$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c2aa98ae-a982-3f42-843a-8c0cb2bc9aa7.roa File: c2aa98ae-a982-3f42-843a-8c0cb2bc9aa7.roa (raw, json) Hash identifier: 5l7vluLe6IfDSskyuhYBCejNjnropQa7tbhlf7hPJy8= Subject key identifier: 37:6E:68:72:E8:3B:9F:37:35:DD:AA:ED:50:40:52:A8:98:D0:FC:50 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858498CFF09C57DACD9F3FE27CAD0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c2aa98ae-a982-3f42-843a-8c0cb2bc9aa7.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 21723 IP address blocks: 209.89.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:09:c5:7d:ac:d9:f3:fe:27:ca:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=f03de8ac-3851-4d53-9f57-397eaa1c01f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ae:d0:f1:d2:c8:fe:58:4b:7c:dd:06:e7:bb: 59:b4:3f:a3:7e:2e:55:cc:d5:4b:46:2b:ba:01:9e: 65:9e:66:5e:17:20:7b:ba:cd:e0:4b:c1:d9:fa:ab: a0:fb:8f:1e:99:47:f7:60:07:a7:71:2a:08:7e:5f: 82:be:b3:3c:17:9a:97:31:ed:2f:40:be:cd:04:d5: c1:40:1e:10:64:38:48:af:cd:48:8f:b6:63:a9:e1: 17:f2:fe:37:a5:27:32:29:ae:4f:30:64:29:9d:30: e7:fd:b6:96:fe:9d:4f:93:21:9e:2c:73:a3:c3:46: 42:ab:48:ee:75:08:5d:78:61:75:f1:8e:38:cc:80: 9a:1e:72:1a:d0:00:f5:14:10:8b:b3:2e:3d:7a:2c: bb:c0:35:2b:7a:33:06:64:3b:ea:f5:23:82:f2:d0: a7:74:6f:41:48:c3:89:d2:ba:7f:17:27:20:8b:1d: 7b:85:3e:69:11:84:d3:1c:87:b5:e3:2e:cb:22:26: 39:6a:61:89:95:f7:c7:dc:6f:ce:da:9b:f0:f4:34: ff:11:a0:b3:e9:8a:e4:4a:a6:ef:d6:d7:f6:c7:b4: 87:01:64:db:ec:31:0e:34:de:ce:d1:f6:61:08:52: 73:2b:79:97:a4:6d:04:2a:07:39:d7:e1:ad:c0:0b: a5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6E:68:72:E8:3B:9F:37:35:DD:AA:ED:50:40:52:A8:98:D0:FC:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c2aa98ae-a982-3f42-843a-8c0cb2bc9aa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.89.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e6:84:b1:ac:ca:f6:5a:70:10:08:a8:fa:ee:42:08:c4:ac:bf: 8b:3e:e0:a1:a7:ec:86:20:ff:8b:19:8c:c1:57:6d:a3:6a:1c: 9e:ee:9e:71:94:1a:c8:84:8f:6a:83:9a:cf:cf:50:63:a8:81: 25:78:ae:40:70:1f:1c:5c:c7:73:c2:3e:e7:2e:63:db:53:51: aa:04:a2:83:72:d1:80:12:74:b4:1a:c4:8a:62:c9:bf:db:cd: e1:c4:c4:41:4c:8e:81:7c:dd:27:d5:b8:40:b8:c2:85:77:f4: bf:4f:97:92:84:a3:e9:8d:de:73:f9:3b:01:df:0b:21:28:5c: f4:e1:3d:96:91:29:a2:a4:18:78:01:aa:62:af:1c:70:01:62: 4d:5d:bd:4e:78:ae:be:9d:92:91:16:75:26:94:cd:a6:45:b2: d8:88:59:36:23:fa:74:5e:b6:8e:a7:64:f4:2a:12:f3:5b:06: e1:48:9c:3a:0a:fa:35:d9:d4:78:5f:03:a8:7d:a6:cd:7c:07: 70:b9:c4:45:c8:ff:c8:86:90:14:97:96:b5:20:f5:3d:ca:b9: 04:75:12:97:d4:d1:2e:d2:a5:06:02:b6:90:b2:1c:c6:da:fd: 46:89:89:7e:e0:30:14:a1:be:02:79:bb:ec:26:76:11:d5:1f: cd:dd:e1:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/wnFfazZ8/4nytAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk ZjAzZGU4YWMtMzg1MS00ZDUzLTlmNTctMzk3ZWFhMWMwMWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg67Q8dLI/lhLfN0G57tZtD+jfi5VzNVLRiu6 AZ5lnmZeFyB7us3gS8HZ+qug+48emUf3YAencSoIfl+CvrM8F5qXMe0vQL7NBNXB QB4QZDhIr81Ij7ZjqeEX8v43pScyKa5PMGQpnTDn/baW/p1PkyGeLHOjw0ZCq0ju dQhdeGF18Y44zICaHnIa0AD1FBCLsy49eiy7wDUrejMGZDvq9SOC8tCndG9BSMOJ 0rp/Fycgix17hT5pEYTTHIe14y7LIiY5amGJlffH3G/O2pvw9DT/EaCz6YrkSqbv 1tf2x7SHAWTb7DEONN7O0fZhCFJzK3mXpG0EKgc51+GtwAulRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDduaHLoO583Nd2q7VBAUqiY0PxQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzJhYTk4YWUtYTk4Mi0z ZjQyLTg0M2EtOGMwY2IyYmM5YWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0VlsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOaEsazK9lpwEAio+u5CCMSsv4s+4KGn7IYg/4sZjMFXbaNqHJ7unnGU GsiEj2qDms/PUGOogSV4rkBwHxxcx3PCPucuY9tTUaoEooNy0YASdLQaxIpiyb/b zeHExEFMjoF83SfVuEC4woV39L9Pl5KEo+mN3nP5OwHfCyEoXPThPZaRKaKkGHgB qmKvHHABYk1dvU54rr6dkpEWdSaUzaZFstiIWTYj+nReto6nZPQqEvNbBuFInDoK +jXZ1HhfA6h9ps18B3C5xEXI/8iGkBSXlrUg9T3KuQR1EpfU0S7SpQYCtpCyHMba /UaJiX7gMBShvgJ5u+wmdhHVH83d4e0= -----END CERTIFICATE-----Generated at Sun Apr 27 12:41:23 2025 by rpki-client