$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5fbb564e-c0b2-3157-9530-de13d60a63b6.roa File: 5fbb564e-c0b2-3157-9530-de13d60a63b6.roa (raw, json) Hash identifier: SQONGMON/e9pfQ2Z2PpGw7LqadFHqPOahrpbi9zxuQ8= Subject key identifier: 9C:26:2B:CB:B8:B3:58:1C:59:F8:6E:E5:99:5C:6F:8E:39:F4:97:03 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499AF47D7FB548CA062C7FA000 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5fbb564e-c0b2-3157-9530-de13d60a63b6.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 209.91.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:7d:7f:b5:48:ca:06:2c:7f:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=6b5943e1-68a1-4627-a4a1-0f1bb26fbdc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:99:69:ca:b1:87:70:73:0d:05:ca:28:6a:c0: 75:e6:37:37:c2:0e:3b:2d:7b:f7:27:d7:4a:c6:13: 79:c8:4c:fc:d5:f2:0e:b7:8f:bd:83:d8:34:68:f8: 0d:fb:2d:f7:26:83:fa:a0:cf:eb:1d:12:e6:77:69: 11:1f:e2:3e:8b:9e:af:77:7b:e2:dd:32:23:37:93: e2:3b:ef:30:78:51:7b:28:51:d9:8b:5a:13:c4:26: f0:3b:b5:a6:28:49:b5:73:36:e4:5e:e1:10:a9:ba: d6:95:f8:08:a4:fa:d0:6a:ed:b6:22:f2:cf:d2:e7: 4e:f3:18:59:26:aa:06:93:92:1d:42:ee:fb:83:3e: 30:97:b3:0a:04:c7:06:cb:92:05:21:c5:be:25:62: 0d:cd:8f:3c:79:ae:37:1b:86:15:fc:87:1c:e7:2e: 04:cb:0f:dc:a4:20:43:0d:6b:e7:ec:92:b2:7c:af: c3:96:f6:a3:84:4e:14:26:d9:35:6a:4a:fd:1c:d1: 98:27:f1:a2:79:31:6e:5e:61:da:34:c9:bd:38:13: e8:b9:95:02:dc:ca:88:d9:a8:72:e8:5e:25:cc:2e: 2e:b3:75:6c:26:d4:af:58:e4:8b:f7:21:8e:ed:68: 6f:eb:48:4b:1b:a4:c8:bb:0f:77:d3:72:2a:87:38: c4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:26:2B:CB:B8:B3:58:1C:59:F8:6E:E5:99:5C:6F:8E:39:F4:97:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5fbb564e-c0b2-3157-9530-de13d60a63b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.91.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ee:ce:99:08:3f:70:f2:d4:2a:e2:ec:37:d3:d7:a8:f5:8a:3f: b8:b1:b8:54:20:04:66:f6:bb:0a:5e:4c:43:15:44:1a:32:31: 63:32:c9:9a:09:1b:cd:f6:bd:1c:7f:ae:85:b7:3a:82:82:69: 03:12:7f:41:21:d2:c3:27:ca:6b:d1:ae:78:1a:c3:8c:8e:84: 60:53:c5:9f:75:39:9c:02:5d:94:2d:eb:72:04:62:32:78:e7: 58:e5:46:8c:e0:ff:b8:91:2d:c5:51:54:91:e8:39:83:e2:52: 8e:49:df:3b:d1:32:af:a0:67:0f:84:28:59:fd:cf:98:ee:ff: a9:0c:21:d4:76:1f:e1:4b:e6:7c:de:b5:48:82:5b:26:88:93: 92:4b:4c:eb:72:4e:9d:84:1e:4b:ac:4d:d0:1c:52:43:19:74: e9:af:6c:f2:dd:c5:f4:74:b6:87:65:76:bf:b9:cf:11:d6:f9: ec:1f:09:1c:32:04:a0:21:00:2e:c2:83:df:9b:03:7b:e8:67: 7d:5c:6b:a0:6b:9a:2a:24:88:46:bc:72:b3:da:05:0c:2d:5b: 92:5c:33:67:b3:e4:56:bc:2a:16:19:52:73:9e:59:82:96:7b: 03:90:1e:76:73:c4:13:f4:2b:93:9a:e0:d3:f1:36:c6:25:c0: 0c:57:04:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9H1/tUjKBix/oAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NmI1OTQzZTEtNjhhMS00NjI3LWE0YTEtMGYxYmIyNmZiZGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgplpyrGHcHMNBcooasB15jc3wg47LXv3J9dK xhN5yEz81fIOt4+9g9g0aPgN+y33JoP6oM/rHRLmd2kRH+I+i56vd3vi3TIjN5Pi O+8weFF7KFHZi1oTxCbwO7WmKEm1czbkXuEQqbrWlfgIpPrQau22IvLP0udO8xhZ JqoGk5IdQu77gz4wl7MKBMcGy5IFIcW+JWINzY88ea43G4YV/Icc5y4Eyw/cpCBD DWvn7JKyfK/DlvajhE4UJtk1akr9HNGYJ/GieTFuXmHaNMm9OBPouZUC3MqI2ahy 6F4lzC4us3VsJtSvWOSL9yGO7Whv60hLG6TIuw9303IqhzjEZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwmK8u4s1gcWfhu5Zlcb4459JcDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNWZiYjU2NGUtYzBiMi0z MTU3LTk1MzAtZGUxM2Q2MGE2M2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0VtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAO7OmQg/cPLUKuLsN9PXqPWKP7ixuFQgBGb2uwpeTEMVRBoyMWMyyZoJ G832vRx/roW3OoKCaQMSf0Eh0sMnymvRrngaw4yOhGBTxZ91OZwCXZQt63IEYjJ4 51jlRozg/7iRLcVRVJHoOYPiUo5J3zvRMq+gZw+EKFn9z5ju/6kMIdR2H+FL5nze tUiCWyaIk5JLTOtyTp2EHkusTdAcUkMZdOmvbPLdxfR0todldr+5zxHW+ewfCRwy BKAhAC7Cg9+bA3voZ31ca6BrmiokiEa8crPaBQwtW5JcM2ez5Fa8KhYZUnOeWYKW ewOQHnZzxBP0K5Oa4NPxNsYlwAxXBGY= -----END CERTIFICATE-----Generated at Mon Apr 28 12:06:21 2025 by rpki-client