$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/45cd8a14-452c-33e9-949f-176742ba4487.roa File: 45cd8a14-452c-33e9-949f-176742ba4487.roa (raw, json) Hash identifier: lU3bAT67bnt83qAShm8ANEyWFYTMaH3vntIbZ1O1lpo= Subject key identifier: 5A:17:FC:77:35:FD:75:CA:21:8C:72:5A:45:37:BF:08:C6:1B:F4:53 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499AF47CB2C1CA04BB29BB6F20 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/45cd8a14-452c-33e9-949f-176742ba4487.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 209.52.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:7c:b2:c1:ca:04:bb:29:bb:6f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=da6c6e20-152d-4db2-986a-073d5dee1251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a7:03:71:af:bc:b5:52:49:6b:d3:e4:d4:b3: 72:54:42:54:91:1f:6f:ab:cd:e5:20:0d:1a:7b:fe: 1d:3a:b9:40:32:fc:3a:0a:09:84:9e:8a:eb:5d:f9: 53:12:a6:cc:7f:4d:38:31:d1:98:25:b0:55:14:91: 14:04:3d:25:0a:64:aa:d7:ce:ac:5e:9f:4a:4e:bc: 6d:fb:4c:d0:04:b4:6a:3d:dd:80:94:09:1e:74:07: 6a:79:14:a5:34:88:8e:d6:e7:47:38:f5:49:0b:ab: 22:bb:05:94:80:e0:a8:ae:0f:af:93:0d:8d:5d:3d: 14:ef:57:3b:96:9a:e3:c5:1e:5c:99:9a:cb:3f:3b: 03:f4:1b:df:9f:cd:58:d2:f6:07:78:ac:fb:a6:5e: eb:41:f1:98:9a:0d:cb:e4:19:83:c1:d9:97:2d:31: b4:8f:89:fb:63:37:92:59:a3:17:3b:c1:ba:a6:85: 76:fe:11:9b:92:0a:7a:da:43:af:bf:8a:c0:c4:0f: 8c:16:aa:8e:73:43:16:18:9f:3f:92:bd:50:51:d4: 8c:9b:2d:76:c2:f6:79:54:1a:18:46:26:04:f8:2d: 81:a5:81:c2:9f:0d:86:47:09:52:c7:be:39:29:be: 9a:aa:08:7d:dc:95:c4:c6:eb:09:7e:29:2c:5b:9e: c1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:17:FC:77:35:FD:75:CA:21:8C:72:5A:45:37:BF:08:C6:1B:F4:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/45cd8a14-452c-33e9-949f-176742ba4487.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:7b:d1:de:9f:75:77:5f:72:b5:70:dc:1d:66:8d:bd:f5:96: 34:a0:c1:ce:8d:b8:dd:12:d1:8c:69:bb:f3:33:e4:b5:e3:6e: fe:2c:83:72:c9:fd:b4:b0:4a:6a:83:cc:2c:ba:30:b3:41:3c: 96:61:ea:70:ff:c0:c9:d6:b6:5d:c9:30:f1:89:d9:a3:69:86: e1:1e:23:96:4d:fc:a2:d2:bb:7a:7e:24:53:7d:86:51:6d:7b: 97:7d:3d:c5:79:aa:5b:14:3d:4a:cd:46:b4:0d:d1:80:63:6e: 72:d4:6c:8b:6c:82:a4:42:5a:ba:97:52:17:6f:69:8f:31:11: b8:22:22:51:ae:36:4c:4f:57:7f:6c:6c:7b:6c:ea:16:8a:f4: c1:14:a9:0a:df:18:24:83:2b:12:93:3a:d4:f8:7a:31:da:d8: 42:d7:15:46:5c:73:9f:03:11:0a:7d:d5:4f:53:67:b1:8f:dd: 95:ce:6c:f6:9f:b9:35:50:af:f3:d9:84:e4:33:54:58:3a:5c: 21:3e:a7:af:fb:93:ae:8f:21:fb:84:10:61:10:4e:8a:b9:69: b2:fc:ac:a7:ea:bb:e5:f4:5e:68:79:ab:32:4b:93:e8:c3:34: 0f:f5:1b:92:ca:60:ae:b6:8d:88:38:9c:92:01:8f:14:54:b7: d4:da:9a:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9HyywcoEuym7byAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZGE2YzZlMjAtMTUyZC00ZGIyLTk4NmEtMDczZDVkZWUxMjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKcDca+8tVJJa9Pk1LNyVEJUkR9vq83lIA0a e/4dOrlAMvw6CgmEnorrXflTEqbMf004MdGYJbBVFJEUBD0lCmSq186sXp9KTrxt +0zQBLRqPd2AlAkedAdqeRSlNIiO1udHOPVJC6siuwWUgOCorg+vkw2NXT0U71c7 lprjxR5cmZrLPzsD9Bvfn81Y0vYHeKz7pl7rQfGYmg3L5BmDwdmXLTG0j4n7YzeS WaMXO8G6poV2/hGbkgp62kOvv4rAxA+MFqqOc0MWGJ8/kr1QUdSMmy12wvZ5VBoY RiYE+C2BpYHCnw2GRwlSx745Kb6aqgh93JXExusJfiksW57BEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoX/Hc1/XXKIYxyWkU3vwjGG/RTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDVjZDhhMTQtNDUyYy0z M2U5LTk0OWYtMTc2NzQyYmE0NDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0TQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI170d6fdXdfcrVw3B1mjb31ljSgwc6NuN0S0Yxpu/Mz5LXjbv4sg3LJ /bSwSmqDzCy6MLNBPJZh6nD/wMnWtl3JMPGJ2aNphuEeI5ZN/KLSu3p+JFN9hlFt e5d9PcV5qlsUPUrNRrQN0YBjbnLUbItsgqRCWrqXUhdvaY8xEbgiIlGuNkxPV39s bHts6haK9MEUqQrfGCSDKxKTOtT4ejHa2ELXFUZcc58DEQp91U9TZ7GP3ZXObPaf uTVQr/PZhOQzVFg6XCE+p6/7k66PIfuEEGEQToq5abL8rKfqu+X0Xmh5qzJLk+jD NA/1G5LKYK62jYg4nJIBjxRUt9TamtM= -----END CERTIFICATE-----Generated at Sat Apr 26 23:01:16 2025 by rpki-client