$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28d0696b-8dfd-3cab-8fab-1a07f8dbee06.roa File: 28d0696b-8dfd-3cab-8fab-1a07f8dbee06.roa (raw, json) Hash identifier: mFKjJQVjKVjL5aLEwQCfvXKSkbOqZfFq7nQ11tLUzZM= Subject key identifier: 91:DA:0F:93:EB:AA:0F:5B:D7:F0:A5:62:0E:59:BA:53:61:27:C1:54 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B6261829DE93D024ADBB60A0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28d0696b-8dfd-3cab-8fab-1a07f8dbee06.roa Signing time: Thu 30 Jan 2025 02:00:40 +0000 ROA not before: Thu 30 Jan 2025 02:00:40 +0000 ROA not after: Wed 30 Apr 2025 01:00:40 +0000 asID: 852 IP address blocks: 209.121.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:26:18:29:de:93:d0:24:ad:bb:60:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 30 02:00:40 2025 GMT Not After : Apr 30 01:00:40 2025 GMT Subject: CN=38f12fd6-6280-4c53-9759-a1c235c9af0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:38:fb:4a:94:8c:e2:47:e4:df:4f:1d:47:ab: 84:db:df:2b:73:45:bf:95:fc:72:bc:ec:f4:c4:55: b1:aa:b7:90:94:12:2b:92:6d:a8:fe:65:ec:65:52: bc:84:45:60:9a:f3:1d:fb:1e:e3:a9:b0:11:95:7a: 3a:46:f5:a5:ab:85:52:19:b2:24:a4:c2:69:00:c4: 48:59:10:7a:b5:b8:8a:54:e9:c4:c1:4f:d5:a1:98: 86:9a:28:56:0f:75:5d:59:6a:ed:e5:30:e3:c5:34: 7a:d8:f3:bd:85:a7:dd:3e:3f:e6:8a:72:b4:22:a5: 99:00:b5:e7:cd:1d:73:9f:83:05:96:92:ec:b1:c3: 8a:58:94:90:1f:db:7a:70:27:ba:12:6c:1a:b6:0e: 02:77:92:78:d2:7b:72:4c:de:e0:e7:c9:14:90:4f: 4c:52:d8:74:80:0e:5a:60:e9:26:c2:4c:c6:08:1c: 3a:04:5c:d2:55:a1:1b:1e:c3:8c:17:59:f4:29:eb: 6c:0e:59:24:30:cc:68:57:03:c6:a7:22:86:ce:1a: ae:57:93:5e:35:b3:d8:25:02:84:70:68:48:ac:9a: a5:2e:e8:46:27:4b:05:16:52:4a:5f:40:4f:dc:7a: f6:17:38:01:a9:19:9b:ce:7a:d0:f6:e6:ce:fe:75: 4d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DA:0F:93:EB:AA:0F:5B:D7:F0:A5:62:0E:59:BA:53:61:27:C1:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28d0696b-8dfd-3cab-8fab-1a07f8dbee06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.121.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:b3:11:fe:c8:73:4e:1b:8b:15:be:01:59:c4:82:34:5d:f2: 23:9e:53:07:1e:87:16:8a:96:88:dc:bd:09:a9:79:de:3a:f2: 60:ae:ba:b9:be:03:d1:b9:b0:54:12:24:c8:70:b6:a1:a4:62: 74:da:9d:57:41:a0:54:ed:61:da:33:0b:9c:61:b2:29:73:49: 0e:cd:c2:9f:ac:41:e0:75:3c:90:d1:1c:f6:19:29:5f:03:00: 2e:fc:02:9a:d3:53:b9:59:58:71:10:bd:f9:43:af:a2:62:9c: 48:f6:2c:a2:67:0f:88:b4:2e:7a:c0:86:a5:3b:56:d5:e6:53: 8a:ba:1a:32:2d:4e:a9:d5:65:a4:19:40:2d:a0:b4:69:85:b0: c7:a9:d4:c0:f9:a6:7b:ce:19:e5:6c:38:98:76:17:5e:77:a4: 6f:6f:39:37:83:aa:56:de:06:b1:8a:fc:a0:e3:8e:4d:2d:db: 73:bf:00:80:05:a4:c2:1e:6c:c3:57:67:e7:91:6d:50:4b:31: 25:b5:4d:b6:9c:33:84:71:4f:ff:af:db:ef:53:69:57:5a:ca: 1c:41:32:2e:43:ca:ca:f8:ea:bd:56:29:f4:c2:44:09:c3:1a: 51:f1:c3:fb:d5:49:22:3f:71:a8:78:b8:55:e3:d0:1b:d9:df: 75:79:3e:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi2Jhgp3pPQJK27YKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEzMDAyMDA0MFoXDTI1MDQzMDAxMDA0MFowLzEtMCsGA1UEAxMk MzhmMTJmZDYtNjI4MC00YzUzLTk3NTktYTFjMjM1YzlhZjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDj7SpSM4kfk308dR6uE298rc0W/lfxyvOz0 xFWxqreQlBIrkm2o/mXsZVK8hEVgmvMd+x7jqbARlXo6RvWlq4VSGbIkpMJpAMRI WRB6tbiKVOnEwU/VoZiGmihWD3VdWWrt5TDjxTR62PO9hafdPj/minK0IqWZALXn zR1zn4MFlpLsscOKWJSQH9t6cCe6Emwatg4Cd5J40ntyTN7g58kUkE9MUth0gA5a YOkmwkzGCBw6BFzSVaEbHsOMF1n0KetsDlkkMMxoVwPGpyKGzhquV5NeNbPYJQKE cGhIrJqlLuhGJ0sFFlJKX0BP3Hr2FzgBqRmbznrQ9ubO/nVNIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHaD5Prqg9b1/ClYg5ZulNhJ8FUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjhkMDY5NmItOGRmZC0z Y2FiLThmYWItMWEwN2Y4ZGJlZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XlHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKizEf7Ic04bixW+AVnEgjRd8iOeUwcehxaKlojcvQmped468mCuurm+ A9G5sFQSJMhwtqGkYnTanVdBoFTtYdozC5xhsilzSQ7Nwp+sQeB1PJDRHPYZKV8D AC78AprTU7lZWHEQvflDr6JinEj2LKJnD4i0LnrAhqU7VtXmU4q6GjItTqnVZaQZ QC2gtGmFsMep1MD5pnvOGeVsOJh2F153pG9vOTeDqlbeBrGK/KDjjk0t23O/AIAF pMIebMNXZ+eRbVBLMSW1TbacM4RxT/+v2+9TaVdayhxBMi5Dysr46r1WKfTCRAnD GlHxw/vVSSI/cah4uFXj0BvZ33V5Pq0= -----END CERTIFICATE-----Generated at Sun Feb 16 20:44:11 2025 by rpki-client