$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7d93af4a-7529-3962-9c56-24e9c090b79c.roa File: 7d93af4a-7529-3962-9c56-24e9c090b79c.roa (raw, json) Hash identifier: s4P87GwqNGhxluBH1PMBNnyrC6Ht9OaEh/jmioqv76s= Subject key identifier: AA:E5:9B:4E:9A:9B:B4:F5:FB:C4:53:5E:3A:69:D5:7B:87:F8:75:22 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849912F2A875F20CF4FD569C180 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7d93af4a-7529-3962-9c56-24e9c090b79c.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 7861 IP address blocks: 209.91.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:2a:87:5f:20:cf:4f:d5:69:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=8a1b29d7-0b77-449e-97e8-4763bf98702d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ec:ae:24:6e:49:18:a7:eb:24:04:cb:e6:fc: ab:8b:d3:28:17:6a:9f:0c:b1:7c:f5:05:45:a8:47: 78:2a:f2:49:91:4f:5b:ac:13:4e:9b:db:f3:84:ea: 3a:b7:0d:95:f6:04:e6:1b:61:66:79:48:8e:ce:ce: c7:df:f9:ea:28:c4:9d:75:a1:08:e1:ed:61:72:83: dd:92:51:94:be:9f:62:25:95:cb:3a:53:88:f5:1d: c6:0d:d8:69:20:5f:f0:61:2f:1a:b7:5f:9d:09:2d: 36:f1:00:2b:9c:c9:6c:9b:2c:ac:d5:06:7b:86:a4: 87:a3:de:a7:08:57:d7:b7:4b:55:34:80:fc:ad:90: ef:e1:f8:47:5c:7e:c5:a0:9b:28:89:08:7d:e8:8f: 54:67:9f:5a:3b:ce:99:65:07:7c:bf:11:70:6f:85: 5b:62:c1:bf:b8:cb:d1:f7:9b:7a:63:83:04:b2:dd: 32:b7:e4:4b:65:7d:b9:1a:2b:d6:70:d3:9f:b3:45: 0b:b0:ba:78:2f:d4:43:4d:73:bc:c3:9b:67:03:5a: 0e:7d:ff:2f:83:ec:d9:93:d1:76:aa:5e:29:1d:83: df:1e:9d:87:b5:1f:b5:3b:16:29:b0:f6:11:15:52: 3b:e6:8b:09:67:42:84:a8:51:f9:9c:4a:42:ab:ea: 16:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E5:9B:4E:9A:9B:B4:F5:FB:C4:53:5E:3A:69:D5:7B:87:F8:75:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7d93af4a-7529-3962-9c56-24e9c090b79c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.91.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:e7:88:cf:98:60:db:b8:ab:f0:f6:ac:95:38:7a:3b:ce:cc: 74:38:90:1a:50:b5:c5:4d:f8:cb:81:a2:e4:3d:ba:d1:9f:d9: 5b:e7:83:98:48:0d:3e:42:5c:8d:44:f1:09:9a:5a:c4:52:5f: 54:92:3b:de:b7:b8:b0:c0:e7:fd:51:28:59:40:b7:df:46:7a: 5f:94:91:a6:f0:45:b4:db:c5:64:60:18:76:f7:b2:24:b4:ce: 2b:6c:3e:d5:98:99:5b:80:c2:02:a4:bf:25:bf:c1:33:16:ba: d2:b4:1f:f3:66:04:3a:f0:a0:69:3c:34:64:47:db:07:80:0d: d4:5c:b0:05:a9:ef:32:fa:db:1d:30:3a:91:70:2d:86:10:2b: 93:9c:41:e0:b2:48:1d:2b:48:a6:12:a0:59:64:71:4a:57:15: 99:0c:ac:f3:ef:3a:67:b8:95:a7:c7:d8:11:fd:22:25:0f:6c: 3a:30:19:17:85:7f:b1:42:03:9c:d1:2f:cf:af:99:03:b8:26: 39:f8:10:8f:3b:82:4e:20:0c:cd:83:a1:50:3e:e2:98:03:60: ae:e3:02:03:51:f5:1a:2f:31:80:aa:ed:b0:2b:67:f0:90:b2: d7:fd:b0:3e:cc:8a:b4:49:9d:35:5e:b1:0b:f4:84:f1:b9:22: 56:9d:c6:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLyqHXyDPT9VpwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk OGExYjI5ZDctMGI3Ny00NDllLTk3ZTgtNDc2M2JmOTg3MDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOyuJG5JGKfrJATL5vyri9MoF2qfDLF89QVF qEd4KvJJkU9brBNOm9vzhOo6tw2V9gTmG2FmeUiOzs7H3/nqKMSddaEI4e1hcoPd klGUvp9iJZXLOlOI9R3GDdhpIF/wYS8at1+dCS028QArnMlsmyys1QZ7hqSHo96n CFfXt0tVNID8rZDv4fhHXH7FoJsoiQh96I9UZ59aO86ZZQd8vxFwb4VbYsG/uMvR 95t6Y4MEst0yt+RLZX25GivWcNOfs0ULsLp4L9RDTXO8w5tnA1oOff8vg+zZk9F2 ql4pHYPfHp2HtR+1OxYpsPYRFVI75osJZ0KEqFH5nEpCq+oWTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrlm06am7T1+8RTXjpp1XuH+HUiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvN2Q5M2FmNGEtNzUyOS0z OTYyLTljNTYtMjRlOWMwOTBiNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnniM+YYNu4q/D2rJU4ejvOzHQ4kBpQtcVN+MuBouQ9utGf2Vvng5hI DT5CXI1E8QmaWsRSX1SSO963uLDA5/1RKFlAt99Gel+UkabwRbTbxWRgGHb3siS0 zitsPtWYmVuAwgKkvyW/wTMWutK0H/NmBDrwoGk8NGRH2weADdRcsAWp7zL62x0w OpFwLYYQK5OcQeCySB0rSKYSoFlkcUpXFZkMrPPvOme4lafH2BH9IiUPbDowGReF f7FCA5zRL8+vmQO4Jjn4EI87gk4gDM2DoVA+4pgDYK7jAgNR9RovMYCq7bArZ/CQ stf9sD7MirRJnTVesQv0hPG5Iladxjs= -----END CERTIFICATE-----Generated at Mon Apr 28 04:38:23 2025 by rpki-client