$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3bdbb9ae-21e7-36fe-ad4d-961bb88d3f18.roa File: 3bdbb9ae-21e7-36fe-ad4d-961bb88d3f18.roa (raw, json) Hash identifier: xqCG4o0/ZrMvqlbiSXFpisq4AYJQ8AEkEL4y0Bm455Q= Subject key identifier: 45:69:76:D4:80:7E:75:E2:60:A2:B9:79:3D:A6:B4:11:F7:FA:B0:B7 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F43285849C20A2F6437B8B981AE06B040 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3bdbb9ae-21e7-36fe-ad4d-961bb88d3f18.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 10796 IP address blocks: 71.67.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:2f:64:37:b8:b9:81:ae:06:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=cde56670-84fa-44f3-8269-36d0e60ebfb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ae:92:0b:c4:92:99:06:94:ca:0c:cf:d4:76: fc:05:dd:6e:61:eb:4a:cb:4b:ac:65:ed:a6:f0:02: 58:b8:3f:9b:fd:38:d8:ea:eb:1d:1c:26:88:60:eb: 1c:15:5f:4a:fb:4d:90:a0:43:45:75:16:f2:1e:8a: 52:c3:11:14:fe:25:9d:f7:d6:49:cc:33:69:6d:c2: bc:7b:c1:5c:66:62:a7:c4:da:04:91:2f:1b:15:53: 45:77:95:2c:c0:dc:15:1f:f9:cf:01:be:6e:86:fc: fb:75:1c:cc:29:a8:b6:ea:4a:51:02:11:73:20:73: ba:8c:3e:d8:77:c6:ed:02:87:5d:02:c3:b1:37:84: 4d:d8:d3:68:a9:92:11:1d:51:3e:13:7b:d3:8d:64: 44:8c:4e:5c:05:82:4a:1f:f2:88:1e:8b:66:56:ca: eb:d8:a3:21:12:f3:09:4f:57:4d:3f:c5:c5:ea:a3: 3a:a8:33:50:61:03:d3:26:56:f3:d1:60:f9:7b:9b: ee:de:4a:58:f5:08:2f:20:6e:9d:22:62:dd:fe:52: ba:1b:b6:9c:a1:e9:31:c2:51:3b:09:36:26:18:2b: 33:d7:11:11:10:71:eb:44:6e:f2:20:54:7c:d0:04: ae:14:b9:5e:da:81:8d:c7:dc:85:71:ed:e9:41:87: 27:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:69:76:D4:80:7E:75:E2:60:A2:B9:79:3D:A6:B4:11:F7:FA:B0:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3bdbb9ae-21e7-36fe-ad4d-961bb88d3f18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 71.67.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:fd:82:07:4e:a7:03:57:4e:6a:b6:fe:01:6a:00:54:ba:fb: 46:bf:28:b9:e6:a9:85:b8:03:79:7b:4c:32:74:77:c4:38:7d: dc:70:27:38:11:6d:5c:a2:73:89:7f:2d:b2:43:57:49:16:e9: dd:19:a1:07:44:1f:de:80:10:17:75:5f:ff:1c:63:0f:52:3f: 47:65:83:c4:b4:9a:95:d0:11:eb:7d:a0:0e:ec:3b:b8:50:df: c9:9e:41:36:c3:d5:d7:9f:3f:34:81:68:56:48:6f:bd:fd:79: 1d:0e:cd:6d:05:25:58:a9:38:dc:77:33:35:98:73:76:a1:66: 03:39:ba:15:07:19:eb:cb:11:ec:5c:ef:77:a3:16:c8:54:e5: 5e:6a:60:66:80:4f:e8:63:fb:4b:d0:ab:49:41:de:16:b3:da: e8:d9:43:2c:42:03:00:17:bf:c9:fd:31:e1:91:12:86:f2:2e: be:ee:30:c9:f3:bc:c7:c8:72:21:0f:86:a7:8a:a3:e5:14:5c: c4:53:7d:cf:eb:98:4b:e5:39:3e:d1:86:87:a5:a2:5b:14:2f: 78:d1:4c:76:0f:ab:0d:03:bf:8c:dd:67:a5:05:55:e2:e3:66: a7:e1:9c:72:f5:3a:d8:dc:8a:6e:48:d5:b0:96:1c:02:35:9c: d4:13:e7:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCi9kN7i5ga4GsEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk Y2RlNTY2NzAtODRmYS00NGYzLTgyNjktMzZkMGU2MGViZmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg66SC8SSmQaUygzP1Hb8Bd1uYetKy0usZe2m 8AJYuD+b/TjY6usdHCaIYOscFV9K+02QoENFdRbyHopSwxEU/iWd99ZJzDNpbcK8 e8FcZmKnxNoEkS8bFVNFd5UswNwVH/nPAb5uhvz7dRzMKai26kpRAhFzIHO6jD7Y d8btAoddAsOxN4RN2NNoqZIRHVE+E3vTjWREjE5cBYJKH/KIHotmVsrr2KMhEvMJ T1dNP8XF6qM6qDNQYQPTJlbz0WD5e5vu3kpY9QgvIG6dImLd/lK6G7acoekxwlE7 CTYmGCsz1xEREHHrRG7yIFR80ASuFLle2oGNx9yFce3pQYcn4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVpdtSAfnXiYKK5eT2mtBH3+rC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvM2JkYmI5YWUtMjFlNy0z NmZlLWFkNGQtOTYxYmI4OGQzZjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR0OQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAj9ggdOpwNXTmq2/gFqAFS6+0a/KLnmqYW4A3l7TDJ0d8Q4fdxwJzgR bVyic4l/LbJDV0kW6d0ZoQdEH96AEBd1X/8cYw9SP0dlg8S0mpXQEet9oA7sO7hQ 38meQTbD1defPzSBaFZIb739eR0OzW0FJVipONx3MzWYc3ahZgM5uhUHGevLEexc 73ejFshU5V5qYGaAT+hj+0vQq0lB3haz2ujZQyxCAwAXv8n9MeGREobyLr7uMMnz vMfIciEPhqeKo+UUXMRTfc/rmEvlOT7RhoelolsUL3jRTHYPqw0Dv4zdZ6UFVeLj ZqfhnHL1Otjcim5I1bCWHAI1nNQT59E= -----END CERTIFICATE-----Generated at Sat May 10 18:55:41 2025 by rpki-client