$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bca291d0-d607-33d2-a2ce-47c04785d564.roa File: bca291d0-d607-33d2-a2ce-47c04785d564.roa (raw, json) Hash identifier: dmoXLA2AZ9glfUJ8tWkHxRdahpRM18tou3gEZAZXC6w= Subject key identifier: 9D:97:AB:01:C1:DF:84:82:1A:8A:F0:3E:5A:EC:90:B9:BE:20:0C:17 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499AF475389E71B078F5BBA180 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bca291d0-d607-33d2-a2ce-47c04785d564.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 209.107.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:75:38:9e:71:b0:78:f5:bb:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=3b40c183-69c0-403a-9551-d5fb455ecd57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f4:3f:cc:82:27:64:70:2d:48:71:f0:9c:89: bb:d7:da:8a:90:fe:5c:28:e2:15:5d:c1:ba:ce:26: 8d:3e:69:ab:e6:c6:3d:fc:a8:c1:0b:1a:4e:c9:4b: 93:42:61:91:06:62:a4:d1:9b:2a:f2:c4:b7:ed:3a: 87:fe:59:fe:80:95:96:f9:a4:5d:5c:09:e7:28:27: fb:26:1e:3d:03:fc:9e:f1:2e:b8:e1:ca:c2:19:89: 55:d4:d2:ec:53:32:11:e9:a0:61:e3:53:f8:24:54: c5:48:bb:19:0c:ce:31:ef:af:04:8b:0b:61:fb:f7: 6a:1f:e2:d3:0d:03:09:30:ab:21:4b:69:4b:2e:9b: 08:13:34:93:9b:b6:1c:4f:8c:3d:2d:3b:30:99:45: 85:14:d2:20:6a:5c:76:46:a2:ab:eb:d8:60:71:f3: 8e:a1:61:e6:bc:33:dc:b6:3a:18:03:8b:f2:e2:f8: 7c:e0:61:0d:80:12:e0:0d:5c:02:7c:95:5d:49:60: c4:79:eb:77:8f:04:93:cf:fe:e5:a9:1e:ef:93:7c: ca:3e:a6:bd:d2:37:4a:10:d9:03:30:62:0b:d8:d5: 3a:c8:7f:cd:4f:d9:25:b5:d9:99:2d:3b:d8:cf:b6: 5b:ca:ce:c0:67:44:b2:5a:a1:f3:77:68:fd:f7:34: 25:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:97:AB:01:C1:DF:84:82:1A:8A:F0:3E:5A:EC:90:B9:BE:20:0C:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bca291d0-d607-33d2-a2ce-47c04785d564.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.107.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:97:16:77:95:a4:9e:27:6d:72:8a:d0:b0:65:19:50:2e:c4: 6e:2d:71:ee:1f:48:9a:db:c3:bf:ee:e7:24:d3:a0:f9:0e:71: 31:0f:12:d5:b2:6b:c9:35:2f:85:39:83:61:4c:6f:65:3d:c4: d3:ce:71:15:33:a1:b1:47:54:28:87:97:79:3e:0f:61:6f:96: ad:88:9a:7a:36:44:c2:be:92:22:51:80:6a:67:01:e4:02:14: 8c:08:8e:e2:da:d9:87:9f:99:34:f1:c6:25:ed:c4:2e:26:07: 07:a5:6f:fc:31:9d:5a:10:7c:46:ee:0e:83:23:33:fc:55:63: 2a:69:46:a2:8a:08:f1:ec:08:2c:99:c1:2c:84:27:5b:e1:42: 88:e7:00:e5:83:64:01:4a:05:5a:79:f8:e4:13:66:f1:e8:12: b0:2e:48:07:4c:f4:0a:46:ca:dd:9e:97:e0:5c:a8:4d:a2:9d: 75:b9:db:cf:21:b7:31:61:1a:66:2c:4f:da:72:fe:6f:ea:ba: 3b:df:fd:63:36:1f:e8:e6:cd:32:69:5b:de:6f:0e:78:29:e4: b4:78:fd:ab:06:f9:f3:ab:ad:d2:f5:50:ba:3c:07:1c:93:3f: 9c:de:8e:04:cb:b9:d0:fc:d6:75:65:13:84:9d:fb:7f:d1:6e: 6d:f9:25:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9HU4nnGwePW7oYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk M2I0MGMxODMtNjljMC00MDNhLTk1NTEtZDVmYjQ1NWVjZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPQ/zIInZHAtSHHwnIm719qKkP5cKOIVXcG6 ziaNPmmr5sY9/KjBCxpOyUuTQmGRBmKk0Zsq8sS37TqH/ln+gJWW+aRdXAnnKCf7 Jh49A/ye8S644crCGYlV1NLsUzIR6aBh41P4JFTFSLsZDM4x768Eiwth+/dqH+LT DQMJMKshS2lLLpsIEzSTm7YcT4w9LTswmUWFFNIgalx2RqKr69hgcfOOoWHmvDPc tjoYA4vy4vh84GENgBLgDVwCfJVdSWDEeet3jwSTz/7lqR7vk3zKPqa90jdKENkD MGIL2NU6yH/NT9kltdmZLTvYz7Zbys7AZ0SyWqHzd2j99zQl9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2XqwHB34SCGorwPlrskLm+IAwXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYmNhMjkxZDAtZDYwNy0z M2QyLWEyY2UtNDdjMDQ3ODVkNTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0WtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM+XFneVpJ4nbXKK0LBlGVAuxG4tce4fSJrbw7/u5yTToPkOcTEPEtWy a8k1L4U5g2FMb2U9xNPOcRUzobFHVCiHl3k+D2Fvlq2Imno2RMK+kiJRgGpnAeQC FIwIjuLa2YefmTTxxiXtxC4mBwelb/wxnVoQfEbuDoMjM/xVYyppRqKKCPHsCCyZ wSyEJ1vhQojnAOWDZAFKBVp5+OQTZvHoErAuSAdM9ApGyt2el+BcqE2inXW5288h tzFhGmYsT9py/m/qujvf/WM2H+jmzTJpW95vDngp5LR4/asG+fOrrdL1ULo8BxyT P5zejgTLudD81nVlE4Sd+3/Rbm35Jbw= -----END CERTIFICATE-----Generated at Sun Apr 27 00:16:35 2025 by rpki-client