$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa File: 234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa (raw, json) Hash identifier: 0uS3c4pfBOI/+C98ezT/1jp5Jnxf7q2azB43QknbLu8= Subject key identifier: 98:5F:90:C0:37:DF:71:53:D3:0B:1B:A8:2B:A6:38:40:C2:11:75:49 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849955F194BCD6AB0D9D90F2340 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 209.52.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:19:4b:cd:6a:b0:d9:d9:0f:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=fc6fa8c4-4d34-469b-b3a2-424e0274db22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a1:d3:4e:8a:74:ca:7a:99:9d:dc:57:a3:2b: ee:b9:81:f2:3f:b9:41:ac:b5:82:c8:7b:d1:ed:5c: 16:45:df:41:92:0d:c2:14:d1:d5:a1:fe:31:8a:c7: 94:12:cc:b5:a6:ed:8d:90:ae:7e:17:d6:b4:cc:4a: 3a:41:52:64:4f:83:4c:97:59:b8:4a:d2:16:71:a1: cf:f1:66:91:04:fc:41:f8:1b:dc:76:3e:5e:c9:41: 36:68:e1:4c:7d:ac:63:14:68:e0:15:0b:cf:40:f3: ad:7c:f9:4c:b0:1d:bb:d6:f8:94:b0:03:21:08:67: 1b:69:6f:71:74:4b:de:26:0f:36:cf:12:03:ae:d2: 0c:31:0d:50:e9:a9:39:05:cb:72:51:c9:95:a4:7e: 07:4b:9f:97:b5:0b:a6:ba:94:d1:a2:a0:61:92:6c: 94:d5:c3:d0:8f:97:4d:42:83:bd:a5:8e:4d:85:9e: 0b:03:36:0f:1b:ec:70:b1:36:51:6e:16:13:7e:9a: c0:e1:f8:d8:c5:88:a6:1c:fb:e9:ce:73:e0:a6:29: 77:a5:5d:7a:5b:e1:38:84:ef:89:bd:e4:b5:61:26: f9:03:35:0a:f8:49:b1:ce:b6:80:df:ad:5b:41:e1: aa:5b:8c:ad:fa:03:e7:c6:8c:09:ea:ba:18:5a:ee: 0f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5F:90:C0:37:DF:71:53:D3:0B:1B:A8:2B:A6:38:40:C2:11:75:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:d9:f9:7b:18:86:83:35:56:9e:bc:94:15:c1:a2:b7:c8:ab: 76:1b:4d:2b:df:4e:0c:79:df:fe:4c:fe:f8:35:08:9d:b6:0b: 79:25:08:42:60:d7:d7:f1:2e:d5:2a:ca:ac:e7:18:16:39:44: ee:6b:36:c2:0b:6f:f3:81:9e:e7:eb:b3:b4:46:6b:e7:06:c9: 5d:34:c6:79:a9:42:1f:80:27:69:1d:eb:f3:ec:58:a6:c8:1b: 65:a0:58:20:40:c3:52:0a:f0:63:be:47:db:6d:90:bb:8f:56: 79:f7:e3:bc:01:ff:ab:7f:57:a4:52:5b:5f:2c:59:95:c8:45: 2f:5d:3b:50:e1:44:ac:99:ec:8a:cf:c6:69:24:6a:1b:ce:19: 41:58:dc:42:ba:d0:32:51:0d:09:f6:96:cd:c9:dc:e3:60:9d: b0:5a:20:19:12:5d:db:2f:40:b7:32:4b:a8:ca:e8:c2:dd:c5: 54:53:ef:1a:96:49:50:ba:3c:23:cb:66:3d:af:31:a7:c0:d6: 7c:07:f4:d6:0e:85:25:2d:b5:a8:47:94:15:ea:8b:e3:f3:82: 04:33:e4:a1:49:50:e3:a6:43:9f:04:cf:b7:75:47:3d:44:b9: 7a:6c:f7:70:94:9a:bc:ad:20:2d:d4:85:cc:26:2a:c8:5f:49: 5e:7c:0c:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXxlLzWqw2dkPI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk ZmM2ZmE4YzQtNGQzNC00NjliLWIzYTItNDI0ZTAyNzRkYjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7aHTTop0ynqZndxXoyvuuYHyP7lBrLWCyHvR 7VwWRd9Bkg3CFNHVof4xiseUEsy1pu2NkK5+F9a0zEo6QVJkT4NMl1m4StIWcaHP 8WaRBPxB+Bvcdj5eyUE2aOFMfaxjFGjgFQvPQPOtfPlMsB271viUsAMhCGcbaW9x dEveJg82zxIDrtIMMQ1Q6ak5BctyUcmVpH4HS5+XtQumupTRoqBhkmyU1cPQj5dN QoO9pY5NhZ4LAzYPG+xwsTZRbhYTfprA4fjYxYimHPvpznPgpil3pV16W+E4hO+J veS1YSb5AzUK+EmxzraA361bQeGqW4yt+gPnxowJ6roYWu4P6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhfkMA333FT0wsbqCumOEDCEXVJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjM0YTRkN2MtMTZlOC0z N2Y0LWFjMDYtMWRkY2M0NTI4ZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPZ+XsYhoM1Vp68lBXBorfIq3YbTSvfTgx53/5M/vg1CJ22C3klCEJg 19fxLtUqyqznGBY5RO5rNsILb/OBnufrs7RGa+cGyV00xnmpQh+AJ2kd6/PsWKbI G2WgWCBAw1IK8GO+R9ttkLuPVnn347wB/6t/V6RSW18sWZXIRS9dO1DhRKyZ7IrP xmkkahvOGUFY3EK60DJRDQn2ls3J3ONgnbBaIBkSXdsvQLcyS6jK6MLdxVRT7xqW SVC6PCPLZj2vMafA1nwH9NYOhSUttahHlBXqi+PzggQz5KFJUOOmQ58Ez7d1Rz1E uXps93CUmrytIC3UhcwmKshfSV58DMY= -----END CERTIFICATE-----Generated at Sun Apr 27 15:53:54 2025 by rpki-client