$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/40185669-7cfc-3465-8a11-d5521152b30e.roa File: 40185669-7cfc-3465-8a11-d5521152b30e.roa (raw, json) Hash identifier: Pt/xqRnd+S3W0c4DXlLfTfyi61pVHktTZMSLffTLB/Y= Subject key identifier: AB:83:A3:36:6B:E6:87:CD:0C:DD:1A:14:22:8A:6D:42:C9:1B:A2:16 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584988CF25CF65A5D886C16FAB80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/40185669-7cfc-3465-8a11-d5521152b30e.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 25668 IP address blocks: 209.53.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:25:cf:65:a5:d8:86:c1:6f:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=a34df111-a1f4-4a17-8a08-fb9e644db3d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2d:f5:5d:16:95:dc:f8:47:b6:67:80:df:e1: a2:cf:76:99:43:e0:5f:9b:2a:10:ab:05:14:e7:69: 40:6e:14:51:52:af:0c:fa:4f:18:86:9d:75:ed:8f: 66:ad:a6:c6:09:a2:72:83:cf:37:3a:f2:cf:ff:b7: cc:f1:11:4c:ff:60:ca:4f:58:a0:23:f5:fe:e4:d9: 7d:ea:22:39:18:52:9b:c2:85:75:df:7a:3c:4a:d1: 95:89:40:00:ed:33:7a:c8:90:6d:06:14:0d:73:39: 14:63:46:ba:b6:7e:a6:6b:dc:73:00:2a:c3:62:c2: 23:eb:b3:63:74:74:08:6b:12:88:08:88:bd:c9:a0: 83:ad:8f:da:01:5d:df:74:7e:c3:b0:74:3e:c5:89: a7:25:91:90:f7:14:68:9d:16:25:08:95:46:c1:c2: 8c:39:5d:df:b2:ba:dc:f1:5d:c3:8b:62:1d:8d:51: 67:1d:b7:da:7a:6f:f4:5c:bf:35:c5:24:eb:33:dd: 79:f7:8e:59:b4:03:9a:c6:05:f1:73:92:b6:b1:72: 5c:df:6b:46:be:be:bd:c9:12:2d:6b:e5:47:e2:aa: 99:8a:ec:2c:07:ac:54:a9:f3:b4:70:8e:a3:e1:ee: 87:6b:d1:4d:cf:3a:55:e2:02:e0:4b:85:cc:8b:81: 3a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:83:A3:36:6B:E6:87:CD:0C:DD:1A:14:22:8A:6D:42:C9:1B:A2:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/40185669-7cfc-3465-8a11-d5521152b30e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:34:72:d4:b1:dc:4d:fd:90:fa:8a:3f:75:ea:de:07:d2:a9: b7:8b:78:2c:ad:2e:32:42:88:13:89:2b:9f:91:aa:b8:b6:68: db:1c:72:4a:05:c6:7c:73:91:ff:33:9f:49:64:d0:6c:8b:eb: c0:1b:ef:76:e2:e9:51:e8:57:30:35:02:17:23:5d:71:7a:0d: b2:cb:fe:24:8f:6a:56:92:aa:4a:93:5a:4e:6a:3f:e2:ae:61: 90:96:2f:fb:8d:61:16:3d:94:55:9f:3f:87:22:c5:db:30:2e: 14:fc:c9:be:23:9a:f7:a6:5e:dd:96:67:7a:23:26:82:1e:24: 04:e5:5d:ef:9b:ea:f4:60:be:e5:fd:fe:96:65:a0:48:1e:37: d9:73:78:99:b6:cc:d2:17:fa:fa:3c:04:ef:47:cc:e7:58:62: fb:35:af:c8:4a:7a:3b:a7:ad:9f:9c:00:34:46:e3:33:6a:ad: 2a:59:ed:86:c1:e3:67:cb:94:43:e0:4a:c8:4e:d0:12:bc:1e: bf:7b:7b:83:35:c9:14:66:7d:e9:9f:79:46:23:25:92:16:af: 41:bd:d8:07:25:74:47:8d:83:38:78:4b:3e:24:e3:f5:3c:2e: 44:89:59:9f:ad:b8:9d:b7:c9:29:d7:7a:f7:37:86:ea:99:ab: 4f:73:60:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzyXPZaXYhsFvq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk YTM0ZGYxMTEtYTFmNC00YTE3LThhMDgtZmI5ZTY0NGRiM2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC31XRaV3PhHtmeA3+Giz3aZQ+BfmyoQqwUU 52lAbhRRUq8M+k8Yhp117Y9mrabGCaJyg883OvLP/7fM8RFM/2DKT1igI/X+5Nl9 6iI5GFKbwoV133o8StGViUAA7TN6yJBtBhQNczkUY0a6tn6ma9xzACrDYsIj67Nj dHQIaxKICIi9yaCDrY/aAV3fdH7DsHQ+xYmnJZGQ9xRonRYlCJVGwcKMOV3fsrrc 8V3Di2IdjVFnHbfaem/0XL81xSTrM915945ZtAOaxgXxc5K2sXJc32tGvr69yRIt a+VH4qqZiuwsB6xUqfO0cI6j4e6Ha9FNzzpV4gLgS4XMi4E6NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuDozZr5ofNDN0aFCKKbULJG6IWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDAxODU2NjktN2NmYy0z NDY1LThhMTEtZDU1MjExNTJiMzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TXWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK80ctSx3E39kPqKP3Xq3gfSqbeLeCytLjJCiBOJK5+Rqri2aNscckoF xnxzkf8zn0lk0GyL68Ab73bi6VHoVzA1AhcjXXF6DbLL/iSPalaSqkqTWk5qP+Ku YZCWL/uNYRY9lFWfP4cixdswLhT8yb4jmvemXt2WZ3ojJoIeJATlXe+b6vRgvuX9 /pZloEgeN9lzeJm2zNIX+vo8BO9HzOdYYvs1r8hKejunrZ+cADRG4zNqrSpZ7YbB 42fLlEPgSshO0BK8Hr97e4M1yRRmfemfeUYjJZIWr0G92AcldEeNgzh4Sz4k4/U8 LkSJWZ+tuJ23ySnXevc3huqZq09zYOk= -----END CERTIFICATE-----Generated at Sun Apr 27 04:25:14 2025 by rpki-client