$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d7a27c5d-9d0c-3a48-b526-806911d25f5b.roa File: d7a27c5d-9d0c-3a48-b526-806911d25f5b.roa (raw, json) Hash identifier: BIC6SY4xyRNxR64RU5KNjKiQ5x7QffuC3HzcurafWPY= Subject key identifier: 5C:E4:A2:89:4F:94:22:5A:DB:0C:F8:5A:24:1B:E3:D6:F6:82:67:B7 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858498CFF0AA2B155B67B344C8B40 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d7a27c5d-9d0c-3a48-b526-806911d25f5b.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 19905 IP address blocks: 209.89.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:0a:a2:b1:55:b6:7b:34:4c:8b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=7093126f-d430-4b89-be6a-5f34495ff5f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:09:ba:15:e7:d3:64:c4:68:d2:99:cd:42:44: 96:14:b5:28:a6:4b:1c:81:68:93:8a:d3:b7:11:1d: 02:18:f5:c3:3f:c1:23:b0:43:e7:ae:3d:f5:e1:3d: 7d:83:8a:c8:6c:03:c6:9b:06:52:1c:27:28:90:5e: c6:81:4b:50:38:bb:df:b0:4d:20:97:6c:91:2f:7e: 24:bb:e7:a5:3b:be:e3:5a:9d:d6:51:7b:02:a8:f1: 17:e7:b0:5e:54:1c:71:29:c6:07:76:8f:27:f3:7b: 18:6c:52:4f:de:3f:4e:0b:5f:86:39:03:ee:d9:84: f1:61:8a:e8:9e:f0:12:8a:fb:2e:92:ad:60:ed:88: f9:ab:51:b5:40:73:e0:eb:6c:d0:77:da:5d:75:da: 62:aa:c8:9f:bc:e9:35:3e:06:cf:ad:fc:41:65:7c: 9c:60:e3:cb:60:8c:85:a3:bd:f2:7c:41:62:41:85: ee:20:c8:3b:d1:8b:cf:d2:66:92:5a:8a:ef:ef:32: 64:4d:f2:b3:c4:2e:bb:3c:6a:4f:33:ea:94:00:25: f7:a1:07:0a:15:d1:0c:ce:a1:45:36:7f:45:05:01: 42:90:1b:c0:33:64:26:c4:1a:bb:d5:f2:7f:a1:ff: 19:0d:c2:5f:44:01:ca:74:38:27:c2:b0:ef:97:9f: 51:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E4:A2:89:4F:94:22:5A:DB:0C:F8:5A:24:1B:E3:D6:F6:82:67:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d7a27c5d-9d0c-3a48-b526-806911d25f5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.89.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:cc:54:61:c8:94:d9:d4:1d:d5:ee:16:45:e4:c1:75:db:d6: e1:ca:4a:e0:0a:ef:6b:27:53:8e:ab:1c:8b:a6:71:9c:84:8f: 63:ee:b0:ad:8e:97:84:c6:44:51:c0:e2:72:2d:63:4f:7b:25: 66:cd:77:b1:30:c1:27:fd:ef:78:ec:54:7b:99:4e:e3:05:b1: ae:0e:0c:a7:c6:75:0d:42:eb:80:96:68:14:18:a6:4a:b6:7e: 2d:5b:df:a4:56:8d:81:0f:e9:33:de:79:85:ac:6c:6d:e2:07: 8e:1b:8f:61:ae:dd:59:25:90:b6:8c:6e:48:05:45:22:fd:c7: 4d:27:e5:f0:57:84:3b:da:87:c2:c5:2d:0d:7f:6f:86:6c:53: 17:cb:5b:2d:75:62:4b:a0:04:b4:7a:06:03:20:13:23:4f:f4: f1:2b:c7:2f:bb:db:e9:71:3a:0c:2d:a4:aa:75:5e:58:5a:62: 38:8b:dc:21:cc:9a:0a:c9:88:b9:b5:2f:83:0e:b0:10:3d:ae: c7:7a:bf:cc:78:b1:fc:5d:19:db:2d:65:b7:a7:7a:18:42:8c: c8:94:81:13:ea:40:a1:7f:a8:a6:b0:aa:6e:41:72:f8:95:69: 4c:dd:d4:ac:00:05:5b:81:a1:e0:44:83:a8:e5:43:4a:20:75: 7e:c8:67:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/wqisVW2ezRMi0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk NzA5MzEyNmYtZDQzMC00Yjg5LWJlNmEtNWYzNDQ5NWZmNWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQm6FefTZMRo0pnNQkSWFLUopkscgWiTitO3 ER0CGPXDP8EjsEPnrj314T19g4rIbAPGmwZSHCcokF7GgUtQOLvfsE0gl2yRL34k u+elO77jWp3WUXsCqPEX57BeVBxxKcYHdo8n83sYbFJP3j9OC1+GOQPu2YTxYYro nvASivsukq1g7Yj5q1G1QHPg62zQd9pdddpiqsifvOk1PgbPrfxBZXycYOPLYIyF o73yfEFiQYXuIMg70YvP0maSWorv7zJkTfKzxC67PGpPM+qUACX3oQcKFdEMzqFF Nn9FBQFCkBvAM2QmxBq71fJ/of8ZDcJfRAHKdDgnwrDvl59RBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzkoolPlCJa2wz4WiQb49b2gme3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDdhMjdjNWQtOWQwYy0z YTQ4LWI1MjYtODA2OTExZDI1ZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0VlsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/MVGHIlNnUHdXuFkXkwXXb1uHKSuAK72snU46rHIumcZyEj2PusK2O l4TGRFHA4nItY097JWbNd7EwwSf973jsVHuZTuMFsa4ODKfGdQ1C64CWaBQYpkq2 fi1b36RWjYEP6TPeeYWsbG3iB44bj2Gu3VklkLaMbkgFRSL9x00n5fBXhDvah8LF LQ1/b4ZsUxfLWy11YkugBLR6BgMgEyNP9PErxy+72+lxOgwtpKp1XlhaYjiL3CHM mgrJiLm1L4MOsBA9rsd6v8x4sfxdGdstZbenehhCjMiUgRPqQKF/qKawqm5BcviV aUzd1KwABVuBoeBEg6jlQ0ogdX7IZ9I= -----END CERTIFICATE-----Generated at Sat Apr 26 19:07:34 2025 by rpki-client