$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9bc07377-9909-342b-81e9-b1529eb06330.roa File: 9bc07377-9909-342b-81e9-b1529eb06330.roa (raw, json) Hash identifier: hFQN6Oavu/96itDGzX491l0SYk7dO1uLL0/JG0tnTiw= Subject key identifier: 5B:86:66:BC:E0:DB:9C:45:ED:27:E9:6A:2F:7B:44:7F:7C:0B:60:57 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584988CF20E0547B9EF3E4168F00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9bc07377-9909-342b-81e9-b1529eb06330.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 25668 IP address blocks: 209.53.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:20:e0:54:7b:9e:f3:e4:16:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=e50015e6-9084-49bb-9dca-c23377f2e9b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:60:b3:84:f1:02:bc:29:eb:b0:9d:9f:88:15: 62:43:e3:a6:49:79:09:91:a8:e1:95:c2:f2:21:8b: ae:1e:04:19:b4:96:35:64:34:fe:5d:04:f4:08:ca: 51:3b:f5:11:25:59:07:21:f0:aa:77:ea:72:e7:b7: 3a:64:9a:04:29:04:f3:1c:23:bd:b8:bf:2f:27:97: 83:76:a6:66:f1:e6:39:92:c7:dd:c8:c2:f5:9c:4c: f6:a5:e0:2c:f9:c2:27:3a:60:bc:26:0e:6b:50:c4: 6f:4f:04:47:c8:8c:70:22:f5:71:d3:8f:dd:27:27: 47:4e:87:33:19:ed:e0:6e:6d:71:4d:1d:95:85:4c: 82:79:a4:e0:ae:4d:4b:0e:47:31:30:b7:5a:c3:d3: 47:5f:1d:f9:a0:2c:b0:03:59:aa:0a:e2:17:57:76: f9:3e:cd:67:85:d9:52:ef:3f:70:27:06:20:8a:d3: d3:75:a1:39:5e:1a:4c:a3:60:cd:ae:6c:26:fb:e4: cd:28:c9:f7:d2:58:24:04:96:80:b2:f7:0b:57:e2: b1:21:4b:82:12:66:f3:b4:f7:bd:68:7e:42:31:e6: 76:b9:9b:b6:fe:2b:a1:39:f6:5b:19:cd:a0:ff:14: f4:99:ae:e6:ea:04:b8:ed:7b:f2:ee:81:22:51:ba: 89:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:86:66:BC:E0:DB:9C:45:ED:27:E9:6A:2F:7B:44:7F:7C:0B:60:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9bc07377-9909-342b-81e9-b1529eb06330.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:cf:48:6a:04:08:c5:6a:1c:3f:fd:81:6f:e5:89:a7:dd:c7: 55:31:98:54:16:01:29:ab:a9:ee:b4:1d:18:3f:bc:98:cd:d2: fc:5b:f1:03:df:ef:39:18:78:3d:28:e4:8c:98:20:4c:0c:3b: 08:cc:0b:5e:f5:9b:8d:78:f0:05:97:58:63:f8:ac:ee:b4:da: f4:ff:57:8c:98:3d:83:80:cd:23:f2:76:f1:ef:ef:be:0a:d7: 35:34:5f:aa:46:84:e0:86:b4:2d:f2:9c:9f:7b:c7:24:53:b8: 58:88:81:14:46:d8:ea:93:f4:59:38:0f:e3:e0:40:d9:72:cb: 08:01:2c:f5:80:02:f5:35:95:0f:82:73:d2:e7:6d:ee:c7:48: 53:94:4e:24:31:9f:8a:8d:3c:54:75:ef:20:6a:3f:66:c2:05: 01:17:d9:c5:4a:2e:63:ef:75:9b:24:e2:2e:a4:05:67:a5:a4: 97:fc:00:bb:c2:7e:37:10:4c:4c:d4:f8:f2:26:9f:a1:93:58: f0:67:eb:ef:11:5c:fb:69:a7:50:11:58:b0:80:b8:5e:7b:60: b5:08:69:7e:19:9f:19:2c:f8:31:98:ef:4e:31:f4:e6:51:dd: e9:df:7b:28:cc:59:30:3e:cd:6a:ad:9e:12:47:4f:22:b2:5c: 11:f2:b7:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzyDgVHue8+QWjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk ZTUwMDE1ZTYtOTA4NC00OWJiLTlkY2EtYzIzMzc3ZjJlOWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGCzhPECvCnrsJ2fiBViQ+OmSXkJkajhlcLy IYuuHgQZtJY1ZDT+XQT0CMpRO/URJVkHIfCqd+py57c6ZJoEKQTzHCO9uL8vJ5eD dqZm8eY5ksfdyML1nEz2peAs+cInOmC8Jg5rUMRvTwRHyIxwIvVx04/dJydHTocz Ge3gbm1xTR2VhUyCeaTgrk1LDkcxMLdaw9NHXx35oCywA1mqCuIXV3b5Ps1nhdlS 7z9wJwYgitPTdaE5XhpMo2DNrmwm++TNKMn30lgkBJaAsvcLV+KxIUuCEmbztPe9 aH5CMeZ2uZu2/iuhOfZbGc2g/xT0ma7m6gS47Xvy7oEiUbqJ2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuGZrzg25xF7Sfpai97RH98C2BXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOWJjMDczNzctOTkwOS0z NDJiLTgxZTktYjE1MjllYjA2MzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0TXEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHPSGoECMVqHD/9gW/liafdx1UxmFQWASmrqe60HRg/vJjN0vxb8QPf 7zkYeD0o5IyYIEwMOwjMC171m4148AWXWGP4rO602vT/V4yYPYOAzSPydvHv774K 1zU0X6pGhOCGtC3ynJ97xyRTuFiIgRRG2OqT9Fk4D+PgQNlyywgBLPWAAvU1lQ+C c9Lnbe7HSFOUTiQxn4qNPFR17yBqP2bCBQEX2cVKLmPvdZsk4i6kBWelpJf8ALvC fjcQTEzU+PImn6GTWPBn6+8RXPtpp1ARWLCAuF57YLUIaX4Znxks+DGY704x9OZR 3enfeyjMWTA+zWqtnhJHTyKyXBHytzA= -----END CERTIFICATE-----Generated at Sun Apr 27 04:18:04 2025 by rpki-client