$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9e75d793-cbd7-3f20-b3bf-a984f6429b24.roa File: 9e75d793-cbd7-3f20-b3bf-a984f6429b24.roa (raw, json) Hash identifier: 1dP1fGLtP7e+yR7Lj4MHCSdLLGHljzD1XHBcv2++9Ek= Subject key identifier: B0:2A:66:17:9F:0E:62:6D:E7:13:AE:35:B5:86:D7:70:CA:10:A9:0D Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849955F16F079B0EDA2C8709280 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9e75d793-cbd7-3f20-b3bf-a984f6429b24.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 204.174.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:16:f0:79:b0:ed:a2:c8:70:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=50a459d7-0b79-473f-930e-ae83e77d2aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:92:11:81:a3:fa:4f:11:a4:c7:cb:dc:f3:17: 4a:96:b8:df:22:78:75:a0:d3:bf:2c:6f:96:01:b4: 50:a8:d1:8e:56:eb:81:fb:c6:ff:fb:0f:e0:3b:ae: 54:32:a5:b9:04:a8:03:e1:2d:85:59:7f:4e:47:39: c8:1a:fa:4e:fd:e6:30:c3:2c:a1:6e:f2:ec:6b:a1: 50:f9:d7:6c:af:3e:2c:29:e8:93:17:19:5a:ee:df: 1a:2c:97:49:1b:d4:f0:26:ca:88:df:5f:ac:e2:6d: 66:da:ae:f9:ef:3f:73:15:bb:7b:3a:d3:67:2b:98: 35:95:10:03:57:c9:f1:5b:7d:3c:e3:5e:c9:22:2d: 98:ef:48:01:35:b5:be:3b:22:2f:22:2f:4a:be:20: 6c:f2:c9:77:19:41:41:1d:b6:5b:cf:d1:4b:62:30: bd:a6:45:d5:c5:35:50:51:f4:83:bc:e1:c0:58:7e: 96:15:aa:32:40:1a:49:e3:53:ed:e4:53:e8:ce:92: 02:e9:19:ed:5e:31:77:5a:b2:3d:f3:12:35:ff:de: d3:46:59:7f:69:82:79:8f:10:80:74:d3:f6:8d:1f: 04:51:56:bb:1f:ad:88:ca:fc:05:71:e7:27:57:52: 2f:23:e5:54:37:55:cf:2e:40:c5:ff:86:75:e8:29: 39:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2A:66:17:9F:0E:62:6D:E7:13:AE:35:B5:86:D7:70:CA:10:A9:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9e75d793-cbd7-3f20-b3bf-a984f6429b24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 204.174.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ed:ac:77:7c:43:bc:3c:08:5b:7e:57:a5:0e:82:d2:6c:b0:2b: c6:55:cf:0b:2c:fc:64:a2:69:e7:a1:6d:29:9e:63:70:fe:4e: 20:df:23:74:af:2e:2c:cb:b2:e8:28:1a:4b:ff:1e:c3:51:5e: 4b:64:b1:ea:79:02:e7:9a:40:95:1f:05:8c:b8:7f:c3:0d:d1: 3f:bc:d7:15:91:d7:a2:5c:47:cd:15:a4:65:7b:58:28:52:34: 8a:83:4a:46:37:9c:b8:3f:56:15:d5:57:1b:19:a3:8c:2c:2d: cf:9f:09:63:9c:96:b0:2b:00:13:3d:47:8e:8c:61:3f:46:d9: fd:72:3c:9f:67:81:8d:36:4c:48:ae:00:5b:62:90:ef:b0:64: d4:a6:0a:b7:e4:6f:7d:44:d8:eb:e5:7c:ad:fd:e2:5b:b2:34: 57:4f:1d:47:f6:31:bf:3d:b9:ee:1c:87:81:97:5d:39:15:e3: f5:90:80:59:b3:bd:fe:0a:69:06:03:5d:03:d2:0e:3c:d8:e9: 8f:61:2b:f8:ca:4e:34:87:5b:35:c4:c1:95:ce:49:4a:2a:aa: 19:45:d1:9b:2b:32:cf:31:ea:20:cd:e9:94:7f:e0:c3:4d:d1: db:51:c9:0b:89:da:3a:7e:75:79:d4:42:9a:67:5f:12:63:30: 3a:73:fa:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXxbwebDtoshwkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk NTBhNDU5ZDctMGI3OS00NzNmLTkzMGUtYWU4M2U3N2QyYWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpIRgaP6TxGkx8vc8xdKlrjfInh1oNO/LG+W AbRQqNGOVuuB+8b/+w/gO65UMqW5BKgD4S2FWX9ORznIGvpO/eYwwyyhbvLsa6FQ +ddsrz4sKeiTFxla7t8aLJdJG9TwJsqI31+s4m1m2q757z9zFbt7OtNnK5g1lRAD V8nxW308417JIi2Y70gBNbW+OyIvIi9KviBs8sl3GUFBHbZbz9FLYjC9pkXVxTVQ UfSDvOHAWH6WFaoyQBpJ41Pt5FPozpIC6RntXjF3WrI98xI1/97TRll/aYJ5jxCA dNP2jR8EUVa7H62IyvwFcecnV1IvI+VUN1XPLkDF/4Z16Ck5QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAqZhefDmJt5xOuNbWG13DKEKkNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOWU3NWQ3OTMtY2JkNy0z ZjIwLWIzYmYtYTk4NGY2NDI5YjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzK54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAO2sd3xDvDwIW35XpQ6C0mywK8ZVzwss/GSiaeehbSmeY3D+TiDfI3Sv LizLsugoGkv/HsNRXktksep5AueaQJUfBYy4f8MN0T+81xWR16JcR80VpGV7WChS NIqDSkY3nLg/VhXVVxsZo4wsLc+fCWOclrArABM9R46MYT9G2f1yPJ9ngY02TEiu AFtikO+wZNSmCrfkb31E2OvlfK394luyNFdPHUf2Mb89ue4ch4GXXTkV4/WQgFmz vf4KaQYDXQPSDjzY6Y9hK/jKTjSHWzXEwZXOSUoqqhlF0ZsrMs8x6iDN6ZR/4MNN 0dtRyQuJ2jp+dXnUQppnXxJjMDpz+k0= -----END CERTIFICATE-----Generated at Sun May 11 09:10:09 2025 by rpki-client