$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/119f9abf-f6bf-35b5-a011-715aa0c97ed9.roa File: 119f9abf-f6bf-35b5-a011-715aa0c97ed9.roa (raw, json) Hash identifier: tV8Xpxt5ofthVmcb4DBL+Ixn+/EcMHPSmD5Rc4RA8n0= Subject key identifier: 00:39:D2:EF:1A:4D:7C:E2:B1:E1:52:16:CC:08:55:CC:4F:28:9C:ED Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B1F62571E4F4064CEAAA3400 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/119f9abf-f6bf-35b5-a011-715aa0c97ed9.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 40934 IP address blocks: 209.52.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:25:71:e4:f4:06:4c:ea:aa:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=af66c9b1-b3d5-4cc9-b9ee-00601822873f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:12:5c:17:50:53:a4:9c:5c:18:2c:0d:25:1e: 0f:2b:ca:0e:57:85:6b:33:97:7c:b3:bf:ff:17:cf: b6:73:02:26:bb:73:24:1c:6d:55:31:57:b4:8a:0a: 08:12:73:ea:42:8e:ef:75:ab:5a:08:48:09:e5:73: 8d:2f:4b:71:6e:7c:7f:3a:ab:a6:35:fd:f1:54:41: 91:fc:b1:9b:fd:65:ff:eb:11:aa:38:cf:41:e8:9d: 14:80:59:62:51:9a:7c:45:48:2f:bb:3d:2d:39:8c: 88:9b:7e:48:e4:5c:9a:3b:21:02:51:50:cd:11:13: 70:ba:e3:e0:77:dd:46:6e:ea:c6:8f:51:25:1c:80: e3:f2:aa:c0:e5:61:a2:01:b1:c5:17:0e:68:4b:8a: 8f:0b:4c:33:d4:19:06:65:4a:a0:be:ca:dd:67:87: e9:cc:b5:8d:07:57:b8:9c:70:f4:ac:fe:36:d2:29: 2e:8a:52:88:ba:04:36:08:66:b4:a8:67:d7:a9:81: f5:5a:35:44:db:ea:11:ad:72:40:c1:e4:bb:4e:8d: 56:8c:71:43:ba:ad:63:86:04:e5:6c:fd:20:e7:73: 42:af:2a:08:73:fb:72:c7:5e:5d:2b:e8:50:19:e0: 87:b8:67:86:2e:e4:c2:92:53:50:cf:cf:eb:da:95: 9c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:39:D2:EF:1A:4D:7C:E2:B1:E1:52:16:CC:08:55:CC:4F:28:9C:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/119f9abf-f6bf-35b5-a011-715aa0c97ed9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:e2:47:7a:7b:cf:84:4d:29:d0:65:53:c2:39:78:de:71:c9: a3:55:fb:3a:19:70:0c:aa:77:7a:45:27:d2:0c:bf:8f:94:52: ab:bc:4b:f4:d4:d1:46:f4:25:92:77:e8:7e:5d:ea:f0:93:5d: 4e:54:ba:11:3a:db:d6:d4:2f:7b:39:04:ec:93:9d:95:40:47: 2d:37:9a:aa:cd:67:fb:5b:b4:95:e5:c5:63:30:c6:b0:5d:bf: d2:17:9b:f1:ee:2e:13:09:91:2e:0b:18:5c:c2:e4:e7:44:a4: b4:2b:3d:b7:5d:2a:5a:f5:48:91:01:19:ce:5b:ad:ea:97:1c: 4e:a7:39:78:44:08:8c:0a:69:82:0f:06:43:16:18:bf:7a:61: bf:b6:3e:e2:a8:1c:b0:de:81:b9:fa:03:99:f6:ac:ba:c3:88: 38:92:1e:66:79:da:e5:31:fd:4b:fd:3b:88:37:da:b9:d0:e9: 66:d6:1c:3f:4f:c8:d4:2c:3a:61:ba:c9:36:46:5a:66:0f:69: 45:2d:a6:91:cf:4e:48:ae:ab:1a:71:c5:ea:11:f1:5d:ee:9a: 0e:76:4d:92:30:7e:20:ab:07:ff:11:73:38:1a:9f:37:63:50: 82:8b:da:ab:63:0f:5b:7d:81:d6:71:03:b2:9f:73:19:10:3e: 5d:60:e0:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9iVx5PQGTOqqNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk YWY2NmM5YjEtYjNkNS00Y2M5LWI5ZWUtMDA2MDE4MjI4NzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRJcF1BTpJxcGCwNJR4PK8oOV4VrM5d8s7// F8+2cwImu3MkHG1VMVe0igoIEnPqQo7vdataCEgJ5XONL0txbnx/OqumNf3xVEGR /LGb/WX/6xGqOM9B6J0UgFliUZp8RUgvuz0tOYyIm35I5FyaOyECUVDNERNwuuPg d91GburGj1ElHIDj8qrA5WGiAbHFFw5oS4qPC0wz1BkGZUqgvsrdZ4fpzLWNB1e4 nHD0rP420ikuilKIugQ2CGa0qGfXqYH1WjVE2+oRrXJAweS7To1WjHFDuq1jhgTl bP0g53NCryoIc/tyx15dK+hQGeCHuGeGLuTCklNQz8/r2pWc0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAA50u8aTXziseFSFswIVcxPKJztMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMTE5ZjlhYmYtZjZiZi0z NWI1LWEwMTEtNzE1YWEwYzk3ZWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TQmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTiR3p7z4RNKdBlU8I5eN5xyaNV+zoZcAyqd3pFJ9IMv4+UUqu8S/TU 0Ub0JZJ36H5d6vCTXU5UuhE629bUL3s5BOyTnZVARy03mqrNZ/tbtJXlxWMwxrBd v9IXm/HuLhMJkS4LGFzC5OdEpLQrPbddKlr1SJEBGc5breqXHE6nOXhECIwKaYIP BkMWGL96Yb+2PuKoHLDegbn6A5n2rLrDiDiSHmZ52uUx/Uv9O4g32rnQ6WbWHD9P yNQsOmG6yTZGWmYPaUUtppHPTkiuqxpxxeoR8V3umg52TZIwfiCrB/8Rczganzdj UIKL2qtjD1t9gdZxA7KfcxkQPl1g4NQ= -----END CERTIFICATE-----Generated at Sun Apr 6 17:13:14 2025 by rpki-client