$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/87e99bf2-5548-3267-817c-a07659bc6f1d.roa File: 87e99bf2-5548-3267-817c-a07659bc6f1d.roa (raw, json) Hash identifier: ZE6+cuVoR+fjm1HNDkB2djYbGiA8jGfU56OiEC4FDtk= Subject key identifier: DB:A0:CC:C0:09:2E:45:AB:EE:5C:96:18:E4:CD:86:43:ED:E4:AF:42 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499829C731F681DE0EFE492100 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/87e99bf2-5548-3267-817c-a07659bc6f1d.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 209.29.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:c7:31:f6:81:de:0e:fe:49:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=170d9c48-9e73-49fa-83e2-e20fb73875d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fa:ea:4c:89:5b:b7:d6:3e:f4:6d:90:5f:12: e4:14:d3:8f:be:11:ac:22:46:0b:43:d5:47:79:da: 69:e5:33:c6:63:19:d7:ca:c9:b7:e1:d0:c0:43:a3: 72:14:dc:d1:cf:74:81:a0:f9:36:63:fd:94:86:97: 07:4b:8b:51:76:10:df:67:25:93:64:75:e8:10:ba: af:9a:d4:d0:2a:8b:11:f4:42:3e:9a:fb:c9:7e:2e: 8a:66:74:17:3c:41:82:fa:64:db:63:5e:ee:5a:27: 4f:f3:2f:c7:48:18:80:66:bc:1f:60:8d:ea:8e:fd: 57:8e:9b:7a:82:8c:2d:46:a3:f2:87:72:a8:30:e6: 4c:04:59:dc:57:a1:23:76:a0:37:2a:76:c6:e4:72: 45:12:3e:c9:8c:29:b7:78:0a:48:da:3a:97:c0:a1: c2:08:10:1c:2f:4d:a5:86:e8:90:71:a9:29:c5:8b: fa:4c:fc:6b:09:43:ee:d6:7d:fd:74:4d:1b:5f:7d: 1f:8d:bc:f9:1d:fa:85:a8:f0:e4:35:33:e4:bf:6b: c9:d2:37:58:8d:5a:9d:29:bc:0b:48:16:97:e0:8d: a8:fc:46:f7:29:80:34:c3:77:81:47:42:1f:76:f3: 4c:b3:f8:de:21:84:0d:b9:7d:df:6d:2b:e6:8d:f0: a8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A0:CC:C0:09:2E:45:AB:EE:5C:96:18:E4:CD:86:43:ED:E4:AF:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/87e99bf2-5548-3267-817c-a07659bc6f1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:ad:0a:d7:25:6a:f5:de:3d:ea:03:8b:f3:b8:bd:23:d3:27: 61:86:5b:66:55:b9:94:7c:98:11:5d:ea:1c:88:8f:3f:ac:62: eb:4b:8a:46:c7:dd:03:38:58:ba:94:68:4f:01:b2:9e:d8:f1: 9a:42:05:81:2b:c0:a6:82:09:d9:6e:8c:38:0f:89:61:81:0f: 2c:be:8b:2e:1f:0b:0d:2d:82:fa:9b:75:3c:64:a1:32:68:b3: 1e:4f:21:a1:fa:71:91:16:a1:63:08:16:72:4e:fb:27:0d:ad: 5a:a3:20:e2:00:fa:42:e1:5e:0c:b4:a1:98:40:3d:b3:27:a8: 9f:95:02:0b:7a:55:9d:3d:56:13:40:8a:7f:26:f2:d3:43:c8: 61:50:3e:da:7a:27:c7:f4:22:93:1d:0d:8c:81:9b:ab:9c:61: 4b:40:62:1c:0f:b5:c9:8a:ba:54:9a:29:aa:47:df:15:e6:df: d9:e7:2a:ca:9f:c8:4a:92:d8:06:fe:c3:68:ad:1c:3a:34:63: a0:9a:e3:a1:df:27:6f:6c:4c:86:fb:7d:19:e6:d2:29:8d:89: 17:00:11:ef:da:5b:11:45:45:bc:a4:05:09:2d:cc:87:8a:3e: 97:ca:de:35:a6:e0:1b:0a:b0:9a:6f:d4:a4:7c:21:b6:22:d3: 21:df:f9:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKccx9oHeDv5JIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk MTcwZDljNDgtOWU3My00OWZhLTgzZTItZTIwZmI3Mzg3NWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvrqTIlbt9Y+9G2QXxLkFNOPvhGsIkYLQ9VH edpp5TPGYxnXysm34dDAQ6NyFNzRz3SBoPk2Y/2UhpcHS4tRdhDfZyWTZHXoELqv mtTQKosR9EI+mvvJfi6KZnQXPEGC+mTbY17uWidP8y/HSBiAZrwfYI3qjv1Xjpt6 gowtRqPyh3KoMOZMBFncV6EjdqA3KnbG5HJFEj7JjCm3eApI2jqXwKHCCBAcL02l huiQcakpxYv6TPxrCUPu1n39dE0bX30fjbz5HfqFqPDkNTPkv2vJ0jdYjVqdKbwL SBaX4I2o/Eb3KYA0w3eBR0IfdvNMs/jeIYQNuX3fbSvmjfCowQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNugzMAJLkWr7lyWGOTNhkPt5K9CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODdlOTliZjItNTU0OC0z MjY3LTgxN2MtYTA3NjU5YmM2ZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0R1CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALWtCtclavXePeoDi/O4vSPTJ2GGW2ZVuZR8mBFd6hyIjz+sYutLikbH 3QM4WLqUaE8Bsp7Y8ZpCBYErwKaCCdlujDgPiWGBDyy+iy4fCw0tgvqbdTxkoTJo sx5PIaH6cZEWoWMIFnJO+ycNrVqjIOIA+kLhXgy0oZhAPbMnqJ+VAgt6VZ09VhNA in8m8tNDyGFQPtp6J8f0IpMdDYyBm6ucYUtAYhwPtcmKulSaKapH3xXm39nnKsqf yEqS2Ab+w2itHDo0Y6Ca46HfJ29sTIb7fRnm0imNiRcAEe/aWxFFRbykBQktzIeK PpfK3jWm4BsKsJpv1KR8IbYi0yHf+TY= -----END CERTIFICATE-----Generated at Mon Apr 28 02:31:23 2025 by rpki-client