$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35a49db3-a778-3bfc-877a-c9cea9e5abd3.roa File: 35a49db3-a778-3bfc-877a-c9cea9e5abd3.roa (raw, json) Hash identifier: D87AtyYDldfY/Rx9PiBOxpgK14k1b6tnb55+zgn8zaM= Subject key identifier: 47:E6:B7:C2:53:DF:C0:92:27:E8:54:8E:97:93:D7:6B:8F:B0:91:4E Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B1F628E128C1A2C7FF315A00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35a49db3-a778-3bfc-877a-c9cea9e5abd3.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 7861 IP address blocks: 209.20.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:28:e1:28:c1:a2:c7:ff:31:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=5a4a2452-5946-4900-bcb2-58fc2511c1a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1d:34:db:7f:34:91:dd:25:ff:d1:ab:52:8c: 44:b8:33:62:06:25:d9:db:f2:22:99:3f:b9:71:36: 71:99:db:ac:50:1f:d0:17:0a:6e:6a:55:64:ac:bf: 6b:bf:12:12:9b:2c:65:31:09:25:15:d7:3f:4a:e7: d5:df:a9:35:68:1a:4a:ea:c3:19:7d:f0:0b:a9:9e: 31:cc:ff:b6:49:81:17:23:12:31:c2:b0:f6:bc:95: a8:a1:a3:8e:1e:dd:a9:74:2a:b1:32:5f:89:24:cb: 86:72:0d:6b:81:9f:e6:7b:0b:86:5f:b3:74:e6:62: 0a:2d:92:31:8f:e2:30:8c:b6:2a:4f:78:9e:e3:80: 08:cd:ed:b7:dc:c6:d6:3e:87:e4:d1:86:2f:25:22: 2e:11:5b:dc:e8:08:0f:7f:56:b8:f2:74:67:b8:b6: 2f:bf:b3:96:c6:dd:4a:62:31:c8:0b:cb:d3:68:61: 6b:cd:86:b6:0a:8d:a7:b4:97:5f:05:b6:bb:1b:0e: 51:47:49:be:1b:cf:d6:8b:5a:8d:a9:a9:75:5c:0f: 53:2d:db:cf:52:55:d7:bd:d7:58:8d:e3:66:03:28: 12:38:62:ac:15:4a:61:34:0b:3b:d6:51:22:72:18: b6:5f:ac:0e:cd:fe:66:48:bd:01:53:d1:ca:aa:4a: 47:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E6:B7:C2:53:DF:C0:92:27:E8:54:8E:97:93:D7:6B:8F:B0:91:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35a49db3-a778-3bfc-877a-c9cea9e5abd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.20.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:5e:12:14:d3:14:a7:e1:b1:02:9a:c0:c3:c4:3a:62:38:d3: e6:dc:b3:b9:9e:bc:a9:97:be:0e:d2:f5:3d:b0:2b:fa:c6:99: ef:02:e5:3a:4d:b9:ed:35:d4:76:93:a2:2c:bf:45:73:69:9f: 66:8b:1c:36:bf:24:5f:ae:29:45:b0:2c:d0:b8:16:d3:ff:e4: 60:44:d6:df:dc:78:8d:f6:00:96:be:e6:ef:c5:16:86:12:fc: c0:de:6b:27:3a:cd:d4:d0:34:c0:d6:54:5b:96:58:b3:4a:54: 8d:b8:86:2c:dd:bb:9d:9b:3f:44:98:58:25:d9:98:04:f5:8f: 53:39:cf:23:a3:20:97:5a:b7:6d:b2:55:2a:ae:27:20:6a:22: 01:e0:96:ea:5d:87:0b:fc:c9:95:eb:3a:fb:be:e3:64:0c:36: ba:07:a5:1b:02:9d:7a:87:c4:0f:ed:a0:5a:86:1c:90:b1:2a: 56:ec:a9:7e:ac:03:dd:5b:50:51:c0:25:22:d4:cc:6f:0d:d3: 4e:dc:ff:cb:51:b7:c5:36:68:ee:bc:1c:b1:7a:9f:08:bc:13: 5e:e2:c7:43:09:2f:c2:8f:58:2b:a5:fd:e3:ad:91:ea:9d:0f: 86:14:5b:19:29:7e:5c:19:99:a6:01:81:63:bc:f8:a3:e0:85: 64:46:ff:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9ijhKMGix/8xWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk NWE0YTI0NTItNTk0Ni00OTAwLWJjYjItNThmYzI1MTFjMWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh002380kd0l/9GrUoxEuDNiBiXZ2/IimT+5 cTZxmdusUB/QFwpualVkrL9rvxISmyxlMQklFdc/SufV36k1aBpK6sMZffALqZ4x zP+2SYEXIxIxwrD2vJWooaOOHt2pdCqxMl+JJMuGcg1rgZ/mewuGX7N05mIKLZIx j+IwjLYqT3ie44AIze233MbWPofk0YYvJSIuEVvc6AgPf1a48nRnuLYvv7OWxt1K YjHIC8vTaGFrzYa2Co2ntJdfBba7Gw5RR0m+G8/Wi1qNqal1XA9TLdvPUlXXvddY jeNmAygSOGKsFUphNAs71lEichi2X6wOzf5mSL0BU9HKqkpHjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfmt8JT38CSJ+hUjpeT12uPsJFOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzVhNDlkYjMtYTc3OC0z YmZjLTg3N2EtYzljZWE5ZTVhYmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RQfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxeEhTTFKfhsQKawMPEOmI40+bcs7mevKmXvg7S9T2wK/rGme8C5TpN ue011HaToiy/RXNpn2aLHDa/JF+uKUWwLNC4FtP/5GBE1t/ceI32AJa+5u/FFoYS /MDeayc6zdTQNMDWVFuWWLNKVI24hizdu52bP0SYWCXZmAT1j1M5zyOjIJdat22y VSquJyBqIgHglupdhwv8yZXrOvu+42QMNroHpRsCnXqHxA/toFqGHJCxKlbsqX6s A91bUFHAJSLUzG8N007c/8tRt8U2aO68HLF6nwi8E17ix0MJL8KPWCul/eOtkeqd D4YUWxkpflwZmaYBgWO8+KPghWRG/zs= -----END CERTIFICATE-----Generated at Tue Apr 15 05:31:15 2025 by rpki-client