$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5fbb564e-c0b2-3157-9530-de13d60a63b6.roa File: 5fbb564e-c0b2-3157-9530-de13d60a63b6.roa (raw, json) Hash identifier: MbqSvStLQOmxJNS6BJ+UeYfIMCs2WIDuX4W+1OGdc0E= Subject key identifier: 40:18:89:4B:B5:DC:B6:78:D1:37:5D:C5:BC:E1:B1:2A:00:E4:39:3D Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848BBBB7C82A80E63E336FC1280 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5fbb564e-c0b2-3157-9530-de13d60a63b6.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 852 IP address blocks: 209.91.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:7c:82:a8:0e:63:e3:36:fc:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=cb290fe1-7ab6-4670-9afe-818356c8e09d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:50:ff:1a:83:a7:ab:ed:46:67:8d:b3:17:55: 04:0a:31:e9:fc:1b:a2:4b:b1:e1:63:87:bc:6a:3b: 82:4a:f6:a6:35:78:4f:c9:57:06:e6:fd:ae:a8:19: a9:0f:bf:49:22:31:a8:94:c2:5c:67:86:3c:87:76: ef:47:e2:db:5d:bd:58:c7:42:9a:0d:6e:57:de:9d: 6e:09:fe:b6:5f:09:a5:6f:fb:22:73:9d:29:4a:11: e8:d8:62:0c:5b:a9:6c:4a:09:99:fb:ce:be:8e:39: c8:24:c7:9a:05:d1:6c:cc:cf:c0:2c:d4:46:67:80: ec:8f:c4:ae:8f:2d:5d:eb:0d:e5:71:19:86:70:b9: 6f:73:40:22:a0:6c:5c:b2:1a:48:dc:ad:58:67:11: e5:21:39:2d:9f:35:15:d8:50:ab:32:80:7e:31:98: 70:73:1e:e7:3b:b1:fa:e1:ef:db:5f:64:12:44:da: 7c:c1:e1:cc:cf:bc:69:ce:42:94:27:53:a2:93:07: fa:c0:af:49:d4:ac:6e:68:52:5f:00:3d:2e:fa:26: 87:3d:b7:b6:ce:39:ce:30:89:ba:be:97:c5:52:d9: a7:a4:e5:c8:c1:f4:f8:3e:de:fa:ce:24:6f:f8:ee: 0e:32:e9:c5:bd:fb:d1:4e:34:4b:ae:d1:68:e2:05: 42:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:18:89:4B:B5:DC:B6:78:D1:37:5D:C5:BC:E1:B1:2A:00:E4:39:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5fbb564e-c0b2-3157-9530-de13d60a63b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.91.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e1:b5:02:ce:9c:ad:d3:85:ca:c7:6f:7b:c2:34:dd:cf:4b: db:9b:da:24:be:e2:83:34:19:57:af:5d:f8:3a:0a:73:b0:ea: 75:f2:18:fb:cd:51:80:dd:6c:a4:66:e6:ab:44:98:fe:fd:81: 36:18:31:47:4f:b2:ad:b5:eb:8c:65:6d:50:04:8f:b3:a2:a4: 32:77:bc:6c:5f:ad:77:a2:22:99:b4:f1:9f:61:9e:8e:8d:eb: 5d:7a:81:d6:08:42:4d:97:41:ca:56:98:27:e1:94:86:b5:70: 07:7e:31:55:8c:b6:f5:70:1d:9b:97:7b:65:ea:37:94:23:48: be:8c:d3:3e:d7:59:c7:1a:4c:c5:2c:f0:ba:86:da:e5:6f:2d: 01:44:6d:66:fb:be:2c:e0:63:2c:0a:51:ce:b0:be:2c:2d:62: 7f:14:a7:d9:44:90:a9:37:27:e0:96:c3:09:fe:5f:10:5a:52: 4d:aa:f8:5f:fb:f7:e3:28:81:09:ba:bc:be:15:6a:75:49:3e: b0:58:c5:45:de:c2:cd:66:54:61:b6:2c:ac:8e:ef:3d:94:d3: 59:a3:b1:e9:e7:1d:2f:7e:6f:48:cf:3e:1c:94:f1:ed:cc:24: 45:50:9d:a5:f0:4a:62:60:fa:1a:b7:e9:74:c7:ae:67:14:c5: 20:ac:4e:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u3yCqA5j4zb8EoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk Y2IyOTBmZTEtN2FiNi00NjcwLTlhZmUtODE4MzU2YzhlMDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVD/GoOnq+1GZ42zF1UECjHp/BuiS7HhY4e8 ajuCSvamNXhPyVcG5v2uqBmpD79JIjGolMJcZ4Y8h3bvR+LbXb1Yx0KaDW5X3p1u Cf62Xwmlb/sic50pShHo2GIMW6lsSgmZ+86+jjnIJMeaBdFszM/ALNRGZ4Dsj8Su jy1d6w3lcRmGcLlvc0AioGxcshpI3K1YZxHlITktnzUV2FCrMoB+MZhwcx7nO7H6 4e/bX2QSRNp8weHMz7xpzkKUJ1Oikwf6wK9J1KxuaFJfAD0u+iaHPbe2zjnOMIm6 vpfFUtmnpOXIwfT4Pt76ziRv+O4OMunFvfvRTjRLrtFo4gVCAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAYiUu13LZ40TddxbzhsSoA5Dk9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNWZiYjU2NGUtYzBiMi0z MTU3LTk1MzAtZGUxM2Q2MGE2M2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0VtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDhtQLOnK3ThcrHb3vCNN3PS9ub2iS+4oM0GVevXfg6CnOw6nXyGPvN UYDdbKRm5qtEmP79gTYYMUdPsq2164xlbVAEj7OipDJ3vGxfrXeiIpm08Z9hno6N 6116gdYIQk2XQcpWmCfhlIa1cAd+MVWMtvVwHZuXe2XqN5QjSL6M0z7XWccaTMUs 8LqG2uVvLQFEbWb7vizgYywKUc6wviwtYn8Up9lEkKk3J+CWwwn+XxBaUk2q+F/7 9+MogQm6vL4VanVJPrBYxUXews1mVGG2LKyO7z2U01mjsennHS9+b0jPPhyU8e3M JEVQnaXwSmJg+hq36XTHrmcUxSCsTkU= -----END CERTIFICATE-----Generated at Sun Feb 16 20:54:00 2025 by rpki-client