$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e74defce-ac11-3f9e-bd78-3332692b9cc3.roa File: e74defce-ac11-3f9e-bd78-3332692b9cc3.roa (raw, json) Hash identifier: FB11G1bb6iOUw/umuruv0IKxX82MPSJRWvz9FPmnq1w= Subject key identifier: 04:DF:9E:D1:6C:13:38:2A:01:57:CE:27:35:A3:47:D5:E6:0B:12:87 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499829C70F4213BF0200199780 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e74defce-ac11-3f9e-bd78-3332692b9cc3.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 207.194.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:c7:0f:42:13:bf:02:00:19:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=7433c708-7868-4e03-af84-fbfec92e33f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a8:cf:ce:e1:b9:f5:c7:3a:80:58:be:40:40: c2:15:02:74:a1:f2:c5:26:7a:02:52:42:45:eb:77: 75:f4:95:20:66:f6:91:69:34:45:f2:f3:e7:56:f6: 56:5b:87:03:44:30:18:1a:4d:02:bf:60:26:fc:1d: bc:0a:4b:f7:5f:3b:2b:37:2e:ec:63:80:8b:02:ff: b1:41:77:c5:1b:7a:c5:08:c4:9a:44:85:cd:8a:e0: 2f:38:73:cd:97:0b:d3:c2:c8:77:d8:14:db:92:f1: f8:8b:eb:99:50:87:6e:94:dc:3a:32:89:04:c7:79: a2:40:6d:df:e7:13:49:ac:a5:fd:46:d9:d0:f7:fa: 2c:d1:81:6c:c5:58:81:b7:e9:61:d9:17:4e:42:7b: 7c:ec:3b:5f:c5:94:02:f8:72:0f:3f:1c:9a:01:70: ff:5f:1b:d3:a6:39:85:9b:95:ac:a6:98:2f:d4:07: 8f:7f:26:e1:3a:56:72:2e:85:54:21:0e:23:8f:83: 1a:49:0b:30:7d:59:da:61:b6:ea:e4:34:20:7e:b9: 88:a2:04:c3:10:ba:8f:db:4c:66:b0:58:79:76:92: 48:86:be:31:c3:08:a2:93:58:72:59:33:c6:f9:32: 1b:0c:45:4f:71:dc:35:7b:5b:d4:8a:78:c8:9c:d7: da:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DF:9E:D1:6C:13:38:2A:01:57:CE:27:35:A3:47:D5:E6:0B:12:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e74defce-ac11-3f9e-bd78-3332692b9cc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.194.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:b7:54:29:0e:ee:4b:ad:0a:e4:fa:cc:e2:f7:91:aa:45:ee: 62:4b:af:eb:e1:cb:89:16:27:4f:17:16:f1:ca:38:da:d2:08: 88:71:3c:eb:e6:b1:0a:56:e1:46:00:4a:4b:18:56:22:59:9a: 18:60:7b:72:5a:39:fe:a0:7c:9d:de:e3:ef:b0:b8:5a:7c:6e: 56:cc:9c:26:92:9b:61:c4:a7:4b:ad:43:30:e2:e2:7e:03:4a: 96:22:6a:fe:fb:c3:83:4e:df:65:84:c2:2e:4e:fd:0e:cd:85: d5:a0:8a:f8:60:3a:7b:9a:76:e1:bc:c2:ce:b7:42:ba:04:71: 90:53:64:87:75:5b:1c:60:38:6e:01:39:39:57:c8:59:34:72: 27:68:f4:30:7c:f0:67:86:cc:ce:3b:f8:56:48:32:57:74:5c: 48:0b:15:30:7a:9b:f9:b7:c2:68:bd:45:1c:a4:89:ad:4e:58: db:e6:3f:ad:4e:71:93:d5:66:47:0d:74:a4:7a:91:40:64:6f: 64:52:9a:c1:6f:56:a2:dd:5c:d5:47:06:cb:74:ce:34:24:7f: 56:05:8d:dc:75:35:16:e7:5c:77:d8:19:39:3c:66:30:29:b0: 9f:9e:ad:65:28:55:95:bd:91:93:af:cc:cd:ee:4f:e6:18:1c: fd:ae:0b:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKccPQhO/AgAZl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk NzQzM2M3MDgtNzg2OC00ZTAzLWFmODQtZmJmZWM5MmUzM2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqjPzuG59cc6gFi+QEDCFQJ0ofLFJnoCUkJF 63d19JUgZvaRaTRF8vPnVvZWW4cDRDAYGk0Cv2Am/B28Ckv3XzsrNy7sY4CLAv+x QXfFG3rFCMSaRIXNiuAvOHPNlwvTwsh32BTbkvH4i+uZUIdulNw6MokEx3miQG3f 5xNJrKX9RtnQ9/os0YFsxViBt+lh2RdOQnt87DtfxZQC+HIPPxyaAXD/XxvTpjmF m5Wsppgv1AePfybhOlZyLoVUIQ4jj4MaSQswfVnaYbbq5DQgfrmIogTDELqP20xm sFh5dpJIhr4xwwiik1hyWTPG+TIbDEVPcdw1e1vUinjInNfa6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATfntFsEzgqAVfOJzWjR9XmCxKHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZTc0ZGVmY2UtYWMxMS0z ZjllLWJkNzgtMzMzMjY5MmI5Y2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz8IkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMq3VCkO7kutCuT6zOL3kapF7mJLr+vhy4kWJ08XFvHKONrSCIhxPOvm sQpW4UYASksYViJZmhhge3JaOf6gfJ3e4++wuFp8blbMnCaSm2HEp0utQzDi4n4D SpYiav77w4NO32WEwi5O/Q7NhdWgivhgOnuaduG8ws63QroEcZBTZId1WxxgOG4B OTlXyFk0cido9DB88GeGzM47+FZIMld0XEgLFTB6m/m3wmi9RRykia1OWNvmP61O cZPVZkcNdKR6kUBkb2RSmsFvVqLdXNVHBst0zjQkf1YFjdx1NRbnXHfYGTk8ZjAp sJ+erWUoVZW9kZOvzM3uT+YYHP2uC1g= -----END CERTIFICATE-----Generated at Sun May 11 01:57:53 2025 by rpki-client