$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/31957a02-b0ea-3ae7-b577-0f3188d3ca54.roa File: 31957a02-b0ea-3ae7-b577-0f3188d3ca54.roa (raw, json) Hash identifier: 2KC+ZU9rRVtCw1wxNchIP7oPfNxZ4BFuYvmrbXxeSQc= Subject key identifier: 3A:F8:21:20:28:BE:ED:15:8C:54:9E:38:AD:22:F9:7B:C4:65:05:D4 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B35B6272D300FF64F9E9DC50 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/31957a02-b0ea-3ae7-b577-0f3188d3ca54.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 7861 IP address blocks: 209.20.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:62:72:d3:00:ff:64:f9:e9:dc:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=eb64801e-4697-4542-8fb2-4b6d3acf90eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8a:b8:c3:c3:a3:43:18:24:9a:2d:65:15:90: c7:13:1f:89:20:71:13:4a:25:ba:1e:df:b2:6a:99: 9c:80:5d:14:0c:e3:4a:e6:6f:21:4a:f9:51:d7:05: a9:81:a5:29:b5:54:e9:12:82:23:32:68:f7:25:a6: 2b:c9:98:69:d9:35:80:8b:a0:63:37:ea:db:1e:4a: 53:05:ed:df:fe:15:8d:35:a4:67:d7:26:15:d5:90: 85:59:a1:2c:f6:cc:55:28:ed:df:e7:fa:d7:03:33: 5f:e2:be:90:d3:8a:d5:67:49:df:f7:ca:eb:97:12: 87:d7:c4:95:30:1d:f6:c0:c0:36:34:f5:42:b2:dd: 41:e7:f2:5e:b8:3f:8c:b1:e8:02:51:52:8a:7c:a0: e9:64:09:0d:eb:4d:70:ae:af:dd:9b:59:d2:73:3c: 07:ce:4c:6e:20:97:0e:d0:c6:59:96:09:2b:e4:c0: c5:5f:1b:1f:2b:1e:b0:c0:62:df:43:23:f9:7f:be: 0b:6a:bd:82:43:34:71:aa:a1:5f:a2:8c:6c:ac:70: e0:88:af:b5:40:1a:4f:26:c6:52:25:a3:88:bc:2d: c7:b1:0d:36:ba:bf:69:c4:db:56:60:f2:01:bc:bd: cb:18:fd:10:e6:2a:73:d7:31:ae:ac:44:33:4d:f0: 8a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F8:21:20:28:BE:ED:15:8C:54:9E:38:AD:22:F9:7B:C4:65:05:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/31957a02-b0ea-3ae7-b577-0f3188d3ca54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.20.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:f6:49:86:fe:5f:60:c5:96:9f:1c:5d:f9:77:3e:bf:a1:4b: 11:53:98:ce:28:d3:21:0d:ff:ab:7c:f0:31:2d:a7:26:b0:a6: fb:db:5c:d9:1c:b6:33:a6:74:66:b8:ca:4e:ad:da:bd:7f:5e: 3b:9b:b1:3d:50:23:8f:cb:e1:26:17:6a:fc:d3:d9:3b:01:81: f4:bd:26:9c:aa:a9:de:38:74:8d:ab:d1:f2:d7:2c:93:28:d3: b3:69:93:96:1c:b7:5c:f8:5f:9c:a6:39:6d:fc:7a:eb:4b:f6: b7:07:b2:e8:7d:53:be:47:38:cb:3d:a8:5d:94:e8:a5:b6:38: 22:4a:89:2c:e8:29:74:04:39:d4:cc:25:6e:5b:fa:4f:06:5f: 5d:6f:9d:06:a0:9e:1f:c8:bb:85:64:25:6d:c8:12:1b:7e:50: 7d:96:d5:18:82:c5:83:c4:7b:ec:ba:67:64:fc:ba:96:bf:bf: 71:35:55:b9:f8:09:61:ce:49:fa:e6:29:05:fd:dd:45:21:8f: ad:cf:9e:f3:f7:cc:14:98:2b:d2:ca:29:6d:bf:ae:b9:a8:0a: fc:03:e9:b5:e9:f4:dc:e7:af:1f:51:65:e7:ea:fa:0c:dc:f0: 0f:96:ff:aa:f1:7f:ac:b7:47:8f:00:b6:dd:f3:8f:0e:98:1b: 36:0c:08:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW2Jy0wD/ZPnp3FAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk ZWI2NDgwMWUtNDY5Ny00NTQyLThmYjItNGI2ZDNhY2Y5MGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4q4w8OjQxgkmi1lFZDHEx+JIHETSiW6Ht+y apmcgF0UDONK5m8hSvlR1wWpgaUptVTpEoIjMmj3JaYryZhp2TWAi6BjN+rbHkpT Be3f/hWNNaRn1yYV1ZCFWaEs9sxVKO3f5/rXAzNf4r6Q04rVZ0nf98rrlxKH18SV MB32wMA2NPVCst1B5/JeuD+MsegCUVKKfKDpZAkN601wrq/dm1nSczwHzkxuIJcO 0MZZlgkr5MDFXxsfKx6wwGLfQyP5f74Lar2CQzRxqqFfooxsrHDgiK+1QBpPJsZS JaOIvC3HsQ02ur9pxNtWYPIBvL3LGP0Q5ipz1zGurEQzTfCKeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDr4ISAovu0VjFSeOK0i+XvEZQXUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzE5NTdhMDItYjBlYS0z YWU3LWI1NzctMGYzMTg4ZDNjYTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM32SYb+X2DFlp8cXfl3Pr+hSxFTmM4o0yEN/6t88DEtpyawpvvbXNkc tjOmdGa4yk6t2r1/XjubsT1QI4/L4SYXavzT2TsBgfS9Jpyqqd44dI2r0fLXLJMo 07Npk5Yct1z4X5ymOW38eutL9rcHsuh9U75HOMs9qF2U6KW2OCJKiSzoKXQEOdTM JW5b+k8GX11vnQagnh/Iu4VkJW3IEht+UH2W1RiCxYPEe+y6Z2T8upa/v3E1Vbn4 CWHOSfrmKQX93UUhj63PnvP3zBSYK9LKKW2/rrmoCvwD6bXp9Nznrx9RZefq+gzc 8A+W/6rxf6y3R48Att3zjw6YGzYMCLE= -----END CERTIFICATE-----Generated at Tue Apr 15 05:33:59 2025 by rpki-client