$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/6e44f97c-d966-372b-91ba-e139e574fc4e.roa File: 6e44f97c-d966-372b-91ba-e139e574fc4e.roa (raw, json) Hash identifier: xQl9SMqubsY1h5GLB6TXlZY66cXNSTx78A+TEkune0c= Subject key identifier: 92:6E:F7:5F:F7:68:3D:CC:2F:E2:52:E2:57:C7:F6:05:1C:8B:2E:88 Certificate issuer: /CN=f4f85718-cda0-442f-9727-709a536e1e27 Certificate serial: 010D0C9F43285848EF6155814DD9636B063A2F80 Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/6e44f97c-d966-372b-91ba-e139e574fc4e.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 6639 IP address blocks: 209.27.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:55:81:4d:d9:63:6b:06:3a:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=c2b04bfe-a4e8-46b5-90ba-e7da1f314f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:00:70:c2:14:81:b4:1f:ee:f5:68:af:2e:b2: f0:ee:d5:57:ca:1e:81:77:13:c0:99:95:c1:5e:6e: 21:1a:40:83:01:36:1b:f8:c2:38:d6:9c:56:c9:e3: 68:85:62:41:b9:84:2f:8e:84:a0:9f:b6:63:0f:3c: 87:d5:fe:04:70:b5:6e:08:76:b3:ef:ce:9e:6b:a1: 4e:de:72:cb:c9:97:46:ac:96:61:ca:c7:31:0e:76: 9e:e5:70:06:2c:c5:b5:07:94:9e:e5:de:b9:6e:1a: a3:bf:52:53:0f:e6:05:06:0e:4f:95:ab:e0:3e:69: 29:52:01:f2:6c:f0:12:64:1b:19:05:c5:8e:cd:11: 64:5a:fb:44:db:d9:29:fa:03:eb:10:29:c2:cd:4e: 81:cd:56:ca:d1:9e:65:d4:fa:94:99:c6:aa:83:da: 31:4b:e0:53:ea:7f:ef:75:7d:a8:b0:2e:97:d0:97: d7:b3:6d:3b:86:3b:fd:c3:e4:8e:5f:a8:0b:52:3c: 0d:27:a3:5e:88:e6:61:b5:78:27:1c:f6:bd:d3:d3: 74:b0:3e:f1:45:97:f8:05:90:06:7d:98:44:32:33: d2:84:1e:d9:d0:7e:d2:ad:c7:01:a9:eb:73:b1:55: bf:a0:42:db:ec:84:13:57:e9:0c:59:2a:a5:f1:7c: 09:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:6E:F7:5F:F7:68:3D:CC:2F:E2:52:E2:57:C7:F6:05:1C:8B:2E:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/6e44f97c-d966-372b-91ba-e139e574fc4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl X509v3 Authority Key Identifier: keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer sbgp-ipAddrBlock: critical IPv4: 209.27.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:fb:cf:5b:95:88:f3:67:fc:a1:22:a8:ec:5e:00:b4:bb:6f: f7:dc:5d:56:28:c7:f6:b7:b4:bc:a6:9d:cd:d7:2a:7b:aa:7b: 30:97:70:9d:1f:69:25:a9:b8:48:0f:97:5d:f6:51:2f:7c:34: d6:58:8f:99:1f:50:87:9d:ca:1c:2d:da:d1:d5:7c:8d:5f:d3: ff:b8:b7:37:28:c8:d0:21:78:64:a5:53:23:7f:5b:d1:09:80: 7a:f8:03:20:58:32:dd:7b:01:8e:d4:80:98:27:81:5d:df:43: 02:9e:ab:93:c7:7d:33:83:2e:73:4a:00:d4:60:d4:7f:31:95: af:d5:ba:e2:78:bd:42:0f:69:50:dd:b3:b8:aa:f4:63:76:19: 77:22:0a:82:f6:a5:53:19:b2:44:4e:38:1b:ca:0d:41:57:e6: f1:27:15:9b:a0:1d:cf:c4:13:fb:75:7c:2d:cf:68:7f:16:d1: b2:36:e0:d8:80:cb:31:8b:80:63:45:ed:ad:e1:33:d1:b4:e4: e4:14:6a:d2:71:95:b1:95:06:48:18:22:16:9e:f9:b8:02:8b: 72:d5:82:ff:b3:fa:d6:8a:48:9e:4b:b5:c6:50:1f:9e:11:21: d4:25:0c:4d:ec:ea:0f:aa:3d:ff:60:63:b3:71:24:75:17:23: 68:0c:59:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYVWBTdljawY6L4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRmODU3MTgtY2RhMC00NDJmLTk3MjctNzA5YTUzNmUx ZTI3MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YzJiMDRiZmUtYTRlOC00NmI1LTkwYmEtZTdkYTFmMzE0ZjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QBwwhSBtB/u9WivLrLw7tVXyh6BdxPAmZXB Xm4hGkCDATYb+MI41pxWyeNohWJBuYQvjoSgn7ZjDzyH1f4EcLVuCHaz786ea6FO 3nLLyZdGrJZhyscxDnae5XAGLMW1B5Se5d65bhqjv1JTD+YFBg5PlavgPmkpUgHy bPASZBsZBcWOzRFkWvtE29kp+gPrECnCzU6BzVbK0Z5l1PqUmcaqg9oxS+BT6n/v dX2osC6X0JfXs207hjv9w+SOX6gLUjwNJ6NeiOZhtXgnHPa909N0sD7xRZf4BZAG fZhEMjPShB7Z0H7SrccBqetzsVW/oELb7IQTV+kMWSql8XwJHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJu91/3aD3ML+JS4lfH9gUciy6IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4 NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2ZTFlMjcvNmU0NGY5N2MtZDk2Ni0z NzJiLTkxYmEtZTEzOWU1NzRmYzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjRmODU3MTgtY2RhMC00NDJmLTk3 MjctNzA5YTUzNmUxZTI3L2Y0Zjg1NzE4LWNkYTAtNDQyZi05NzI3LTcwOWE1MzZl MWUyNy5jcmwwHwYDVR0jBBgwFoAUa2/guyMG6CGl/y1Pb59cNa87Qn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlh NTM2ZTFlMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Rs0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIn7z1uViPNn/KEiqOxeALS7b/fcXVYox/a3tLymnc3XKnuqezCXcJ0f aSWpuEgPl132US98NNZYj5kfUIedyhwt2tHVfI1f0/+4tzcoyNAheGSlUyN/W9EJ gHr4AyBYMt17AY7UgJgngV3fQwKeq5PHfTODLnNKANRg1H8xla/VuuJ4vUIPaVDd s7iq9GN2GXciCoL2pVMZskROOBvKDUFX5vEnFZugHc/EE/t1fC3PaH8W0bI24NiA yzGLgGNF7a3hM9G05OQUatJxlbGVBkgYIhae+bgCi3LVgv+z+taKSJ5LtcZQH54R IdQlDE3s6g+qPf9gY7NxJHUXI2gMWfU= -----END CERTIFICATE-----Generated at Tue Apr 29 14:20:43 2025 by rpki-client