$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1454b60f-a984-384e-8d51-13e18a917820.roa File: 1454b60f-a984-384e-8d51-13e18a917820.roa (raw, json) Hash identifier: Fqa681i1qHCQS4GUKVvrDJnQ/DO1bzqDMDj4Ezsj6/s= Subject key identifier: 3A:A0:19:41:A5:CA:CD:EB:3C:99:E6:2C:F8:64:03:3B:20:B6:69:76 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584976A994974E65BD7463EB9E00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1454b60f-a984-384e-8d51-13e18a917820.roa Signing time: Wed 09 Apr 2025 01:00:47 +0000 ROA not before: Wed 09 Apr 2025 01:00:47 +0000 ROA not after: Tue 08 Jul 2025 01:00:47 +0000 asID: 19341 IP address blocks: 209.20.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:76:a9:94:97:4e:65:bd:74:63:eb:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 9 01:00:47 2025 GMT Not After : Jul 8 01:00:47 2025 GMT Subject: CN=9f25830a-748f-405f-ba7f-a2126b0c76c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:67:c7:84:09:63:d3:d8:3c:47:9a:a0:09:af: 77:cc:68:1c:72:ad:b5:90:ce:11:b9:95:01:2b:c8: 12:3e:35:1b:9b:b9:8a:31:a2:dd:fd:2c:d0:bc:c9: 25:18:b6:55:54:b3:19:de:26:6f:b9:0c:07:e2:58: b0:e1:b5:cd:5b:59:f0:23:c2:ba:e5:bf:bc:59:44: c8:d2:d5:37:ae:8d:a8:52:aa:be:1b:8d:28:13:5b: b9:d3:fe:54:a6:27:99:30:56:c5:c3:02:04:d6:c9: f0:29:01:a6:01:e3:7a:57:10:3f:f9:c8:16:0c:f6: b3:78:e9:f8:55:20:0f:40:19:a5:88:14:97:0b:a7: b1:3e:dc:ba:9d:73:7c:e8:f2:56:9a:68:4b:a4:36: 31:6d:09:f3:24:9c:28:12:d6:bd:1e:4c:04:33:c3: fb:65:f2:92:e1:e5:0e:79:c5:2b:7d:83:36:ba:89: 8c:cd:a8:26:08:c5:88:c0:55:f7:bb:70:69:31:35: e3:41:a0:46:e7:3d:13:62:8c:68:49:35:82:f7:99: c4:f7:1e:4a:20:82:1e:36:f4:ab:fa:07:7f:dd:dd: ee:31:28:62:77:c9:c5:de:6f:77:76:5d:bd:1e:07: 11:8b:67:61:b4:16:e2:3d:f5:62:09:b7:a3:4c:5e: a5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A0:19:41:A5:CA:CD:EB:3C:99:E6:2C:F8:64:03:3B:20:B6:69:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1454b60f-a984-384e-8d51-13e18a917820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.20.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:ae:37:a3:ac:b2:c3:f7:69:5e:aa:af:3e:80:9e:87:33:01: c6:44:bb:ee:3a:bf:f3:4e:60:d6:1f:75:78:8e:22:63:76:4c: 65:a0:9e:a4:32:69:8f:be:e7:24:ef:c2:de:8b:66:8a:ed:11: 6b:63:13:ce:ca:49:ca:d2:ff:35:62:32:39:ac:95:9d:51:05: 83:da:fa:3c:69:c8:1a:6d:50:25:82:1a:d9:c0:38:6f:da:87: e8:4a:e8:64:e7:6e:32:d7:a2:81:6d:ab:d4:1d:14:e6:ef:1b: 8f:a3:b4:b2:c6:f2:b0:75:3b:6b:3a:da:b4:d1:53:87:e6:6c: cf:54:a4:0c:e0:80:18:7d:a8:5b:a4:8e:66:3e:66:c8:5a:11: 8c:62:ef:18:7d:0c:10:ef:72:2f:8d:9c:dd:e2:db:72:32:24: 22:8e:9c:13:1c:af:a6:4f:8f:c1:b3:cb:a9:c3:a6:74:2a:08: 0c:18:c5:4d:87:5f:48:a6:31:96:1e:96:c4:76:1d:70:ca:87: 0c:02:b2:59:ad:90:2f:6e:87:07:b3:c9:55:ca:9f:22:9d:7f: 4d:a6:d5:a4:bf:68:2e:86:de:0e:e4:fa:29:64:51:bd:bd:a0: 43:22:4e:8a:20:ba:c6:25:cf:6e:d7:34:a7:bd:4e:00:d6:9a: fe:ab:67:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl2qZSXTmW9dGPrngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQwOTAxMDA0N1oXDTI1MDcwODAxMDA0N1owLzEtMCsGA1UEAxMk OWYyNTgzMGEtNzQ4Zi00MDVmLWJhN2YtYTIxMjZiMGM3NmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWfHhAlj09g8R5qgCa93zGgccq21kM4RuZUB K8gSPjUbm7mKMaLd/SzQvMklGLZVVLMZ3iZvuQwH4liw4bXNW1nwI8K65b+8WUTI 0tU3ro2oUqq+G40oE1u50/5UpieZMFbFwwIE1snwKQGmAeN6VxA/+cgWDPazeOn4 VSAPQBmliBSXC6exPty6nXN86PJWmmhLpDYxbQnzJJwoEta9HkwEM8P7ZfKS4eUO ecUrfYM2uomMzagmCMWIwFX3u3BpMTXjQaBG5z0TYoxoSTWC95nE9x5KIIIeNvSr +gd/3d3uMShid8nF3m93dl29HgcRi2dhtBbiPfViCbejTF6lEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqgGUGlys3rPJnmLPhkAzsgtml2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMTQ1NGI2MGYtYTk4NC0z ODRlLThkNTEtMTNlMThhOTE3ODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0RQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALyuN6OsssP3aV6qrz6AnoczAcZEu+46v/NOYNYfdXiOImN2TGWgnqQy aY++5yTvwt6LZortEWtjE87KScrS/zViMjmslZ1RBYPa+jxpyBptUCWCGtnAOG/a h+hK6GTnbjLXooFtq9QdFObvG4+jtLLG8rB1O2s62rTRU4fmbM9UpAzggBh9qFuk jmY+ZshaEYxi7xh9DBDvci+NnN3i23IyJCKOnBMcr6ZPj8Gzy6nDpnQqCAwYxU2H X0imMZYelsR2HXDKhwwCslmtkC9uhwezyVXKnyKdf02m1aS/aC6G3g7k+ilkUb29 oEMiToogusYlz27XNKe9TgDWmv6rZ68= -----END CERTIFICATE-----Generated at Tue Apr 15 05:55:09 2025 by rpki-client