$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/02bd9d9f-98a2-30f1-9ef4-e4db8086263c.roa File: 02bd9d9f-98a2-30f1-9ef4-e4db8086263c.roa (raw, json) Hash identifier: BKd6SD9WO0BznhFLbz2dvzCJZnCBqFJPk16whwe7T9c= Subject key identifier: 43:92:CA:72:BE:73:86:42:31:E0:D4:1E:88:7C:6F:CB:DD:42:66:67 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858498CFF02880C47D33CB482B078 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/02bd9d9f-98a2-30f1-9ef4-e4db8086263c.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 21723 IP address blocks: 208.181.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:02:88:0c:47:d3:3c:b4:82:b0:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=95381f3e-7f10-440d-a9b5-6e0a85448a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:59:9e:35:67:b1:27:1c:b3:7e:95:15:e7:25: 96:19:79:db:44:76:1a:40:68:6e:5b:bb:a8:22:44: bb:c6:d5:88:29:28:13:a2:c9:9c:f8:2f:a0:a9:fe: ef:7b:0a:35:76:d9:ed:7e:90:1f:fa:7b:8f:3e:13: f6:85:f6:da:f8:51:48:df:16:87:3f:ba:aa:4c:1f: 52:90:34:70:9a:fd:4c:7c:c3:d5:46:28:89:3e:36: bc:b3:65:85:02:06:8f:5b:3b:1a:26:57:e9:cf:48: 61:bf:b3:79:36:0c:ea:f7:f1:f6:95:00:b0:6e:51: d9:2d:96:7e:96:25:0a:30:68:53:3b:87:51:cf:71: 48:5a:50:7f:50:d8:64:92:62:57:e8:aa:69:a6:1d: 73:6f:64:6b:bc:8e:4d:9e:d9:cb:cf:a0:5a:86:0d: 06:24:b2:ad:1c:69:10:b9:4d:09:7c:22:ca:dd:16: d4:d6:8e:4d:00:ad:19:b3:9f:38:36:b2:b0:f3:bc: 88:6c:8d:5e:9d:72:e4:2f:c8:f6:eb:f4:70:7f:68: 5e:4d:c6:fd:fc:a5:be:4b:4a:ee:4b:81:9e:07:0d: e6:56:08:56:df:aa:62:21:f8:85:ac:0e:f2:ce:36: ef:c4:a8:b1:c3:c9:78:16:f3:52:2e:0c:9f:84:b5: 5a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:92:CA:72:BE:73:86:42:31:E0:D4:1E:88:7C:6F:CB:DD:42:66:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/02bd9d9f-98a2-30f1-9ef4-e4db8086263c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:67:63:4d:1c:9d:b0:71:07:d4:dd:83:bb:a9:07:bf:d3:4d: 16:44:c8:71:8d:d7:56:35:26:16:63:3a:da:6e:76:ad:9a:77: 34:de:ba:e9:df:20:97:02:68:a0:68:d0:f3:82:34:9d:47:1a: 98:4d:94:91:80:1f:51:79:43:d8:b6:97:ff:f6:f5:87:a3:e7: 4a:ff:bb:9c:1c:0a:6f:08:5d:01:8d:d9:70:d3:42:44:2f:1d: 7f:aa:17:c1:0e:03:4c:79:a3:2f:25:1f:e6:04:d9:15:ff:ae: 31:e6:53:a3:0c:6b:d1:38:b9:5f:77:0a:88:b5:7e:cc:24:00: dd:14:ff:c5:8c:11:15:05:d5:89:70:95:3b:7f:b2:0c:11:7a: 1b:05:31:45:9e:40:6e:d0:59:a8:b6:a5:e2:68:08:cc:9f:22: db:9e:76:fc:bd:4e:2f:83:10:8e:59:bd:0e:e0:30:3f:ac:bc: d1:d2:8d:41:7f:f3:f6:79:cc:6d:6c:04:7c:d5:21:de:79:0c: 3e:ca:41:2a:29:3f:8b:cc:79:50:c5:fe:60:92:d3:37:86:a7: 10:70:ce:4c:7c:49:92:66:4b:b7:89:f1:90:81:36:38:48:b3: 66:75:f1:3d:9a:5b:11:b9:98:ec:be:92:34:f1:21:7a:e4:d5: 90:00:63:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/wKIDEfTPLSCsHgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk OTUzODFmM2UtN2YxMC00NDBkLWE5YjUtNmUwYTg1NDQ4YTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVmeNWexJxyzfpUV5yWWGXnbRHYaQGhuW7uo IkS7xtWIKSgTosmc+C+gqf7vewo1dtntfpAf+nuPPhP2hfba+FFI3xaHP7qqTB9S kDRwmv1MfMPVRiiJPja8s2WFAgaPWzsaJlfpz0hhv7N5Ngzq9/H2lQCwblHZLZZ+ liUKMGhTO4dRz3FIWlB/UNhkkmJX6Kppph1zb2RrvI5NntnLz6Bahg0GJLKtHGkQ uU0JfCLK3RbU1o5NAK0Zs584NrKw87yIbI1enXLkL8j26/Rwf2heTcb9/KW+S0ru S4GeBw3mVghW36piIfiFrA7yzjbvxKixw8l4FvNSLgyfhLVaEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOSynK+c4ZCMeDUHoh8b8vdQmZnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMDJiZDlkOWYtOThhMi0z MGYxLTllZjQtZTRkYjgwODYyNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0LXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhnY00cnbBxB9Tdg7upB7/TTRZEyHGN11Y1JhZjOtpudq2adzTeuunf IJcCaKBo0POCNJ1HGphNlJGAH1F5Q9i2l//29Yej50r/u5wcCm8IXQGN2XDTQkQv HX+qF8EOA0x5oy8lH+YE2RX/rjHmU6MMa9E4uV93Coi1fswkAN0U/8WMERUF1Ylw lTt/sgwRehsFMUWeQG7QWai2peJoCMyfItuedvy9Ti+DEI5ZvQ7gMD+svNHSjUF/ 8/Z5zG1sBHzVId55DD7KQSopP4vMeVDF/mCS0zeGpxBwzkx8SZJmS7eJ8ZCBNjhI s2Z18T2aWxG5mOy+kjTxIXrk1ZAAY+0= -----END CERTIFICATE-----Generated at Mon May 5 23:14:44 2025 by rpki-client