$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/52ea8b98-74f4-3122-acd5-365ad4949a5e.roa File: 52ea8b98-74f4-3122-acd5-365ad4949a5e.roa (raw, json) Hash identifier: XWiWNi68FuQQoU0W48gmsyYxLpndkklnaSRXgKEJf/8= Subject key identifier: 3D:56:4B:36:95:9A:17:05:E1:42:0E:B5:E8:D7:DE:DE:69:78:DE:DC Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584992949E87C1800DE40F05E2B0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/52ea8b98-74f4-3122-acd5-365ad4949a5e.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 7861 IP address blocks: 209.115.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:9e:87:c1:80:0d:e4:0f:05:e2:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=b1366652-09f7-4a6a-85f0-72d4bed3f636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:04:a1:e6:19:54:8f:8b:48:48:4c:35:0a:ef: 4c:da:49:9f:82:a2:4c:f9:26:d6:fe:6a:32:8d:47: ec:f8:22:c2:66:bf:f8:60:8f:21:40:b8:6c:db:7d: 8e:f2:a6:05:9d:47:d9:d6:cd:d0:0a:5b:49:9f:25: c2:69:8e:3f:c7:36:07:96:8d:e5:17:56:c0:5b:1f: 50:a3:f7:e4:18:28:08:b9:b5:42:bf:7c:ca:90:9e: 4a:04:56:f7:ec:25:3d:cd:64:dd:58:91:24:17:e9: 1a:95:c4:e3:b5:bf:f4:4a:11:8c:52:8e:4b:1e:c3: 84:58:d4:4f:c8:99:7b:0e:33:4a:78:48:84:d2:f8: b6:a9:ff:60:08:e4:ab:de:1d:e7:73:cd:44:e0:e6: a6:ae:82:05:f8:da:42:ae:9d:97:da:8f:39:43:09: 4e:29:f3:97:e3:f2:75:47:d7:cc:31:5a:20:4b:8a: 57:09:60:e9:4e:69:ee:e1:09:d7:04:46:53:bd:a8: fe:83:43:66:da:9d:6a:4f:04:00:47:7e:05:1b:cc: 91:f0:6b:75:cd:c2:5d:da:30:b5:5c:92:0d:dc:d3: 30:d1:e1:93:84:4b:05:39:83:4a:77:36:97:40:7f: c9:fa:7d:88:0c:2c:97:0b:d1:9d:93:75:84:1e:12: 3a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:56:4B:36:95:9A:17:05:E1:42:0E:B5:E8:D7:DE:DE:69:78:DE:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/52ea8b98-74f4-3122-acd5-365ad4949a5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.115.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:6f:b4:85:f9:1a:2c:62:72:d0:bc:1d:fe:8c:21:bc:00:ea: 6d:3d:19:18:f0:de:a8:8d:c5:25:bc:2b:77:01:6f:2c:82:87: 35:34:f1:67:46:df:fb:a2:c3:60:73:da:5f:38:84:27:35:cc: 0b:e8:ad:b9:91:61:09:6b:d4:b5:21:9c:36:c7:71:fe:ee:be: e9:03:6b:a2:82:b7:a5:d9:cc:62:70:d4:7d:2f:7b:9e:96:ed: a2:2f:72:28:24:0a:4c:2b:d0:78:dc:17:64:e9:d4:54:34:08: 5d:0a:51:d0:10:f3:f4:54:b2:7c:8b:de:3d:a5:af:3f:b7:dd: 34:60:2a:07:30:6b:d2:17:24:da:da:ec:dd:85:a8:d1:4a:f9: 82:f0:4f:c6:e2:d1:b9:b2:12:0c:55:b5:b8:48:2c:3a:8d:31: b5:bd:86:6f:0f:a6:4e:b6:a7:7d:d0:8e:cc:e7:90:48:38:56: 4c:f5:f8:65:58:60:e4:36:af:39:42:68:c6:27:0e:c1:da:6b: b9:4d:9e:a9:7c:47:5a:63:dc:60:0b:bd:a8:64:79:29:4e:5e: 6f:90:27:54:49:e7:29:10:bd:c4:f7:d9:72:98:c1:7b:4d:85: 5d:9e:5f:54:68:a0:e3:aa:2f:74:f9:ed:dd:69:0c:bf:5d:c0: 23:64:a0:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlJ6HwYAN5A8F4rAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk YjEzNjY2NTItMDlmNy00YTZhLTg1ZjAtNzJkNGJlZDNmNjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ASh5hlUj4tISEw1Cu9M2kmfgqJM+SbW/moy jUfs+CLCZr/4YI8hQLhs232O8qYFnUfZ1s3QCltJnyXCaY4/xzYHlo3lF1bAWx9Q o/fkGCgIubVCv3zKkJ5KBFb37CU9zWTdWJEkF+kalcTjtb/0ShGMUo5LHsOEWNRP yJl7DjNKeEiE0vi2qf9gCOSr3h3nc81E4OamroIF+NpCrp2X2o85QwlOKfOX4/J1 R9fMMVogS4pXCWDpTmnu4QnXBEZTvaj+g0Nm2p1qTwQAR34FG8yR8Gt1zcJd2jC1 XJIN3NMw0eGThEsFOYNKdzaXQH/J+n2IDCyXC9Gdk3WEHhI6DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1WSzaVmhcF4UIOtejX3t5peN7cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNTJlYThiOTgtNzRmNC0z MTIyLWFjZDUtMzY1YWQ0OTQ5YTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0XOeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFvtIX5GixictC8Hf6MIbwA6m09GRjw3qiNxSW8K3cBbyyChzU08WdG 3/uiw2Bz2l84hCc1zAvorbmRYQlr1LUhnDbHcf7uvukDa6KCt6XZzGJw1H0ve56W 7aIvcigkCkwr0HjcF2Tp1FQ0CF0KUdAQ8/RUsnyL3j2lrz+33TRgKgcwa9IXJNra 7N2FqNFK+YLwT8bi0bmyEgxVtbhILDqNMbW9hm8Ppk62p33QjsznkEg4Vkz1+GVY YOQ2rzlCaMYnDsHaa7lNnql8R1pj3GALvahkeSlOXm+QJ1RJ5ykQvcT32XKYwXtN hV2eX1RooOOqL3T57d1pDL9dwCNkoHo= -----END CERTIFICATE-----Generated at Sat Apr 26 23:14:27 2025 by rpki-client