$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dce79b13-419a-36f1-9103-105e2a77b3d8.roa File: dce79b13-419a-36f1-9103-105e2a77b3d8.roa (raw, json) Hash identifier: UpGx1JxndzBDKCSzgnDXmGLtqgbazM4rH9UlzhLJREc= Subject key identifier: 17:20:DD:0B:8C:CE:C2:2F:2D:EE:1C:CE:8D:BA:81:D1:FA:97:B7:79 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499DBF25B64EC84001327BEE00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dce79b13-419a-36f1-9103-105e2a77b3d8.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 852 IP address blocks: 209.29.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:25:b6:4e:c8:40:01:32:7b:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=cd083c86-11a3-429a-a5c6-e9427d0d1287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bd:cd:e2:b4:2f:2b:6c:90:67:9a:b7:f9:57: 6d:3a:e5:1e:75:37:2a:da:9d:e1:ba:60:3d:d7:d1: 29:fc:f1:53:75:3b:8d:c5:e0:bc:f6:32:75:02:9d: bb:b5:d5:30:94:f9:8d:a8:31:0e:eb:cb:43:93:30: b0:53:a2:0c:b3:67:ec:dc:8f:13:9e:45:2f:93:77: 49:e3:5d:58:84:34:60:51:85:22:b2:77:67:60:da: 28:49:f1:81:9f:06:24:d7:9b:ec:7a:7e:2e:e9:bc: 98:ec:d8:a6:a7:65:d8:dc:ea:7f:1c:c7:f5:a4:d8: cc:ee:c8:a4:36:d2:6a:98:26:4a:c3:a2:29:18:22: 24:ce:d8:bc:25:30:b2:b5:53:73:f2:e4:cb:33:c6: 27:65:04:d2:bc:5e:e5:93:84:0a:3d:82:9a:ad:62: ec:46:e2:c3:55:0c:c4:3a:d8:9b:45:67:63:2b:c6: e2:7c:67:57:73:1b:18:8e:0e:9a:51:db:55:0d:a8: 1b:b3:64:fb:ad:e1:bd:f3:55:16:10:db:cd:50:02: c8:3d:98:0e:1b:16:b5:6a:5a:b4:6e:ef:8e:aa:9a: b8:2c:9f:67:55:46:29:03:ac:b5:c3:80:c7:9a:e2: 23:32:f7:e2:3a:50:2f:9c:58:31:d5:b0:b1:3f:b0: 40:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:20:DD:0B:8C:CE:C2:2F:2D:EE:1C:CE:8D:BA:81:D1:FA:97:B7:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dce79b13-419a-36f1-9103-105e2a77b3d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:c6:50:79:86:fb:fe:99:62:c1:10:37:bc:aa:3a:a2:20:3b: f1:18:b2:16:9d:33:7b:91:61:7c:a0:db:fd:53:84:21:c9:8d: e5:92:4d:8b:ce:5d:3d:86:bc:f5:86:31:35:cc:da:53:a6:f6: df:ee:31:ef:90:52:15:3d:26:c1:13:75:bd:73:4a:ed:d9:71: 70:a2:11:85:26:b5:53:4c:cc:ec:de:50:ea:df:92:b2:53:15: 6d:f3:07:35:39:f7:19:27:c1:90:d0:ab:66:c9:8a:ac:93:79: a9:19:fa:02:35:33:3a:88:c2:10:0b:0d:19:87:49:7b:0c:f7: d9:11:e9:e8:2c:c3:80:35:40:55:27:d5:33:f6:01:4d:1e:a8: 4a:fc:03:82:92:06:0c:1d:d1:de:82:10:2b:67:74:1c:14:20: 77:f1:8f:e5:5e:aa:d5:99:8a:dc:09:2f:0a:d9:43:7f:cf:c9: be:85:b5:6d:02:75:53:84:81:84:f7:64:e1:25:0d:7f:52:8f: 79:85:60:93:03:c9:39:58:7f:b1:86:85:93:f4:ee:61:1d:e6: da:aa:f5:47:be:d9:66:6e:b0:81:5f:ec:1b:0b:a5:ac:70:9c: dd:2f:d7:e9:6c:1e:1f:95:d3:d7:6c:cd:eb:b5:fb:82:85:f5: d3:e3:1e:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvyW2TshAATJ77gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk Y2QwODNjODYtMTFhMy00MjlhLWE1YzYtZTk0MjdkMGQxMjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh73N4rQvK2yQZ5q3+VdtOuUedTcq2p3humA9 19Ep/PFTdTuNxeC89jJ1Ap27tdUwlPmNqDEO68tDkzCwU6IMs2fs3I8TnkUvk3dJ 411YhDRgUYUisndnYNooSfGBnwYk15vsen4u6byY7Nimp2XY3Op/HMf1pNjM7sik NtJqmCZKw6IpGCIkzti8JTCytVNz8uTLM8YnZQTSvF7lk4QKPYKarWLsRuLDVQzE OtibRWdjK8bifGdXcxsYjg6aUdtVDagbs2T7reG981UWENvNUALIPZgOGxa1alq0 bu+Oqpq4LJ9nVUYpA6y1w4DHmuIjMvfiOlAvnFgx1bCxP7BAswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcg3QuMzsIvLe4czo26gdH6l7d5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZGNlNzliMTMtNDE5YS0z NmYxLTkxMDMtMTA1ZTJhNzdiM2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0R1oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXGUHmG+/6ZYsEQN7yqOqIgO/EYshadM3uRYXyg2/1ThCHJjeWSTYvO XT2GvPWGMTXM2lOm9t/uMe+QUhU9JsETdb1zSu3ZcXCiEYUmtVNMzOzeUOrfkrJT FW3zBzU59xknwZDQq2bJiqyTeakZ+gI1MzqIwhALDRmHSXsM99kR6egsw4A1QFUn 1TP2AU0eqEr8A4KSBgwd0d6CECtndBwUIHfxj+VeqtWZitwJLwrZQ3/Pyb6FtW0C dVOEgYT3ZOElDX9Sj3mFYJMDyTlYf7GGhZP07mEd5tqq9Ue+2WZusIFf7BsLpaxw nN0v1+lsHh+V09dszeu1+4KF9dPjHmc= -----END CERTIFICATE-----Generated at Mon Apr 28 20:02:44 2025 by rpki-client