$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1bb85a3f-0989-370d-a1bd-9f8cf8eb710c.roa File: 1bb85a3f-0989-370d-a1bd-9f8cf8eb710c.roa (raw, json) Hash identifier: se3nqT2kiJi53x/kVkDQvLdULpStQNU8qMJoCJgyCu4= Subject key identifier: 11:1A:7D:4E:CE:35:03:4B:C2:75:D1:0E:70:4E:0C:4D:75:7E:55:3F Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584930DE5DF3F260ED5AE7FE6560 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1bb85a3f-0989-370d-a1bd-9f8cf8eb710c.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 7861 IP address blocks: 209.29.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:5d:f3:f2:60:ed:5a:e7:fe:65:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=70a7b8dd-fd15-406f-a6c8-4b0adec07b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a7:4d:2d:1f:87:11:68:41:fa:1c:74:69:86: ea:69:14:f8:cd:6e:5c:91:0d:47:a6:53:b1:d6:90: 94:44:54:2c:78:31:33:14:68:c5:f3:27:39:16:33: 56:ee:ab:1b:9e:14:81:c8:a4:30:1a:87:71:5f:7e: 74:9a:a5:e2:d6:fb:16:7f:cb:ca:35:65:57:7f:7a: ac:1c:9a:84:56:1e:66:c1:59:9c:ef:37:48:1a:66: 7a:19:6c:d0:4e:77:17:8a:83:92:49:bf:16:17:32: 3c:25:a7:d4:bc:25:0e:19:25:d2:02:9d:b0:02:d2: ce:65:86:35:7a:ee:55:58:1a:b4:92:90:5e:d8:85: e9:79:7f:e7:ce:02:57:19:a2:e4:36:68:e7:e6:40: 1d:88:f3:a1:fc:a8:e1:87:51:70:fb:f1:a9:c5:48: f5:ce:50:47:eb:b2:8a:6b:34:57:db:b6:22:cd:62: f8:bf:4d:96:75:3e:49:4f:02:a5:0b:3e:63:a0:fb: a0:b7:32:58:3a:20:fd:3e:60:4b:ad:ed:e0:71:7d: dd:15:82:3f:41:e1:85:9a:fb:8f:49:f5:73:81:0c: ea:5a:e8:6a:35:6f:3a:36:e1:35:bc:27:af:ea:28: 14:9c:c1:2d:89:77:9f:6e:74:7b:d5:d4:8c:2d:2f: 02:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:1A:7D:4E:CE:35:03:4B:C2:75:D1:0E:70:4E:0C:4D:75:7E:55:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1bb85a3f-0989-370d-a1bd-9f8cf8eb710c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:86:8d:c7:f8:cb:f5:cf:8c:e1:03:6e:12:67:36:56:aa:54: 0a:99:50:bb:4b:34:f5:24:27:67:19:50:94:17:ef:aa:c1:e6: f0:9f:f7:ee:6c:dd:0c:26:4e:b2:79:38:33:c2:16:12:2d:1f: 70:68:f0:4d:7c:61:ac:0d:8d:9c:68:b9:50:21:b9:85:f8:a1: ab:5f:61:bb:4c:a8:87:3c:63:4d:6d:c5:75:10:51:91:c1:35: 77:3d:b3:73:d0:6d:df:c8:d1:a0:33:4a:eb:3e:3e:8e:a4:59: 2d:42:ec:07:b6:d7:a8:6c:2b:94:fa:40:be:4a:05:6d:3f:a9: d8:b8:fe:c1:1a:96:18:91:a1:0d:1a:4e:4b:ad:42:1f:1e:47: 23:eb:02:f0:20:16:a1:fa:38:7b:54:22:7b:82:f4:7d:4f:26: 2b:fd:74:63:3e:ad:19:c3:8a:ac:35:e6:b5:cf:51:73:86:7f: 1e:af:76:ee:e2:6b:a4:1a:e6:38:31:1d:c2:98:e9:c2:5e:c0: 28:67:05:bd:40:8b:fa:5b:b7:06:8d:53:cf:72:2f:93:2d:fe: 34:fc:0a:12:85:ce:a3:06:ac:00:bf:f1:f6:dd:00:89:f9:5b: 85:f0:45:e0:4f:6a:0c:61:97:58:eb:30:4e:3b:d9:84:45:f3: 00:94:c3:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3l3z8mDtWuf+ZWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk NzBhN2I4ZGQtZmQxNS00MDZmLWE2YzgtNGIwYWRlYzA3YjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qdNLR+HEWhB+hx0aYbqaRT4zW5ckQ1HplOx 1pCURFQseDEzFGjF8yc5FjNW7qsbnhSByKQwGodxX350mqXi1vsWf8vKNWVXf3qs HJqEVh5mwVmc7zdIGmZ6GWzQTncXioOSSb8WFzI8JafUvCUOGSXSAp2wAtLOZYY1 eu5VWBq0kpBe2IXpeX/nzgJXGaLkNmjn5kAdiPOh/Kjhh1Fw+/GpxUj1zlBH67KK azRX27YizWL4v02WdT5JTwKlCz5joPugtzJYOiD9PmBLre3gcX3dFYI/QeGFmvuP SfVzgQzqWuhqNW86NuE1vCev6igUnMEtiXefbnR71dSMLS8CiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEafU7ONQNLwnXRDnBODE11flU/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMWJiODVhM2YtMDk4OS0z NzBkLWExYmQtOWY4Y2Y4ZWI3MTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0R2hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+Gjcf4y/XPjOEDbhJnNlaqVAqZULtLNPUkJ2cZUJQX76rB5vCf9+5s 3QwmTrJ5ODPCFhItH3Bo8E18YawNjZxouVAhuYX4oatfYbtMqIc8Y01txXUQUZHB NXc9s3PQbd/I0aAzSus+Po6kWS1C7Ae216hsK5T6QL5KBW0/qdi4/sEalhiRoQ0a TkutQh8eRyPrAvAgFqH6OHtUInuC9H1PJiv9dGM+rRnDiqw15rXPUXOGfx6vdu7i a6Qa5jgxHcKY6cJewChnBb1Ai/pbtwaNU89yL5Mt/jT8ChKFzqMGrAC/8fbdAIn5 W4XwReBPagxhl1jrME472YRF8wCUwxI= -----END CERTIFICATE-----Generated at Tue Apr 15 05:30:21 2025 by rpki-client