$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/447a203b-aa0a-3913-9378-6b3513ee9c64.roa File: 447a203b-aa0a-3913-9378-6b3513ee9c64.roa (raw, json) Hash identifier: o25Cm8vpwGUzREvwkBZQbCEDa6iFI0PEj3OHI9osHYU= Subject key identifier: 24:B3:93:18:AF:D5:DB:A8:25:2D:B5:83:AF:73:71:B8:B9:5B:C9:03 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848A9961FE8A9D21E5F65EA0E40 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/447a203b-aa0a-3913-9378-6b3513ee9c64.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 25668 IP address blocks: 209.53.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:1f:e8:a9:d2:1e:5f:65:ea:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=02990dd5-8b0d-4700-ad6a-1e4606853e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ef:a0:36:d3:1f:9b:b5:46:28:bb:8e:1b:53: ea:1f:7c:2c:41:54:f2:8a:97:1b:4a:e9:10:b7:13: 46:7c:ae:fe:eb:0b:14:68:9b:0c:c8:8f:73:ab:8b: c5:aa:8f:59:73:f0:33:8a:c4:2f:21:91:e9:ed:53: fb:b3:15:24:73:ce:8f:5e:ee:ee:d9:ea:f1:5a:d7: 0b:07:c9:c9:80:12:f3:8c:89:c1:3e:ff:6f:7b:0f: f6:22:f0:52:2f:76:6f:2b:34:0d:de:5e:d4:c1:50: 8c:25:eb:4d:3d:c0:5e:2c:af:4d:a1:fe:bc:d4:f0: 6b:c1:6e:d3:46:e9:03:56:b2:93:7c:78:b7:0e:5b: 2a:83:26:99:25:a8:31:0f:7d:cb:c9:44:a3:48:c5: b3:6c:6f:b5:08:d5:60:49:d2:de:ad:c9:79:17:72: aa:c4:06:1f:be:0d:08:6d:02:98:f3:40:e2:93:0d: c1:98:2b:8d:b8:04:0e:1e:89:ff:38:17:0b:e4:08: a1:be:ec:a0:23:02:23:75:fb:22:28:ca:f7:ec:ff: 35:01:91:0c:2a:d4:d5:05:b2:3e:b7:56:c8:f7:02: 53:bf:1b:4e:40:5d:a0:22:a8:77:5b:b2:d0:25:68: a1:34:e4:e5:48:c4:2e:ae:1d:48:1d:4e:c6:6f:7c: 03:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B3:93:18:AF:D5:DB:A8:25:2D:B5:83:AF:73:71:B8:B9:5B:C9:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/447a203b-aa0a-3913-9378-6b3513ee9c64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:6e:4d:03:28:99:d7:9c:09:91:9c:d6:c6:fc:7a:5b:f7:24: 0f:6c:66:e0:a9:b9:ad:46:fa:ed:5b:7b:29:93:67:73:18:8e: c0:51:5d:65:6a:0e:12:ba:4b:d5:76:be:dd:ac:26:0a:7e:03: 80:11:a0:92:5c:6f:93:c0:fd:9d:de:f6:a0:af:10:00:5e:a5: 40:ee:ba:7c:a4:dc:42:1c:9a:7a:74:90:98:80:42:83:31:9a: 38:c0:13:85:63:ab:b8:39:ce:09:42:6b:78:85:90:ba:e8:d2: 81:13:6b:0c:bb:02:9d:dc:6c:84:de:7b:84:d8:42:34:87:0e: 7b:58:bd:02:b4:41:c3:a1:81:40:ce:53:18:8b:9d:79:d5:af: a6:92:5e:02:d9:0d:67:18:fe:ed:49:b6:3a:21:dd:5a:59:49: 99:bd:49:3e:4a:29:00:5b:bf:e5:22:21:92:04:bb:36:aa:07: 68:d0:cc:b1:0c:e1:24:7f:75:8e:65:9e:d5:61:0d:9f:ff:e4: 13:65:6b:f0:f3:33:d5:6d:48:d5:fd:5a:06:da:06:76:3e:fd: 4e:72:09:c5:dc:be:54:fa:52:52:e3:c7:19:e7:13:6f:ab:ec: 3d:e2:3e:0a:75:3c:9e:31:47:b4:d9:99:a5:89:b9:85:0a:e7: 7e:e7:a4:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplh/oqdIeX2XqDkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MDI5OTBkZDUtOGIwZC00NzAwLWFkNmEtMWU0NjA2ODUzZTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO+gNtMfm7VGKLuOG1PqH3wsQVTyipcbSukQ txNGfK7+6wsUaJsMyI9zq4vFqo9Zc/AzisQvIZHp7VP7sxUkc86PXu7u2erxWtcL B8nJgBLzjInBPv9vew/2IvBSL3ZvKzQN3l7UwVCMJetNPcBeLK9Nof681PBrwW7T RukDVrKTfHi3DlsqgyaZJagxD33LyUSjSMWzbG+1CNVgSdLercl5F3KqxAYfvg0I bQKY80Dikw3BmCuNuAQOHon/OBcL5AihvuygIwIjdfsiKMr37P81AZEMKtTVBbI+ t1bI9wJTvxtOQF2gIqh3W7LQJWihNOTlSMQurh1IHU7Gb3wD2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSzkxiv1duoJS21g69zcbi5W8kDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDQ3YTIwM2ItYWEwYS0z OTEzLTkzNzgtNmIzNTEzZWU5YzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TXCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtuTQMomdecCZGc1sb8elv3JA9sZuCpua1G+u1beymTZ3MYjsBRXWVq DhK6S9V2vt2sJgp+A4ARoJJcb5PA/Z3e9qCvEABepUDuunyk3EIcmnp0kJiAQoMx mjjAE4Vjq7g5zglCa3iFkLro0oETawy7Ap3cbITee4TYQjSHDntYvQK0QcOhgUDO UxiLnXnVr6aSXgLZDWcY/u1Jtjoh3VpZSZm9ST5KKQBbv+UiIZIEuzaqB2jQzLEM 4SR/dY5lntVhDZ//5BNla/DzM9VtSNX9WgbaBnY+/U5yCcXcvlT6UlLjxxnnE2+r 7D3iPgp1PJ4xR7TZmaWJuYUK537npB0= -----END CERTIFICATE-----Generated at Fri Apr 11 23:17:51 2025 by rpki-client