$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/83e056c7-6751-3e7e-aa33-5370a6fbd431.roa File: 83e056c7-6751-3e7e-aa33-5370a6fbd431.roa (raw, json) Hash identifier: wnAemlTBSBq1DtP4TjyD8krcijSpza/jSxmVJYDCmGw= Subject key identifier: 67:0C:6D:E1:A3:3E:B5:B5:B1:0D:7B:E6:59:89:39:97:00:D8:42:F4 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584992949ECD271D85AE7D40E640 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/83e056c7-6751-3e7e-aa33-5370a6fbd431.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 7861 IP address blocks: 209.29.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:9e:cd:27:1d:85:ae:7d:40:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=1f27811d-1f74-414a-b226-4c6619edb78b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ca:4a:6b:d8:1a:f8:f1:b7:dd:d6:eb:01:56: 4e:41:ce:14:9d:b3:3a:77:b3:08:62:c0:69:1d:15: 6e:c0:78:ad:c4:5a:0e:50:d4:f8:cb:db:70:d8:a9: c7:38:b0:ab:2e:e1:25:7c:03:9b:79:6e:da:67:58: 84:42:b0:03:87:40:2e:fa:1e:f1:7e:c4:2c:e0:df: 1d:8e:97:74:3e:a7:e0:6f:f2:25:0d:e5:d0:8f:58: c1:b7:42:08:25:a3:b0:cb:9f:fc:8e:fd:08:ea:7d: 0f:28:9a:5c:65:59:fe:c1:26:9c:30:b8:fd:1d:3d: 81:ca:5b:43:2c:0c:a3:1b:b0:25:3c:ba:f8:43:c4: 9d:80:ba:fb:64:7e:14:55:3d:ad:3b:72:e0:e0:c5: 7a:48:f6:0c:ca:2f:f6:ff:3d:0a:d3:d6:9b:94:88: cb:f5:d0:89:83:c8:e5:f6:72:48:3c:c1:10:a4:dd: 97:d9:e8:49:b0:c5:ab:88:b4:8f:03:5f:dd:79:77: c0:01:1a:d3:68:62:48:9b:1e:ca:0e:63:f8:6e:37: 83:44:cb:48:92:ab:17:7a:69:45:62:07:5b:ce:d5: d7:9c:2d:c5:66:ac:02:a6:1b:27:66:5b:c4:fc:66: 08:1b:a5:56:52:94:42:22:71:31:f3:96:49:68:98: 11:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0C:6D:E1:A3:3E:B5:B5:B1:0D:7B:E6:59:89:39:97:00:D8:42:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/83e056c7-6751-3e7e-aa33-5370a6fbd431.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:05:0a:ef:79:6b:bb:e4:17:0b:bd:11:e0:53:91:60:36:f1: 7f:03:c0:20:f4:c7:63:20:85:1c:80:0c:f9:2d:a2:03:62:89: fa:60:07:43:b9:39:e0:bc:65:00:65:5a:96:a4:e4:52:5d:42: 23:ad:db:52:ad:cc:13:4e:51:ea:ca:2f:8c:42:c2:95:75:c7: e2:d1:d6:1c:a8:76:1a:05:af:cc:59:e5:66:ac:59:18:39:4e: 2f:c2:b0:43:28:e8:6a:b1:0b:04:78:95:21:59:67:55:1c:06: 4c:89:0c:12:1f:f7:d1:ad:23:56:79:9a:ac:44:cc:b6:92:4a: 3d:17:94:40:16:c8:4b:a7:bd:0d:eb:a2:9c:0e:f7:19:c2:fb: 38:b2:42:c2:b2:a6:7c:a1:82:c9:fa:78:49:4f:f9:2d:15:bd: 34:c8:9a:03:88:48:7e:cd:0c:3d:a4:ca:97:6e:84:f4:e3:45: 9a:ce:e5:57:9a:ba:b9:91:d7:d9:bb:05:a0:40:0e:d5:99:90: 4a:1b:e3:be:3e:ee:18:d1:19:a3:2e:62:cf:43:83:f0:49:49: 7a:1e:be:1e:ec:d6:4b:30:c2:d0:d3:cb:68:ca:c9:42:8d:c0: ba:26:fe:61:91:b6:fb:d9:b6:7c:c0:ee:40:28:61:ec:01:17: 86:bb:d1:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlJ7NJx2Frn1A5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk MWYyNzgxMWQtMWY3NC00MTRhLWIyMjYtNGM2NjE5ZWRiNzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMpKa9ga+PG33dbrAVZOQc4UnbM6d7MIYsBp HRVuwHitxFoOUNT4y9tw2KnHOLCrLuElfAObeW7aZ1iEQrADh0Au+h7xfsQs4N8d jpd0Pqfgb/IlDeXQj1jBt0IIJaOwy5/8jv0I6n0PKJpcZVn+wSacMLj9HT2ByltD LAyjG7AlPLr4Q8SdgLr7ZH4UVT2tO3Lg4MV6SPYMyi/2/z0K09ablIjL9dCJg8jl 9nJIPMEQpN2X2ehJsMWriLSPA1/deXfAARrTaGJImx7KDmP4bjeDRMtIkqsXemlF YgdbztXXnC3FZqwCphsnZlvE/GYIG6VWUpRCInEx85ZJaJgRUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcMbeGjPrW1sQ175lmJOZcA2EL0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODNlMDU2YzctNjc1MS0z ZTdlLWFhMzMtNTM3MGE2ZmJkNDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0R30MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANgFCu95a7vkFwu9EeBTkWA28X8DwCD0x2MghRyADPktogNiifpgB0O5 OeC8ZQBlWpak5FJdQiOt21KtzBNOUerKL4xCwpV1x+LR1hyodhoFr8xZ5WasWRg5 Ti/CsEMo6GqxCwR4lSFZZ1UcBkyJDBIf99GtI1Z5mqxEzLaSSj0XlEAWyEunvQ3r opwO9xnC+ziyQsKypnyhgsn6eElP+S0VvTTImgOISH7NDD2kypduhPTjRZrO5Vea urmR19m7BaBADtWZkEob474+7hjRGaMuYs9Dg/BJSXoevh7s1kswwtDTy2jKyUKN wLom/mGRtvvZtnzA7kAoYewBF4a70Vc= -----END CERTIFICATE-----Generated at Sun Apr 27 11:30:29 2025 by rpki-client