$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ae662cba-3801-3b72-94e1-576c6050fea2.roa File: ae662cba-3801-3b72-94e1-576c6050fea2.roa (raw, json) Hash identifier: HR8javjlEvgMVCUuW9Du92Ma83Xns8piqQU/dO7zSMk= Subject key identifier: 5E:3E:95:67:DA:97:E1:76:FA:ED:54:FA:DE:13:4A:BE:E5:BB:81:FF Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499DBF250F586AFC0DEB6DB380 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ae662cba-3801-3b72-94e1-576c6050fea2.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 852 IP address blocks: 209.52.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:25:0f:58:6a:fc:0d:eb:6d:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=739974c1-88f0-454e-a455-91230a8dc8db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fa:92:ec:9f:f5:42:13:22:b9:62:99:df:c2: b7:6a:8c:1b:8f:4a:f5:97:97:81:bd:43:bc:b9:11: 08:f3:2d:29:93:3d:c4:b2:b0:c0:65:2f:4b:13:14: ca:71:fe:bf:de:99:19:81:46:e3:0a:e7:5e:38:9a: 8e:37:f7:b3:98:29:51:26:f8:0e:b7:9f:96:ae:35: fa:b7:fc:39:fc:96:ae:5c:b2:bb:7d:e0:53:26:e6: 5e:a1:f6:7b:a2:55:77:af:44:12:98:14:45:b3:3b: 55:f4:23:0d:3c:83:fd:ab:bd:50:c9:65:5c:f5:8c: 61:56:1d:b2:e6:d6:44:82:da:c1:eb:0f:da:8c:2e: c8:89:90:c2:a0:cc:15:9b:91:d2:11:4e:f1:79:40: a1:31:a5:fc:07:5b:e4:4c:a2:f6:89:6e:45:36:66: 36:36:ab:db:c7:7d:b0:ab:0e:f8:b5:59:a7:ad:43: 16:d1:20:52:98:23:ff:2d:35:2f:e6:70:14:32:18: 0f:f3:53:27:7e:e6:7f:17:fb:00:be:b8:e2:ea:31: 22:c9:c0:c4:fb:5b:cd:01:28:c0:2a:01:d2:0a:d9: 00:08:83:6e:23:8a:11:4d:fe:58:0f:ab:5a:05:ea: 1f:23:37:af:17:80:c0:76:68:04:a7:45:fe:3e:ed: 52:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:3E:95:67:DA:97:E1:76:FA:ED:54:FA:DE:13:4A:BE:E5:BB:81:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ae662cba-3801-3b72-94e1-576c6050fea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:57:ba:51:a2:34:f1:76:00:32:c7:2d:24:96:d0:0b:5f:d7: ee:54:6c:98:16:d4:99:20:15:87:52:53:98:05:ab:73:73:d6: 3b:3b:ef:21:4e:db:d2:bc:83:16:d3:18:69:58:dc:58:f6:1d: b4:97:a6:51:9a:57:9e:85:1a:00:84:31:e2:92:1a:02:f8:96: 60:4f:4b:72:0b:6c:63:ab:37:f0:f3:40:57:d8:86:bb:58:6a: 79:7c:94:33:23:ad:82:e3:a8:7e:63:49:50:a2:08:6b:00:80: 16:3f:55:a9:d3:fe:93:c0:e9:ca:a1:be:12:b1:42:5f:8a:b2: bf:d2:fd:c1:1e:15:08:33:f9:b8:2f:d1:91:ce:47:c4:5f:11: d1:ec:a1:3a:fb:57:67:1b:b0:d1:ed:9c:bf:0d:46:bb:0b:4c: 2e:0a:19:e8:d8:d6:2e:4c:ab:00:a0:00:22:15:a4:99:b0:35: 1e:1a:1f:8d:57:cc:2f:4a:2c:10:b8:71:ff:40:8a:95:5d:c1: 02:1e:41:a5:84:9f:f4:f9:66:10:8d:10:30:2d:77:13:1f:ab: d6:e0:91:22:e2:83:06:c6:3b:e0:87:10:df:ee:56:f7:ee:64: 5e:f6:c8:58:1f:cb:c5:07:b6:64:ea:68:c9:94:9e:4b:7e:f1: 9c:39:0f:04 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmdvyUPWGr8Detts4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk NzM5OTc0YzEtODhmMC00NTRlLWE0NTUtOTEyMzBhOGRjOGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPqS7J/1QhMiuWKZ38K3aowbj0r1l5eBvUO8 uREI8y0pkz3EsrDAZS9LExTKcf6/3pkZgUbjCudeOJqON/ezmClRJvgOt5+WrjX6 t/w5/JauXLK7feBTJuZeofZ7olV3r0QSmBRFsztV9CMNPIP9q71QyWVc9YxhVh2y 5tZEgtrB6w/ajC7IiZDCoMwVm5HSEU7xeUChMaX8B1vkTKL2iW5FNmY2Nqvbx32w qw74tVmnrUMW0SBSmCP/LTUv5nAUMhgP81MnfuZ/F/sAvrji6jEiycDE+1vNASjA KgHSCtkACINuI4oRTf5YD6taBeofIzevF4DAdmgEp0X+Pu1S9QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFF4+lWfal+F2+u1U+t4TSr7lu4H/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYWU2NjJjYmEtMzgwMS0z YjcyLTk0ZTEtNTc2YzYwNTBmZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMB0TQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAule6UaI08XYAMsctJJbQC1/X7lRsmBbUmSAVh1JTmAWrc3PWOzvvIU7b 0ryDFtMYaVjcWPYdtJemUZpXnoUaAIQx4pIaAviWYE9LcgtsY6s38PNAV9iGu1hq eXyUMyOtguOofmNJUKIIawCAFj9VqdP+k8DpyqG+ErFCX4qyv9L9wR4VCDP5uC/R kc5HxF8R0eyhOvtXZxuw0e2cvw1GuwtMLgoZ6NjWLkyrAKAAIhWkmbA1HhofjVfM L0osELhx/0CKlV3BAh5BpYSf9PlmEI0QMC13Ex+r1uCRIuKDBsY74IcQ3+5W9+5k XvbIWB/LxQe2ZOpoyZSeS37xnDkPBA== -----END CERTIFICATE-----Generated at Sun Apr 27 00:16:33 2025 by rpki-client