$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ca34b881-c93f-338e-8d90-ff1931061a13.roa File: ca34b881-c93f-338e-8d90-ff1931061a13.roa (raw, json) Hash identifier: OlqUHtcFZzXtYOXITNFTB0R+sLC3QOsPzLrTV0OkIVA= Subject key identifier: 8E:C3:71:0D:BA:3B:DF:BF:AE:AD:01:9D:68:DD:B4:A0:FC:08:19:E5 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858498CFF02DCA443775ADC95D480 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ca34b881-c93f-338e-8d90-ff1931061a13.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 19905 IP address blocks: 209.53.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:02:dc:a4:43:77:5a:dc:95:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=70dc6d7b-da7e-4562-bf6e-2c054a1d553b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bb:5a:d5:22:1c:28:f3:fc:cb:d5:ee:51:f2: 0b:c2:58:c6:0b:b7:7a:ea:fb:22:63:03:d3:f2:7a: 7c:8a:03:c5:40:b7:49:1c:65:69:65:5d:68:e2:7e: a1:e8:07:69:c0:3c:fb:a4:5c:9f:81:7d:88:87:f0: ab:9f:47:8f:d0:07:0f:f9:51:5c:f9:cd:89:31:7a: 63:bb:23:50:a3:89:3a:7a:51:16:a9:bf:51:da:b3: 48:04:2f:bd:36:18:c4:6f:d4:f4:a6:e7:d6:6d:d8: 3b:b6:45:06:ef:f8:28:dc:cf:cf:c4:07:cf:92:0b: 0b:27:c5:e8:c9:1a:b4:b1:0a:c4:05:4a:f2:cb:0e: 0c:de:50:fa:09:c8:a3:7d:c6:bf:13:10:f1:6f:67: 8b:59:31:6a:8d:98:2f:b0:ab:bc:7b:0f:41:23:b9: 5b:4a:b7:a5:ae:59:7d:bd:7f:63:7d:f6:cb:b7:09: cb:6c:87:43:f3:1d:fe:5b:03:64:ff:91:c5:ec:56: d2:b3:ca:2e:f4:a0:e8:c0:e2:81:91:91:3c:74:6d: 2e:09:fa:27:96:74:c6:8c:3e:0c:d7:ea:77:bb:23: f8:13:1d:77:44:b8:5c:34:7f:cc:6b:cd:8c:9b:d0: 21:62:8d:e4:7b:e1:d4:de:b9:38:7c:9d:b9:49:af: 21:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C3:71:0D:BA:3B:DF:BF:AE:AD:01:9D:68:DD:B4:A0:FC:08:19:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ca34b881-c93f-338e-8d90-ff1931061a13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:06:8a:06:7f:04:93:4a:7e:6f:9b:d5:25:7e:94:43:0d:5e: 8d:1f:0d:e4:b0:6b:cb:06:eb:8c:56:f5:9e:97:67:5b:b3:77: 22:2f:95:c0:83:5b:3b:5d:16:e6:50:fb:3d:b9:89:67:44:dc: e0:35:24:a2:db:39:d0:e7:8e:3f:52:a2:82:d9:ce:ea:8f:28: d5:ac:7e:eb:f4:3f:4a:36:de:fc:27:b2:64:49:9b:0e:ba:02: fc:18:fe:00:45:89:24:4d:c9:4d:ea:79:d4:f4:9f:8b:90:bc: ef:6c:1e:a5:42:47:fd:b9:02:7e:25:5a:4c:52:d1:db:9e:74: 1b:db:0a:ba:15:ab:e8:22:9a:dc:ea:20:d9:0a:f8:f6:78:cf: 46:16:ec:61:7e:94:81:59:17:5b:6f:0b:43:a6:64:9d:48:e1: 92:ae:9a:26:05:53:26:3d:d1:11:0d:46:92:a2:ca:f1:95:c1: 61:01:30:7c:e1:52:83:8a:61:3f:0b:3d:b9:a3:d0:df:e8:fd: 7d:51:7b:13:27:8e:82:11:ed:f2:dc:68:52:58:37:af:34:36: 90:01:87:20:a7:7e:aa:09:ff:87:10:01:56:fd:b1:43:34:ff: e3:16:7b:b9:c1:7e:6a:a5:e6:a7:56:90:0c:06:af:93:6c:90: f5:49:66:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/wLcpEN3WtyV1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk NzBkYzZkN2ItZGE3ZS00NTYyLWJmNmUtMmMwNTRhMWQ1NTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Lta1SIcKPP8y9XuUfILwljGC7d66vsiYwPT 8np8igPFQLdJHGVpZV1o4n6h6AdpwDz7pFyfgX2Ih/Crn0eP0AcP+VFc+c2JMXpj uyNQo4k6elEWqb9R2rNIBC+9NhjEb9T0pufWbdg7tkUG7/go3M/PxAfPkgsLJ8Xo yRq0sQrEBUryyw4M3lD6Ccijfca/ExDxb2eLWTFqjZgvsKu8ew9BI7lbSrelrll9 vX9jffbLtwnLbIdD8x3+WwNk/5HF7FbSs8ou9KDowOKBkZE8dG0uCfonlnTGjD4M 1+p3uyP4Ex13RLhcNH/Ma82Mm9AhYo3ke+HU3rk4fJ25Sa8hRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7DcQ26O9+/rq0BnWjdtKD8CBnlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvY2EzNGI4ODEtYzkzZi0z MzhlLThkOTAtZmYxOTMxMDYxYTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TWpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwGigZ/BJNKfm+b1SV+lEMNXo0fDeSwa8sG64xW9Z6XZ1uzdyIvlcCD WztdFuZQ+z25iWdE3OA1JKLbOdDnjj9SooLZzuqPKNWsfuv0P0o23vwnsmRJmw66 AvwY/gBFiSRNyU3qedT0n4uQvO9sHqVCR/25An4lWkxS0duedBvbCroVq+gimtzq INkK+PZ4z0YW7GF+lIFZF1tvC0OmZJ1I4ZKumiYFUyY90RENRpKiyvGVwWEBMHzh UoOKYT8LPbmj0N/o/X1RexMnjoIR7fLcaFJYN680NpABhyCnfqoJ/4cQAVb9sUM0 /+MWe7nBfmql5qdWkAwGr5NskPVJZl8= -----END CERTIFICATE-----Generated at Sat Apr 26 12:21:04 2025 by rpki-client