$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/17f1266e-290d-329b-a60c-664460287323.roa File: 17f1266e-290d-329b-a60c-664460287323.roa (raw, json) Hash identifier: qjExzvPZ5Ol8fd1zpEqUQL2CEF9Oru/WNlsJUCvHOiM= Subject key identifier: 30:21:5E:FF:D8:1C:6B:51:4C:E6:49:C1:04:5E:80:A4:AE:3F:92:88 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858498CFF0CD81965F6FC83BFD400 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/17f1266e-290d-329b-a60c-664460287323.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 4470 IP address blocks: 198.53.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:0c:d8:19:65:f6:fc:83:bf:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=9c8ad023-2d05-4fb9-a4c6-e8c0f07fd8e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:90:0e:55:e2:ec:10:74:b5:31:5d:91:63:5e: a3:91:2e:43:d9:92:ef:be:30:0b:88:7d:83:91:cf: dd:66:3a:75:6f:8a:4a:cc:f7:57:18:57:c7:cf:da: bf:2d:2b:0a:c2:2b:97:7b:c5:fb:5c:64:c2:da:6d: d2:b2:39:62:9c:2a:14:b9:4b:8b:3f:aa:3c:11:cf: 69:f3:c6:6d:70:37:9e:eb:58:8a:4b:25:ff:3a:2c: 5a:09:70:1a:2e:8a:72:e9:26:ca:ce:ed:93:0e:f7: dc:f2:4d:34:66:30:77:29:9d:5d:47:cf:69:3f:b9: c2:50:78:06:c1:bc:2e:39:b2:b2:74:93:89:17:7d: 80:7d:77:cc:fe:57:f9:65:b4:80:1d:d4:3d:6d:80: 13:18:59:7b:5e:cd:cd:8c:3d:83:2f:b0:e1:e9:e9: 54:ac:8b:30:7a:6e:84:e1:0b:e2:d1:a6:95:50:38: ea:00:fa:7c:92:18:2d:1e:5c:ce:d0:cc:67:06:9b: c6:df:29:4f:47:a4:3c:91:84:52:75:a2:bc:f4:3f: 42:50:8e:56:7b:d4:07:fc:f8:89:be:c0:0a:99:ab: 8a:95:1b:bf:b1:79:99:22:8a:fd:ec:36:ec:0a:b1: dd:57:b5:6f:fd:60:f6:f7:24:b5:51:05:d4:28:93: 8b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:21:5E:FF:D8:1C:6B:51:4C:E6:49:C1:04:5E:80:A4:AE:3F:92:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/17f1266e-290d-329b-a60c-664460287323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 198.53.26.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:dc:54:c7:36:27:52:14:d8:87:78:16:cf:67:ca:df:b2:3e: f0:91:e2:d2:ec:42:75:62:da:f9:3e:c9:08:94:24:92:14:a9: d2:af:92:82:a9:dd:80:8e:15:a4:09:e5:3b:3e:8b:98:95:38: 81:6c:77:2e:da:15:0b:a4:b2:bc:fe:61:85:cb:3c:1b:fc:ac: 34:e7:e7:d2:1b:72:5a:02:64:17:89:46:b9:89:b1:3d:6c:2a: 28:22:0a:3a:30:6b:51:3a:0c:30:3f:d9:8c:92:ff:26:ae:6f: e1:45:b4:01:14:81:3c:54:8c:cb:56:dc:0f:e9:7d:8e:67:37: be:d6:20:8c:75:25:40:19:44:75:3e:4b:1d:de:ba:d0:c9:dc: 4f:6d:07:76:4e:ab:93:82:4b:e3:dd:59:0a:37:d7:5f:06:02: e2:e3:87:86:5d:31:75:60:36:e4:68:ee:da:85:b9:3a:80:7f: 3f:14:30:72:09:53:90:7f:d9:cf:1b:0c:34:62:d9:cb:82:da: 06:9e:4b:06:bb:fd:aa:cf:57:ca:fc:ae:47:5e:fc:e2:e1:2d: 14:1d:2f:35:b3:ad:ba:e3:ee:0f:5d:90:f8:dd:60:7e:9a:80: 91:db:55:65:da:af:c9:c8:8d:06:38:39:b7:60:4c:1c:27:f3: 95:fc:08:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/wzYGWX2/IO/1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk OWM4YWQwMjMtMmQwNS00ZmI5LWE0YzYtZThjMGYwN2ZkOGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5AOVeLsEHS1MV2RY16jkS5D2ZLvvjALiH2D kc/dZjp1b4pKzPdXGFfHz9q/LSsKwiuXe8X7XGTC2m3SsjlinCoUuUuLP6o8Ec9p 88ZtcDee61iKSyX/OixaCXAaLopy6SbKzu2TDvfc8k00ZjB3KZ1dR89pP7nCUHgG wbwuObKydJOJF32AfXfM/lf5ZbSAHdQ9bYATGFl7Xs3NjD2DL7Dh6elUrIswem6E 4Qvi0aaVUDjqAPp8khgtHlzO0MxnBpvG3ylPR6Q8kYRSdaK89D9CUI5We9QH/PiJ vsAKmauKlRu/sXmZIor97DbsCrHdV7Vv/WD29yS1UQXUKJOL/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAhXv/YHGtRTOZJwQRegKSuP5KIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMTdmMTI2NmUtMjkwZC0z MjliLWE2MGMtNjY0NDYwMjg3MzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxjUaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK/cVMc2J1IU2Id4Fs9nyt+yPvCR4tLsQnVi2vk+yQiUJJIUqdKvkoKp 3YCOFaQJ5Ts+i5iVOIFsdy7aFQuksrz+YYXLPBv8rDTn59IbcloCZBeJRrmJsT1s KigiCjowa1E6DDA/2YyS/yaub+FFtAEUgTxUjMtW3A/pfY5nN77WIIx1JUAZRHU+ Sx3eutDJ3E9tB3ZOq5OCS+PdWQo3118GAuLjh4ZdMXVgNuRo7tqFuTqAfz8UMHIJ U5B/2c8bDDRi2cuC2gaeSwa7/arPV8r8rkde/OLhLRQdLzWzrbrj7g9dkPjdYH6a gJHbVWXar8nIjQY4ObdgTBwn85X8CD8= -----END CERTIFICATE-----Generated at Tue Apr 29 10:18:13 2025 by rpki-client