$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d209c303-6dbd-372b-83e5-c34af14d89c8.roa File: d209c303-6dbd-372b-83e5-c34af14d89c8.roa (raw, json) Hash identifier: rRD5ZrlJlXiPgjhvilBsLwahxNtMjIrCjeMQ8wY0XF4= Subject key identifier: C9:CA:A4:80:96:C4:26:14:8D:4F:2D:30:E1:32:0F:1D:52:E4:B3:3A Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499AF47D9222A85B5A8D88EB80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d209c303-6dbd-372b-83e5-c34af14d89c8.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 209.104.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:7d:92:22:a8:5b:5a:8d:88:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=472f7eef-01ef-4123-9115-7412e7d3cbee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:40:eb:95:63:ac:05:1d:d6:9b:47:7c:4f:32: cd:99:ce:28:82:7b:a2:6c:75:7f:6c:e3:ec:32:d2: 65:cc:3b:6c:c0:83:16:eb:c9:9e:22:82:9b:89:fb: 10:5d:71:81:ea:3e:a4:81:cd:3f:22:ff:26:fd:00: ea:1d:38:cc:e6:60:2d:b8:7d:0a:1a:fa:59:93:82: 7e:95:67:9c:81:3a:e9:ec:0e:45:3f:35:ca:06:00: 99:29:5c:07:66:d2:85:f7:13:a1:73:4a:62:9f:ce: cd:8e:82:0f:58:08:d7:37:1e:64:d1:b3:79:d2:2d: 83:36:e3:ff:e4:42:ac:3f:d9:41:bb:78:7b:b5:e6: ab:38:48:d7:5e:c0:16:34:e9:d1:87:5d:b1:30:a9: 42:82:58:19:a9:27:6c:b8:05:67:85:f8:69:5d:e0: 69:35:c0:b6:81:4c:ee:c1:d0:8a:87:be:2d:d4:94: 80:ac:b3:95:b8:41:83:3c:ca:4a:ab:73:6f:46:e9: da:aa:ff:f5:2e:df:92:d4:f4:50:67:4d:41:9b:f8: 25:8b:7e:e9:6d:1b:fc:a9:7d:8b:13:f5:b8:a6:63: 17:16:ee:15:06:0b:f2:23:7e:de:6e:22:1c:87:17: 96:d3:fc:b3:d9:80:09:ba:3f:de:67:f0:cc:96:b0: 70:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:CA:A4:80:96:C4:26:14:8D:4F:2D:30:E1:32:0F:1D:52:E4:B3:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d209c303-6dbd-372b-83e5-c34af14d89c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.104.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:68:4c:d4:a8:ae:46:13:10:34:0b:ac:1c:f3:59:41:c3:53: 08:d1:43:a7:6a:d8:13:54:1a:e7:ea:4c:df:72:05:ff:38:e5: 57:6f:84:15:12:63:bd:d0:71:6c:ed:2e:2e:06:1d:f9:cb:58: cd:76:8f:49:04:d2:e7:cc:43:db:af:4c:09:4c:9c:d1:e1:1e: 36:ed:b9:df:27:19:5d:f7:1d:9c:22:e3:9d:1b:be:20:79:b4: a4:bf:a4:63:1b:18:0c:46:4b:dc:9b:7b:c0:b4:03:8f:af:6c: 58:76:c2:7c:1a:f1:86:fd:8e:5c:a3:a7:3d:bf:9e:78:4b:50: df:2c:01:d9:da:b4:7f:0f:3c:33:63:58:a3:45:6b:65:6b:ab: 6a:9f:e7:e9:6d:43:5d:a1:24:1e:34:3c:f1:60:54:95:76:32: 6f:61:77:df:63:ec:bb:c5:da:3d:2b:71:fb:f7:d8:35:1c:9b: f4:28:34:b7:a9:c5:ee:2a:1a:0f:60:ee:fd:c4:e0:3f:bc:7a: 28:48:ef:5b:43:46:1d:b5:75:ca:f7:95:b0:7c:78:44:ff:5d: 9b:d8:f0:ee:9e:36:a2:d2:d3:fb:40:9c:55:ab:19:77:09:4e: 5d:cc:db:48:7c:b7:b9:f9:62:e7:e0:b5:8e:f4:92:c6:05:c5: cb:72:b1:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9H2SIqhbWo2I64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NDcyZjdlZWYtMDFlZi00MTIzLTkxMTUtNzQxMmU3ZDNjYmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0DrlWOsBR3Wm0d8TzLNmc4ognuibHV/bOPs MtJlzDtswIMW68meIoKbifsQXXGB6j6kgc0/Iv8m/QDqHTjM5mAtuH0KGvpZk4J+ lWecgTrp7A5FPzXKBgCZKVwHZtKF9xOhc0pin87NjoIPWAjXNx5k0bN50i2DNuP/ 5EKsP9lBu3h7tearOEjXXsAWNOnRh12xMKlCglgZqSdsuAVnhfhpXeBpNcC2gUzu wdCKh74t1JSArLOVuEGDPMpKq3NvRunaqv/1Lt+S1PRQZ01Bm/gli37pbRv8qX2L E/W4pmMXFu4VBgvyI37ebiIchxeW0/yz2YAJuj/eZ/DMlrBwEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnKpICWxCYUjU8tMOEyDx1S5LM6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDIwOWMzMDMtNmRiZC0z NzJiLTgzZTUtYzM0YWYxNGQ4OWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0WhAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIloTNSorkYTEDQLrBzzWUHDUwjRQ6dq2BNUGufqTN9yBf845VdvhBUS Y73QcWztLi4GHfnLWM12j0kE0ufMQ9uvTAlMnNHhHjbtud8nGV33HZwi450bviB5 tKS/pGMbGAxGS9ybe8C0A4+vbFh2wnwa8Yb9jlyjpz2/nnhLUN8sAdnatH8PPDNj WKNFa2Vrq2qf5+ltQ12hJB40PPFgVJV2Mm9hd99j7LvF2j0rcfv32DUcm/QoNLep xe4qGg9g7v3E4D+8eihI71tDRh21dcr3lbB8eET/XZvY8O6eNqLS0/tAnFWrGXcJ Tl3M20h8t7n5YufgtY70ksYFxctyseA= -----END CERTIFICATE-----Generated at Tue Apr 29 07:09:05 2025 by rpki-client