$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28d0696b-8dfd-3cab-8fab-1a07f8dbee06.roa File: 28d0696b-8dfd-3cab-8fab-1a07f8dbee06.roa (raw, json) Hash identifier: J2fijKKmO7/bfzH/PcKNidUMo6p6dvhbkF5CNMKyDMc= Subject key identifier: 0E:DC:9C:85:73:A1:EE:CE:A6:B9:B6:77:6E:A2:3A:12:F2:3B:E8:FE Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849955F1D713AE10233D1ACB300 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28d0696b-8dfd-3cab-8fab-1a07f8dbee06.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 209.121.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:1d:71:3a:e1:02:33:d1:ac:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=12c3c43a-57e2-4aa4-b873-667ed1fceaaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fb:36:2d:ba:77:b7:0a:31:0e:e0:72:83:fe: 1d:03:1a:ac:70:f6:ba:c0:5d:b7:ec:f9:8d:ca:a0: be:45:68:5b:8c:4a:44:cb:a0:d0:ad:3f:cf:dc:e2: e1:a4:8f:42:2b:0f:34:cb:79:b8:ab:ee:0f:49:3d: ef:4c:ba:c7:57:8f:39:7d:59:f1:9e:8a:92:f1:59: 38:d8:9b:a7:f2:7f:19:a0:82:7d:fd:4f:d4:fe:d3: 15:41:15:94:9d:12:64:59:05:48:79:ef:3d:f0:23: b5:c9:7a:99:67:a9:62:f8:ef:eb:4f:91:b2:18:bc: 34:1b:d2:e9:58:6d:97:79:8c:68:4e:3f:a1:04:bc: 20:bf:f9:f3:48:ff:2a:2f:c5:c5:3e:56:62:72:d2: f9:f5:86:06:23:4d:fd:da:83:b4:a5:f4:15:e9:be: 1f:f5:c2:da:f0:74:32:30:90:ce:23:fe:05:d8:8b: 51:bc:7d:7d:ee:46:45:2c:a6:a4:89:42:79:e9:22: 28:d3:2f:22:a9:21:f8:e6:5e:03:71:41:cf:13:86: 1f:65:89:f0:4c:93:42:50:fd:c8:ee:0a:fb:46:39: 8b:79:7b:b2:bc:7c:d0:11:5c:12:32:8f:51:24:f2: 70:0b:a9:a1:95:4a:d9:cd:bc:6e:66:0e:96:42:91: f5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DC:9C:85:73:A1:EE:CE:A6:B9:B6:77:6E:A2:3A:12:F2:3B:E8:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28d0696b-8dfd-3cab-8fab-1a07f8dbee06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.121.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:a0:81:50:4b:cd:30:29:80:fe:a2:22:d7:c2:59:c9:3e:9b: a5:89:08:00:eb:9c:45:51:64:10:ad:ad:a1:cb:b9:9e:ea:92: 26:53:a7:d6:1d:25:b0:41:dc:fd:c5:b5:d8:fe:be:69:b1:8d: 00:c7:b8:84:e8:c2:38:b6:cb:b6:d2:00:bc:18:09:70:f4:a3: 10:59:2d:bf:18:42:b6:e1:67:fd:75:fe:4c:b4:1d:49:5f:ce: 8c:0f:cb:ad:d2:24:a1:ce:05:4e:5a:76:51:c1:47:28:d1:c6: d9:f6:7e:ed:87:e9:76:3f:d1:b6:25:ff:78:45:bd:6b:18:a7: 6b:a6:d3:b2:c5:ef:45:47:94:95:1b:68:62:c9:c6:34:c9:83: a2:cf:a6:81:29:04:8e:95:15:9b:12:0a:7a:2c:9c:15:7e:3f: be:8b:5f:57:39:d5:cd:2a:96:4b:7a:42:77:e6:12:51:03:d0: 4e:26:93:91:81:ac:14:4d:49:1a:96:39:97:27:1d:02:3e:d9: 43:7d:5c:a2:12:7a:c5:c0:72:7c:12:d2:30:8d:2e:a1:3a:e7: 7f:4d:c2:e9:3c:38:a9:76:88:db:a3:61:42:f8:ac:3d:13:74: 6c:bd:37:56:b8:83:d2:04:c6:0d:c6:65:bc:61:43:bd:e7:8e: 6f:a4:1b:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXx1xOuECM9GsswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk MTJjM2M0M2EtNTdlMi00YWE0LWI4NzMtNjY3ZWQxZmNlYWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfs2Lbp3twoxDuByg/4dAxqscPa6wF237PmN yqC+RWhbjEpEy6DQrT/P3OLhpI9CKw80y3m4q+4PST3vTLrHV485fVnxnoqS8Vk4 2Jun8n8ZoIJ9/U/U/tMVQRWUnRJkWQVIee898CO1yXqZZ6li+O/rT5GyGLw0G9Lp WG2XeYxoTj+hBLwgv/nzSP8qL8XFPlZictL59YYGI0392oO0pfQV6b4f9cLa8HQy MJDOI/4F2ItRvH197kZFLKakiUJ56SIo0y8iqSH45l4DcUHPE4YfZYnwTJNCUP3I 7gr7RjmLeXuyvHzQEVwSMo9RJPJwC6mhlUrZzbxuZg6WQpH1HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7cnIVzoe7Oprm2d26iOhLyO+j+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjhkMDY5NmItOGRmZC0z Y2FiLThmYWItMWEwN2Y4ZGJlZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XlHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKuggVBLzTApgP6iItfCWck+m6WJCADrnEVRZBCtraHLuZ7qkiZTp9Yd JbBB3P3Ftdj+vmmxjQDHuITowji2y7bSALwYCXD0oxBZLb8YQrbhZ/11/ky0HUlf zowPy63SJKHOBU5adlHBRyjRxtn2fu2H6XY/0bYl/3hFvWsYp2um07LF70VHlJUb aGLJxjTJg6LPpoEpBI6VFZsSCnosnBV+P76LX1c51c0qlkt6QnfmElED0E4mk5GB rBRNSRqWOZcnHQI+2UN9XKISesXAcnwS0jCNLqE6539Nwuk8OKl2iNujYUL4rD0T dGy9N1a4g9IExg3GZbxhQ73njm+kG6Q= -----END CERTIFICATE-----Generated at Sat Apr 26 22:11:14 2025 by rpki-client