$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa File: 234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa (raw, json) Hash identifier: bys8FX6DOWbpsx6xlT5ZWmiWglFUIRGQroFkQireBf8= Subject key identifier: C1:BC:FD:35:9C:7D:9B:4B:45:52:CC:03:7B:D8:66:D6:AD:2D:D9:D6 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B626143B2FE1BC74FAEEBEA0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa Signing time: Thu 30 Jan 2025 02:00:40 +0000 ROA not before: Thu 30 Jan 2025 02:00:40 +0000 ROA not after: Wed 30 Apr 2025 01:00:40 +0000 asID: 852 IP address blocks: 209.52.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:26:14:3b:2f:e1:bc:74:fa:ee:be:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 30 02:00:40 2025 GMT Not After : Apr 30 01:00:40 2025 GMT Subject: CN=afb5cffa-8ce9-42f8-a43e-1bf4de34bf6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9d:1e:63:3e:aa:c7:b3:f6:7a:11:26:b6:bd: 1c:29:bc:0e:f3:d1:f4:bd:3b:46:3a:d7:f5:44:57: 44:d3:93:0c:6c:55:7d:0a:b1:1c:09:ac:a6:8a:15: 79:21:3b:f1:9e:c4:20:2d:08:55:6b:f0:0e:8c:3a: 86:b9:59:3b:03:20:8b:8d:5d:8f:dd:64:e7:1a:f9: 54:b7:77:51:c1:ce:3d:d3:a6:b2:85:a8:a8:f3:a0: 2a:92:16:4f:e4:66:9e:20:c6:cd:30:3f:31:76:22: 36:b3:dc:89:77:48:21:ce:bc:09:ec:d4:b3:6c:55: ae:e8:cf:c7:4e:ba:2b:70:51:4b:a8:21:bb:0e:a9: 76:e3:85:82:2e:8f:b9:46:7b:65:93:ea:cd:ae:51: c0:f8:85:ca:aa:bf:e0:c4:ab:c1:21:e0:da:8f:c0: 89:e8:f8:43:62:47:ca:8b:05:ba:4c:c5:32:4e:52: 4c:2e:5b:2c:6e:1d:23:55:72:81:37:2f:20:43:65: 90:f3:11:53:5e:20:d0:c7:b4:70:e4:7b:54:e9:83: ab:7c:60:12:f0:39:5f:cb:51:57:d1:29:34:3b:c0: ed:c8:9d:47:77:39:a8:41:3d:3e:3b:11:ec:ab:e2: 67:61:9a:43:b2:1a:2b:60:86:ee:ca:5c:89:06:a3: ea:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:BC:FD:35:9C:7D:9B:4B:45:52:CC:03:7B:D8:66:D6:AD:2D:D9:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:68:f8:a9:32:66:03:6e:dc:04:96:f7:41:b7:22:8c:38:6d: 42:2d:36:13:82:00:ee:f2:0f:87:f2:90:be:d9:af:37:d7:59: 7b:03:74:01:ab:d4:c5:dc:6b:0f:06:98:13:17:98:0d:0f:0d: a7:11:ba:62:18:41:5e:a9:f1:0b:4b:b4:a4:28:1e:93:5d:dc: 90:a7:4e:1d:f8:c9:86:9a:46:63:55:1c:0e:0d:65:f0:40:1d: 72:2b:a9:82:9e:04:65:15:40:dd:d9:ed:29:a7:de:c7:93:03: b5:0d:54:ca:44:17:eb:da:64:50:55:1e:ff:95:84:eb:d3:63: 24:dd:6c:f6:22:fd:43:61:1d:d2:fe:c5:b3:70:af:c3:34:1f: 44:56:37:72:2f:e1:5b:65:68:38:cd:51:af:5a:14:e2:18:36: a0:0b:a3:04:94:21:29:40:49:94:cd:d9:09:de:54:9c:f6:c5: 70:f8:ef:82:8f:c3:31:6b:3d:75:80:09:d8:5a:e7:78:d0:a2: 55:2b:e4:3f:e2:cb:fd:67:2a:57:d5:7c:d9:e9:78:c8:0f:e9: 84:8a:19:c8:09:02:2b:bf:42:b8:07:34:07:75:82:5d:5d:00: ea:7e:97:99:dc:d3:20:89:9e:86:6f:1f:2a:b2:95:19:ff:58: 3d:62:b7:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi2JhQ7L+G8dPruvqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEzMDAyMDA0MFoXDTI1MDQzMDAxMDA0MFowLzEtMCsGA1UEAxMk YWZiNWNmZmEtOGNlOS00MmY4LWE0M2UtMWJmNGRlMzRiZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp0eYz6qx7P2ehEmtr0cKbwO89H0vTtGOtf1 RFdE05MMbFV9CrEcCaymihV5ITvxnsQgLQhVa/AOjDqGuVk7AyCLjV2P3WTnGvlU t3dRwc4906ayhaio86AqkhZP5GaeIMbNMD8xdiI2s9yJd0ghzrwJ7NSzbFWu6M/H TrorcFFLqCG7Dql244WCLo+5Rntlk+rNrlHA+IXKqr/gxKvBIeDaj8CJ6PhDYkfK iwW6TMUyTlJMLlssbh0jVXKBNy8gQ2WQ8xFTXiDQx7Rw5HtU6YOrfGAS8Dlfy1FX 0Sk0O8DtyJ1HdzmoQT0+OxHsq+JnYZpDshorYIbuylyJBqPq5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMG8/TWcfZtLRVLMA3vYZtatLdnWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjM0YTRkN2MtMTZlOC0z N2Y0LWFjMDYtMWRkY2M0NTI4ZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNo+KkyZgNu3ASW90G3Iow4bUItNhOCAO7yD4fykL7ZrzfXWXsDdAGr 1MXcaw8GmBMXmA0PDacRumIYQV6p8QtLtKQoHpNd3JCnTh34yYaaRmNVHA4NZfBA HXIrqYKeBGUVQN3Z7Smn3seTA7UNVMpEF+vaZFBVHv+VhOvTYyTdbPYi/UNhHdL+ xbNwr8M0H0RWN3Iv4VtlaDjNUa9aFOIYNqALowSUISlASZTN2QneVJz2xXD474KP wzFrPXWACdha53jQolUr5D/iy/1nKlfVfNnpeMgP6YSKGcgJAiu/QrgHNAd1gl1d AOp+l5nc0yCJnoZvHyqylRn/WD1it7M= -----END CERTIFICATE-----Generated at Sun Apr 6 06:03:05 2025 by rpki-client