$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/657752d5-7987-30fd-a6c9-761b35585226.roa File: 657752d5-7987-30fd-a6c9-761b35585226.roa (raw, json) Hash identifier: LwP6PskXE79wrQ1tdifkToXAdMhc97Yo6QdG9NeYbTU= Subject key identifier: 93:AB:9F:59:CD:19:C6:A1:2A:7A:96:D7:02:F0:A1:E5:BE:CA:F7:BC Certificate issuer: /CN=9cae117d-b11f-4787-b860-f4d311531af3 Certificate serial: 010D0C9F43285849CE9A33D28A3FCAFC761287C0 Authority key identifier: 8F:AA:F3:0C:EE:B1:82:F2:F0:D5:9F:35:B1:E4:9D:A7:90:BE:95:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/657752d5-7987-30fd-a6c9-761b35585226.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 36352 IP address blocks: 146.71.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:33:d2:8a:3f:ca:fc:76:12:87:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cae117d-b11f-4787-b860-f4d311531af3 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=e3840bfb-d3e6-4c84-876e-dfabd2113da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d7:9e:a3:f5:e2:bd:b5:f6:6d:41:6e:be:d3: 7f:1a:1b:b3:ba:9d:c0:59:d6:36:41:1c:c9:4f:39: 2b:f5:5d:d6:de:9d:ce:1e:f8:cc:cc:35:6e:ed:e1: 01:52:8e:0e:b1:e1:a6:21:3c:61:fb:95:41:55:07: 0e:41:ff:40:f2:6b:dd:25:18:b5:a1:32:11:2a:9b: 1a:78:c3:92:d2:a7:11:5b:5a:33:58:6d:cf:19:33: 1e:4c:c3:17:8d:78:7e:d1:49:c6:27:e2:ef:b4:54: 61:1f:11:ec:e0:55:43:f2:d9:15:31:9d:4a:b5:b8: 79:c2:1e:7a:dd:6f:23:11:dd:df:aa:15:ff:ba:8d: d2:2d:48:f1:86:ea:08:57:4a:83:c6:87:fe:eb:eb: ec:39:99:1e:c8:80:c2:fe:9a:13:29:63:3f:74:85: 58:90:c9:d6:aa:6f:be:9c:e7:4a:32:18:25:6f:6d: e1:a2:21:a0:0b:9d:1a:96:92:f6:cd:25:7e:31:a8: f2:52:89:90:81:6e:b9:45:81:0c:23:af:a0:d4:cf: 14:d0:f9:c1:f8:e7:c4:bc:e8:66:c4:a9:5c:30:47: b9:d7:5d:ec:52:0c:08:42:19:09:d7:54:3c:9e:1e: d4:4c:4e:3f:e0:9b:23:8d:ee:26:cf:ea:75:fb:d2: 37:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:AB:9F:59:CD:19:C6:A1:2A:7A:96:D7:02:F0:A1:E5:BE:CA:F7:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/657752d5-7987-30fd-a6c9-761b35585226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.crl X509v3 Authority Key Identifier: keyid:8F:AA:F3:0C:EE:B1:82:F2:F0:D5:9F:35:B1:E4:9D:A7:90:BE:95:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3.cer sbgp-ipAddrBlock: critical IPv4: 146.71.