$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/96f9a3d4-5ecc-3130-b037-1af04b1e15a6.roa File: 96f9a3d4-5ecc-3130-b037-1af04b1e15a6.roa (raw, json) Hash identifier: 0uiqZdZgSsyEpNcibrZOopqoyYf80ROMgAQWb1K6RBo= Subject key identifier: E5:43:4E:51:D1:1C:1C:5E:33:63:04:39:A9:2F:3E:0F:E2:98:30:EC Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499DBF3860E3DE658726312BCE Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/96f9a3d4-5ecc-3130-b037-1af04b1e15a6.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 395096 IP address blocks: 209.53.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:38:60:e3:de:65:87:26:31:2b:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=106fe2ac-83e2-4195-a122-06dba35c7863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6f:5a:3f:54:cc:a1:ce:ad:df:84:d6:6c:d1: 95:2b:dd:77:4f:33:a6:45:66:24:7d:e6:4f:22:04: fd:45:b2:7f:5d:01:14:80:61:b8:a2:13:c9:6a:05: 84:91:63:7b:39:44:82:75:62:c3:e1:87:b7:f7:9c: 98:01:42:19:b7:9c:50:33:c0:97:06:7f:5f:de:f5: d8:69:5a:5d:cd:ae:d7:da:7e:57:3e:96:8b:03:97: 99:87:3c:ba:17:0b:a0:13:7c:af:0e:c8:a5:04:ea: 5e:ed:b4:70:9a:71:16:73:3b:14:53:b0:de:03:b6: 53:af:d1:bf:c3:3c:93:89:d2:7e:8c:98:11:fc:f1: 57:df:60:14:32:f7:64:e1:dc:a2:73:1d:c5:02:1b: 33:5e:be:c9:fe:8a:ca:48:0d:14:6e:11:82:01:f7: 63:92:5f:d1:96:54:6c:75:fe:25:0a:84:4b:70:dd: d8:a1:19:12:fa:ac:1a:f6:c2:f1:ef:a5:8f:ea:cd: 99:80:41:8a:2d:dd:3a:7f:28:6d:53:77:63:92:49: 90:4a:d7:b5:10:bd:ba:c8:d8:68:43:bf:b4:45:4f: 09:c7:be:e0:d7:9f:f7:4e:8d:f9:5d:35:5f:7a:6a: 5e:67:23:0e:92:c6:f6:9e:c1:35:d0:77:b0:ba:7d: b3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:43:4E:51:D1:1C:1C:5E:33:63:04:39:A9:2F:3E:0F:E2:98:30:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/96f9a3d4-5ecc-3130-b037-1af04b1e15a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:bc:5a:29:d8:32:c8:43:f4:76:b0:58:b6:8c:1f:01:95:20: 96:1b:69:93:8a:ec:99:ed:7b:30:35:8e:f6:62:ed:0d:be:64: b0:9d:be:82:72:db:2a:e5:ca:04:8d:cf:20:9d:de:ba:05:c1: c1:0c:9d:f7:36:3f:67:b0:91:68:50:67:af:d6:ae:8b:dd:7f: c6:a6:7c:78:02:8a:df:28:cb:6e:96:e7:ba:7d:e1:d6:8d:57: 7e:5f:f8:6b:72:f4:aa:eb:9c:32:97:3b:5c:f8:e7:69:85:8c: 69:f5:2c:e6:e3:df:a9:cd:55:30:b8:95:8a:72:1f:d5:98:a3: 04:74:f8:64:c4:9d:27:43:15:02:7c:7c:cf:be:48:4e:3d:b4: e8:8e:7f:c2:36:81:85:18:de:a1:5c:8e:c0:e0:84:2c:c1:c1: cc:62:49:f3:32:93:e6:f3:e4:ad:be:88:56:1e:a0:70:de:ac: 55:ad:33:17:cd:cb:61:8c:2f:a5:02:49:97:71:57:ee:b8:51: c0:56:99:1f:c9:52:7e:e8:b7:f2:fb:f9:a9:b0:99:de:6a:1c: bb:a4:2e:43:33:f8:c1:d5:39:55:2e:b2:0b:6e:4d:fc:a0:3c: 1b:a6:09:47:43:03:85:c5:cb:6e:ac:cb:cc:28:0e:53:e4:6e: 0c:9f:da:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzhg495lhyYxK84wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MTA2ZmUyYWMtODNlMi00MTk1LWExMjItMDZkYmEzNWM3ODYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4G9aP1TMoc6t34TWbNGVK913TzOmRWYkfeZP IgT9RbJ/XQEUgGG4ohPJagWEkWN7OUSCdWLD4Ye395yYAUIZt5xQM8CXBn9f3vXY aVpdza7X2n5XPpaLA5eZhzy6FwugE3yvDsilBOpe7bRwmnEWczsUU7DeA7ZTr9G/ wzyTidJ+jJgR/PFX32AUMvdk4dyicx3FAhszXr7J/orKSA0UbhGCAfdjkl/RllRs df4lCoRLcN3YoRkS+qwa9sLx76WP6s2ZgEGKLd06fyhtU3djkkmQSte1EL26yNho Q7+0RU8Jx77g15/3To35XTVfempeZyMOksb2nsE10Hewun2zlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVDTlHRHBxeM2MEOakvPg/imDDsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOTZmOWEzZDQtNWVjYy0z MTMwLWIwMzctMWFmMDRiMWUxNWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TVxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+8WinYMshD9HawWLaMHwGVIJYbaZOK7JntezA1jvZi7Q2+ZLCdvoJy 2yrlygSNzyCd3roFwcEMnfc2P2ewkWhQZ6/Wrovdf8amfHgCit8oy26W57p94daN V35f+Gty9KrrnDKXO1z452mFjGn1LObj36nNVTC4lYpyH9WYowR0+GTEnSdDFQJ8 fM++SE49tOiOf8I2gYUY3qFcjsDghCzBwcxiSfMyk+bz5K2+iFYeoHDerFWtMxfN y2GML6UCSZdxV+64UcBWmR/JUn7ot/L7+amwmd5qHLukLkMz+MHVOVUusgtuTfyg PBumCUdDA4XFy26sy8woDlPkbgyf2mA= -----END CERTIFICATE-----Generated at Sun Apr 27 20:17:30 2025 by rpki-client