$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5d5c0b86-aba9-32da-a6c9-63c7faa1cc2e.roa File: 5d5c0b86-aba9-32da-a6c9-63c7faa1cc2e.roa (raw, json) Hash identifier: xkh8ez1ec4XUMJaaI3Q8b4sZI3JIUgnR3DnKj4rLtoY= Subject key identifier: 40:CC:6B:BF:7A:2B:F3:21:57:B7:A7:D2:8F:57:9D:8B:8F:63:7A:3D Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848BE862AE82DF2BF9F51DB0200 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5d5c0b86-aba9-32da-a6c9-63c7faa1cc2e.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 852 IP address blocks: 209.171.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:2a:e8:2d:f2:bf:9f:51:db:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=04ca0a38-aa0f-419a-b551-0bc31442ec2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a4:2b:56:bb:f4:91:85:39:b4:1f:c0:b6:57: 63:04:e4:80:67:81:7d:e8:77:97:b3:ec:27:68:75: 5e:94:75:ff:f5:c1:78:bf:5c:46:d9:9b:6f:e8:82: 80:32:29:1e:ef:44:03:60:c5:54:8b:c2:62:4b:7a: 9e:05:09:37:b8:18:1b:b5:93:11:05:cb:aa:cb:1a: 36:b1:f4:6c:18:73:2a:f2:75:f8:50:80:13:f8:b1: 46:b3:46:d7:6a:32:a4:40:7f:03:c6:92:99:c6:2d: a5:42:6b:25:dd:19:05:bc:01:24:70:95:e3:21:bd: 64:fa:6e:ad:c1:12:cb:73:32:ec:28:95:5c:93:66: ed:c8:b7:0c:40:6a:f5:d5:c3:f0:5c:5b:aa:b8:87: 05:e2:65:6f:05:2b:00:0a:23:fd:d8:4d:1f:82:da: 12:10:30:bd:68:bd:22:ae:b8:f6:30:7b:4b:f7:ff: 16:2b:6a:cf:f9:a0:3f:3c:12:79:b2:39:b2:37:95: 42:91:f8:c2:ff:ad:47:b6:dd:de:da:fa:66:c0:91: c2:c2:8b:cd:51:21:2b:e5:bc:fa:77:cd:5e:49:17: a1:5a:c5:03:b1:6d:88:a2:d0:9c:4d:78:d8:82:75: 26:2d:ae:52:a4:21:f9:37:7d:7f:6a:fd:e0:c6:05: c2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CC:6B:BF:7A:2B:F3:21:57:B7:A7:D2:8F:57:9D:8B:8F:63:7A:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5d5c0b86-aba9-32da-a6c9-63c7faa1cc2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.171.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:85:e8:97:42:79:fb:99:4b:43:fd:9b:20:06:0a:43:47:9f: 84:e0:a3:cb:3b:3e:0f:c5:66:e9:07:19:ab:3d:9b:a9:62:4a: 66:d1:68:6b:6d:d1:1f:23:bf:65:6f:e2:4e:25:e6:5a:6d:5f: 00:a3:cc:07:fb:fd:f8:2c:a8:82:22:f8:e3:2d:ee:bf:90:ee: 84:b3:f7:fa:75:a5:7b:bc:1c:7d:5b:f9:3f:c8:09:7e:00:ce: b3:ba:74:70:b9:d9:66:55:a2:12:80:ee:32:15:d6:14:4a:b5: 3e:99:bf:01:2a:a3:c8:5c:4c:e8:72:05:6f:2f:9b:97:1b:39: 77:9f:fa:03:4a:50:7e:e2:cf:57:64:d0:c5:b5:6c:8d:0f:3b: 4d:14:13:52:43:20:12:9a:37:e6:24:e5:13:27:b2:fa:3a:86: 75:32:31:d8:1c:4e:a9:74:99:55:ed:61:27:ea:c2:07:40:9a: 75:92:bb:1d:ca:c6:a6:7a:8d:0c:92:e9:8e:64:a7:0b:c8:e0: 9d:ad:75:79:f1:1c:31:4d:0e:06:95:a3:76:4e:49:cd:8a:ac: 43:99:be:24:55:f6:ed:47:eb:81:8f:1f:1e:e7:df:03:6e:88: 3f:2d:0b:9e:34:1b:31:a5:87:fd:ae:50:cb:a8:c2:0f:c3:ff: 6d:71:c3:4d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEi+hiroLfK/n1HbAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk MDRjYTBhMzgtYWEwZi00MTlhLWI1NTEtMGJjMzE0NDJlYzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKQrVrv0kYU5tB/AtldjBOSAZ4F96HeXs+wn aHVelHX/9cF4v1xG2Ztv6IKAMike70QDYMVUi8JiS3qeBQk3uBgbtZMRBcuqyxo2 sfRsGHMq8nX4UIAT+LFGs0bXajKkQH8DxpKZxi2lQmsl3RkFvAEkcJXjIb1k+m6t wRLLczLsKJVck2btyLcMQGr11cPwXFuquIcF4mVvBSsACiP92E0fgtoSEDC9aL0i rrj2MHtL9/8WK2rP+aA/PBJ5sjmyN5VCkfjC/61Htt3e2vpmwJHCwovNUSEr5bz6 d81eSRehWsUDsW2IotCcTXjYgnUmLa5SpCH5N31/av3gxgXCmQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEDMa796K/MhV7en0o9XnYuPY3o9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNWQ1YzBiODYtYWJhOS0z MmRhLWE2YzktNjNjN2ZhYTFjYzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0aswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAE4Xol0J5+5lLQ/2bIAYKQ0efhOCjyzs+D8Vm6QcZqz2bqWJKZtFoa23R HyO/ZW/iTiXmWm1fAKPMB/v9+CyogiL44y3uv5DuhLP3+nWle7wcfVv5P8gJfgDO s7p0cLnZZlWiEoDuMhXWFEq1Ppm/ASqjyFxM6HIFby+blxs5d5/6A0pQfuLPV2TQ xbVsjQ87TRQTUkMgEpo35iTlEyey+jqGdTIx2BxOqXSZVe1hJ+rCB0CadZK7HcrG pnqNDJLpjmSnC8jgna11efEcMU0OBpWjdk5JzYqsQ5m+JFX27UfrgY8fHuffA26I Py0LnjQbMaWH/a5Qy6jCD8P/bXHDTQ== -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:46 2025 by rpki-client