$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/97804e67-b515-3bb5-98a2-f8a309ebc23e.roa File: 97804e67-b515-3bb5-98a2-f8a309ebc23e.roa (raw, json) Hash identifier: GPJvJuYrriEQwKt/96o8PrpuSAF9Sr4lkgoDt986d58= Subject key identifier: 95:32:8B:5F:B1:00:10:D4:57:80:12:9A:FB:98:AF:B7:43:8A:50:E3 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858498CFF0A9409AB8C32CBC6E420 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/97804e67-b515-3bb5-98a2-f8a309ebc23e.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 19905 IP address blocks: 209.52.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:0a:94:09:ab:8c:32:cb:c6:e4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=c1f56fc6-c23f-49f8-b148-8a0bd7c2c6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ac:44:d7:35:63:67:da:e8:85:a0:a9:81:7c: 55:7d:d4:b6:55:6e:f0:9c:6e:25:2d:93:bd:fa:3a: b1:f6:b0:79:62:df:b4:15:58:97:29:b4:c5:50:8b: 23:dd:3e:9d:b1:0f:54:98:00:53:51:fe:31:ad:78: 1d:13:2b:d8:5a:75:90:29:3b:32:c4:64:93:f9:87: ba:8b:2b:c1:70:21:d0:df:05:ab:18:c5:27:b9:e8: f3:ea:4f:63:5e:00:cd:b7:e2:4e:32:5e:79:e7:2f: 6d:77:5e:74:12:82:0b:01:6a:6c:ce:3a:c0:a2:49: e1:cd:c3:e4:47:71:08:4e:51:c6:1a:32:35:cb:b5: eb:e1:03:57:ac:7b:8f:93:b7:e8:7d:bc:21:f3:52: 76:c8:e1:98:d7:ba:7d:bb:07:78:3e:ab:9d:e4:06: c4:03:3e:79:61:4b:16:32:7e:16:06:33:ab:8f:86: 53:a1:ce:4f:ed:dd:12:64:2d:5f:66:ef:0f:2a:1e: 5a:23:a7:92:d8:ce:b1:9d:47:97:44:97:57:09:87: da:cf:d0:8d:66:a7:fb:87:23:e9:8c:74:d1:b5:ed: 82:7c:02:eb:3b:34:21:58:a7:2b:8d:cf:fd:88:ed: 6e:1e:dd:57:5a:7f:87:21:6e:30:32:e7:d4:f3:00: 3a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:32:8B:5F:B1:00:10:D4:57:80:12:9A:FB:98:AF:B7:43:8A:50:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/97804e67-b515-3bb5-98a2-f8a309ebc23e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:b7:70:b2:ae:12:de:5a:88:59:26:35:66:28:75:6f:a0:c8: 73:7f:82:e7:65:25:87:df:aa:4b:37:d7:dd:dd:eb:09:3f:28: 85:90:29:56:cd:cb:53:4b:f1:c1:dc:6d:f4:cc:db:2d:8a:fc: d7:9a:b6:72:2c:75:b7:6e:86:f5:b2:0c:5e:ff:b2:6e:31:c4: 75:49:a6:bd:5a:97:e5:6b:dd:f9:c6:1d:22:b1:fb:d6:23:cd: 4a:cd:6f:04:ff:8c:99:81:f4:e2:f2:07:f7:9c:19:a0:0a:b5: 1e:17:de:aa:07:7e:b7:e3:fd:0e:c5:b3:87:70:80:de:66:b1: 26:09:a2:62:ce:bf:5c:01:10:9e:15:ec:9d:d8:c4:ad:eb:03: 37:1f:9c:fc:67:83:b9:e1:91:9d:ae:f8:4c:1e:09:0b:9b:df: 73:5c:38:8b:93:6d:0b:e6:7a:c5:81:62:36:d1:4b:41:c5:c8: 2c:94:0e:34:16:76:65:39:69:d5:33:75:e6:e2:58:72:57:6e: 02:82:f8:a4:2f:e2:f1:e7:e1:bd:82:ef:f5:1e:bc:89:ce:e3: 6b:21:8d:80:80:4d:50:7b:44:3a:92:5b:7f:c0:e0:d0:08:26: 2e:27:4c:2d:8b:36:51:8f:a3:59:e9:47:2e:72:72:38:6f:e8: 45:b7:47:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/wqUCauMMsvG5CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk YzFmNTZmYzYtYzIzZi00OWY4LWIxNDgtOGEwYmQ3YzJjNmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKxE1zVjZ9rohaCpgXxVfdS2VW7wnG4lLZO9 +jqx9rB5Yt+0FViXKbTFUIsj3T6dsQ9UmABTUf4xrXgdEyvYWnWQKTsyxGST+Ye6 iyvBcCHQ3wWrGMUnuejz6k9jXgDNt+JOMl555y9td150EoILAWpszjrAoknhzcPk R3EITlHGGjI1y7Xr4QNXrHuPk7fofbwh81J2yOGY17p9uwd4Pqud5AbEAz55YUsW Mn4WBjOrj4ZToc5P7d0SZC1fZu8PKh5aI6eS2M6xnUeXRJdXCYfaz9CNZqf7hyPp jHTRte2CfALrOzQhWKcrjc/9iO1uHt1XWn+HIW4wMufU8wA69QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUyi1+xABDUV4ASmvuYr7dDilDjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOTc4MDRlNjctYjUxNS0z YmI1LTk4YTItZjhhMzA5ZWJjMjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TS4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJW3cLKuEt5aiFkmNWYodW+gyHN/gudlJYffqks3193d6wk/KIWQKVbN y1NL8cHcbfTM2y2K/NeatnIsdbduhvWyDF7/sm4xxHVJpr1al+Vr3fnGHSKx+9Yj zUrNbwT/jJmB9OLyB/ecGaAKtR4X3qoHfrfj/Q7Fs4dwgN5msSYJomLOv1wBEJ4V 7J3YxK3rAzcfnPxng7nhkZ2u+EweCQub33NcOIuTbQvmesWBYjbRS0HFyCyUDjQW dmU5adUzdebiWHJXbgKC+KQv4vHn4b2C7/UevInO42shjYCATVB7RDqSW3/A4NAI Ji4nTC2LNlGPo1npRy5ycjhv6EW3R7g= -----END CERTIFICATE-----Generated at Sat Apr 26 12:55:44 2025 by rpki-client