$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5d5c0b86-aba9-32da-a6c9-63c7faa1cc2e.roa File: 5d5c0b86-aba9-32da-a6c9-63c7faa1cc2e.roa (raw, json) Hash identifier: Beie8KLiJ3nYXo4S8vBpIFBx5q/ZY7P5ftK2x4c6Wb4= Subject key identifier: 1D:37:99:8C:6E:7A:F3:D5:31:A1:75:99:35:0A:C4:D4:D2:05:44:77 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499DBF2AE1088974050D86DC00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5d5c0b86-aba9-32da-a6c9-63c7faa1cc2e.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 852 IP address blocks: 209.171.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:2a:e1:08:89:74:05:0d:86:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=cccc0ed1-dc40-4802-8adc-0b268310b126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6a:cd:e0:69:08:5b:e9:36:51:51:73:ab:1e: 4e:31:b6:52:fb:45:e6:d6:8a:79:69:2a:c8:b1:d7: 10:27:85:30:05:32:b9:fd:82:ca:90:7c:6e:d2:91: 14:e7:55:da:27:b5:13:b1:4a:52:d0:e4:42:af:2d: 90:29:d3:67:95:92:b7:f4:cb:1c:4d:ff:1b:14:0a: fe:6f:56:a6:b6:23:18:e7:69:43:76:61:da:c9:03: 5a:fe:c4:8d:cd:0d:b2:dc:1a:08:fc:72:49:e3:41: 93:ef:71:b9:31:7f:b3:f4:a8:75:32:e9:05:9f:2c: 41:30:71:c5:64:d2:82:c0:96:12:a6:17:84:2b:b3: a7:84:17:32:88:f7:fc:cb:44:1b:cf:c0:41:e5:91: b5:d3:47:6f:ff:82:c0:ad:5e:4f:c3:9c:ec:86:a6: be:6f:3f:46:d3:4b:62:e2:ae:1d:b5:2b:5f:cf:fa: 4b:6f:96:91:d6:3b:c9:d0:c4:91:27:69:f4:f0:f4: 0a:20:fe:1c:de:db:52:91:a3:d0:4e:ce:50:55:01: ab:c7:1f:5e:72:15:b6:9a:4c:1b:62:1e:72:7a:b0: 1e:15:be:7e:71:0a:74:48:d4:52:a1:50:db:eb:f8: 08:d2:b1:2f:93:b0:ee:46:39:da:6b:d6:59:18:26: 9e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:37:99:8C:6E:7A:F3:D5:31:A1:75:99:35:0A:C4:D4:D2:05:44:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5d5c0b86-aba9-32da-a6c9-63c7faa1cc2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.171.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:58:14:43:54:ce:a1:c6:27:00:5c:89:a8:03:d7:d0:0a:af: 90:b9:f9:fc:f8:99:99:64:2a:72:e7:89:75:56:fc:70:f2:11: 33:3c:cf:7f:87:b5:34:bd:5c:a2:38:b5:80:6c:13:63:5d:0b: 93:16:ba:ad:04:f7:54:fa:7a:34:a6:7a:c7:23:d3:a3:78:59: ca:ee:75:9a:29:c1:c9:68:51:6f:2d:4d:ae:2d:f9:40:44:2f: df:dc:d7:b3:2e:81:a7:f8:ca:91:e8:46:28:d6:74:82:18:5f: 16:6a:ec:3f:70:fc:85:75:63:ec:3d:01:34:62:de:e4:32:31: 39:ed:55:d3:a6:f1:d2:ef:1f:6a:d8:cc:25:1f:20:90:f6:8e: 29:3e:77:12:03:0c:a4:30:fe:df:71:8c:42:b4:fb:61:ab:cb: 8b:09:fc:2f:f5:c0:02:f1:9f:7f:3b:ef:f8:3d:3a:11:52:19: 1c:3a:fd:55:c4:a9:c5:6e:9e:62:ce:3e:23:b9:e4:99:af:90: f9:de:12:36:35:71:4a:37:3d:4d:d3:81:4b:13:d5:e4:eb:cf: 14:b1:76:d1:68:b0:64:df:e8:8f:b3:a1:b2:9d:e4:61:44:70: 7d:ce:40:42:2f:f2:db:f5:68:6c:a0:d0:b0:98:fb:4d:2b:e7: 87:c3:8e:84 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmdvyrhCIl0BQ2G3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk Y2NjYzBlZDEtZGM0MC00ODAyLThhZGMtMGIyNjgzMTBiMTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWrN4GkIW+k2UVFzqx5OMbZS+0Xm1op5aSrI sdcQJ4UwBTK5/YLKkHxu0pEU51XaJ7UTsUpS0ORCry2QKdNnlZK39MscTf8bFAr+ b1amtiMY52lDdmHayQNa/sSNzQ2y3BoI/HJJ40GT73G5MX+z9Kh1MukFnyxBMHHF ZNKCwJYSpheEK7OnhBcyiPf8y0Qbz8BB5ZG100dv/4LArV5Pw5zshqa+bz9G00ti 4q4dtStfz/pLb5aR1jvJ0MSRJ2n08PQKIP4c3ttSkaPQTs5QVQGrxx9echW2mkwb Yh5yerAeFb5+cQp0SNRSoVDb6/gI0rEvk7DuRjnaa9ZZGCae3QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFB03mYxuevPVMaF1mTUKxNTSBUR3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNWQ1YzBiODYtYWJhOS0z MmRhLWE2YzktNjNjN2ZhYTFjYzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0aswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAEVgUQ1TOocYnAFyJqAPX0AqvkLn5/PiZmWQqcueJdVb8cPIRMzzPf4e1 NL1coji1gGwTY10Lkxa6rQT3VPp6NKZ6xyPTo3hZyu51minByWhRby1Nri35QEQv 39zXsy6Bp/jKkehGKNZ0ghhfFmrsP3D8hXVj7D0BNGLe5DIxOe1V06bx0u8fatjM JR8gkPaOKT53EgMMpDD+33GMQrT7YavLiwn8L/XAAvGffzvv+D06EVIZHDr9VcSp xW6eYs4+I7nkma+Q+d4SNjVxSjc9TdOBSxPV5OvPFLF20WiwZN/oj7Ohsp3kYURw fc5AQi/y2/VobKDQsJj7TSvnh8OOhA== -----END CERTIFICATE-----Generated at Sun Apr 27 13:39:37 2025 by rpki-client