$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3231792f-1c19-3d67-8e39-a10cd5261653.roa File: 3231792f-1c19-3d67-8e39-a10cd5261653.roa (raw, json) Hash identifier: U2n06IN+Im6A0hUHkF75i1ZYhakUWG1Z561PJVflnx4= Subject key identifier: 50:92:27:1E:66:7F:BB:65:A6:9D:93:0B:B5:94:D4:71:DE:C9:F1:2D Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584992949EB18585C2032143FE40 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3231792f-1c19-3d67-8e39-a10cd5261653.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 7861 IP address blocks: 209.29.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:9e:b1:85:85:c2:03:21:43:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=70bb0e23-3fbd-47b2-993d-b0b85e371435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:57:b9:4a:90:b5:10:30:b8:1c:24:0b:1b:53: 4d:a4:b4:12:41:fb:ea:00:2f:d3:dc:d1:d9:40:b2: 37:82:33:fb:6e:33:a9:67:57:6c:b1:11:5c:e8:d1: 0d:cb:b6:9f:1f:37:0f:a9:e9:20:55:2a:b9:26:b4: 18:82:66:33:1f:f0:aa:91:1f:c9:2e:c7:ef:38:b5: fa:93:59:7b:ad:aa:e6:62:6c:70:0b:56:83:07:ca: 54:4f:ec:e5:54:1b:27:1b:cd:e8:b6:23:96:26:ea: 45:56:b5:6e:a1:37:6f:84:97:2a:a7:a3:e1:88:76: 14:34:3e:d3:6b:4a:af:78:8c:8b:c5:9f:db:48:f6: b0:f8:5d:24:d1:92:b4:9d:df:3b:61:d7:c7:4f:b0: b1:fb:76:d6:c9:1f:b2:8e:96:2c:13:18:34:f5:0f: fc:05:0e:c9:87:70:fb:1d:31:0e:16:94:3c:d2:86: f9:cb:22:09:bf:65:9a:61:25:81:3d:48:01:8d:40: 09:e3:90:d2:b7:84:02:fd:56:bf:0c:77:b9:d2:92: 87:1c:51:b5:85:d0:a1:b3:3e:19:9a:e3:69:55:4d: 15:04:a0:9b:ee:e1:29:82:8d:f5:0b:f1:52:f2:ed: 9b:a7:d6:94:11:31:f7:0f:56:c7:5f:c1:ac:6e:c2: fe:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:92:27:1E:66:7F:BB:65:A6:9D:93:0B:B5:94:D4:71:DE:C9:F1:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3231792f-1c19-3d67-8e39-a10cd5261653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:b1:5b:81:34:0c:a4:65:ba:2f:55:a8:6f:87:c9:f7:cf:62: 0e:ec:2e:81:04:34:7d:f0:32:e7:73:89:52:82:7c:d6:7d:3b: a1:31:e8:c4:00:b9:d9:81:1f:8d:f9:59:82:1c:3b:50:24:dd: 5e:45:7c:11:40:02:39:c6:54:05:80:33:c9:e7:b4:14:ab:be: a9:ef:cd:21:a3:d3:f6:41:1c:42:ef:36:f4:40:04:37:40:90: b2:ff:bd:63:3d:43:41:b8:c5:45:09:37:75:e0:82:c8:9e:74: cd:92:00:9f:f6:99:ed:df:08:97:74:78:b5:b5:4f:d0:6a:5d: 1b:5c:75:c0:cb:76:a2:9c:67:56:81:6c:e8:90:1d:8d:97:c9: e3:f0:a6:bb:df:e6:c3:aa:3f:d2:78:78:40:5c:de:94:54:fd: 1e:d5:3d:7b:df:33:d3:43:48:99:41:75:40:19:11:b1:64:66: 6d:c4:22:b3:11:a5:58:2d:df:04:06:bc:57:33:fc:9a:14:de: 19:b8:6b:d9:eb:c2:a7:f3:1f:97:3c:91:eb:f6:b2:23:e0:59: 32:e5:ff:ad:f0:62:78:da:98:04:84:3e:18:81:b0:ab:c1:d9: 46:30:64:d1:f4:bf:ba:c3:ff:00:34:ca:29:00:19:d3:97:80: cf:69:55:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlJ6xhYXCAyFD/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk NzBiYjBlMjMtM2ZiZC00N2IyLTk5M2QtYjBiODVlMzcxNDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFe5SpC1EDC4HCQLG1NNpLQSQfvqAC/T3NHZ QLI3gjP7bjOpZ1dssRFc6NENy7afHzcPqekgVSq5JrQYgmYzH/CqkR/JLsfvOLX6 k1l7rarmYmxwC1aDB8pUT+zlVBsnG83otiOWJupFVrVuoTdvhJcqp6PhiHYUND7T a0qveIyLxZ/bSPaw+F0k0ZK0nd87YdfHT7Cx+3bWyR+yjpYsExg09Q/8BQ7Jh3D7 HTEOFpQ80ob5yyIJv2WaYSWBPUgBjUAJ45DSt4QC/Va/DHe50pKHHFG1hdChsz4Z muNpVU0VBKCb7uEpgo31C/FS8u2bp9aUETH3D1bHX8GsbsL+SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCSJx5mf7tlpp2TC7WU1HHeyfEtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzIzMTc5MmYtMWMxOS0z ZDY3LThlMzktYTEwY2Q1MjYxNjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0R3eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKxW4E0DKRlui9VqG+HyffPYg7sLoEENH3wMudziVKCfNZ9O6Ex6MQA udmBH435WYIcO1Ak3V5FfBFAAjnGVAWAM8nntBSrvqnvzSGj0/ZBHELvNvRABDdA kLL/vWM9Q0G4xUUJN3XggsiedM2SAJ/2me3fCJd0eLW1T9BqXRtcdcDLdqKcZ1aB bOiQHY2XyePwprvf5sOqP9J4eEBc3pRU/R7VPXvfM9NDSJlBdUAZEbFkZm3EIrMR pVgt3wQGvFcz/JoU3hm4a9nrwqfzH5c8kev2siPgWTLl/63wYnjamASEPhiBsKvB 2UYwZNH0v7rD/wA0yikAGdOXgM9pVe4= -----END CERTIFICATE-----Generated at Sun Apr 27 00:24:39 2025 by rpki-client