$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4a6e5061-b1d2-3aa0-9f11-c21450bad81b.roa File: 4a6e5061-b1d2-3aa0-9f11-c21450bad81b.roa (raw, json) Hash identifier: BZ3UJ8/fHqG3TKlNJsdfVyWe7DAcEGkG5fC04pcM6m4= Subject key identifier: FD:6E:E4:B8:CC:B4:96:90:AD:CA:57:59:38:48:B9:CB:A4:BB:51:23 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584988CF202777B8AA4D28445600 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4a6e5061-b1d2-3aa0-9f11-c21450bad81b.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 25668 IP address blocks: 209.52.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:20:27:77:b8:aa:4d:28:44:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=21397b5e-6265-4e45-80fb-28fb347be7fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0f:18:7e:b3:7d:76:64:d3:c8:57:29:c7:62: 01:bf:6c:6d:e3:a1:53:87:42:a9:20:33:43:31:e4: 2e:85:a2:58:12:af:47:16:15:9f:47:56:91:0b:8e: 00:1f:06:f3:45:c7:97:0e:86:13:c7:ce:3e:e7:78: 2c:6d:7b:b1:64:e8:26:80:33:da:7c:e0:03:d4:65: 28:2a:88:bf:f2:7d:d1:12:71:57:c3:0b:51:f9:76: 5a:47:bc:b5:4b:4c:16:4d:b2:f8:00:ac:99:ca:26: 96:b1:16:8d:fb:f9:8b:0f:d7:cb:8a:b8:de:d3:8c: 89:8c:17:76:30:cd:25:19:2e:e1:c3:95:aa:08:a4: 25:8e:73:76:9a:9f:0b:ef:cb:ab:18:94:68:5e:f1: 0d:27:cd:a4:d8:3d:f8:5b:3c:c3:99:56:4e:ec:72: 74:6a:eb:64:26:e7:a1:aa:a3:2d:0d:d6:db:40:a9: c5:27:0f:46:d3:ec:a3:a6:72:4b:c2:29:b0:51:54: fb:73:61:9a:98:7a:7e:30:cb:42:4d:f2:91:9d:66: f7:ce:6d:f3:f4:41:fc:f0:88:87:83:21:5e:4d:75: 01:e9:74:2e:90:25:f0:2e:96:42:36:1a:fd:4f:ee: cf:a3:47:bd:f8:08:68:e3:4b:b5:e9:81:71:88:4f: ea:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:6E:E4:B8:CC:B4:96:90:AD:CA:57:59:38:48:B9:CB:A4:BB:51:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4a6e5061-b1d2-3aa0-9f11-c21450bad81b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:7a:97:75:85:6f:27:8c:16:53:b6:41:49:7d:24:3e:ea:1a: a5:c4:96:9f:7d:82:34:0e:64:57:79:4f:ba:cf:d8:66:01:14: 51:4a:63:e5:c2:c9:f1:36:92:70:df:10:ec:7a:bc:cc:6b:2c: d5:64:2f:d6:d3:fd:50:e4:b3:1c:39:7a:10:63:ad:21:f2:1c: 6d:da:ec:18:2d:f3:49:d8:1a:eb:fa:1b:06:fd:fa:d0:43:98: 91:14:0f:b2:a3:6c:6e:82:c2:bb:2f:f6:c2:a4:3f:60:07:09: de:99:c5:87:ac:ba:3e:c2:cb:76:9a:3b:39:d1:c2:ab:de:51: ce:84:f2:28:a9:28:e2:a0:a5:96:b1:cb:11:99:0f:05:68:fa: b2:22:53:2e:a4:e8:d3:80:51:2e:90:19:06:4b:db:04:22:e7: 6e:82:57:65:42:3d:5a:47:58:77:b8:f1:e9:cb:44:4c:8f:b9: 11:75:90:84:41:61:e2:bf:65:d2:2c:71:30:42:5f:27:ae:d2: 52:56:16:86:9a:4b:e1:76:cd:27:51:19:c6:83:86:be:27:17: 6b:9e:d0:e9:94:1e:a4:c7:2f:40:ea:61:f9:00:e6:3a:d2:02: 56:d0:88:f8:a5:a9:a1:f3:82:48:c9:11:34:bb:80:a2:e1:85: 7d:35:19:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzyAnd7iqTShEVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MjEzOTdiNWUtNjI2NS00ZTQ1LTgwZmItMjhmYjM0N2JlN2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg8YfrN9dmTTyFcpx2IBv2xt46FTh0KpIDND MeQuhaJYEq9HFhWfR1aRC44AHwbzRceXDoYTx84+53gsbXuxZOgmgDPafOAD1GUo Koi/8n3REnFXwwtR+XZaR7y1S0wWTbL4AKyZyiaWsRaN+/mLD9fLirje04yJjBd2 MM0lGS7hw5WqCKQljnN2mp8L78urGJRoXvENJ82k2D34WzzDmVZO7HJ0autkJueh qqMtDdbbQKnFJw9G0+yjpnJLwimwUVT7c2GamHp+MMtCTfKRnWb3zm3z9EH88IiH gyFeTXUB6XQukCXwLpZCNhr9T+7Po0e9+Aho40u16YFxiE/qXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1u5LjMtJaQrcpXWThIucuku1EjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNGE2ZTUwNjEtYjFkMi0z YWEwLTlmMTEtYzIxNDUwYmFkODFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TTkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALB6l3WFbyeMFlO2QUl9JD7qGqXElp99gjQOZFd5T7rP2GYBFFFKY+XC yfE2knDfEOx6vMxrLNVkL9bT/VDksxw5ehBjrSHyHG3a7Bgt80nYGuv6Gwb9+tBD mJEUD7KjbG6Cwrsv9sKkP2AHCd6ZxYesuj7Cy3aaOznRwqveUc6E8iipKOKgpZax yxGZDwVo+rIiUy6k6NOAUS6QGQZL2wQi526CV2VCPVpHWHe48enLREyPuRF1kIRB YeK/ZdIscTBCXyeu0lJWFoaaS+F2zSdRGcaDhr4nF2ue0OmUHqTHL0DqYfkA5jrS AlbQiPilqaHzgkjJETS7gKLhhX01GSY= -----END CERTIFICATE-----Generated at Mon Apr 28 13:09:09 2025 by rpki-client