$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/73cade66-6173-37d3-b65e-3b1e80e5120c.roa File: 73cade66-6173-37d3-b65e-3b1e80e5120c.roa (raw, json) Hash identifier: Qw8bMfcgRZBKSX7NwBxL2U2VdTK3sz0G/3lwXd8TGrc= Subject key identifier: AD:66:F6:0D:3F:19:54:EC:FC:2A:04:35:EA:3C:4F:05:A1:10:AD:F1 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499AF476F15F55FA840551F380 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/73cade66-6173-37d3-b65e-3b1e80e5120c.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 173.183.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:76:f1:5f:55:fa:84:05:51:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=565d331d-01cb-42f6-b50d-655346299fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:10:24:1b:3d:b2:e0:99:c4:36:5e:1c:17:74: a7:f9:8c:13:96:2c:6b:3e:b5:c6:8d:ea:0e:7d:13: fc:db:24:eb:10:2e:38:0a:f3:58:2b:ce:08:2e:24: fe:1c:d9:f6:38:bb:bd:95:d2:e3:bf:b6:ca:48:0d: f7:81:11:be:bf:8f:2b:31:b9:ef:c0:2f:fa:d0:d3: 6c:f9:27:89:ec:5b:a0:54:21:7f:1e:ae:3d:c1:d3: 3e:a1:74:33:30:44:49:8c:0f:4e:bd:d2:f0:d8:4f: 29:39:c3:66:1f:01:d8:b1:f0:ca:2d:fe:6c:4a:77: 06:32:77:41:95:52:aa:8d:50:63:d8:10:ca:01:61: 0f:b9:c9:94:c9:5e:bd:a9:b1:9d:9e:dc:25:11:99: dd:0a:8d:3b:38:5e:69:6e:29:4e:3a:83:04:50:2b: 03:d2:5b:49:0a:98:c2:9b:c4:a0:20:02:eb:cd:65: ae:9a:4e:f9:50:e5:0a:5f:6a:46:40:92:1b:13:d9: af:aa:3c:85:38:53:b6:56:66:18:26:c1:6c:10:2f: 26:b8:1c:d3:8d:d5:06:5f:a4:bc:c5:0f:49:66:c6: 09:52:de:21:4e:a8:ac:29:77:9d:ef:5f:80:35:95: b8:d9:27:19:2a:6d:a2:87:ee:4e:4e:65:83:60:5f: 38:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:66:F6:0D:3F:19:54:EC:FC:2A:04:35:EA:3C:4F:05:A1:10:AD:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/73cade66-6173-37d3-b65e-3b1e80e5120c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 173.183.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:24:6f:b2:1a:af:58:2a:a2:6e:77:57:8a:aa:58:52:bb:30: ed:60:c6:ac:7d:d4:d1:81:4b:7a:cd:91:9c:9d:1a:00:61:fc: 7f:27:fe:27:7e:73:d2:a8:48:7d:2e:2d:d3:c7:e8:dd:fa:02: da:99:d1:b9:d6:66:86:89:8a:0f:48:17:1a:94:04:3c:5f:c7: 89:1d:a4:df:b2:94:9e:e1:78:e0:55:b1:c3:bf:57:11:3c:09: 76:ee:e1:93:29:93:3c:96:36:44:aa:b5:f5:80:6e:c1:08:06: 86:6e:b4:5f:b1:6f:e8:ef:db:4d:9b:da:30:d8:2f:37:d9:4c: 6f:10:28:59:21:28:71:c3:a1:d1:a8:70:cf:90:42:de:91:e1: 36:cf:b4:c1:c5:c7:e8:0c:8d:81:19:01:d9:c1:18:68:cd:57: 3a:0f:b5:eb:a8:32:e3:30:1b:fb:25:7d:0d:bb:8a:6b:ea:ae: 4b:f2:04:6b:ba:53:41:6a:1f:6a:88:1a:99:46:33:80:d9:15: a2:d8:2d:fa:4b:53:1c:ae:29:a2:a4:20:43:ea:1b:e3:7b:6b: d4:50:1e:81:66:8e:88:d6:f4:da:3c:d8:f0:00:46:8c:b8:70: ea:5a:94:12:26:a2:56:b7:8a:85:d9:30:45:d4:34:31:c2:61: 97:0a:95:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9HbxX1X6hAVR84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NTY1ZDMzMWQtMDFjYi00MmY2LWI1MGQtNjU1MzQ2Mjk5ZmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBAkGz2y4JnENl4cF3Sn+YwTlixrPrXGjeoO fRP82yTrEC44CvNYK84ILiT+HNn2OLu9ldLjv7bKSA33gRG+v48rMbnvwC/60NNs +SeJ7FugVCF/Hq49wdM+oXQzMERJjA9OvdLw2E8pOcNmHwHYsfDKLf5sSncGMndB lVKqjVBj2BDKAWEPucmUyV69qbGdntwlEZndCo07OF5pbilOOoMEUCsD0ltJCpjC m8SgIALrzWWumk75UOUKX2pGQJIbE9mvqjyFOFO2VmYYJsFsEC8muBzTjdUGX6S8 xQ9JZsYJUt4hTqisKXed71+ANZW42ScZKm2ih+5OTmWDYF84dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1m9g0/GVTs/CoENeo8TwWhEK3xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNzNjYWRlNjYtNjE3My0z N2QzLWI2NWUtM2IxZTgwZTUxMjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrbeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4kb7Iar1gqom53V4qqWFK7MO1gxqx91NGBS3rNkZydGgBh/H8n/id+ c9KoSH0uLdPH6N36AtqZ0bnWZoaJig9IFxqUBDxfx4kdpN+ylJ7heOBVscO/VxE8 CXbu4ZMpkzyWNkSqtfWAbsEIBoZutF+xb+jv202b2jDYLzfZTG8QKFkhKHHDodGo cM+QQt6R4TbPtMHFx+gMjYEZAdnBGGjNVzoPteuoMuMwG/slfQ27imvqrkvyBGu6 U0FqH2qIGplGM4DZFaLYLfpLUxyuKaKkIEPqG+N7a9RQHoFmjojW9No82PAARoy4 cOpalBImola3ioXZMEXUNDHCYZcKlYk= -----END CERTIFICATE-----Generated at Sun May 11 01:05:29 2025 by rpki-client