$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/57c94393-53c9-31b4-ada3-f1670b12b72f.roa File: 57c94393-53c9-31b4-ada3-f1670b12b72f.roa (raw, json) Hash identifier: kqcFRH8Le+fJiB11FfnkIpBZA/xxpkvRUf0PZT+hkBg= Subject key identifier: E1:71:7D:A5:0D:B6:54:34:DF:25:2E:04:3E:6F:A0:E4:1E:BE:C4:56 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849955F163AD82D7A05483A3A40 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/57c94393-53c9-31b4-ada3-f1670b12b72f.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 192.197.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:16:3a:d8:2d:7a:05:48:3a:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=b4172f86-4e90-4e1d-a47d-4a088cad0bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4f:ff:66:b8:31:a8:ba:cd:0e:0c:de:70:71: b9:3b:af:65:c6:cb:56:ff:d7:c6:ec:4e:b1:c0:1f: 9f:29:a3:62:7c:31:57:59:e3:3a:af:f7:4d:54:b6: bb:66:65:00:88:ed:34:a4:22:d6:2b:a4:8c:f8:20: a3:bc:85:6d:16:ef:b7:97:ac:0b:87:d2:ed:c6:58: 21:81:88:d4:e6:a0:af:85:2c:56:e0:0e:3e:7c:ed: ed:4c:b1:10:4b:65:39:d2:1f:0d:8b:a9:71:9d:96: 88:07:92:c0:b2:14:ea:7f:ac:70:8c:30:cd:47:d1: 4b:14:bb:08:1e:65:53:84:b4:07:11:0c:91:6f:8d: 23:87:37:3b:c3:2d:ab:53:cb:e8:d9:65:94:6d:cc: 0d:70:5a:91:42:cb:fb:40:1a:3c:25:ba:83:9a:be: ea:fd:af:05:2a:7e:32:fc:fe:01:f4:79:d9:51:98: e1:11:a4:2f:bb:ae:75:01:d8:ed:54:24:be:14:28: 56:0e:20:59:b7:67:1b:24:77:0a:9d:c8:d7:af:b2: ea:74:47:ae:e0:e6:d9:c2:a6:03:b7:5f:74:93:d2: 1e:23:f1:64:bf:db:e8:53:81:40:ac:bb:a4:36:04: f8:f1:40:87:2c:64:21:c2:07:2d:1f:dc:45:c0:62: e1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:71:7D:A5:0D:B6:54:34:DF:25:2E:04:3E:6F:A0:E4:1E:BE:C4:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/57c94393-53c9-31b4-ada3-f1670b12b72f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 192.197.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:32:a0:d5:3e:ab:4e:bf:64:20:b0:29:0d:c8:81:ec:4d:10: 78:8c:91:67:41:76:71:47:b0:3b:03:45:4c:0e:0d:5e:99:17: c8:58:9b:20:1c:12:b8:c5:89:f6:78:73:14:57:9e:59:03:8b: ff:66:1c:14:03:37:10:19:ce:8b:44:97:8c:54:c1:52:44:be: 80:25:5d:a9:35:55:b8:a0:21:26:ef:03:be:0f:74:24:06:89: 32:1b:b3:16:dc:4b:f6:fe:b2:a9:62:c5:a5:b6:f4:6f:c9:a1: 11:cf:85:6b:d7:1b:13:6b:3c:bd:46:da:d6:8a:f6:15:d9:c4: c3:87:59:f4:b3:03:7f:52:05:dc:7b:d2:4b:ac:74:e1:e9:9f: dc:fc:82:5e:23:56:43:ba:10:21:fb:73:1a:b4:fe:fb:a3:88: 06:1a:40:17:94:35:89:7d:5c:70:96:6f:32:fe:9a:f8:12:cb: e3:df:92:78:ed:e7:87:68:60:68:e4:27:da:62:05:ab:19:3e: 58:49:59:c1:b9:1a:25:60:17:75:5f:00:0e:5b:44:23:9f:34: f0:12:09:4d:c1:dc:12:f0:33:df:6d:2e:55:dd:79:2d:dc:ed: fb:b2:6f:98:24:d1:29:67:4b:9e:50:24:ba:af:40:e0:42:fd: 7c:83:27:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXxY62C16BUg6OkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk YjQxNzJmODYtNGU5MC00ZTFkLWE0N2QtNGEwODhjYWQwYmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0//ZrgxqLrNDgzecHG5O69lxstW/9fG7E6x wB+fKaNifDFXWeM6r/dNVLa7ZmUAiO00pCLWK6SM+CCjvIVtFu+3l6wLh9Ltxlgh gYjU5qCvhSxW4A4+fO3tTLEQS2U50h8Ni6lxnZaIB5LAshTqf6xwjDDNR9FLFLsI HmVThLQHEQyRb40jhzc7wy2rU8vo2WWUbcwNcFqRQsv7QBo8JbqDmr7q/a8FKn4y /P4B9HnZUZjhEaQvu651AdjtVCS+FChWDiBZt2cbJHcKncjXr7LqdEeu4ObZwqYD t190k9IeI/Fkv9voU4FArLukNgT48UCHLGQhwgctH9xFwGLh+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFxfaUNtlQ03yUuBD5voOQevsRWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNTdjOTQzOTMtNTNjOS0z MWI0LWFkYTMtZjE2NzBiMTJiNzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMWuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcyoNU+q06/ZCCwKQ3IgexNEHiMkWdBdnFHsDsDRUwODV6ZF8hYmyAc ErjFifZ4cxRXnlkDi/9mHBQDNxAZzotEl4xUwVJEvoAlXak1VbigISbvA74PdCQG iTIbsxbcS/b+sqlixaW29G/JoRHPhWvXGxNrPL1G2taK9hXZxMOHWfSzA39SBdx7 0kusdOHpn9z8gl4jVkO6ECH7cxq0/vujiAYaQBeUNYl9XHCWbzL+mvgSy+Pfknjt 54doYGjkJ9piBasZPlhJWcG5GiVgF3VfAA5bRCOfNPASCU3B3BLwM99tLlXdeS3c 7fuyb5gk0SlnS55QJLqvQOBC/XyDJ1g= -----END CERTIFICATE-----Generated at Sat May 10 20:54:07 2025 by rpki-client