$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/48dcaa93-a869-3075-9d92-63a921af81a5.roa File: 48dcaa93-a869-3075-9d92-63a921af81a5.roa (raw, json) Hash identifier: p1k2hkXxQSpjinvAIjZd91gmEfDvzXQPh9Y4WL3wO4Q= Subject key identifier: 09:8E:C3:CF:A8:CE:FE:07:ED:51:E7:32:C1:66:5E:89:F9:B3:0A:C3 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499829C6ADB32CC4AFF750B880 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/48dcaa93-a869-3075-9d92-63a921af81a5.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 209.171.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:c6:ad:b3:2c:c4:af:f7:50:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=99a5c553-eed6-44c1-97fb-8bc038079cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b6:b7:fc:9d:7b:e4:29:b6:b4:f2:c7:c5:71: 26:3a:58:0a:2b:3d:3b:c8:3d:8b:38:21:ea:c8:fd: 2e:ac:4e:97:60:ef:bf:75:94:a1:5c:a5:16:85:81: b9:be:43:39:1e:c0:4b:14:75:4a:30:34:59:1a:58: b4:ab:24:48:27:4f:ce:a9:cc:79:41:be:63:13:89: d8:bd:51:b8:d3:f6:35:2b:f9:95:89:9b:d2:5d:78: f5:90:70:f0:88:fc:58:ce:4f:1e:e5:09:f8:4b:54: 34:14:f8:3c:52:d1:94:d9:8f:84:bd:d5:39:b0:1f: 47:8c:e9:cd:4a:0d:53:f3:ad:3c:a9:0b:9f:8b:e3: 09:2a:70:a4:82:b0:45:d4:08:6f:ed:1c:96:03:f3: 2c:13:6b:13:c7:99:c4:61:29:fc:b6:95:a0:98:5b: d8:b4:21:30:37:88:6f:22:82:5f:62:70:e5:33:1e: 4b:a8:d4:41:a9:80:9c:4d:f3:4a:e2:d9:5e:bc:8e: 53:12:b9:34:c5:3f:b0:e8:31:93:a8:c0:0e:0c:2a: 6a:09:29:83:89:f2:2c:b8:77:86:09:da:b2:e9:94: 4e:7b:c2:12:ca:fd:12:b6:48:cf:c4:4a:7e:e8:02: b1:f8:9a:da:70:b1:37:96:3b:4d:ea:bc:0e:d2:6d: f0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8E:C3:CF:A8:CE:FE:07:ED:51:E7:32:C1:66:5E:89:F9:B3:0A:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/48dcaa93-a869-3075-9d92-63a921af81a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.171.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:9b:c8:7f:12:66:7c:a2:8c:c2:f5:dd:2a:0e:b5:26:ee:39: c5:ef:ff:65:75:f8:51:7f:ff:cb:61:49:4d:5f:90:41:7c:a5: 6d:1f:fc:b3:03:63:72:0b:cf:83:3b:21:e4:f6:a6:bf:1f:ff: 0b:7f:ee:6b:40:86:08:eb:b6:ea:4f:04:33:9a:cd:60:91:c1: ef:ba:7f:37:7e:a9:0f:5b:80:38:cc:b9:a7:f3:00:64:39:51: 6e:a3:db:20:b0:4a:2b:a9:53:97:dd:da:53:2f:4e:4d:b6:e5: dd:96:ac:7e:34:5b:1c:3f:80:9e:26:65:46:8c:92:a0:da:60: 84:6a:bd:6c:75:25:7c:11:06:66:da:8e:cf:55:f2:49:92:2a: a6:05:f8:0b:fe:b2:7f:f9:a0:cf:e0:f4:8e:da:cc:35:22:4a: 8e:d6:ef:46:8e:b4:d9:32:1e:96:e8:e7:71:a4:41:f3:1d:6f: d7:41:75:fc:c3:6d:82:a2:35:7a:88:bf:76:20:8c:b9:de:31: 85:d6:b6:67:d9:da:6f:52:f0:36:37:4d:44:74:23:a3:92:d6: f8:69:70:3d:86:b8:1e:98:2a:9b:a7:00:97:79:f2:50:8e:8f: 2a:67:16:8a:a6:6c:b7:80:81:57:bd:f2:cd:68:57:4d:6c:b5: b4:20:5c:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKcatsyzEr/dQuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk OTlhNWM1NTMtZWVkNi00NGMxLTk3ZmItOGJjMDM4MDc5Y2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjra3/J175Cm2tPLHxXEmOlgKKz07yD2LOCHq yP0urE6XYO+/dZShXKUWhYG5vkM5HsBLFHVKMDRZGli0qyRIJ0/Oqcx5Qb5jE4nY vVG40/Y1K/mViZvSXXj1kHDwiPxYzk8e5Qn4S1Q0FPg8UtGU2Y+EvdU5sB9HjOnN Sg1T8608qQufi+MJKnCkgrBF1Ahv7RyWA/MsE2sTx5nEYSn8tpWgmFvYtCEwN4hv IoJfYnDlMx5LqNRBqYCcTfNK4tlevI5TErk0xT+w6DGTqMAODCpqCSmDifIsuHeG Cdqy6ZROe8ISyv0StkjPxEp+6AKx+JracLE3ljtN6rwO0m3wfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmOw8+ozv4H7VHnMsFmXon5swrDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDhkY2FhOTMtYTg2OS0z MDc1LTlkOTItNjNhOTIxYWY4MWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0atYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqbyH8SZnyijML13SoOtSbuOcXv/2V1+FF//8thSU1fkEF8pW0f/LMD Y3ILz4M7IeT2pr8f/wt/7mtAhgjrtupPBDOazWCRwe+6fzd+qQ9bgDjMuafzAGQ5 UW6j2yCwSiupU5fd2lMvTk225d2WrH40Wxw/gJ4mZUaMkqDaYIRqvWx1JXwRBmba js9V8kmSKqYF+Av+sn/5oM/g9I7azDUiSo7W70aOtNkyHpbo53GkQfMdb9dBdfzD bYKiNXqIv3YgjLneMYXWtmfZ2m9S8DY3TUR0I6OS1vhpcD2GuB6YKpunAJd58lCO jypnFoqmbLeAgVe98s1oV01stbQgXLQ= -----END CERTIFICATE-----Generated at Tue Apr 29 19:56:44 2025 by rpki-client