$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/447a203b-aa0a-3913-9378-6b3513ee9c64.roa File: 447a203b-aa0a-3913-9378-6b3513ee9c64.roa (raw, json) Hash identifier: fRoCOj5ExCHKDvCEEoo2v2mquWW8mnhVVi2BLx0o4SE= Subject key identifier: 63:7A:D5:A7:D3:6D:2F:8D:37:77:72:E9:17:C1:E3:B7:FF:46:37:03 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584988CF204AAC9757F47CD6D380 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/447a203b-aa0a-3913-9378-6b3513ee9c64.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 25668 IP address blocks: 209.53.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:20:4a:ac:97:57:f4:7c:d6:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=f9d190a1-b0a6-4864-b767-a9d7f5badf6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:70:79:ec:4c:f6:8a:79:04:6c:9c:97:e1:39: 3c:04:e0:df:9a:0f:84:c0:7c:b5:41:5d:e3:ab:02: 79:eb:c2:41:fd:68:f6:e0:7a:8a:6b:a6:fd:67:1c: 5a:fb:73:40:58:4d:2f:35:c2:7b:04:9f:2a:59:4a: 2e:75:2a:ed:18:37:1d:69:1b:23:fd:fe:8e:55:98: 08:2c:62:14:02:40:e7:b1:9a:2c:ff:03:f2:ea:89: 83:47:1e:9d:61:99:fc:73:4d:24:cc:a3:53:47:74: 9f:03:78:a4:75:2b:c9:13:a4:e1:d4:c1:aa:28:b2: 9f:25:05:b5:51:09:32:b4:5f:e3:2a:b1:a9:f3:fa: 17:01:86:da:4f:31:3a:83:3d:32:93:ca:29:7b:bb: 9f:9e:9d:b4:79:07:fe:18:af:88:49:51:a2:4e:7e: a4:02:eb:58:d3:44:2f:c6:0a:e2:54:4f:aa:7c:1a: ba:1a:6e:e6:d2:72:57:0f:3c:b4:45:ca:3a:e7:68: 16:57:20:ba:0b:2e:5d:9c:54:53:de:e9:5e:22:85: 4b:a8:95:56:30:46:f6:82:f5:6c:93:7a:23:54:f1: 15:fc:54:be:50:d2:0a:8c:03:5a:4b:08:c3:9c:da: bb:f0:6b:35:8a:55:09:c7:0a:c6:81:0e:bb:75:21: a0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:7A:D5:A7:D3:6D:2F:8D:37:77:72:E9:17:C1:E3:B7:FF:46:37:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/447a203b-aa0a-3913-9378-6b3513ee9c64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:3c:2e:16:5e:1c:77:e9:17:d8:46:b3:d2:1b:03:0d:e6:8d: ef:5a:27:19:c5:96:13:20:77:1c:ae:f6:eb:fb:2b:e1:8b:04: b9:73:ba:00:fd:b8:b7:e6:a4:60:e2:27:fd:29:02:03:e2:78: 8e:a0:8a:7f:75:4c:fb:f1:9e:6f:ee:ea:6e:47:68:13:68:7e: 62:61:8e:25:61:54:90:f3:ad:7b:6d:bc:37:ff:4d:b7:c1:f4: 3b:72:00:8e:3f:ce:15:05:8a:1e:4b:04:be:c5:fc:58:f8:d1: 73:51:48:e5:56:e2:07:ac:ea:31:3a:44:fd:ce:32:4a:8f:c8: 31:18:80:6f:bf:e9:f3:b1:d8:a5:b4:d4:0a:48:d3:3e:3f:cc: 97:71:de:33:19:eb:27:0c:a1:74:63:d1:5d:95:47:03:a9:64: ef:c5:89:b7:f0:e4:d4:24:32:8e:83:50:25:09:1f:a0:74:8f: 92:21:e4:20:01:cc:0f:8b:ac:04:44:97:f4:33:c5:f5:f9:90: 06:8f:ea:0b:c4:07:0b:b8:3d:e6:50:29:db:21:da:22:5a:1b: d2:64:89:ca:fa:7c:82:2d:f3:bb:b4:bd:40:e6:a2:fd:6c:72: e4:a5:c6:82:b8:99:e3:dc:48:e8:57:75:eb:9b:df:2d:45:73: d2:3d:c5:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzyBKrJdX9HzW04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk ZjlkMTkwYTEtYjBhNi00ODY0LWI3NjctYTlkN2Y1YmFkZjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXB57Ez2inkEbJyX4Tk8BODfmg+EwHy1QV3j qwJ568JB/Wj24HqKa6b9Zxxa+3NAWE0vNcJ7BJ8qWUoudSrtGDcdaRsj/f6OVZgI LGIUAkDnsZos/wPy6omDRx6dYZn8c00kzKNTR3SfA3ikdSvJE6Th1MGqKLKfJQW1 UQkytF/jKrGp8/oXAYbaTzE6gz0yk8ope7ufnp20eQf+GK+ISVGiTn6kAutY00Qv xgriVE+qfBq6Gm7m0nJXDzy0Rco652gWVyC6Cy5dnFRT3uleIoVLqJVWMEb2gvVs k3ojVPEV/FS+UNIKjANaSwjDnNq78Gs1ilUJxwrGgQ67dSGgTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGN61afTbS+NN3dy6RfB47f/RjcDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDQ3YTIwM2ItYWEwYS0z OTEzLTkzNzgtNmIzNTEzZWU5YzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TXCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANA8LhZeHHfpF9hGs9IbAw3mje9aJxnFlhMgdxyu9uv7K+GLBLlzugD9 uLfmpGDiJ/0pAgPieI6gin91TPvxnm/u6m5HaBNofmJhjiVhVJDzrXttvDf/TbfB 9DtyAI4/zhUFih5LBL7F/Fj40XNRSOVW4ges6jE6RP3OMkqPyDEYgG+/6fOx2KW0 1ApI0z4/zJdx3jMZ6ycMoXRj0V2VRwOpZO/Fibfw5NQkMo6DUCUJH6B0j5Ih5CAB zA+LrAREl/QzxfX5kAaP6gvEBwu4PeZQKdsh2iJaG9Jkicr6fIIt87u0vUDmov1s cuSlxoK4mePcSOhXdeub3y1Fc9I9xfI= -----END CERTIFICATE-----Generated at Sat Apr 26 23:00:16 2025 by rpki-client