$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d7a06c2b-aa8d-3ebb-b1f4-27213c2b612d.roa File: d7a06c2b-aa8d-3ebb-b1f4-27213c2b612d.roa (raw, json) Hash identifier: 65RweoGbYZuDO2vWQJqbnXMJUuC+CkdwY7AAxr/PCkA= Subject key identifier: F6:F5:F5:D5:93:54:5B:93:81:EF:FC:42:E5:99:B9:29:5E:A9:0F:C6 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499DBF24CF616A5013986CAF00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d7a06c2b-aa8d-3ebb-b1f4-27213c2b612d.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 852 IP address blocks: 209.121.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:24:cf:61:6a:50:13:98:6c:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=6d569338-0282-4df2-b57b-daad30974d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:14:d3:80:01:0b:81:e2:94:3c:bc:39:5c:0c: 2b:85:b6:f6:3b:36:a0:3c:3d:38:5c:74:2a:13:e7: 17:71:a4:0d:82:f0:81:db:4e:e0:11:bb:c0:fd:11: 0d:0f:6d:46:da:f8:7d:ab:7e:90:4e:6d:2b:8e:f6: 02:2a:9d:2f:a4:6b:67:9f:70:32:45:01:45:fc:6c: 7a:af:1e:f0:6a:92:80:58:8d:e2:89:cd:e4:53:59: df:dd:4a:b3:d8:cd:6d:9e:10:3a:f7:fb:a9:34:5d: 68:8f:2d:40:44:e5:79:5b:47:70:eb:41:88:1d:1f: cd:74:af:b5:e0:76:36:54:8a:76:32:9c:f7:f5:35: af:bc:69:99:58:79:8e:cb:cc:b5:79:82:10:3e:a1: 82:52:f1:2b:e2:26:d9:30:2d:84:ed:44:21:6c:c7: 95:37:89:08:25:5d:b1:22:10:b6:1c:77:96:87:d0: 72:f1:7f:05:b6:ca:a8:15:2c:b8:99:cb:ae:af:16: f9:2f:38:30:4e:45:26:96:57:36:18:ff:d6:9c:e9: 24:f8:4a:5b:da:e4:78:ec:1d:54:70:a5:7c:fc:36: 32:55:49:e9:5d:39:b6:15:ac:95:ad:12:aa:44:ee: 5a:a5:e0:8b:39:14:d9:d2:50:d2:ee:c2:6b:b1:1a: be:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F5:F5:D5:93:54:5B:93:81:EF:FC:42:E5:99:B9:29:5E:A9:0F:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d7a06c2b-aa8d-3ebb-b1f4-27213c2b612d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.121.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e0:62:0d:ed:15:c4:8e:49:a9:64:1e:dc:8a:ac:e5:ca:c4:0f: e5:44:69:92:73:4e:6f:a8:4e:a2:80:6a:d1:af:1b:59:4a:79: fa:0f:d4:8f:4e:a0:eb:00:d2:ac:9c:f2:1c:d5:63:31:ad:85: c7:72:c1:6b:0d:db:20:2a:3c:0d:d2:56:bd:36:e8:ca:48:35: f0:bf:43:92:2c:51:e2:d3:65:53:f9:7d:e6:a0:fc:e8:63:2c: fd:44:3d:96:e8:c9:d3:29:cc:d9:e8:42:8a:09:ea:54:fa:e5: 8a:87:27:dd:78:55:e2:89:50:17:48:4a:95:61:ee:6a:4e:c3: 09:3c:8e:7a:ee:f4:67:6c:e3:5c:c6:c3:56:d6:da:38:8d:a0: 5a:44:b0:94:54:07:05:a5:18:1c:97:80:5c:e3:eb:2c:80:b8: 10:b2:36:99:50:d7:f7:52:7c:b5:71:11:a2:3a:10:09:a7:19: 6f:7d:84:a8:38:a0:7b:e0:c1:2a:e6:11:78:d9:23:97:3e:b0: 92:8e:7a:81:60:c4:33:d9:9a:99:ef:fa:53:34:08:f5:c0:11: f5:64:98:19:29:e8:96:fa:f6:73:d9:87:f3:e8:28:06:68:e9: c3:78:be:e4:5a:a6:89:dd:a2:6d:64:b5:c1:9a:ef:55:e1:6e: a5:00:5c:3a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmdvyTPYWpQE5hsrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk NmQ1NjkzMzgtMDI4Mi00ZGYyLWI1N2ItZGFhZDMwOTc0ZDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRTTgAELgeKUPLw5XAwrhbb2OzagPD04XHQq E+cXcaQNgvCB207gEbvA/REND21G2vh9q36QTm0rjvYCKp0vpGtnn3AyRQFF/Gx6 rx7wapKAWI3iic3kU1nf3Uqz2M1tnhA69/upNF1ojy1AROV5W0dw60GIHR/NdK+1 4HY2VIp2Mpz39TWvvGmZWHmOy8y1eYIQPqGCUvEr4ibZMC2E7UQhbMeVN4kIJV2x IhC2HHeWh9By8X8FtsqoFSy4mcuurxb5LzgwTkUmllc2GP/WnOkk+Epb2uR47B1U cKV8/DYyVUnpXTm2FayVrRKqRO5apeCLORTZ0lDS7sJrsRq+/wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPb19dWTVFuTge/8QuWZuSleqQ/GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDdhMDZjMmItYWE4ZC0z ZWJiLWIxZjQtMjcyMTNjMmI2MTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0XkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEA4GIN7RXEjkmpZB7ciqzlysQP5URpknNOb6hOooBq0a8bWUp5+g/Uj06g 6wDSrJzyHNVjMa2Fx3LBaw3bICo8DdJWvTboykg18L9DkixR4tNlU/l95qD86GMs /UQ9lujJ0ynM2ehCignqVPrliocn3XhV4olQF0hKlWHuak7DCTyOeu70Z2zjXMbD VtbaOI2gWkSwlFQHBaUYHJeAXOPrLIC4ELI2mVDX91J8tXERojoQCacZb32EqDig e+DBKuYReNkjlz6wko56gWDEM9mame/6UzQI9cAR9WSYGSnolvr2c9mH8+goBmjp w3i+5Fqmid2ibWS1wZrvVeFupQBcOg== -----END CERTIFICATE-----Generated at Mon Apr 28 02:49:57 2025 by rpki-client