$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/56965208-8eba-3b97-80ce-42860ac58653.roa File: 56965208-8eba-3b97-80ce-42860ac58653.roa (raw, json) Hash identifier: YssF4ji4wrCr7Yhw71LpBqrLEimIn+enDTz2jCsp5t0= Subject key identifier: 32:66:13:BB:86:A6:71:49:D4:E3:8F:FD:26:C5:E2:C7:3D:B1:B8:73 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584992949C137D276AC10D5AD980 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/56965208-8eba-3b97-80ce-42860ac58653.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 7861 IP address blocks: 209.91.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:9c:13:7d:27:6a:c1:0d:5a:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=0998071d-b3b8-4133-9a42-3d52b838c8d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:28:96:2f:4d:9c:1e:99:bc:70:e3:94:3a:94: e0:b5:60:1b:36:05:06:99:68:01:c9:73:12:7e:13: c3:92:82:a0:81:7a:ca:b3:a0:a8:34:fd:c5:ac:5c: a2:dc:d3:74:0c:a8:05:dc:b3:2f:78:a9:da:00:34: e2:df:f8:f1:f1:63:0e:ee:75:cf:70:31:26:02:9c: 36:dd:77:54:a0:b0:24:78:16:97:28:73:f6:87:3e: 33:1a:10:ae:85:4c:95:a4:c0:a8:d6:11:c2:b6:24: 1d:cd:cb:c5:da:03:ff:bf:77:cf:4a:9f:97:4a:8c: 2f:5b:f0:24:19:66:81:3e:92:be:b8:ab:cf:cc:ad: 36:bb:43:56:ae:38:b7:15:5d:8a:84:ba:9d:8f:3a: ad:a4:41:cf:a9:9d:50:82:57:50:7c:1d:c9:91:c1: 6a:7f:b6:32:b0:50:d4:4a:1f:76:dc:6a:48:5d:42: a0:53:07:39:8b:c8:45:89:67:e5:cd:d9:27:b6:d0: 2b:f1:81:ff:34:1d:34:22:7a:d3:e8:ad:39:c6:41: 26:14:0f:89:b8:6c:7a:17:06:23:5e:fe:74:79:cd: 2d:79:15:6c:58:5d:53:1c:76:93:a7:4a:63:da:d6: 98:71:66:56:1c:69:7f:e5:4c:4c:4f:db:cf:01:50: ad:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:66:13:BB:86:A6:71:49:D4:E3:8F:FD:26:C5:E2:C7:3D:B1:B8:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/56965208-8eba-3b97-80ce-42860ac58653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.91.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:77:e5:ce:f2:08:81:d9:32:21:44:61:75:11:76:63:a3:f7: 28:13:98:3d:00:84:a7:98:db:7d:57:c0:e9:ab:51:d4:24:7b: 0e:c5:a0:1e:88:f0:f3:d5:31:fe:79:d5:68:a0:b3:f9:a8:08: 14:3b:ff:25:ce:73:e2:5a:49:28:e7:ef:65:3c:a0:b3:62:e9: c3:f1:cf:94:ef:a5:46:ef:5d:f0:43:57:80:d3:e0:94:ed:fa: cb:92:1a:90:06:45:dc:73:d5:4b:e0:e5:53:4b:9a:7f:18:e1: e3:e8:31:a8:44:93:be:85:91:28:8f:87:02:cf:62:b1:c3:51: d5:f7:51:3d:c1:be:c8:1c:76:79:1f:02:67:30:40:c1:0b:6a: 18:28:29:32:c6:24:6a:95:67:23:ad:82:54:9e:23:e2:37:04: 62:56:51:78:7e:b9:1c:56:11:ad:a5:3e:17:25:7e:b4:7b:cf: 8c:6e:dd:76:16:04:e2:34:11:d3:31:b5:26:ed:a6:5c:33:cd: 0b:61:68:6a:85:ba:90:9b:03:2a:d9:56:25:fb:63:c4:f6:d4: fb:81:82:77:95:a9:7d:bd:4e:2d:a8:8f:4a:de:b7:0d:98:56: 69:c7:36:07:dd:fd:4a:fb:9b:da:9d:9c:18:d0:8c:22:65:3c: fc:25:6d:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlJwTfSdqwQ1a2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk MDk5ODA3MWQtYjNiOC00MTMzLTlhNDItM2Q1MmI4MzhjOGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCiWL02cHpm8cOOUOpTgtWAbNgUGmWgByXMS fhPDkoKggXrKs6CoNP3FrFyi3NN0DKgF3LMveKnaADTi3/jx8WMO7nXPcDEmApw2 3XdUoLAkeBaXKHP2hz4zGhCuhUyVpMCo1hHCtiQdzcvF2gP/v3fPSp+XSowvW/Ak GWaBPpK+uKvPzK02u0NWrji3FV2KhLqdjzqtpEHPqZ1QgldQfB3JkcFqf7YysFDU Sh923GpIXUKgUwc5i8hFiWflzdknttAr8YH/NB00InrT6K05xkEmFA+JuGx6FwYj Xv50ec0teRVsWF1THHaTp0pj2taYcWZWHGl/5UxMT9vPAVCtnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJmE7uGpnFJ1OOP/SbF4sc9sbhzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNTY5NjUyMDgtOGViYS0z Yjk3LTgwY2UtNDI4NjBhYzU4NjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0VtYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADF35c7yCIHZMiFEYXURdmOj9ygTmD0AhKeY231XwOmrUdQkew7FoB6I 8PPVMf551Wigs/moCBQ7/yXOc+JaSSjn72U8oLNi6cPxz5TvpUbvXfBDV4DT4JTt +suSGpAGRdxz1Uvg5VNLmn8Y4ePoMahEk76FkSiPhwLPYrHDUdX3UT3Bvsgcdnkf AmcwQMELahgoKTLGJGqVZyOtglSeI+I3BGJWUXh+uRxWEa2lPhclfrR7z4xu3XYW BOI0EdMxtSbtplwzzQthaGqFupCbAyrZViX7Y8T21PuBgneVqX29Ti2oj0retw2Y VmnHNgfd/Ur7m9qdnBjQjCJlPPwlbQ8= -----END CERTIFICATE-----Generated at Wed Apr 30 23:36:05 2025 by rpki-client