$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3231792f-1c19-3d67-8e39-a10cd5261653.roa File: 3231792f-1c19-3d67-8e39-a10cd5261653.roa (raw, json) Hash identifier: Yl+cYJh3XHSECpLUm8kxAljdeeqwu1T5h7jf6DkPm48= Subject key identifier: 51:8F:19:E3:3D:E8:C5:E6:38:72:D1:86:6D:3B:12:AC:F7:59:4D:D9 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B35B6297B3AE6FD93EA3F140 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3231792f-1c19-3d67-8e39-a10cd5261653.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 7861 IP address blocks: 209.29.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:62:97:b3:ae:6f:d9:3e:a3:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=89f06d7a-14c7-4b5b-be00-bdcc8599ea8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ff:cc:70:40:8b:41:89:a0:16:7d:3f:4e:b5: a8:2b:f6:96:08:c7:e1:b3:18:b4:f1:df:91:d5:05: eb:bd:40:ff:8e:80:7b:c5:3b:f2:f3:59:cf:99:14: 4c:72:c6:52:50:e9:21:fb:2b:fd:c6:c9:d6:db:7d: f7:40:2f:d3:d9:df:9a:ed:28:da:52:55:58:dc:7c: 20:4e:d6:9e:b9:e0:76:9c:c3:52:76:67:4f:b1:38: f2:6f:0a:df:3d:4c:85:b3:ff:66:87:cf:24:c7:7e: 66:41:6b:5a:d4:49:c6:21:74:15:fa:13:96:bc:6f: 99:b1:1b:bb:72:2c:46:83:83:cc:fb:80:1a:a3:38: 44:36:f0:24:f4:0b:30:05:35:9e:ca:21:ec:bd:c3: b2:8d:60:6d:83:80:db:e3:73:54:74:c0:41:ad:81: 19:99:90:41:23:ae:e2:28:89:49:ac:27:3c:8d:31: da:6e:61:e3:9a:3a:e6:a1:07:12:d2:6d:97:2d:a6: 46:a4:bd:af:62:54:4d:95:c8:29:c8:ea:49:83:1f: 69:4b:3f:07:b1:af:d0:c5:4e:83:00:76:52:95:b2: dd:bc:b9:2c:0e:70:81:2a:8b:75:82:67:bb:15:8d: ee:47:94:6d:15:24:6c:f8:8a:01:10:09:6e:ad:a4: d0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:8F:19:E3:3D:E8:C5:E6:38:72:D1:86:6D:3B:12:AC:F7:59:4D:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3231792f-1c19-3d67-8e39-a10cd5261653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:55:19:4d:f3:78:55:20:d3:e4:1b:5b:0e:ab:23:b7:6f:3a: 4b:1c:b7:67:75:1c:79:7d:fe:6b:76:a9:de:d9:05:fa:10:0e: 05:65:6d:2e:3e:49:0b:ce:42:a3:18:e1:6b:d9:18:0c:ad:3f: a2:8a:51:8c:d4:41:16:63:76:5c:38:9d:4d:19:01:46:6d:2a: 48:d0:76:c8:29:cb:2b:9c:a8:23:31:69:85:44:3c:49:ff:52: 77:a1:4a:fe:31:e9:1f:86:25:40:52:ff:69:dd:90:02:c1:eb: 40:4b:23:91:93:bc:7f:b0:7d:51:86:ec:47:cb:6c:b4:43:18: 37:a5:12:6c:0d:3f:27:8e:56:0a:6b:6f:49:59:77:dd:f5:5a: 29:66:71:c7:a2:2d:01:d8:d0:bc:82:c4:07:78:dd:88:f5:58: 3a:98:75:b1:4d:c6:60:12:37:83:ae:55:01:68:ee:7e:b4:52: bd:93:eb:42:0a:c0:75:a1:d6:07:9c:16:81:08:12:57:67:46: 05:84:7f:e6:ea:3a:29:b2:ea:11:b8:87:da:65:1a:36:0b:9d: 85:6f:99:7f:61:82:21:2c:21:38:d0:62:6b:c7:eb:5e:27:5f: c5:8d:1f:98:13:ba:6f:85:c2:48:f2:19:62:5a:0d:d7:65:dd: 3e:61:65:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW2KXs65v2T6j8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk ODlmMDZkN2EtMTRjNy00YjViLWJlMDAtYmRjYzg1OTllYThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjv/McECLQYmgFn0/TrWoK/aWCMfhsxi08d+R 1QXrvUD/joB7xTvy81nPmRRMcsZSUOkh+yv9xsnW2333QC/T2d+a7SjaUlVY3Hwg TtaeueB2nMNSdmdPsTjybwrfPUyFs/9mh88kx35mQWta1EnGIXQV+hOWvG+ZsRu7 cixGg4PM+4AaozhENvAk9AswBTWeyiHsvcOyjWBtg4Db43NUdMBBrYEZmZBBI67i KIlJrCc8jTHabmHjmjrmoQcS0m2XLaZGpL2vYlRNlcgpyOpJgx9pSz8Hsa/QxU6D AHZSlbLdvLksDnCBKot1gme7FY3uR5RtFSRs+IoBEAluraTQJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGPGeM96MXmOHLRhm07Eqz3WU3ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzIzMTc5MmYtMWMxOS0z ZDY3LThlMzktYTEwY2Q1MjYxNjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0R3eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpVGU3zeFUg0+QbWw6rI7dvOksct2d1HHl9/mt2qd7ZBfoQDgVlbS4+ SQvOQqMY4WvZGAytP6KKUYzUQRZjdlw4nU0ZAUZtKkjQdsgpyyucqCMxaYVEPEn/ UnehSv4x6R+GJUBS/2ndkALB60BLI5GTvH+wfVGG7EfLbLRDGDelEmwNPyeOVgpr b0lZd931WilmcceiLQHY0LyCxAd43Yj1WDqYdbFNxmASN4OuVQFo7n60Ur2T60IK wHWh1gecFoEIEldnRgWEf+bqOimy6hG4h9plGjYLnYVvmX9hgiEsITjQYmvH614n X8WNH5gTum+FwkjyGWJaDddl3T5hZak= -----END CERTIFICATE-----Generated at Tue Apr 15 05:33:14 2025 by rpki-client