$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3c1e0599-0f7a-36bf-9ab3-176c6b4fe000.roa File: 3c1e0599-0f7a-36bf-9ab3-176c6b4fe000.roa (raw, json) Hash identifier: sUoGGp+7wzmRqU3RR8hv1bEfQx0w3QDe9kx0zMh3Tvg= Subject key identifier: 28:1B:97:3F:EA:77:52:0B:E7:3E:D4:EE:7A:DB:1A:57:D6:2C:B3:53 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584988CF1FF478F263B00436FF60 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3c1e0599-0f7a-36bf-9ab3-176c6b4fe000.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 36000 IP address blocks: 209.53.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:1f:f4:78:f2:63:b0:04:36:ff:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=0c009b99-5e68-4c9b-ba5f-3cde4b8f2076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6a:ea:65:35:90:02:81:e4:03:b2:34:58:c9: ed:16:fa:e0:98:68:6a:e2:dd:77:f2:31:b2:19:47: 1f:25:b2:ff:9f:9c:ca:c4:b4:7f:42:35:b0:fa:a9: 72:2c:30:65:d5:d2:59:24:be:41:ca:ba:6b:89:82: b9:db:b3:40:91:54:05:fd:14:e4:4d:f4:8b:dc:8d: af:4e:e1:ba:d9:53:69:7d:4a:79:f4:07:30:01:b9: 94:0d:c1:92:06:f3:50:44:79:1e:2d:ae:4c:54:49: 8a:13:1c:1e:a7:c3:11:0e:dc:d0:93:43:53:8a:65: 6a:ae:f5:ea:92:83:1c:1f:51:c2:d8:85:1f:ed:4e: fb:1b:fe:e2:cd:06:ad:e2:f8:32:2f:09:80:0e:d6: 0f:19:f1:ab:d8:c3:2a:8b:34:a6:65:4a:25:c6:7b: 46:48:87:c1:88:be:ff:86:52:b4:d1:ac:ba:ee:b7: a0:40:62:be:f1:59:4d:c4:6d:e1:55:cf:04:e0:26: ad:67:8d:0e:58:e2:4f:98:84:57:d0:4b:46:6b:17: f0:ba:8c:13:f2:ac:98:85:27:7b:8e:87:14:40:a6: 53:04:9d:ca:56:23:99:1d:d4:b5:f4:a8:b1:b7:a7: 60:91:65:18:68:e6:a2:ea:9f:67:1d:04:ad:97:0b: 54:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1B:97:3F:EA:77:52:0B:E7:3E:D4:EE:7A:DB:1A:57:D6:2C:B3:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3c1e0599-0f7a-36bf-9ab3-176c6b4fe000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:7f:f5:ec:08:cb:02:25:de:18:e6:88:e5:c9:5a:3a:71:ca: 9d:82:07:88:2f:4b:f2:32:39:75:be:39:58:05:12:d6:0d:3c: 38:6a:6b:94:2d:c7:f0:4c:cb:be:50:71:18:1e:07:19:e1:8f: 26:c0:d4:a7:19:60:ef:52:61:0a:40:fd:93:ef:0e:21:be:d3: be:f5:1d:94:7a:a9:dc:d3:0d:cf:04:e7:74:cc:ca:a7:f7:58: 69:4c:f8:5a:ce:6a:06:ec:d6:d5:36:3a:9a:33:4e:09:e9:a3: 88:c8:28:5f:2f:2c:58:0b:a1:77:71:5e:b9:e9:9c:5c:d4:27: 6f:f0:32:f7:7c:51:e9:e4:c2:d4:ff:1f:49:b9:83:bc:06:1a: 1b:45:9f:cd:16:c3:96:dd:2f:f6:71:e5:01:e0:ab:2d:d1:a8: 51:3c:e3:f6:7f:57:7c:ed:19:c8:e4:2d:d6:79:49:33:bc:9d: 5c:b9:f4:6b:c8:2a:72:d2:d5:3b:7a:08:3a:a7:d8:84:53:a5: bf:22:82:0b:d8:6e:31:4a:68:29:3d:43:9a:3d:34:ca:ff:f6: 2c:0d:a5:b6:c1:f1:0f:74:ac:3d:0e:9c:3f:90:e9:5a:c5:9d: b1:c9:c2:f7:f5:78:95:f2:77:73:58:a7:9a:37:93:da:d5:d1: bc:d5:69:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzx/0ePJjsAQ2/2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MGMwMDliOTktNWU2OC00YzliLWJhNWYtM2NkZTRiOGYyMDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWrqZTWQAoHkA7I0WMntFvrgmGhq4t138jGy GUcfJbL/n5zKxLR/QjWw+qlyLDBl1dJZJL5ByrpriYK527NAkVQF/RTkTfSL3I2v TuG62VNpfUp59AcwAbmUDcGSBvNQRHkeLa5MVEmKExwep8MRDtzQk0NTimVqrvXq koMcH1HC2IUf7U77G/7izQat4vgyLwmADtYPGfGr2MMqizSmZUolxntGSIfBiL7/ hlK00ay67regQGK+8VlNxG3hVc8E4CatZ40OWOJPmIRX0EtGaxfwuowT8qyYhSd7 jocUQKZTBJ3KViOZHdS19Kixt6dgkWUYaOai6p9nHQStlwtU9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgblz/qd1IL5z7U7nrbGlfWLLNTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2MxZTA1OTktMGY3YS0z NmJmLTlhYjMtMTc2YzZiNGZlMDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFx/9ewIywIl3hjmiOXJWjpxyp2CB4gvS/IyOXW+OVgFEtYNPDhqa5Qt x/BMy75QcRgeBxnhjybA1KcZYO9SYQpA/ZPvDiG+0771HZR6qdzTDc8E53TMyqf3 WGlM+FrOagbs1tU2OpozTgnpo4jIKF8vLFgLoXdxXrnpnFzUJ2/wMvd8UenkwtT/ H0m5g7wGGhtFn80Ww5bdL/Zx5QHgqy3RqFE84/Z/V3ztGcjkLdZ5STO8nVy59GvI KnLS1Tt6CDqn2IRTpb8iggvYbjFKaCk9Q5o9NMr/9iwNpbbB8Q90rD0OnD+Q6VrF nbHJwvf1eJXyd3NYp5o3k9rV0bzVafc= -----END CERTIFICATE-----Generated at Sun Apr 27 01:49:12 2025 by rpki-client