$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7365ab5e-2536-360e-9125-353c16dd4a7e.roa File: 7365ab5e-2536-360e-9125-353c16dd4a7e.roa (raw, json) Hash identifier: 5rekVwfjAdvJA6SZGdpS8YgBkmR0/AkuVvlLwoAz5uc= Subject key identifier: B4:8A:05:2A:BE:5B:44:78:24:F0:C7:C4:89:58:E7:1D:0B:78:F1:82 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858498CFF016D1A09CD114246E000 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7365ab5e-2536-360e-9125-353c16dd4a7e.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 25668 IP address blocks: 209.53.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:01:6d:1a:09:cd:11:42:46:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=35e0b0b8-fccd-43e7-90e1-9a30772f24cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:dc:b1:ba:7e:e5:c8:6b:1f:38:b2:41:31:f6: 6b:9d:59:88:91:f5:2c:07:e9:fb:d5:71:3e:d0:ad: 7e:66:e4:6e:88:c6:cd:23:31:18:63:0c:da:06:aa: 00:6f:e2:a3:c1:18:ba:5b:e8:bc:30:b5:7a:a8:9a: 9c:98:04:8a:7c:07:12:3f:7a:79:43:38:dc:7a:26: 02:de:db:a1:d5:cd:de:23:1d:9e:2f:1f:e8:4e:c7: be:39:a6:23:8e:3c:51:1a:5d:a7:90:14:0f:82:5b: b9:3c:c7:0f:e1:e4:84:a0:70:8a:91:a8:dc:34:19: 63:06:dd:d9:55:2c:6f:82:06:0f:07:b5:4c:11:8d: 27:e8:73:a0:34:82:d0:16:2d:c4:53:2f:38:97:d7: 74:33:04:2f:ae:a2:9b:f8:c1:84:09:4c:c0:31:0c: e3:c2:41:49:35:b4:c9:67:82:b2:b0:d8:a2:c4:d8: f2:9e:8e:f8:bd:e9:f0:d2:fe:e4:2d:44:43:c0:59: ce:30:f8:ad:d7:fa:07:02:17:09:de:19:26:f3:f6: 45:78:e2:7b:60:db:3b:14:12:f1:28:d1:ce:59:f6: 9c:76:25:1b:79:0b:4f:17:7c:e4:a6:30:25:a3:25: ff:2f:97:d6:6a:e6:b0:cd:e8:fb:66:2d:3d:19:5d: 6d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8A:05:2A:BE:5B:44:78:24:F0:C7:C4:89:58:E7:1D:0B:78:F1:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7365ab5e-2536-360e-9125-353c16dd4a7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ee:cc:3f:1c:46:81:3c:1d:73:f7:47:4a:68:df:46:d7:13:47: b0:95:16:22:c1:99:e9:37:06:a0:e9:fd:a3:cb:28:81:fe:83: 6a:11:ca:41:71:66:d4:cc:5e:35:05:57:9b:2d:aa:a8:93:bb: 66:cf:6d:40:47:13:f3:41:3f:a1:99:2c:14:bd:82:be:25:25: ab:df:d8:c3:ec:f5:93:d3:7d:1f:89:b3:30:82:55:22:dc:00: e2:9d:de:c5:57:af:29:e5:05:9e:9e:88:3f:e6:b1:0d:7a:25: b9:7b:8d:4c:ec:a7:6b:3f:d6:e0:61:72:3b:b9:3a:85:e8:a4: c9:47:30:ad:b8:96:33:2b:5f:77:a0:f3:57:0b:b9:ae:ec:7f: 82:0c:8c:d0:a6:1b:30:73:47:b2:7b:cc:c7:66:02:8b:9f:a4: fc:38:f6:1f:b6:84:95:27:a4:19:6d:ad:96:9f:3a:67:fc:b8: f6:2e:33:cf:cf:91:a1:3f:d2:c5:8e:49:e2:24:81:b4:f1:fa: c5:ae:1f:84:31:17:81:48:55:a9:0c:69:7d:16:ca:6e:62:83: 83:72:0d:77:19:78:fd:22:7d:6d:4c:99:aa:07:07:aa:f9:16: c9:57:bb:a9:a8:71:c8:38:5a:d4:9a:09:37:89:bd:42:e7:4f: 4e:52:1e:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/wFtGgnNEUJG4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk MzVlMGIwYjgtZmNjZC00M2U3LTkwZTEtOWEzMDc3MmYyNGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39yxun7lyGsfOLJBMfZrnVmIkfUsB+n71XE+ 0K1+ZuRuiMbNIzEYYwzaBqoAb+KjwRi6W+i8MLV6qJqcmASKfAcSP3p5QzjceiYC 3tuh1c3eIx2eLx/oTse+OaYjjjxRGl2nkBQPglu5PMcP4eSEoHCKkajcNBljBt3Z VSxvggYPB7VMEY0n6HOgNILQFi3EUy84l9d0MwQvrqKb+MGECUzAMQzjwkFJNbTJ Z4KysNiixNjyno74venw0v7kLURDwFnOMPit1/oHAhcJ3hkm8/ZFeOJ7YNs7FBLx KNHOWfacdiUbeQtPF3zkpjAloyX/L5fWauawzej7Zi09GV1tkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSKBSq+W0R4JPDHxIlY5x0LePGCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNzM2NWFiNWUtMjUzNi0z NjBlLTkxMjUtMzUzYzE2ZGQ0YTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0TXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAO7MPxxGgTwdc/dHSmjfRtcTR7CVFiLBmek3BqDp/aPLKIH+g2oRykFx ZtTMXjUFV5stqqiTu2bPbUBHE/NBP6GZLBS9gr4lJavf2MPs9ZPTfR+JszCCVSLc AOKd3sVXrynlBZ6eiD/msQ16Jbl7jUzsp2s/1uBhcju5OoXopMlHMK24ljMrX3eg 81cLua7sf4IMjNCmGzBzR7J7zMdmAoufpPw49h+2hJUnpBltrZafOmf8uPYuM8/P kaE/0sWOSeIkgbTx+sWuH4QxF4FIVakMaX0Wym5ig4NyDXcZeP0ifW1MmaoHB6r5 FslXu6moccg4WtSaCTeJvULnT05SHnk= -----END CERTIFICATE-----Generated at Sat Apr 26 23:07:03 2025 by rpki-client