$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/be6d32c9-5027-388b-bee4-2efe6a8db1f0.roa File: be6d32c9-5027-388b-bee4-2efe6a8db1f0.roa (raw, json) Hash identifier: ovvHMfxXks7IIDuUKGRJ6iKU54jPG8vM0hXqRw/fXFI= Subject key identifier: 6C:C5:21:C8:37:D9:76:33:80:46:B7:30:13:11:F8:C6:CA:C7:25:F9 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499AF474B23219BCBB772CF180 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/be6d32c9-5027-388b-bee4-2efe6a8db1f0.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 173.181.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:74:b2:32:19:bc:bb:77:2c:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=bae6169f-6aac-42e6-baf3-54ce919f53be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:24:91:f3:14:30:2e:6e:65:7b:fa:09:9c:5e: 88:8b:23:a3:3a:d8:ec:dd:8a:90:b8:a4:89:0c:61: 94:be:76:af:24:4b:26:5b:52:0f:ed:2c:f6:63:7c: ca:18:a5:03:d9:72:5b:4d:19:c1:a0:26:a1:47:e4: 27:5e:05:35:36:a5:b4:17:e3:ca:fb:4f:83:ed:d5: 10:67:cc:e9:3b:d8:c8:b1:2e:1b:f3:3d:b5:11:94: db:3a:e9:a4:7d:4e:c1:f8:d0:7c:ae:7a:14:bf:8d: 23:0e:29:65:43:87:76:fc:d6:1b:20:83:06:35:1e: df:a0:57:29:e8:75:0b:8c:5e:5d:d5:2f:51:09:d8: c2:b1:3e:50:fb:61:11:86:b6:74:3c:06:f9:e0:1a: f8:86:b5:c6:f3:00:13:d2:50:a9:b6:85:68:a5:63: 3b:e8:c8:dc:4d:15:61:dd:5e:5a:5e:dd:b3:19:74: 8e:f1:f3:44:4e:8c:6d:43:92:91:40:e2:37:c0:c9: e7:a4:ad:25:75:d3:65:6e:6e:a0:a2:55:6a:d1:44: 3f:96:5d:6f:b1:4d:a0:9d:c0:64:38:7b:11:46:b8: a1:8e:c8:00:50:d1:ee:67:9d:b2:e5:8e:a9:57:ac: ae:e8:af:1e:92:fb:1d:c0:1a:37:3c:8b:88:cb:a1: f9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C5:21:C8:37:D9:76:33:80:46:B7:30:13:11:F8:C6:CA:C7:25:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/be6d32c9-5027-388b-bee4-2efe6a8db1f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 173.181.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:50:6e:01:e4:9a:a2:1a:6c:91:8f:e7:2f:dd:b1:a0:41:d8: f4:31:94:79:ad:a5:4a:00:51:dd:c6:35:e2:6c:af:39:4c:fe: c9:50:6d:37:a4:7a:93:e6:0c:79:bb:3d:8d:fa:b3:77:aa:71: db:ea:d0:cc:00:b9:ec:59:55:75:d1:71:76:16:fb:45:53:fd: 50:a6:10:43:c9:50:19:38:a1:8c:30:53:93:f5:03:83:94:72: 4b:e9:6a:44:eb:b2:99:7d:03:3e:bc:a2:c3:10:54:e7:45:02: 3c:83:9b:05:29:5a:84:2f:f6:e5:de:e3:36:ea:b0:00:e1:b1: 9a:a5:4f:89:67:61:a8:43:4f:e3:65:be:62:82:ad:52:11:48: 73:ae:45:e8:0e:62:f8:74:9a:88:8e:ee:b6:5e:2e:17:f5:67: c8:48:83:05:8a:6b:b9:12:4c:40:4e:f0:09:c6:88:d5:f7:b3: 09:76:82:73:c1:f9:72:5e:5b:13:59:e5:6f:a9:33:81:cf:5b: 70:20:a8:af:15:7b:a5:d4:4f:08:47:2d:fd:0d:cc:dc:61:7a: 72:25:9a:b9:78:51:59:2b:be:e3:0a:bd:19:f1:41:40:58:79: a4:19:df:8a:b1:bc:f5:54:0c:e4:1d:26:21:64:86:32:f2:f5: 42:26:f7:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9HSyMhm8u3cs8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk YmFlNjE2OWYtNmFhYy00MmU2LWJhZjMtNTRjZTkxOWY1M2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzySR8xQwLm5le/oJnF6IiyOjOtjs3YqQuKSJ DGGUvnavJEsmW1IP7Sz2Y3zKGKUD2XJbTRnBoCahR+QnXgU1NqW0F+PK+0+D7dUQ Z8zpO9jIsS4b8z21EZTbOumkfU7B+NB8rnoUv40jDillQ4d2/NYbIIMGNR7foFcp 6HULjF5d1S9RCdjCsT5Q+2ERhrZ0PAb54Br4hrXG8wAT0lCptoVopWM76MjcTRVh 3V5aXt2zGXSO8fNEToxtQ5KRQOI3wMnnpK0lddNlbm6golVq0UQ/ll1vsU2gncBk OHsRRrihjsgAUNHuZ52y5Y6pV6yu6K8ekvsdwBo3PIuIy6H5gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzFIcg32XYzgEa3MBMR+MbKxyX5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYmU2ZDMyYzktNTAyNy0z ODhiLWJlZTQtMmVmZTZhOGRiMWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJQbgHkmqIabJGP5y/dsaBB2PQxlHmtpUoAUd3GNeJsrzlM/slQbTek epPmDHm7PY36s3eqcdvq0MwAuexZVXXRcXYW+0VT/VCmEEPJUBk4oYwwU5P1A4OU ckvpakTrspl9Az68osMQVOdFAjyDmwUpWoQv9uXe4zbqsADhsZqlT4lnYahDT+Nl vmKCrVIRSHOuRegOYvh0moiO7rZeLhf1Z8hIgwWKa7kSTEBO8AnGiNX3swl2gnPB +XJeWxNZ5W+pM4HPW3AgqK8Ve6XUTwhHLf0NzNxhenIlmrl4UVkrvuMKvRnxQUBY eaQZ34qxvPVUDOQdJiFkhjLy9UIm9+M= -----END CERTIFICATE-----Generated at Sun May 11 04:25:34 2025 by rpki-client