$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1791e969-7c08-3e78-95e8-9199c2d5752a.roa File: 1791e969-7c08-3e78-95e8-9199c2d5752a.roa (raw, json) Hash identifier: pC4AzFvSNL+uyUYOpqwnMxWbIEJjkKvdYjbnL5GFAfM= Subject key identifier: A0:DF:72:8E:0D:52:08:5C:02:11:30:B2:CA:8D:DE:B0:EE:28:37:6A Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584992949EA483DA869F8BEDD600 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1791e969-7c08-3e78-95e8-9199c2d5752a.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 7861 IP address blocks: 209.20.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:9e:a4:83:da:86:9f:8b:ed:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=088eea7a-cd05-4735-987c-0d178fef2e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ea:4c:20:9c:e7:96:00:c3:eb:82:35:f5:08: c7:3f:27:ec:da:32:1a:68:27:64:3c:d3:7d:5e:82: 9e:b5:fb:e2:b9:8b:f1:23:36:df:c0:17:cf:2b:10: ca:56:59:1f:21:7a:e8:d2:1e:0f:ac:95:96:e5:d8: 38:d5:9f:36:91:76:4c:3f:ba:70:f7:ce:37:bb:d2: 26:41:6c:fa:31:54:e5:95:32:35:83:b6:07:50:bf: a6:e8:19:56:1b:05:f2:2e:80:48:e6:62:54:ae:bc: 19:a8:79:b4:67:ab:9b:43:fa:60:aa:f0:a0:96:6e: ec:ad:8a:cb:5a:b6:f2:c1:9f:1d:5e:85:72:6a:b5: 46:2a:b5:07:98:83:b3:bc:3f:e0:91:00:78:98:05: e6:c0:37:37:17:d7:37:8e:c7:8c:f5:1c:b0:3d:6c: 65:40:64:86:3a:54:7c:f0:0a:02:31:b1:ed:5e:a3: 26:51:f5:77:5b:fc:0a:d6:6c:48:04:0a:1a:94:75: a6:9e:ed:a5:5d:dc:b5:fd:07:ae:b6:47:13:c8:a0: e9:20:aa:b2:3f:50:ec:b3:99:dc:de:c8:e0:a9:e2: 1e:04:71:1b:c7:26:b7:a7:8b:86:17:46:bb:fa:09: 10:83:55:45:7a:73:a2:43:94:75:a7:f7:80:8b:0a: 10:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DF:72:8E:0D:52:08:5C:02:11:30:B2:CA:8D:DE:B0:EE:28:37:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1791e969-7c08-3e78-95e8-9199c2d5752a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.20.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:73:00:62:14:60:ae:0b:25:73:0e:7c:b4:8b:fe:21:96:77: c3:56:7f:75:ec:8d:9b:01:3c:ac:4e:5e:22:e6:04:86:dc:87: 64:2a:5d:4b:9f:a4:ae:0e:8e:2d:fa:2f:a5:d6:30:b8:26:2f: 31:5c:be:45:45:55:36:a2:21:e4:ec:db:0f:29:ac:5a:66:e2: a4:5e:c0:3d:cd:92:c5:57:1f:cb:41:54:d4:7e:a2:19:f6:9f: e6:9c:91:0e:77:c7:72:41:70:ee:9d:37:b5:88:8b:a6:71:9d: 4c:bc:db:63:77:45:b4:35:37:00:95:5b:e6:31:77:ad:02:e8: 48:1a:26:b0:8b:55:8c:7e:99:5c:4e:4e:e7:d2:0f:f6:e6:ff: 45:0c:9c:de:fa:7f:b3:05:be:dd:13:ac:2c:dc:fc:95:99:d2: 6a:42:97:37:7e:5b:35:2a:df:60:fb:82:48:40:66:de:9a:96: 4f:52:ec:d6:09:fa:bb:fe:ed:d2:b1:87:81:ca:fe:36:2b:b5: e4:42:bd:03:35:84:5f:7a:38:f7:5c:42:b4:d6:e1:ee:bd:cf: 56:f7:30:b0:6f:d3:c5:a4:54:fc:46:75:c6:ab:53:56:c5:0c: 02:03:47:64:ac:99:d1:6e:9b:bf:f0:1e:27:11:fb:d4:8c:11: 50:86:5e:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlJ6kg9qGn4vt1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk MDg4ZWVhN2EtY2QwNS00NzM1LTk4N2MtMGQxNzhmZWYyZTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8epMIJznlgDD64I19QjHPyfs2jIaaCdkPNN9 XoKetfviuYvxIzbfwBfPKxDKVlkfIXro0h4PrJWW5dg41Z82kXZMP7pw9843u9Im QWz6MVTllTI1g7YHUL+m6BlWGwXyLoBI5mJUrrwZqHm0Z6ubQ/pgqvCglm7srYrL WrbywZ8dXoVyarVGKrUHmIOzvD/gkQB4mAXmwDc3F9c3jseM9RywPWxlQGSGOlR8 8AoCMbHtXqMmUfV3W/wK1mxIBAoalHWmnu2lXdy1/QeutkcTyKDpIKqyP1Dss5nc 3sjgqeIeBHEbxya3p4uGF0a7+gkQg1VFenOiQ5R1p/eAiwoQPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDfco4NUghcAhEwssqN3rDuKDdqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMTc5MWU5NjktN2MwOC0z ZTc4LTk1ZTgtOTE5OWMyZDU3NTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RQhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALhzAGIUYK4LJXMOfLSL/iGWd8NWf3XsjZsBPKxOXiLmBIbch2QqXUuf pK4Oji36L6XWMLgmLzFcvkVFVTaiIeTs2w8prFpm4qRewD3NksVXH8tBVNR+ohn2 n+ackQ53x3JBcO6dN7WIi6ZxnUy822N3RbQ1NwCVW+Yxd60C6EgaJrCLVYx+mVxO TufSD/bm/0UMnN76f7MFvt0TrCzc/JWZ0mpClzd+WzUq32D7gkhAZt6alk9S7NYJ +rv+7dKxh4HK/jYrteRCvQM1hF96OPdcQrTW4e69z1b3MLBv08WkVPxGdcarU1bF DAIDR2SsmdFum7/wHicR+9SMEVCGXh8= -----END CERTIFICATE-----Generated at Mon Apr 28 16:31:54 2025 by rpki-client