$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f4168cf-189e-31fc-8ad6-098547940f9d.roa File: 3f4168cf-189e-31fc-8ad6-098547940f9d.roa (raw, json) Hash identifier: aF1vDLd+k5+sJ8/VMPSw3P/QK86D88J2EY7Lvvay1cI= Subject key identifier: 14:C2:00:48:16:B2:E3:89:86:4E:49:7F:21:86:EF:0D:1A:9A:28:5C Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B35B5EC1FC2054B8804AFE00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f4168cf-189e-31fc-8ad6-098547940f9d.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 7861 IP address blocks: 209.20.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:5e:c1:fc:20:54:b8:80:4a:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=8384d9c8-48ab-41c9-a240-71ffb0dd8376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5f:35:d7:7f:f5:01:62:79:c4:34:b4:40:be: 43:30:24:b2:ae:d6:7b:7e:e9:80:cc:ee:38:57:62: 13:df:00:9d:3b:4c:19:e7:f3:66:0e:e6:c7:6c:02: cc:33:c7:d6:68:d1:43:69:78:cb:a6:44:e6:62:18: de:2d:bd:a2:c2:fb:78:36:6b:4f:6e:1a:4b:55:59: 8d:71:07:34:82:4f:da:98:d4:c3:e1:e6:e4:18:41: 7d:49:00:90:7f:39:85:2b:1a:c8:a4:33:8d:93:f7: b7:88:fe:64:7c:85:9f:8e:ba:dd:09:de:b7:c3:dd: c8:80:19:fd:5b:09:d7:c5:ef:6e:05:46:51:d3:03: 38:2a:66:e1:28:1b:bc:dd:eb:16:cb:f6:04:a2:0a: a9:65:34:e0:e4:4c:85:fb:42:7f:c7:9f:c2:4b:c8: ba:06:27:a1:56:37:f4:80:ec:25:6d:c7:98:e8:06: dc:7a:17:63:74:06:08:92:7e:14:5d:f2:cd:d0:fa: 7d:df:38:b5:c8:19:f0:2f:72:2a:78:4d:54:92:f4: f4:62:2f:fb:a2:0c:8d:42:50:af:cc:3b:a3:a0:bb: c7:d9:7c:e8:4d:3c:ae:aa:d3:44:ed:c3:43:e9:75: a7:f4:79:5d:7f:4c:0a:64:7e:68:71:c2:fa:1e:e3: 5d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C2:00:48:16:B2:E3:89:86:4E:49:7F:21:86:EF:0D:1A:9A:28:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f4168cf-189e-31fc-8ad6-098547940f9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.20.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:4a:3e:48:86:9f:aa:72:6a:6b:82:f3:9e:87:4f:26:4a:2a: c9:95:87:c0:8a:b4:50:2f:9b:f7:1f:5e:8a:1a:17:12:a4:ea: 75:9f:c8:86:b1:63:77:06:01:29:05:b2:71:2d:1b:a3:23:db: c0:10:1d:08:35:3b:86:a3:96:b7:e8:f8:03:cf:d5:33:c9:b9: e8:d4:d4:0d:5f:44:b5:d7:70:1a:8b:62:24:57:8e:cc:18:aa: 96:6e:00:4f:6a:7d:1c:cb:46:f3:1f:6a:8a:d9:91:7f:5e:4a: 05:04:79:82:3f:dd:91:fe:2e:36:ab:4f:04:40:29:f6:ef:ba: 64:9f:b8:54:b0:32:8e:44:18:16:27:04:b8:94:29:db:d0:a9: a9:81:83:fb:0b:5a:98:12:00:34:4e:84:cc:d9:aa:1b:7b:65: 4b:73:6c:a8:1a:27:e1:30:2f:81:9d:dc:0e:5a:8d:bb:33:94: cf:f6:54:04:21:51:8a:9e:00:95:a7:b2:65:ca:cd:b5:5d:1c: 1c:62:67:b7:36:1a:c6:56:de:d6:26:df:50:1d:21:78:36:ce: b2:54:2a:42:06:f4:18:b9:0f:20:cc:d4:49:25:e4:fe:e5:d7: 61:68:f9:1f:01:2e:19:14:44:c3:bd:79:ae:fd:99:d7:ac:31: e9:e6:b2:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW17B/CBUuIBK/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk ODM4NGQ5YzgtNDhhYi00MWM5LWEyNDAtNzFmZmIwZGQ4Mzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl8113/1AWJ5xDS0QL5DMCSyrtZ7fumAzO44 V2IT3wCdO0wZ5/NmDubHbALMM8fWaNFDaXjLpkTmYhjeLb2iwvt4NmtPbhpLVVmN cQc0gk/amNTD4ebkGEF9SQCQfzmFKxrIpDONk/e3iP5kfIWfjrrdCd63w93IgBn9 WwnXxe9uBUZR0wM4KmbhKBu83esWy/YEogqpZTTg5EyF+0J/x5/CS8i6BiehVjf0 gOwlbceY6AbcehdjdAYIkn4UXfLN0Pp93zi1yBnwL3IqeE1UkvT0Yi/7ogyNQlCv zDujoLvH2XzoTTyuqtNE7cND6XWn9Hldf0wKZH5occL6HuNdQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTCAEgWsuOJhk5JfyGG7w0amihcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2Y0MTY4Y2YtMTg5ZS0z MWZjLThhZDYtMDk4NTQ3OTQwZjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0RQmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBKPkiGn6pyamuC856HTyZKKsmVh8CKtFAvm/cfXooaFxKk6nWfyIax Y3cGASkFsnEtG6Mj28AQHQg1O4ajlrfo+APP1TPJuejU1A1fRLXXcBqLYiRXjswY qpZuAE9qfRzLRvMfaorZkX9eSgUEeYI/3ZH+LjarTwRAKfbvumSfuFSwMo5EGBYn BLiUKdvQqamBg/sLWpgSADROhMzZqht7ZUtzbKgaJ+EwL4Gd3A5ajbszlM/2VAQh UYqeAJWnsmXKzbVdHBxiZ7c2GsZW3tYm31AdIXg2zrJUKkIG9Bi5DyDM1Ekl5P7l 12Fo+R8BLhkURMO9ea79mdesMenmss0= -----END CERTIFICATE-----Generated at Wed Feb 19 20:40:21 2025 by rpki-client