$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35a49db3-a778-3bfc-877a-c9cea9e5abd3.roa File: 35a49db3-a778-3bfc-877a-c9cea9e5abd3.roa (raw, json) Hash identifier: Lvj9TlVt3+npjRQ1J8mDeyt58s/rKhMq7of81aKcjRA= Subject key identifier: 40:74:F9:CD:63:F3:3A:3E:A9:5A:7F:6B:9E:BC:98:65:44:88:58:95 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849912F2A51B5F9B275301EBA00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35a49db3-a778-3bfc-877a-c9cea9e5abd3.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 7861 IP address blocks: 209.20.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:2a:51:b5:f9:b2:75:30:1e:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=6de15f98-d868-4617-bcb1-70759eefa3d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:47:e4:20:46:fb:5f:af:ca:e3:be:35:ae:35: d2:23:b4:9a:56:68:95:cb:a7:9c:7b:83:cc:79:12: 80:f4:f7:4d:b2:b4:93:1b:83:fa:eb:c1:14:cb:07: 4d:aa:1e:8e:3b:28:3c:c2:1c:0e:b7:af:79:8a:a0: 40:f4:8d:7c:31:1b:07:ef:ce:57:04:ee:4e:6a:b6: c1:13:2a:e6:71:55:a8:51:8e:da:99:90:de:46:bd: d3:c1:67:4f:53:bb:1e:be:c4:a0:b1:1f:dc:04:25: 02:8e:bc:be:60:f2:63:cb:31:d0:9f:6a:62:34:b1: 95:fd:4f:c6:82:83:44:05:37:b9:75:a5:b0:8f:0c: dd:d3:cb:2f:65:de:28:a4:dd:a2:7d:5e:4b:9f:d2: 6d:56:03:1a:87:95:b7:7d:92:73:c5:6b:22:76:ca: d5:19:b1:6a:4e:0b:30:de:8b:1e:9b:4f:7d:1a:bc: e8:86:42:92:b4:d0:77:87:fd:27:52:8f:e4:15:26: b6:6e:02:50:4f:8e:a8:25:57:05:85:9c:c1:de:c1: f3:f9:35:3f:f6:04:35:3c:fd:8a:b0:3b:e3:eb:8c: 32:9c:cd:f2:f8:3f:a9:90:81:36:d1:9c:ca:af:02: 09:de:03:8b:ac:26:b4:42:d9:22:70:11:f8:6d:fb: eb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:74:F9:CD:63:F3:3A:3E:A9:5A:7F:6B:9E:BC:98:65:44:88:58:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35a49db3-a778-3bfc-877a-c9cea9e5abd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.20.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:c6:60:5d:db:69:34:80:ad:47:2a:4f:37:35:2d:99:de:68: 05:ff:a9:26:dc:f2:95:1a:b3:c4:09:df:98:b6:08:ef:71:e0: 2b:ad:e1:93:b2:04:37:b8:f3:d2:b9:66:9b:4d:6f:a8:fd:e1: be:4d:f8:d3:08:b1:f2:74:e4:68:b7:df:97:35:dc:bd:be:0c: 96:b3:fc:37:7f:0a:bb:44:dd:d0:ca:10:a1:5d:ac:02:57:b4: 6f:f2:80:29:c2:a8:7d:ff:5e:cc:ea:cd:3a:b9:c3:71:c7:99: 58:80:7a:c5:ac:7f:10:fe:d0:88:27:a0:88:49:c7:8c:d1:3e: 6e:6a:93:f4:89:0f:46:e5:de:f2:b3:2c:7f:3a:2f:fd:73:80: 54:99:4d:ed:e8:9f:36:db:24:da:d6:67:6b:00:6a:b5:4f:bf: aa:f1:5b:15:01:df:a5:d5:07:11:5a:77:d8:a0:ae:6e:20:f4: e5:dd:f2:eb:d2:bf:fb:76:44:4e:4e:98:9d:29:de:4e:3f:56: c5:43:93:73:dd:d8:4f:9d:35:a6:7b:a1:ec:1b:aa:62:99:06: 66:35:ad:1d:cb:56:03:39:77:d3:99:87:84:02:e4:1a:95:33: cb:ed:91:d9:f9:2c:50:5d:fc:af:1d:c7:7a:8f:e0:e9:2c:e6: f9:52:97:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLypRtfmydTAeugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk NmRlMTVmOTgtZDg2OC00NjE3LWJjYjEtNzA3NTllZWZhM2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0fkIEb7X6/K4741rjXSI7SaVmiVy6ece4PM eRKA9PdNsrSTG4P668EUywdNqh6OOyg8whwOt695iqBA9I18MRsH785XBO5OarbB EyrmcVWoUY7amZDeRr3TwWdPU7sevsSgsR/cBCUCjry+YPJjyzHQn2piNLGV/U/G goNEBTe5daWwjwzd08svZd4opN2ifV5Ln9JtVgMah5W3fZJzxWsidsrVGbFqTgsw 3osem099GrzohkKStNB3h/0nUo/kFSa2bgJQT46oJVcFhZzB3sHz+TU/9gQ1PP2K sDvj64wynM3y+D+pkIE20ZzKrwIJ3gOLrCa0QtkicBH4bfvr1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEB0+c1j8zo+qVp/a568mGVEiFiVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzVhNDlkYjMtYTc3OC0z YmZjLTg3N2EtYzljZWE5ZTVhYmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RQfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANjGYF3baTSArUcqTzc1LZneaAX/qSbc8pUas8QJ35i2CO9x4Cut4ZOy BDe489K5ZptNb6j94b5N+NMIsfJ05Gi335c13L2+DJaz/Dd/CrtE3dDKEKFdrAJX tG/ygCnCqH3/XszqzTq5w3HHmViAesWsfxD+0IgnoIhJx4zRPm5qk/SJD0bl3vKz LH86L/1zgFSZTe3onzbbJNrWZ2sAarVPv6rxWxUB36XVBxFad9igrm4g9OXd8uvS v/t2RE5OmJ0p3k4/VsVDk3Pd2E+dNaZ7oewbqmKZBmY1rR3LVgM5d9OZh4QC5BqV M8vtkdn5LFBd/K8dx3qP4Oks5vlSl8w= -----END CERTIFICATE-----Generated at Sun Apr 27 00:16:25 2025 by rpki-client