$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f3afbd83-49e1-3165-a905-705c78b5f80a.roa File: f3afbd83-49e1-3165-a905-705c78b5f80a.roa (raw, json) Hash identifier: dLouO3x1m+Izi0Rc0kY0ypUmX6n4x19Fx0bqhX8g1cE= Subject key identifier: 12:EE:86:E4:D2:E5:DE:32:E2:DF:89:3D:15:A7:D6:44:8C:51:8D:4D Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858498CFF036DE7B71B984C1C5B20 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f3afbd83-49e1-3165-a905-705c78b5f80a.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 19905 IP address blocks: 209.53.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:03:6d:e7:b7:1b:98:4c:1c:5b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=4bfe4a32-9a55-4eb6-bcf6-3bdf2627f0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:23:07:0a:14:11:26:57:be:2c:45:29:cc:7a: f0:57:0a:12:57:16:55:4b:f7:60:a5:fc:c8:0e:63: 3b:f7:61:6e:20:95:dc:7b:ad:52:be:12:67:69:2d: 4a:04:5e:3a:5e:a5:3c:29:e1:c0:47:cd:7a:c1:1a: 9a:fd:fd:f2:02:f7:ca:a0:e5:28:15:bd:71:d9:9b: d1:67:80:7e:d6:16:0b:85:0d:2d:08:2b:5f:27:e2: 0e:a3:64:fa:e0:25:60:6a:af:61:8f:13:57:e5:81: f0:25:e8:72:d0:1b:86:3c:0c:34:48:a0:d2:5d:c7: f0:3c:92:88:79:eb:fd:b5:19:0f:61:84:b6:c9:52: dd:ea:63:fc:88:f6:7d:f4:89:9e:f0:21:a9:c1:c7: 2b:27:aa:03:ae:64:1a:94:0b:4c:28:32:e2:23:e6: a4:cb:b0:76:61:a0:97:1a:bf:41:1d:84:f4:5d:26: fd:cc:6b:52:e2:96:5c:b6:c5:99:74:28:c8:ea:74: 21:81:c7:49:39:d4:86:91:dd:bb:23:e2:58:3b:7a: 6c:85:7f:43:80:f7:39:05:bc:45:d5:f3:1f:3d:43: 8c:db:17:47:42:ef:9a:27:4f:e1:9c:aa:4d:fa:b0: bc:a7:1f:6e:a9:a5:34:38:f9:4c:ac:4b:2a:c0:b4: 41:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:EE:86:E4:D2:E5:DE:32:E2:DF:89:3D:15:A7:D6:44:8C:51:8D:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f3afbd83-49e1-3165-a905-705c78b5f80a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption eb:10:ac:ae:ca:09:c6:ae:9f:45:36:d8:a7:f4:8d:5d:6a:7a: f5:1a:3f:c8:23:56:8f:d3:4c:0f:e4:35:43:33:33:9f:28:e1: 63:2f:94:ed:93:d6:28:9e:5e:22:e6:49:fe:ad:9e:d0:a5:da: 9f:66:03:9c:db:fb:17:bf:82:58:dc:a1:1b:35:42:50:9f:19: 20:52:78:33:86:c3:49:03:c2:32:d6:33:8c:fe:b4:f7:62:46: 8b:13:90:ec:96:78:55:42:a3:80:fe:d1:0c:a6:d5:57:ad:12: de:28:f0:ca:bf:17:1d:12:ab:9f:b7:11:fa:86:63:12:56:26: 15:b3:a7:4a:be:77:23:9b:4f:98:6d:6a:2b:cc:1d:f0:f7:2f: ad:a6:98:da:9b:5b:7d:49:1c:c4:b2:f0:6e:c2:76:5e:5e:f5: b6:2a:15:e7:74:87:65:e0:66:72:b6:ad:a8:50:ed:b9:16:80: fd:c2:4d:6d:7e:2a:29:fe:4e:0f:7b:0e:75:c9:da:34:76:f9: 1b:01:5d:a4:09:9d:03:1b:dd:d7:0d:00:84:4a:91:e4:1e:a9: 0e:53:60:3a:9a:3a:75:4c:e2:0f:83:b8:dc:f0:9d:be:7c:d9: fa:d7:69:06:ad:7c:4a:de:6c:b8:94:d3:40:cb:bb:5d:f8:8e: d4:e5:9d:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/wNt57cbmEwcWyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk NGJmZTRhMzItOWE1NS00ZWI2LWJjZjYtM2JkZjI2MjdmMGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyMHChQRJle+LEUpzHrwVwoSVxZVS/dgpfzI DmM792FuIJXce61SvhJnaS1KBF46XqU8KeHAR816wRqa/f3yAvfKoOUoFb1x2ZvR Z4B+1hYLhQ0tCCtfJ+IOo2T64CVgaq9hjxNX5YHwJehy0BuGPAw0SKDSXcfwPJKI eev9tRkPYYS2yVLd6mP8iPZ99Ime8CGpwccrJ6oDrmQalAtMKDLiI+aky7B2YaCX Gr9BHYT0XSb9zGtS4pZctsWZdCjI6nQhgcdJOdSGkd27I+JYO3pshX9DgPc5BbxF 1fMfPUOM2xdHQu+aJ0/hnKpN+rC8px9uqaU0OPlMrEsqwLRBfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLuhuTS5d4y4t+JPRWn1kSMUY1NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZjNhZmJkODMtNDllMS0z MTY1LWE5MDUtNzA1Yzc4YjVmODBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOsQrK7KCcaun0U22Kf0jV1qevUaP8gjVo/TTA/kNUMzM58o4WMvlO2T 1iieXiLmSf6tntCl2p9mA5zb+xe/gljcoRs1QlCfGSBSeDOGw0kDwjLWM4z+tPdi RosTkOyWeFVCo4D+0Qym1VetEt4o8Mq/Fx0Sq5+3EfqGYxJWJhWzp0q+dyObT5ht aivMHfD3L62mmNqbW31JHMSy8G7Cdl5e9bYqFed0h2XgZnK2rahQ7bkWgP3CTW1+ Kin+Tg97DnXJ2jR2+RsBXaQJnQMb3dcNAIRKkeQeqQ5TYDqaOnVM4g+DuNzwnb58 2frXaQatfErebLiU00DLu134jtTlnbA= -----END CERTIFICATE-----Generated at Sat Apr 26 12:20:50 2025 by rpki-client