$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5c6a2600-430c-3c39-a484-f05a9a811305.roa File: 5c6a2600-430c-3c39-a484-f05a9a811305.roa (raw, json) Hash identifier: CoaD12FQpe3UlEcBN8G94eqsqM56MaCyox4j87MTRzA= Subject key identifier: 83:75:CA:96:DD:DE:43:7C:C1:84:FE:3A:EE:8E:0E:2D:7D:27:FB:90 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858494303F1912BA738BC83B88A00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5c6a2600-430c-3c39-a484-f05a9a811305.roa Signing time: Fri 21 Mar 2025 13:00:50 +0000 ROA not before: Fri 21 Mar 2025 13:00:50 +0000 ROA not after: Thu 19 Jun 2025 13:00:50 +0000 asID: 852 IP address blocks: 209.171.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:03:f1:91:2b:a7:38:bc:83:b8:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 21 13:00:50 2025 GMT Not After : Jun 19 13:00:50 2025 GMT Subject: CN=97a30951-8e84-4e18-8edd-3c179b428b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:15:eb:3d:a3:9f:08:2b:a5:5f:e1:0d:a4:72: 5a:09:35:94:bb:73:e3:f3:54:67:65:18:9e:d6:8e: f6:c3:5c:aa:f5:1b:f3:31:48:9b:0d:ac:bf:97:c9: 06:5d:49:b9:53:9e:29:1b:dd:39:4d:ea:61:75:c3: b6:e7:f2:70:53:09:94:ec:6a:aa:36:c0:c7:14:e1: 83:7e:a0:b1:fe:6f:41:de:04:f3:02:44:e7:38:80: 03:6a:ee:66:a0:17:65:a0:b0:54:dc:8a:9b:be:91: 4c:4a:5d:fd:2f:b3:08:62:2a:c5:84:f9:b7:4d:2e: e9:80:ef:a3:34:94:b6:33:2a:07:f6:75:5a:0f:88: 46:41:2a:f0:73:92:84:a9:93:f1:d0:75:11:8d:5b: 12:39:de:d0:0a:2a:d7:16:f7:fa:0b:13:6b:87:45: 98:4c:ab:63:56:05:56:04:d3:55:5f:e5:07:45:25: 77:47:0a:45:6b:c9:ab:35:e6:8c:07:60:c5:56:d9: 01:c3:09:14:8a:ff:cd:bf:09:88:cd:21:e3:f7:c7: d6:c9:55:12:69:38:89:dd:8b:73:f9:96:0c:b1:92: 4d:f0:e1:cb:0a:12:f8:e5:dd:26:20:46:b5:3f:2d: cc:94:1b:35:96:24:b3:ec:c2:d3:d4:c5:b4:0f:73: 1b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:75:CA:96:DD:DE:43:7C:C1:84:FE:3A:EE:8E:0E:2D:7D:27:FB:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5c6a2600-430c-3c39-a484-f05a9a811305.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.171.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:2a:d0:c1:1a:78:cc:be:87:0a:24:25:5c:77:be:3a:80:1d: 34:de:bd:d4:15:5c:3a:c8:2c:f6:97:37:7f:36:47:7d:7f:d3: 6c:37:88:26:50:d0:29:77:78:06:6d:25:2a:1d:d6:27:6a:98: c7:3e:32:81:00:2e:52:20:3a:10:5c:d7:dc:61:1f:a3:78:44: 1c:05:46:a4:7a:2d:10:e5:7d:20:01:e3:4c:3d:6b:cb:d2:7f: da:c9:0a:9c:88:ca:a5:39:a2:c5:13:13:c2:32:7a:c4:97:5f: 46:08:4c:20:d4:f4:46:96:1e:04:99:ee:55:97:92:74:2e:27: 27:87:f8:ce:9a:e5:04:89:a9:da:a7:c3:f9:d6:3e:eb:fb:93: 07:23:f8:26:6a:20:0e:91:e0:45:a5:ff:2a:e7:cf:8a:57:10: d3:ab:fd:ce:5b:d7:1e:b4:82:1c:e4:7a:fc:a7:c2:44:da:47: 13:27:65:5e:ca:95:1b:fb:16:5b:e4:6a:86:48:28:ed:28:52: 4b:8b:04:00:f8:b3:62:69:13:eb:77:5c:76:c5:ff:bc:04:ed: 1f:62:36:28:7c:2f:1d:6e:37:9a:0e:e4:36:66:dd:28:96:b8: e5:ba:fa:78:8f:a8:e7:d8:40:41:3d:d8:c8:33:35:7d:23:d0: 49:5e:ec:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElDA/GRK6c4vIO4igAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDMyMTEzMDA1MFoXDTI1MDYxOTEzMDA1MFowLzEtMCsGA1UEAxMk OTdhMzA5NTEtOGU4NC00ZTE4LThlZGQtM2MxNzliNDI4YjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRXrPaOfCCulX+ENpHJaCTWUu3Pj81RnZRie 1o72w1yq9RvzMUibDay/l8kGXUm5U54pG905TephdcO25/JwUwmU7GqqNsDHFOGD fqCx/m9B3gTzAkTnOIADau5moBdloLBU3IqbvpFMSl39L7MIYirFhPm3TS7pgO+j NJS2MyoH9nVaD4hGQSrwc5KEqZPx0HURjVsSOd7QCirXFvf6CxNrh0WYTKtjVgVW BNNVX+UHRSV3RwpFa8mrNeaMB2DFVtkBwwkUiv/NvwmIzSHj98fWyVUSaTiJ3Ytz +ZYMsZJN8OHLChL45d0mIEa1Py3MlBs1liSz7MLT1MW0D3MbFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIN1ypbd3kN8wYT+Ou6ODi19J/uQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNWM2YTI2MDAtNDMwYy0z YzM5LWE0ODQtZjA1YTlhODExMzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0atVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIq0MEaeMy+hwokJVx3vjqAHTTevdQVXDrILPaXN382R31/02w3iCZQ 0Cl3eAZtJSod1idqmMc+MoEALlIgOhBc19xhH6N4RBwFRqR6LRDlfSAB40w9a8vS f9rJCpyIyqU5osUTE8IyesSXX0YITCDU9EaWHgSZ7lWXknQuJyeH+M6a5QSJqdqn w/nWPuv7kwcj+CZqIA6R4EWl/yrnz4pXENOr/c5b1x60ghzkevynwkTaRxMnZV7K lRv7FlvkaoZIKO0oUkuLBAD4s2JpE+t3XHbF/7wE7R9iNih8Lx1uN5oO5DZm3SiW uOW6+niPqOfYQEE92MgzNX0j0Ele7Jg= -----END CERTIFICATE-----Generated at Sun Apr 6 06:01:09 2025 by rpki-client