$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/88f8b444-dc1b-374c-844b-0bfe001c8fb5.roa File: 88f8b444-dc1b-374c-844b-0bfe001c8fb5.roa (raw, json) Hash identifier: eKKXphjc8AfRX2jDzV7mv6fNFlx25iiwR9y3gLcAjUc= Subject key identifier: B9:25:66:78:40:35:86:D1:18:05:72:B9:89:48:FE:B8:A4:63:52:C9 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858498CFF02219AB7A403978F9D00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/88f8b444-dc1b-374c-844b-0bfe001c8fb5.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 21723 IP address blocks: 209.53.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:02:21:9a:b7:a4:03:97:8f:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=86b22aae-cf7d-4bab-90e6-176534ae1dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c9:79:c7:bc:ac:c5:92:64:d9:2c:84:92:6e: 1a:50:37:34:ef:84:fd:e6:74:6a:41:ce:73:cb:78: 6f:48:50:e4:18:99:32:6c:cc:53:dc:16:e9:46:32: 11:3a:57:ec:fe:0f:c2:7a:9b:ea:9d:c4:09:58:d5: 93:ae:3c:b7:5a:15:38:57:13:6a:3b:ef:2b:e7:b3: 8c:60:c8:ef:3e:3a:ac:7e:53:f3:98:6a:95:24:48: b7:33:df:70:91:77:f1:80:bb:8b:f1:5d:9f:11:60: e9:57:ce:0f:48:d6:bf:5a:f4:96:08:f9:3b:5d:0a: da:c6:45:aa:4e:40:e5:b2:b3:56:ac:ec:ab:ac:8b: e8:89:b4:c2:33:64:1f:20:6c:c5:a2:c9:8e:a2:74: 86:a7:f0:56:95:59:78:91:83:4e:e1:86:07:c1:a0: 03:ab:e6:25:d5:5e:66:62:25:10:5c:64:67:ca:50: f2:c5:66:d0:c7:00:7f:fc:1f:c6:98:10:d4:28:c0: ea:04:5f:0e:ae:60:b1:e4:82:92:43:22:e9:d1:c3: db:fa:1f:f2:72:99:7a:d2:74:11:09:3e:10:fd:a5: c7:67:e9:61:0f:99:06:ee:65:77:17:4e:4f:61:0d: d3:23:8a:83:dc:6d:90:aa:0d:4b:d9:7f:4c:a7:b4: cb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:25:66:78:40:35:86:D1:18:05:72:B9:89:48:FE:B8:A4:63:52:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/88f8b444-dc1b-374c-844b-0bfe001c8fb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:8a:ff:a4:86:5c:98:36:dd:7e:9b:89:43:a0:5c:82:4a:34: 65:22:18:78:dd:a1:bb:0c:78:9b:2e:35:76:06:f2:63:d4:16: c5:62:ed:d1:34:7f:ce:29:ee:af:3d:e5:d2:8a:b2:5e:7a:45: a3:83:e7:1b:c2:93:34:8a:f5:65:34:94:37:65:64:9c:a5:cd: 1b:8b:ab:37:06:40:51:73:00:b3:43:83:a6:e0:9f:61:cc:43: 0e:b2:31:59:09:e5:7b:20:e6:c0:68:a2:8f:84:ad:d2:52:d6: 25:af:95:66:80:5a:7c:e3:9b:c2:21:a2:07:ab:40:d3:7a:cc: 21:3f:a8:6e:f3:1f:6c:a6:f1:14:c8:c8:73:34:e3:2e:55:88: d1:1e:60:ac:aa:84:47:53:31:3f:84:b2:a8:52:f9:39:d3:44: c5:bf:76:08:e0:88:fc:4b:d7:26:e0:e7:89:68:8b:4c:55:30: 77:b3:86:f6:54:aa:87:ff:97:8a:dc:6a:a4:0d:d7:6d:1f:c8: 0a:22:60:78:f7:a9:c0:22:7c:38:95:0e:2e:9d:d3:74:bc:3e: fc:8a:a5:62:4f:11:25:07:aa:b2:89:e7:c6:02:56:61:17:74: 46:af:4b:79:41:3e:3c:8d:d1:70:56:d6:74:7d:59:d9:96:59: 6e:a4:45:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/wIhmrekA5ePnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk ODZiMjJhYWUtY2Y3ZC00YmFiLTkwZTYtMTc2NTM0YWUxZGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8l5x7ysxZJk2SyEkm4aUDc074T95nRqQc5z y3hvSFDkGJkybMxT3BbpRjIROlfs/g/CepvqncQJWNWTrjy3WhU4VxNqO+8r57OM YMjvPjqsflPzmGqVJEi3M99wkXfxgLuL8V2fEWDpV84PSNa/WvSWCPk7XQraxkWq TkDlsrNWrOyrrIvoibTCM2QfIGzFosmOonSGp/BWlVl4kYNO4YYHwaADq+Yl1V5m YiUQXGRnylDyxWbQxwB//B/GmBDUKMDqBF8OrmCx5IKSQyLp0cPb+h/ycpl60nQR CT4Q/aXHZ+lhD5kG7mV3F05PYQ3TI4qD3G2Qqg1L2X9Mp7TLwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLklZnhANYbRGAVyuYlI/rikY1LJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODhmOGI0NDQtZGMxYi0z NzRjLTg0NGItMGJmZTAwMWM4ZmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TWqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+K/6SGXJg23X6biUOgXIJKNGUiGHjdobsMeJsuNXYG8mPUFsVi7dE0 f84p7q895dKKsl56RaOD5xvCkzSK9WU0lDdlZJylzRuLqzcGQFFzALNDg6bgn2HM Qw6yMVkJ5Xsg5sBooo+ErdJS1iWvlWaAWnzjm8IhogerQNN6zCE/qG7zH2ym8RTI yHM04y5ViNEeYKyqhEdTMT+EsqhS+TnTRMW/dgjgiPxL1ybg54loi0xVMHezhvZU qof/l4rcaqQN120fyAoiYHj3qcAifDiVDi6d03S8PvyKpWJPESUHqrKJ58YCVmEX dEavS3lBPjyN0XBW1nR9WdmWWW6kRfQ= -----END CERTIFICATE-----Generated at Tue Apr 29 19:54:46 2025 by rpki-client