$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/19b4e8e2-6d34-3ea5-91b5-8fb3918a6abe.roa File: 19b4e8e2-6d34-3ea5-91b5-8fb3918a6abe.roa (raw, json) Hash identifier: PZTMhXM7g6d456Y2UzQ+2xTxS/ezkb3Ens/d24YsqX8= Subject key identifier: 3E:3F:69:4F:C0:DE:89:25:D0:D5:B2:80:63:17:80:21:FB:6F:BF:45 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F432858499829C810C5BD220F03212880 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/19b4e8e2-6d34-3ea5-91b5-8fb3918a6abe.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 10397 IP address blocks: 209.209.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:c8:10:c5:bd:22:0f:03:21:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=3bb8a7d4-40be-48e4-9cb4-35b185eac03c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:82:a4:b3:ba:bd:af:d0:ee:66:ec:b8:7b:e8: 91:cc:8e:85:70:cc:41:c3:a9:61:9b:95:e6:54:99: 24:54:89:77:17:9d:69:8b:d9:56:f9:9c:6c:d1:7f: bc:5a:36:0e:87:b7:e5:79:19:05:66:85:39:31:0b: 3d:86:36:b8:40:03:50:e1:a3:66:6e:86:95:18:ab: c7:74:3f:ed:e4:6c:0a:d8:61:2f:09:3b:ee:22:fb: 46:22:68:e9:41:fd:3c:eb:f5:a3:8d:f6:8d:68:75: b5:84:97:61:33:15:c8:c4:59:0e:e5:7d:ac:9c:df: cb:d8:6b:50:b7:c0:94:84:0e:67:d0:76:df:74:86: 11:cd:7e:48:2f:90:06:8b:14:e0:71:79:e5:07:fe: e5:47:ed:c3:d7:9b:9a:f9:3a:92:6c:f2:b4:9f:3c: 91:22:c5:f8:07:d4:39:9f:f3:20:a7:3c:a3:19:20: 4c:ab:27:de:ca:c3:91:c8:2c:8f:a0:05:45:8d:a4: 77:6e:cc:ad:c8:49:73:b7:fc:b1:b2:82:13:1a:e2: 0f:6b:38:ab:d4:b3:a1:6b:31:e3:e6:a9:fb:6a:be: de:e1:a2:e1:22:46:3d:32:24:f8:37:03:6a:c8:35: eb:92:cc:6a:f0:c5:39:ea:a6:d8:39:6a:8e:5c:e1: d4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3F:69:4F:C0:DE:89:25:D0:D5:B2:80:63:17:80:21:FB:6F:BF:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/19b4e8e2-6d34-3ea5-91b5-8fb3918a6abe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.209.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:18:da:2e:a1:e4:db:d9:48:63:42:f8:5a:41:c0:d1:d2:d7: 90:5c:8e:b1:18:f7:20:20:be:89:ac:51:73:7d:ae:25:c3:a2: 0a:88:52:3d:96:6d:47:61:ce:4b:cc:45:f8:8c:a3:7d:51:70: bd:dd:ad:54:34:82:77:81:88:4c:f5:bc:90:35:dd:bf:b8:c3: 9a:d1:ea:1f:c1:84:3f:ac:0a:32:d5:8d:37:71:ed:10:1d:88: 02:83:16:63:dc:61:14:13:c9:0d:36:75:05:1a:a2:c3:02:6e: 63:34:43:8a:b0:38:56:cb:7d:f9:42:17:d2:8e:87:9d:fa:3c: 3b:b9:1f:e5:65:49:ca:7a:e0:49:28:00:75:2f:0b:04:f2:6d: 18:11:75:84:31:cb:f9:95:d8:2f:39:bc:9b:fd:7b:43:bc:8d: 0b:06:d2:fd:20:eb:30:c4:81:1b:9a:26:27:6d:65:a7:03:91: a6:16:83:0b:8e:a7:86:0c:ab:ad:03:e6:4c:85:35:f5:f4:2d: 71:25:15:c4:b9:96:9d:bb:81:60:bf:66:07:06:17:0c:a6:3d: 65:87:5b:25:23:17:52:1f:1f:5e:2f:a5:20:ee:9b:ed:ca:86: ba:0a:b9:a1:b2:21:15:19:47:44:ff:c8:fa:6f:07:af:30:09: 75:f2:28:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKcgQxb0iDwMhKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk M2JiOGE3ZDQtNDBiZS00OGU0LTljYjQtMzViMTg1ZWFjMDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIKks7q9r9DuZuy4e+iRzI6FcMxBw6lhm5Xm VJkkVIl3F51pi9lW+Zxs0X+8WjYOh7fleRkFZoU5MQs9hja4QANQ4aNmboaVGKvH dD/t5GwK2GEvCTvuIvtGImjpQf086/WjjfaNaHW1hJdhMxXIxFkO5X2snN/L2GtQ t8CUhA5n0HbfdIYRzX5IL5AGixTgcXnlB/7lR+3D15ua+TqSbPK0nzyRIsX4B9Q5 n/MgpzyjGSBMqyfeysORyCyPoAVFjaR3bsytyElzt/yxsoITGuIPazir1LOhazHj 5qn7ar7e4aLhIkY9MiT4NwNqyDXrksxq8MU56qbYOWqOXOHUgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4/aU/A3okl0NWygGMXgCH7b79FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvMTliNGU4ZTItNmQzNC0z ZWE1LTkxYjUtOGZiMzkxOGE2YWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4Y2i6h5NvZSGNC+FpBwNHS15BcjrEY9yAgvomsUXN9riXDogqIUj2W bUdhzkvMRfiMo31RcL3drVQ0gneBiEz1vJA13b+4w5rR6h/BhD+sCjLVjTdx7RAd iAKDFmPcYRQTyQ02dQUaosMCbmM0Q4qwOFbLfflCF9KOh536PDu5H+VlScp64Eko AHUvCwTybRgRdYQxy/mV2C85vJv9e0O8jQsG0v0g6zDEgRuaJidtZacDkaYWgwuO p4YMq60D5kyFNfX0LXElFcS5lp27gWC/ZgcGFwymPWWHWyUjF1IfH14vpSDum+3K hroKuaGyIRUZR0T/yPpvB68wCXXyKAI= -----END CERTIFICATE-----Generated at Mon Apr 28 08:33:18 2025 by rpki-client