86 zH4ZP0pxPWWW8co05SMagKCq5HKEQkXNOoTYBHj+Lv5dxeigqpODinOBYXxXU+oW WfUHgonxe3bZOE3NvndgbvGqzJ4fbViPRcQw7W3+te/N8ZvHZY8/tIOTZqS08SyB ZmAthgjnDLMXIy4deVd2KeEbiaG71FUME/Xbx5xnDopC5C9laD4PGNEeiKRlJyuc MSXeslCoB7D3HaEcVHCk2DQ9UOkH4zoe67h4zod5kEM/HWxWywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3GMCDtXWLJNxljtiZIQxxziPPGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDk2NDIzOGMtOWZhMy0z ZjRjLWJhN2ItZDFhYTUzZmM4NjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMWsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMVJeplHzg7F9jajpjb+zcWGTTGAa8Y95OMfR37l1TmNeGdOt7bxoXiv nsu5X2D3PFrLdWMjPpEhLeF8aVVa2WNWZN7A0saz5KTbn7AphKGKq5k5Uc2O9r8Z cAvcO6wMUi6R9YmCqeOo1IApap0r9KJCdhjC0yUyFEaeb94rOrN2ajom+31NJMO0 zqksu1uIsAks9ZWiI6eWDRYBzrDctD1I1p/IMKuOG+XK46YHPLuMnI9X3vmehAet R044EMsULpbu38yc2oxZaaFyvOgNH2LuYUXqxrJrAGFa2xKcv2vVdDZzbCrDYUCt GE/2Ft9twdN8zn0weMMXleQyUyETn9g= -----END CERTIFICATE-----Generated at Sun Apr 6 06:01:28 2025 by rpki-client