$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2b8b31f3-1851-38cf-aec8-57909778d471.roa File: 2b8b31f3-1851-38cf-aec8-57909778d471.roa (raw, json) Hash identifier: +1lKW+PUma07i7wU8+8rDxqkCm2QDVhGPW9wSBW012w= Subject key identifier: C4:90:36:32:FB:0B:0A:F4:DD:57:C6:03:1C:65:60:E5:22:68:E0:EF Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584988CF20F5772A3288655FA880 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2b8b31f3-1851-38cf-aec8-57909778d471.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 25668 IP address blocks: 209.53.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:20:f5:77:2a:32:88:65:5f:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=2890cd7a-6307-4338-a630-39c327e9a9c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:77:56:be:aa:7e:31:6a:c4:6c:9d:59:9f:0c: c1:44:d7:9b:e7:c6:63:1d:3b:0e:79:bc:cc:d5:b8: 79:ee:91:d8:2e:8e:39:6b:d3:b3:ef:f3:63:39:f1: c4:5e:fe:db:9b:ff:52:ba:b5:ff:01:85:fc:24:c5: 1a:88:84:7e:43:8f:23:2f:b5:3a:88:3f:5d:1d:a2: 6e:e3:9f:b6:1d:e0:e0:b4:f2:32:bb:10:fe:24:6f: c7:19:25:e9:d3:bb:b4:5b:4a:bc:b5:76:62:f7:1b: 40:01:8f:e7:c6:fa:09:38:ef:86:a7:8c:00:c5:c9: 12:5c:ba:a2:47:08:61:e6:2d:42:70:51:88:ba:74: 88:b4:45:36:d6:e3:3f:77:95:f1:10:61:0f:4a:29: 20:f6:6d:80:51:58:88:0d:d0:95:7c:23:e9:38:40: b5:fc:48:1f:fc:e5:7f:e9:ea:1c:1d:3a:6b:90:5d: de:e0:7c:67:98:f6:42:f6:f4:fa:52:9a:8e:1e:1b: 9f:7f:5c:ab:24:a6:f0:14:7c:2c:b6:f0:78:55:30: 6e:17:a3:71:fe:fb:07:80:f6:bd:ac:48:3f:72:bf: 0d:29:a4:fa:2e:17:6f:e5:2d:6e:6b:39:cc:37:d1: 66:7d:4e:ca:f0:62:62:a7:6a:1a:44:b7:20:b2:85: ff:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:90:36:32:FB:0B:0A:F4:DD:57:C6:03:1C:65:60:E5:22:68:E0:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2b8b31f3-1851-38cf-aec8-57909778d471.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:58:84:ae:6d:b7:f5:41:4b:6e:73:4e:03:d4:7a:53:a7:43: 64:9c:38:3c:d3:61:56:bf:05:6d:43:8d:c8:a4:1a:d9:fe:57: 75:11:06:fc:80:48:43:1b:42:62:d2:f4:8d:ed:e2:7d:a2:6f: 23:af:02:c5:f2:b6:9a:18:62:a4:df:e2:1b:b3:2d:5e:c8:7c: d3:e1:74:1e:87:15:4a:08:9f:0c:c7:9e:3e:8b:81:f4:ac:46: 19:5e:b9:0e:47:3f:05:77:8b:95:ef:b6:d5:65:ea:39:be:0f: bb:5b:29:ba:a2:0c:35:dc:36:d4:5a:93:25:c8:eb:1d:b1:30: 84:ae:17:ad:12:60:de:6d:9b:ae:17:25:b8:73:3a:cf:f3:9b: 81:88:6a:a2:b2:14:c5:95:79:53:6e:60:54:4d:01:42:23:0f: 1b:14:ef:48:f8:a7:b1:fd:c4:9f:3b:7e:7c:71:c4:f4:c5:96: f7:50:bb:e3:65:f2:15:18:67:65:e3:f4:25:30:d1:de:58:99: 18:60:76:42:59:f7:fe:a4:61:03:0a:ea:6b:9d:34:2a:1e:7e: 09:e5:a0:ae:b5:43:f3:be:0a:a9:d5:8a:ac:40:99:5a:86:50: d4:9b:c0:ed:06:e0:c0:29:2b:14:87:27:fc:ea:31:52:f4:29: 9f:11:47:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzyD1dyoyiGVfqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk Mjg5MGNkN2EtNjMwNy00MzM4LWE2MzAtMzljMzI3ZTlhOWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3dWvqp+MWrEbJ1ZnwzBRNeb58ZjHTsOebzM 1bh57pHYLo45a9Oz7/NjOfHEXv7bm/9SurX/AYX8JMUaiIR+Q48jL7U6iD9dHaJu 45+2HeDgtPIyuxD+JG/HGSXp07u0W0q8tXZi9xtAAY/nxvoJOO+Gp4wAxckSXLqi Rwhh5i1CcFGIunSItEU21uM/d5XxEGEPSikg9m2AUViIDdCVfCPpOEC1/Egf/OV/ 6eocHTprkF3e4HxnmPZC9vT6UpqOHhuff1yrJKbwFHwstvB4VTBuF6Nx/vsHgPa9 rEg/cr8NKaT6Lhdv5S1uaznMN9FmfU7K8GJip2oaRLcgsoX/+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSQNjL7Cwr03VfGAxxlYOUiaODvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMmI4YjMxZjMtMTg1MS0z OGNmLWFlYzgtNTc5MDk3NzhkNDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0TXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5YhK5tt/VBS25zTgPUelOnQ2ScODzTYVa/BW1DjcikGtn+V3URBvyA SEMbQmLS9I3t4n2ibyOvAsXytpoYYqTf4huzLV7IfNPhdB6HFUoInwzHnj6LgfSs RhleuQ5HPwV3i5XvttVl6jm+D7tbKbqiDDXcNtRakyXI6x2xMISuF60SYN5tm64X JbhzOs/zm4GIaqKyFMWVeVNuYFRNAUIjDxsU70j4p7H9xJ87fnxxxPTFlvdQu+Nl 8hUYZ2Xj9CUw0d5YmRhgdkJZ9/6kYQMK6mudNCoefgnloK61Q/O+CqnViqxAmVqG UNSbwO0G4MApKxSHJ/zqMVL0KZ8RR84= -----END CERTIFICATE-----Generated at Sat Apr 26 23:00:38 2025 by rpki-client