$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e9a91c54-d382-337a-ac3f-556ef92a5ed9.roa File: e9a91c54-d382-337a-ac3f-556ef92a5ed9.roa (raw, json) Hash identifier: ZWStUCxC9v9IoQBnzZppl3FmIpYBgdv9LTQVaYEeU/Y= Subject key identifier: 15:CB:67:31:BD:46:35:A4:42:0D:75:64:4A:3B:92:E2:95:B2:55:B7 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858498CFF06208C1B6E4BC6595A60 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e9a91c54-d382-337a-ac3f-556ef92a5ed9.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 3359 IP address blocks: 209.115.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:06:20:8c:1b:6e:4b:c6:59:5a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=3a3fac18-31bd-4465-bc2a-b96a4d3c5ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:12:8f:fc:d2:de:af:8f:32:9b:4c:de:d9:67: 3f:e0:4d:40:90:b4:60:b1:96:5e:35:93:db:76:db: 42:ac:8d:6f:5e:63:7a:93:66:75:6a:a2:0d:40:d1: 97:8a:7e:b1:ec:72:0c:66:c9:dd:2a:d6:fc:d7:ed: 62:57:71:75:ab:9d:36:92:33:1d:1e:a7:74:ee:80: 91:9d:3b:f8:be:af:5c:33:f7:43:64:ee:88:66:94: be:0a:ea:98:04:09:56:de:5f:58:08:77:f2:ea:0c: b6:3f:8a:cf:16:c3:2c:29:6a:bf:ca:95:33:1f:1c: 7f:b1:57:07:f0:af:6d:43:8c:21:ec:f4:67:62:18: 6f:89:27:b1:8c:d6:af:32:3d:e1:78:df:ff:5f:e9: 1c:df:88:d5:53:43:bf:62:b7:64:74:8e:c5:41:57: d7:c3:66:3c:a4:8f:9a:a9:70:bf:8c:8a:f7:84:64: e6:ec:9a:98:d5:21:ce:4e:2f:fb:1a:2d:54:e3:b9: ef:91:4f:af:18:6c:19:51:64:ca:a9:b4:97:fc:65: a4:69:8d:d9:0c:6e:47:4c:b4:e6:d2:69:c8:f7:f3: 68:c6:9b:00:83:cd:ea:47:1e:0e:68:f5:31:40:0b: 73:bd:4a:ca:c1:3c:ab:20:b6:24:44:01:11:58:68: 1c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:CB:67:31:BD:46:35:A4:42:0D:75:64:4A:3B:92:E2:95:B2:55:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e9a91c54-d382-337a-ac3f-556ef92a5ed9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.115.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:af:1f:94:56:cd:6e:05:a6:57:dc:85:5a:72:51:70:c5:86: 1d:60:44:79:33:a7:0f:66:9d:de:41:cf:95:38:5a:a6:ec:98: 91:79:1f:87:4e:c4:80:14:f3:eb:0f:35:f9:6e:e9:e9:b4:d1: b6:b4:0d:c2:87:ee:82:8f:c6:22:3a:ee:83:ac:fc:d4:d9:90: 94:a0:f9:f5:fa:92:d6:08:c6:04:89:e4:85:e2:43:24:43:84: 52:3c:10:1b:f0:a0:54:e2:38:ef:be:de:d1:26:65:7d:a8:62: b2:c2:2b:9e:d3:a1:41:8d:56:da:ac:4a:ca:5f:02:f9:04:0c: 8c:84:13:6b:10:e0:b8:dc:3e:5d:97:fa:3c:70:78:a1:87:bb: 6d:56:ac:4d:ee:da:b2:aa:fc:d7:d5:92:22:d7:2c:52:7e:eb: c9:e3:c1:18:13:7a:0d:81:9e:e9:20:7f:1f:e2:62:96:27:8e: 50:91:af:9a:e0:de:bc:d0:d3:8e:92:0c:cd:49:85:d3:2b:0c: a8:26:e2:9d:6e:39:d8:b8:75:08:f0:36:07:1c:24:2b:f2:32: e7:29:27:22:0b:1a:27:ab:b1:32:28:45:61:7d:71:46:17:5c: 06:21:25:3d:55:2b:a9:46:b1:37:fd:f9:32:f9:a8:2e:cd:fd: 4f:cb:2d:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/wYgjBtuS8ZZWmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk M2EzZmFjMTgtMzFiZC00NDY1LWJjMmEtYjk2YTRkM2M1YWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RKP/NLer48ym0ze2Wc/4E1AkLRgsZZeNZPb dttCrI1vXmN6k2Z1aqINQNGXin6x7HIMZsndKtb81+1iV3F1q502kjMdHqd07oCR nTv4vq9cM/dDZO6IZpS+CuqYBAlW3l9YCHfy6gy2P4rPFsMsKWq/ypUzHxx/sVcH 8K9tQ4wh7PRnYhhviSexjNavMj3heN//X+kc34jVU0O/YrdkdI7FQVfXw2Y8pI+a qXC/jIr3hGTm7JqY1SHOTi/7Gi1U47nvkU+vGGwZUWTKqbSX/GWkaY3ZDG5HTLTm 0mnI9/NoxpsAg83qRx4OaPUxQAtzvUrKwTyrILYkRAERWGgcUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXLZzG9RjWkQg11ZEo7kuKVslW3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZTlhOTFjNTQtZDM4Mi0z MzdhLWFjM2YtNTU2ZWY5MmE1ZWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0XPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6vH5RWzW4FplfchVpyUXDFhh1gRHkzpw9mnd5Bz5U4WqbsmJF5H4dO xIAU8+sPNflu6em00ba0DcKH7oKPxiI67oOs/NTZkJSg+fX6ktYIxgSJ5IXiQyRD hFI8EBvwoFTiOO++3tEmZX2oYrLCK57ToUGNVtqsSspfAvkEDIyEE2sQ4LjcPl2X +jxweKGHu21WrE3u2rKq/NfVkiLXLFJ+68njwRgTeg2Bnukgfx/iYpYnjlCRr5rg 3rzQ046SDM1JhdMrDKgm4p1uOdi4dQjwNgccJCvyMucpJyILGiersTIoRWF9cUYX XAYhJT1VK6lGsTf9+TL5qC7N/U/LLYw= -----END CERTIFICATE-----Generated at Sun Apr 27 00:20:22 2025 by rpki-client