$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2c7c68e3-af0b-3c06-81b1-fb16b7a6aade.roa File: 2c7c68e3-af0b-3c06-81b1-fb16b7a6aade.roa (raw, json) Hash identifier: qXE5KzOnOPvati1JfytGuzDlZY3Fu8LX5IbahUV5Irw= Subject key identifier: A9:65:04:5B:06:42:EA:CF:40:D8:AF:DE:8C:38:7C:20:1A:0B:3C:47 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849955F198292A819FEBE5F0D80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2c7c68e3-af0b-3c06-81b1-fb16b7a6aade.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 209.171.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:19:82:92:a8:19:fe:be:5f:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=2aaec09e-94a8-4054-82e6-c99efb2a5e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:35:88:fa:d9:36:bd:4f:8e:af:3a:b8:fe:c2: d9:bb:ba:ae:ce:f1:d6:90:37:e0:61:fe:81:f4:db: a6:23:f9:94:d1:bb:f1:5c:d0:65:a1:64:e0:ed:bc: 41:f0:57:15:bb:69:be:14:84:f7:b0:46:bb:96:f6: ca:34:e2:0f:4b:ec:0b:d5:07:56:4d:2f:5d:30:11: e3:d3:dd:7e:c2:8f:f3:a9:1d:23:d9:51:30:36:12: 96:7d:2f:ca:e7:84:4a:d9:d1:7f:45:ce:9b:24:92: 4a:c5:b9:7e:a2:7c:57:6b:99:7e:bd:8e:03:47:d6: c7:8a:27:6b:7d:64:76:cc:64:b9:fb:fa:e3:5b:8d: 4a:cb:a2:90:ff:ae:e1:46:91:64:6b:7b:4f:13:59: e1:4b:8b:75:25:7e:1c:2e:38:ce:f5:0e:c1:13:f6: b2:44:62:6b:d9:e9:c0:10:62:40:30:c5:4f:7f:23: 52:fa:c5:fe:13:92:fe:73:83:4c:67:6a:4b:b2:07: eb:8d:6f:45:5d:32:d6:ac:12:0c:4e:9e:4b:04:19: d7:70:f0:5f:72:db:31:66:44:8c:9b:24:59:82:b4: d7:7f:fb:44:42:25:fb:95:18:c4:03:45:ba:bb:e6: 3d:fd:76:f7:43:84:74:35:33:f0:f2:97:48:72:0b: a8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:65:04:5B:06:42:EA:CF:40:D8:AF:DE:8C:38:7C:20:1A:0B:3C:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2c7c68e3-af0b-3c06-81b1-fb16b7a6aade.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.171.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:3c:06:59:de:45:34:47:61:44:67:23:8e:29:44:66:73:41: 21:a1:be:5e:e7:77:90:10:f1:2a:cf:d2:9a:e1:72:01:b2:b0: 45:cc:09:16:33:92:07:ab:7c:1e:c6:09:c9:3a:16:b7:58:2f: a3:9c:53:04:d7:b7:1e:2d:2d:fe:b1:18:dc:ed:b3:a8:2f:21: cc:89:b4:61:54:4e:2c:2f:c6:dd:b1:ea:8b:46:41:79:ae:51: 5d:ae:ac:c1:6e:6c:07:82:fc:1e:7e:5e:b0:68:e5:4d:71:b7: 2b:cf:68:a1:4e:cf:6b:96:0e:ea:9c:ab:be:57:2f:41:30:f7: 63:d8:4e:fc:2f:8f:84:74:e2:fb:bf:03:e7:a7:42:c3:9f:57: 61:c3:c9:40:5b:1a:62:ab:19:51:3b:81:e8:55:0e:1e:ac:41: f8:00:56:14:cd:93:10:c4:dd:59:7d:6c:c7:53:32:8b:67:3b: b9:20:ca:a0:56:2b:00:32:a5:40:31:51:97:f8:e7:78:76:58: f6:f1:36:93:ce:c9:9f:3a:db:81:e7:8f:22:c4:11:bc:16:99: c8:f5:0b:f2:68:89:b8:be:4c:fe:62:e4:4c:70:36:38:a3:f4: e8:b4:1a:76:3a:80:d7:f6:4a:40:5b:88:72:88:72:ef:76:8d: 10:28:a1:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXxmCkqgZ/r5fDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk MmFhZWMwOWUtOTRhOC00MDU0LTgyZTYtYzk5ZWZiMmE1ZTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDWI+tk2vU+Orzq4/sLZu7quzvHWkDfgYf6B 9NumI/mU0bvxXNBloWTg7bxB8FcVu2m+FIT3sEa7lvbKNOIPS+wL1QdWTS9dMBHj 091+wo/zqR0j2VEwNhKWfS/K54RK2dF/Rc6bJJJKxbl+onxXa5l+vY4DR9bHiidr fWR2zGS5+/rjW41Ky6KQ/67hRpFka3tPE1nhS4t1JX4cLjjO9Q7BE/ayRGJr2enA EGJAMMVPfyNS+sX+E5L+c4NMZ2pLsgfrjW9FXTLWrBIMTp5LBBnXcPBfctsxZkSM myRZgrTXf/tEQiX7lRjEA0W6u+Y9/Xb3Q4R0NTPw8pdIcguoyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKllBFsGQurPQNiv3ow4fCAaCzxHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMmM3YzY4ZTMtYWYwYi0z YzA2LTgxYjEtZmIxNmI3YTZhYWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0asDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKI8BlneRTRHYURnI44pRGZzQSGhvl7nd5AQ8SrP0prhcgGysEXMCRYz kgerfB7GCck6FrdYL6OcUwTXtx4tLf6xGNzts6gvIcyJtGFUTiwvxt2x6otGQXmu UV2urMFubAeC/B5+XrBo5U1xtyvPaKFOz2uWDuqcq75XL0Ew92PYTvwvj4R04vu/ A+enQsOfV2HDyUBbGmKrGVE7gehVDh6sQfgAVhTNkxDE3Vl9bMdTMotnO7kgyqBW KwAypUAxUZf453h2WPbxNpPOyZ8624HnjyLEEbwWmcj1C/Joibi+TP5i5ExwNjij 9Oi0GnY6gNf2SkBbiHKIcu92jRAooV8= -----END CERTIFICATE-----Generated at Sun Apr 27 12:34:31 2025 by rpki-client