$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1beebeaf-1f0e-319d-a76d-aa110fadd44c.roa File: 1beebeaf-1f0e-319d-a76d-aa110fadd44c.roa (raw, json) Hash identifier: wqnxVotTKmMaAFVVskbnIbKc9xOJUcsPVuRK0W2JAok= Subject key identifier: 30:5F:89:99:78:65:62:5D:44:12:55:54:47:DE:7B:64:D7:FF:D7:9B Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B8F0C93F59C62D656C6F7DC0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1beebeaf-1f0e-319d-a76d-aa110fadd44c.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 852 IP address blocks: 209.52.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:c9:3f:59:c6:2d:65:6c:6f:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=16f19d31-a6e0-4cb4-9542-1e1a417f8fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:20:1c:fb:25:7e:a2:f1:9b:d4:10:af:94:52: 34:27:7d:e6:74:69:ac:6f:cd:24:8f:56:93:9d:92: 76:ea:09:08:05:df:03:74:7f:59:25:32:2e:3b:92: 17:82:44:2d:e5:3f:63:54:51:8d:1d:92:d3:85:2a: 90:ff:a6:e5:43:34:8e:91:84:f8:5f:34:d1:8d:66: 77:07:6f:10:e4:d9:c6:0c:1e:ac:bf:03:db:84:e8: 9e:9f:61:f5:d6:ff:41:cd:d4:b1:10:e2:64:91:fd: 6e:40:4f:f6:df:fd:44:3e:90:31:6d:6f:b8:b9:99: 9f:1f:c6:ed:91:92:18:cb:2d:e4:e1:83:90:b4:c8: 9e:f0:7e:fc:3e:39:aa:4d:d8:5d:9d:49:30:10:36: d5:26:80:42:08:6d:58:89:0d:43:93:45:a3:40:3e: 6b:7b:a3:81:b3:c4:83:5e:63:72:18:25:55:51:2d: 48:a3:92:07:97:81:ff:ed:e1:9d:11:32:58:ba:0d: 53:00:7d:29:55:03:bf:29:03:18:5f:9c:d1:6b:59: 89:90:6b:0a:aa:92:da:33:a8:b3:4f:5f:11:f7:46: 9d:aa:91:09:3d:2d:02:0e:9e:6b:04:b7:bd:d0:4e: 62:ed:03:21:73:b0:de:e9:58:37:6e:6b:c9:97:ba: ff:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5F:89:99:78:65:62:5D:44:12:55:54:47:DE:7B:64:D7:FF:D7:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1beebeaf-1f0e-319d-a76d-aa110fadd44c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:71:64:8f:6f:a9:c5:40:5e:3b:b8:2f:54:1c:ff:61:f3:1d: 32:cc:89:5e:d2:9d:63:bf:4b:12:3f:6f:22:5a:2e:18:ec:81: d8:fc:d8:54:4c:e7:c0:79:8a:97:28:d5:a1:15:44:47:41:d0: 95:2e:9d:d4:c3:1c:a1:64:74:a7:90:e7:33:bc:14:67:dc:51: 34:26:4f:27:58:bc:ef:13:b8:84:04:64:8c:2b:94:f1:54:97: 1f:af:29:33:26:0f:60:26:3e:60:1d:d1:90:d2:7d:08:ea:14: 78:6b:59:74:91:72:52:9b:04:73:cb:af:bc:a7:6c:e3:2f:a3: 22:de:fb:f5:e8:6c:ea:03:59:be:06:42:01:9c:17:ae:14:47: 28:6e:0c:5d:b2:89:85:c4:a1:da:9c:60:83:dd:c3:26:bf:e8: de:98:f2:21:52:35:22:b5:4f:6d:2e:6d:32:51:7b:11:10:e9: 53:3a:b0:73:76:84:2a:67:c0:95:dd:25:72:63:16:18:0e:6d: e2:e7:7c:dc:fa:f8:ba:b5:70:55:ea:40:41:b1:fb:5a:97:c4: cd:aa:f6:53:71:45:98:45:1f:24:69:92:55:32:9f:72:a5:39: f6:9f:1c:f5:ac:78:03:f9:2f:33:ae:23:13:a7:7b:56:55:4a: 45:ae:53:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48Mk/WcYtZWxvfcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk MTZmMTlkMzEtYTZlMC00Y2I0LTk1NDItMWUxYTQxN2Y4ZmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSAc+yV+ovGb1BCvlFI0J33mdGmsb80kj1aT nZJ26gkIBd8DdH9ZJTIuO5IXgkQt5T9jVFGNHZLThSqQ/6blQzSOkYT4XzTRjWZ3 B28Q5NnGDB6svwPbhOien2H11v9BzdSxEOJkkf1uQE/23/1EPpAxbW+4uZmfH8bt kZIYyy3k4YOQtMie8H78PjmqTdhdnUkwEDbVJoBCCG1YiQ1Dk0WjQD5re6OBs8SD XmNyGCVVUS1Io5IHl4H/7eGdETJYug1TAH0pVQO/KQMYX5zRa1mJkGsKqpLaM6iz T18R90adqpEJPS0CDp5rBLe90E5i7QMhc7De6Vg3bmvJl7r/pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBfiZl4ZWJdRBJVVEfee2TX/9ebMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMWJlZWJlYWYtMWYwZS0z MTlkLWE3NmQtYWExMTBmYWRkNDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0TQoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJxZI9vqcVAXju4L1Qc/2HzHTLMiV7SnWO/SxI/byJaLhjsgdj82FRM 58B5ipco1aEVREdB0JUundTDHKFkdKeQ5zO8FGfcUTQmTydYvO8TuIQEZIwrlPFU lx+vKTMmD2AmPmAd0ZDSfQjqFHhrWXSRclKbBHPLr7ynbOMvoyLe+/XobOoDWb4G QgGcF64URyhuDF2yiYXEodqcYIPdwya/6N6Y8iFSNSK1T20ubTJRexEQ6VM6sHN2 hCpnwJXdJXJjFhgObeLnfNz6+Lq1cFXqQEGx+1qXxM2q9lNxRZhFHyRpklUyn3Kl OfafHPWseAP5LzOuIxOne1ZVSkWuUzY= -----END CERTIFICATE-----Generated at Sun Apr 6 06:01:12 2025 by rpki-client