$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/edd4aceb-46aa-3f4d-ad78-a2abaf603c79.roa File: edd4aceb-46aa-3f4d-ad78-a2abaf603c79.roa (raw, json) Hash identifier: lyop+XXOw8gzvjhxcRMnfBSP+qZn6ADMbK4OO8zLMOg= Subject key identifier: E9:2E:BF:76:4D:F2:EE:93:D9:9A:EC:99:BF:CB:F4:29:54:CE:DB:6E Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858498CFF0B958DD0A0AEFCE7AC80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/edd4aceb-46aa-3f4d-ad78-a2abaf603c79.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 15247 IP address blocks: 209.53.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:0b:95:8d:d0:a0:ae:fc:e7:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=2fc11bf7-ac2a-4d16-9fa1-1d7be338031f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:19:57:50:c7:97:75:71:6c:e1:2a:7d:75:3b: 5a:b9:39:e3:6d:18:a6:5e:8f:dc:29:24:cd:84:2a: 7e:9a:9b:9b:b3:87:2d:ea:d4:ff:ec:48:7b:01:61: 07:da:95:3e:28:c0:5a:b0:a6:a4:de:aa:e6:94:d0: c3:9b:11:67:65:5a:98:23:23:45:29:b7:84:f0:0c: 2c:59:cb:1f:9a:d4:e4:5e:a1:61:87:5b:3a:5a:af: 55:3d:0a:20:ad:b3:92:66:25:4f:6a:78:0a:ce:29: 2a:ad:eb:55:25:01:90:7e:ba:cc:df:85:5a:84:60: 10:a2:44:2c:50:4c:e6:9a:37:5f:d7:1a:6a:bc:3b: 77:c9:6f:f6:b5:d8:97:98:0c:e5:c3:81:64:b8:02: fd:38:10:e3:cf:dd:12:f9:e9:fe:62:bd:a5:25:f5: 02:26:54:7a:b6:73:89:0f:99:1e:e0:64:a6:b7:c7: e1:82:fe:26:20:51:1a:4f:d5:0c:8e:db:31:f6:98: 50:20:5c:90:37:7f:e0:1b:b2:c4:ff:56:eb:61:e9: 1d:76:75:8d:f3:0a:d4:bb:2f:d9:d4:64:8a:2f:3b: 3d:a0:53:66:92:cc:ea:92:0d:1a:43:b2:0b:84:a5: e5:19:12:c1:5f:2e:6b:f8:ec:c4:00:20:c2:64:d9: 85:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2E:BF:76:4D:F2:EE:93:D9:9A:EC:99:BF:CB:F4:29:54:CE:DB:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/edd4aceb-46aa-3f4d-ad78-a2abaf603c79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:75:21:9a:bc:0e:7c:8f:d2:04:97:0a:f4:e5:25:62:33:b3: b4:07:64:1b:37:d5:61:c7:01:72:7d:4e:e3:52:49:7b:f0:43: c1:dc:2a:6a:af:15:95:69:05:d7:6d:cb:3d:98:9b:60:11:40: 26:36:55:ea:06:d6:6f:3a:42:b6:eb:a8:62:50:67:e9:f4:61: d1:25:0e:5b:cd:2f:80:fe:74:07:13:63:57:43:bc:9a:15:74: 19:8a:a3:59:d0:23:a3:f8:1c:2b:99:60:b3:cf:c3:35:f6:b8: ad:97:8b:fe:dc:23:d1:94:c9:02:1d:f2:36:5e:3d:ba:61:a9: 98:78:32:7b:3e:a4:27:1d:ad:f8:14:90:7a:43:e0:f1:b8:dd: c9:5a:94:de:13:92:38:f2:c9:9b:d8:bc:b4:e1:c6:ab:1e:22: 46:22:da:10:d5:a3:c8:0c:ec:ac:52:10:89:66:57:86:a0:15: 93:7e:c3:98:93:6c:af:a1:3a:fb:a1:59:bf:2d:43:c3:8f:0f: 37:63:9a:a7:ed:20:d8:dd:68:44:f6:d1:22:08:c8:54:bb:bd: 3a:03:5e:a7:1d:09:1f:28:02:67:fa:6d:f9:1b:5a:52:a0:6b: 81:95:67:e6:29:ae:79:2e:a6:30:10:09:22:22:a6:bc:8c:99: 67:17:b4:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/wuVjdCgrvznrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk MmZjMTFiZjctYWMyYS00ZDE2LTlmYTEtMWQ3YmUzMzgwMzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RlXUMeXdXFs4Sp9dTtauTnjbRimXo/cKSTN hCp+mpubs4ct6tT/7Eh7AWEH2pU+KMBasKak3qrmlNDDmxFnZVqYIyNFKbeE8Aws WcsfmtTkXqFhh1s6Wq9VPQogrbOSZiVPangKzikqretVJQGQfrrM34VahGAQokQs UEzmmjdf1xpqvDt3yW/2tdiXmAzlw4FkuAL9OBDjz90S+en+Yr2lJfUCJlR6tnOJ D5ke4GSmt8fhgv4mIFEaT9UMjtsx9phQIFyQN3/gG7LE/1brYekddnWN8wrUuy/Z 1GSKLzs9oFNmkszqkg0aQ7ILhKXlGRLBXy5r+OzEACDCZNmF4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkuv3ZN8u6T2Zrsmb/L9ClUzttuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZWRkNGFjZWItNDZhYS0z ZjRkLWFkNzgtYTJhYmFmNjAzYzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGl1IZq8DnyP0gSXCvTlJWIzs7QHZBs31WHHAXJ9TuNSSXvwQ8HcKmqv FZVpBddtyz2Ym2ARQCY2VeoG1m86QrbrqGJQZ+n0YdElDlvNL4D+dAcTY1dDvJoV dBmKo1nQI6P4HCuZYLPPwzX2uK2Xi/7cI9GUyQId8jZePbphqZh4Mns+pCcdrfgU kHpD4PG43clalN4TkjjyyZvYvLThxqseIkYi2hDVo8gM7KxSEIlmV4agFZN+w5iT bK+hOvuhWb8tQ8OPDzdjmqftINjdaET20SIIyFS7vToDXqcdCR8oAmf6bfkbWlKg a4GVZ+YprnkupjAQCSIipryMmWcXtCY= -----END CERTIFICATE-----Generated at Sun Apr 27 03:57:48 2025 by rpki-client