$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a61cbd4d-6cea-32bd-9c67-7b13bf2c148a.roa File: a61cbd4d-6cea-32bd-9c67-7b13bf2c148a.roa (raw, json) Hash identifier: KcTbPEi72iJGj9RCpfKHGp+haijYX7INA71k0wbRtRA= Subject key identifier: B2:65:A0:27:15:EE:8B:BA:EF:49:F1:2E:CF:26:C5:7C:E1:59:29:2B Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499AF4748EF64FC56DA52E1480 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a61cbd4d-6cea-32bd-9c67-7b13bf2c148a.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 209.171.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:74:8e:f6:4f:c5:6d:a5:2e:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=0a588b29-5f4a-4175-b0d9-444d6d0e851d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:17:de:5b:51:89:ce:97:a6:2b:80:cd:ff:2e: a7:74:05:d2:50:4a:af:d9:5e:7e:2f:f6:f9:49:01: dc:d8:43:48:49:b6:f7:c0:8a:a0:eb:5a:dc:62:98: be:c8:8c:48:54:55:29:02:30:1a:ba:11:17:85:83: 88:1a:d6:47:10:62:ab:30:68:1f:5e:96:bb:d2:bf: 64:71:7a:c1:8a:db:c8:81:ec:04:f7:43:b7:48:41: bc:38:c7:a9:c6:d3:b3:a6:e8:ff:d2:e3:29:31:c0: 80:c0:ec:5d:dc:35:b6:3e:9b:c5:99:68:aa:fe:ee: cb:14:40:d3:97:7f:04:69:81:73:34:12:ab:c6:3b: 8a:33:00:56:84:ac:92:6a:4f:6d:89:85:4d:fe:35: 0c:ae:e6:55:e9:1a:89:01:93:e7:b2:ac:68:d9:14: c0:9c:10:ef:34:53:ee:45:0f:ee:a9:7a:a1:cc:ea: c6:cb:4f:a7:e2:c5:70:3a:83:7f:6b:0d:6c:ba:78: cc:c4:3d:ce:61:33:99:e1:50:bb:a9:b0:73:c3:bc: d3:c7:32:0e:ad:be:7d:a7:9e:19:b1:f4:90:51:92: 00:20:43:4d:e8:63:ed:3d:9a:98:6a:e2:8d:3d:93: 31:c5:42:f0:51:d9:4e:89:e8:cc:a5:7f:03:a0:5a: 97:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:65:A0:27:15:EE:8B:BA:EF:49:F1:2E:CF:26:C5:7C:E1:59:29:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a61cbd4d-6cea-32bd-9c67-7b13bf2c148a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.171.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:19:5d:90:68:7b:4c:e2:3e:d1:39:4b:77:e0:8a:7f:1b:d2: 93:8d:73:c3:69:00:94:63:65:ee:8b:8b:a5:09:85:25:89:44: ba:d1:52:ee:86:59:4f:ea:71:f2:37:7e:99:ca:99:05:ec:e4: de:52:a4:f3:13:8d:26:32:cb:ba:42:4f:ee:50:03:9e:e8:71: 15:4e:76:3b:1c:60:d5:d7:bf:f8:77:8c:a7:ee:ea:42:b8:cc: 5c:c5:13:6b:b5:ba:f3:a9:ab:ed:46:eb:f5:b9:f5:07:2a:bf: 4d:a6:23:98:93:b1:82:e7:d9:f4:fb:fc:41:c2:be:23:19:69: 23:08:b7:07:10:a4:47:f2:71:93:a8:1e:09:c2:82:1c:89:43: b0:58:eb:ae:c1:d1:65:6f:ac:00:f8:52:ba:b6:21:0e:06:ea: e7:50:3e:6b:79:d6:65:e1:70:4a:56:a9:4e:7b:c0:18:ac:96: 41:3b:85:67:75:37:89:db:07:9b:51:c3:58:bd:f1:ed:3b:64: 40:c5:63:1d:12:1d:3a:33:ad:b0:b6:a0:73:41:61:53:f7:06: cd:61:44:fd:19:73:a8:31:29:f2:8c:48:75:56:09:ec:16:ee: b1:e4:41:3c:e2:93:f2:b3:3e:07:be:67:52:b7:29:7f:2a:01: b2:1a:a4:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9HSO9k/FbaUuFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MGE1ODhiMjktNWY0YS00MTc1LWIwZDktNDQ0ZDZkMGU4NTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hfeW1GJzpemK4DN/y6ndAXSUEqv2V5+L/b5 SQHc2ENISbb3wIqg61rcYpi+yIxIVFUpAjAauhEXhYOIGtZHEGKrMGgfXpa70r9k cXrBitvIgewE90O3SEG8OMepxtOzpuj/0uMpMcCAwOxd3DW2PpvFmWiq/u7LFEDT l38EaYFzNBKrxjuKMwBWhKySak9tiYVN/jUMruZV6RqJAZPnsqxo2RTAnBDvNFPu RQ/uqXqhzOrGy0+n4sVwOoN/aw1sunjMxD3OYTOZ4VC7qbBzw7zTxzIOrb59p54Z sfSQUZIAIENN6GPtPZqYauKNPZMxxULwUdlOiejMpX8DoFqXEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJloCcV7ou670nxLs8mxXzhWSkrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYTYxY2JkNGQtNmNlYS0z MmJkLTljNjctN2IxM2JmMmMxNDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0asQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcZXZBoe0ziPtE5S3fgin8b0pONc8NpAJRjZe6Li6UJhSWJRLrRUu6G WU/qcfI3fpnKmQXs5N5SpPMTjSYyy7pCT+5QA57ocRVOdjscYNXXv/h3jKfu6kK4 zFzFE2u1uvOpq+1G6/W59Qcqv02mI5iTsYLn2fT7/EHCviMZaSMItwcQpEfycZOo HgnCghyJQ7BY667B0WVvrAD4Urq2IQ4G6udQPmt51mXhcEpWqU57wBislkE7hWd1 N4nbB5tRw1i98e07ZEDFYx0SHTozrbC2oHNBYVP3Bs1hRP0Zc6gxKfKMSHVWCewW 7rHkQTzik/KzPge+Z1K3KX8qAbIapIw= -----END CERTIFICATE-----Generated at Sun Apr 27 00:16:14 2025 by rpki-client