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:e9:16:f1:c6:c0:c2:a8:4d:c7:b9:3b:1b:35:80:62:63:73: 67:b4:fa:11:5f:d3:8d:db:43:a0:ab:e4:2e:b9:ef:73:24:ac: 96:fa:74:69:f8:6e:f1:82:36:d3:1b:10:1d:ed:14:08:8d:eb: 98:e8:7b:05:7c:b9:3e:41:72:b7:ef:94:fc:0c:81:5b:af:63: 0b:e1:bc:7a:fb:d7:35:c2:f2:72:74:45:24:14:56:8e:05:b9: 57:3a:14:8f:5a:d0:f8:1d:36:58:a5:fe:1d:18:78:ac:61:d7: f2:92:08:86:9e:02:45:f5:4d:4c:e0:1c:e3:43:2f:00:7b:7e: 0f:cb:ba:a2:3e:c6:81:30:8b:8e:bd:1a:bf:a9:81:c4:68:b7: 9a:24:32:c8:fd:22:78:b7:7e:b2:97:7b:b3:d2:d4:10:2a:83: 8d:76:f7:0f:cd:b0:75:c4:8c:92:11:76:02:a3:f1:1f:f1:c9: f5:df:e8:b8:36:20:e7:06:b2:29:38:6a:75:5b:63:98:26:5f: 3a:a1:ba:b2:8b:be:2b:38:94:79:de:20:e9:e5:ac:c3:7a:e9: 4d:01:69:4b:c4:0e:62:cd:0a:0b:c0:4a:14:59:2b:da:a1:1d: ba:17:93:df:2b:78:7b:4b:79:a6:d1:f1:d8:ba:7e:9e:3a:b0: 6f:33:82:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmjPSij/K/HYSh8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNhZTExN2QtYjExZi00Nzg3LWI4NjAtZjRkMzExNTMx YWYzMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZTM4NDBiZmItZDNlNi00Yzg0LTg3NmUtZGZhYmQyMTEzZGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdeeo/XivbX2bUFuvtN/Ghuzup3AWdY2QRzJ Tzkr9V3W3p3OHvjMzDVu7eEBUo4OseGmITxh+5VBVQcOQf9A8mvdJRi1oTIRKpsa eMOS0qcRW1ozWG3PGTMeTMMXjXh+0UnGJ+LvtFRhHxHs4FVD8tkVMZ1Ktbh5wh56 3W8jEd3fqhX/uo3SLUjxhuoIV0qDxof+6+vsOZkeyIDC/poTKWM/dIVYkMnWqm++ nOdKMhglb23hoiGgC50alpL2zSV+MajyUomQgW65RYEMI6+g1M8U0PnB+OfEvOhm xKlcMEe5113sUgwIQhkJ11Q8nh7UTE4/4Jsjje4mz+p1+9I3EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOrn1nNGcahKnqW1wLwoeW+yve8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85Y2Fl MTE3ZC1iMTFmLTQ3ODctYjg2MC1mNGQzMTE1MzFhZjMvNjU3NzUyZDUtNzk4Ny0z MGZkLWE2YzktNzYxYjM1NTg1MjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWNhZTExN2QtYjExZi00Nzg3LWI4 NjAtZjRkMzExNTMxYWYzLzljYWUxMTdkLWIxMWYtNDc4Ny1iODYwLWY0ZDMxMTUz MWFmMy5jcmwwHwYDVR0jBBgwFoAUj6rzDO6xgvLw1Z81seSdp5C+lbowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85Y2FlMTE3ZC1iMTFmLTQ3ODctYjg2MC1mNGQz MTE1MzFhZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkkcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELpFvHGwMKoTce5Oxs1gGJjc2e0+hFf043bQ6Cr5C6573MkrJb6dGn4 bvGCNtMbEB3tFAiN65joewV8uT5BcrfvlPwMgVuvYwvhvHr71zXC8nJ0RSQUVo4F uVc6FI9a0PgdNlil/h0YeKxh1/KSCIaeAkX1TUzgHONDLwB7fg/LuqI+xoEwi469 Gr+pgcRot5okMsj9Ini3frKXe7PS1BAqg4129w/NsHXEjJIRdgKj8R/xyfXf6Lg2 IOcGsik4anVbY5gmXzqhurKLvis4lHneIOnlrMN66U0BaUvEDmLNCgvAShRZK9qh HboXk98reHtLeabR8di6fp46sG8zglE= -----END CERTIFICATE-----Generated at Sun May 11 22:11:16 2025 by rpki-client