$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5db6d69b-412b-3266-902d-230d81c1875f.roa File: 5db6d69b-412b-3266-902d-230d81c1875f.roa (raw, json) Hash identifier: iwx2sxO3e5fS0R3zjYIO0rALT/E3WqrwMgBZAy2X/PU= Subject key identifier: 7D:BB:15:92:BF:CF:5C:91:64:AA:6D:14:C0:E7:DB:41:EA:47:11:F9 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584992949C207CEE2E081C9AEA40 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5db6d69b-412b-3266-902d-230d81c1875f.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 7861 IP address blocks: 209.29.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:9c:20:7c:ee:2e:08:1c:9a:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=0a69ec9a-1e0f-437c-bf66-d12b6c55dbe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:58:c5:d6:68:f6:4a:ec:af:7a:b0:63:64:f1: 7d:f9:9a:c0:b0:f9:37:5f:93:2a:91:83:75:6f:fd: 65:6d:6c:d2:90:39:40:d9:5a:f1:89:70:10:92:21: 61:e3:eb:00:4a:d0:95:24:61:9d:6e:81:cc:e4:21: f1:a7:6f:82:8b:2c:ec:35:d8:46:28:36:44:61:b8: d2:18:5d:f3:51:2c:68:ad:bb:82:07:b6:62:0f:41: d5:d5:ae:80:4f:8c:b5:ed:6f:d3:97:ed:45:7b:5d: a7:7b:86:49:77:eb:6b:b7:f2:50:42:6b:7a:e6:0b: ed:b6:90:96:8f:19:b1:43:da:8c:9a:b2:e0:df:df: c2:d9:a6:cc:d0:5a:79:63:ab:45:3a:d0:16:ad:f6: 8f:de:d8:7f:83:7f:5e:29:ca:b5:84:89:df:b8:57: fb:c5:73:6c:f2:f3:4a:51:44:45:ac:e6:8f:fb:e0: 2a:c7:3c:c1:2b:46:c2:a6:32:cd:9d:b4:8f:1b:0e: 1c:b7:13:3b:56:8d:94:57:18:85:b8:4f:79:4e:5b: f3:01:2b:a9:35:8d:b7:2f:f6:6c:ec:8a:4e:60:09: f9:2e:5c:a8:f2:64:6c:67:22:43:42:80:5b:e0:28: 76:65:ec:a0:e8:d4:7f:0f:2c:eb:1b:7c:0b:dd:93: 85:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BB:15:92:BF:CF:5C:91:64:AA:6D:14:C0:E7:DB:41:EA:47:11:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5db6d69b-412b-3266-902d-230d81c1875f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:de:1b:4c:5d:38:7a:23:f8:ff:29:87:45:71:b6:0d:74:06: 0e:46:02:5c:19:fe:bb:dd:18:f8:66:af:81:bf:74:68:0e:f6: bb:8f:9e:8c:b3:e4:bb:ac:8d:36:07:9b:9e:75:30:32:80:e1: 80:69:02:20:1b:4c:f4:51:d5:81:9c:da:d3:24:9c:c9:c3:e3: be:8f:c1:8f:72:4e:7d:87:72:49:70:9d:1c:29:a7:fe:3a:5f: cf:5a:bb:bf:43:4f:02:53:7a:08:10:3a:a5:3f:17:c2:15:d2: 0d:e3:1a:5e:bf:99:7d:95:4f:a1:eb:41:49:b9:5a:b1:e4:d9: fd:b5:82:81:99:e5:e9:5a:6c:8a:5e:a0:58:5c:0e:92:c9:24: 53:44:f7:2d:36:4e:0f:a7:1f:ac:be:8f:12:d3:e5:b7:46:d4: f5:08:58:43:9a:07:f9:51:ba:f0:30:a8:eb:ef:99:5b:1d:88: 54:1b:6f:22:17:53:f4:18:89:ad:d0:24:5e:6d:ab:ff:f1:64: 59:9a:89:fb:26:9f:6d:a5:e3:07:8a:c4:04:48:e5:41:15:26: bf:2b:a9:af:fd:fa:3b:fe:3b:0f:b2:3d:29:d8:2c:7c:42:c7: af:37:45:18:ea:f1:7c:f3:d0:a0:96:b4:52:76:f4:dc:ba:20: e6:40:bd:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlJwgfO4uCBya6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk MGE2OWVjOWEtMWUwZi00MzdjLWJmNjYtZDEyYjZjNTVkYmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFjF1mj2SuyverBjZPF9+ZrAsPk3X5MqkYN1 b/1lbWzSkDlA2VrxiXAQkiFh4+sAStCVJGGdboHM5CHxp2+CiyzsNdhGKDZEYbjS GF3zUSxorbuCB7ZiD0HV1a6AT4y17W/Tl+1Fe12ne4ZJd+trt/JQQmt65gvttpCW jxmxQ9qMmrLg39/C2abM0Fp5Y6tFOtAWrfaP3th/g39eKcq1hInfuFf7xXNs8vNK UURFrOaP++AqxzzBK0bCpjLNnbSPGw4ctxM7Vo2UVxiFuE95TlvzASupNY23L/Zs 7IpOYAn5Llyo8mRsZyJDQoBb4Ch2Zeyg6NR/DyzrG3wL3ZOFEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH27FZK/z1yRZKptFMDn20HqRxH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNWRiNmQ2OWItNDEyYi0z MjY2LTkwMmQtMjMwZDgxYzE4NzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0R3YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjeG0xdOHoj+P8ph0Vxtg10Bg5GAlwZ/rvdGPhmr4G/dGgO9ruPnoyz 5LusjTYHm551MDKA4YBpAiAbTPRR1YGc2tMknMnD476PwY9yTn2HcklwnRwpp/46 X89au79DTwJTeggQOqU/F8IV0g3jGl6/mX2VT6HrQUm5WrHk2f21goGZ5elabIpe oFhcDpLJJFNE9y02Tg+nH6y+jxLT5bdG1PUIWEOaB/lRuvAwqOvvmVsdiFQbbyIX U/QYia3QJF5tq//xZFmaifsmn22l4weKxARI5UEVJr8rqa/9+jv+Ow+yPSnYLHxC x683RRjq8Xzz0KCWtFJ29Ny6IOZAvV0= -----END CERTIFICATE-----Generated at Sat Apr 26 22:51:39 2025 by rpki-client