$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7f94ca6f-ad93-3660-886e-eb166a876a40.roa File: 7f94ca6f-ad93-3660-886e-eb166a876a40.roa (raw, json) Hash identifier: nfHvmWxoqvHX4ZbLgpYbAkG9Nq3w53wFdEFjL+md12Q= Subject key identifier: 5E:CF:0A:72:2D:85:61:86:69:04:6D:72:A2:0F:B3:F2:AC:55:F8:A5 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584976A994A7920F954C6634A140 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7f94ca6f-ad93-3660-886e-eb166a876a40.roa Signing time: Wed 09 Apr 2025 01:00:47 +0000 ROA not before: Wed 09 Apr 2025 01:00:47 +0000 ROA not after: Tue 08 Jul 2025 01:00:47 +0000 asID: 19341 IP address blocks: 209.20.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:76:a9:94:a7:92:0f:95:4c:66:34:a1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 9 01:00:47 2025 GMT Not After : Jul 8 01:00:47 2025 GMT Subject: CN=721375ae-01cc-4893-85e5-da431ec1afcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fe:28:02:ae:56:9f:28:e6:4d:58:5f:05:d1: 17:e5:75:ff:9d:17:28:ce:f0:87:a1:8e:aa:ef:d3: d2:c3:25:de:0c:f8:b5:b0:a9:95:03:c3:d3:74:1d: dc:b6:7b:7d:46:97:e0:fd:08:5e:b7:19:e2:40:86: 5e:52:ab:14:9d:98:4c:b9:ab:66:8f:27:27:b5:82: 90:5b:ce:94:f8:3a:c6:08:14:20:88:55:d1:e9:ac: 12:7a:c7:d1:99:bd:ed:2b:8b:f6:ad:6e:ca:36:5b: c0:12:95:48:0c:d1:d0:ed:99:f9:e3:ec:2f:ce:f0: 32:a3:da:87:9f:61:4f:13:2e:14:5a:ee:00:29:59: f7:7d:95:3f:53:27:e9:a6:bd:7c:e1:54:8e:c6:c6: 54:88:25:6b:6c:4a:7b:a7:f3:b5:94:37:f1:08:cb: 04:26:76:5e:7f:1d:66:bb:7a:74:83:1d:cf:9d:80: 11:5c:d3:af:8f:20:fa:10:4f:d4:68:d8:f5:e3:d0: 4e:e0:9f:3c:27:32:c5:ed:8d:bd:e5:fd:46:6e:d4: b5:47:2d:39:0c:97:45:14:45:c4:e5:4e:8f:74:e2: 7e:f8:a4:c1:5a:99:65:3d:a0:be:05:dc:cd:79:e5: f3:d5:f4:63:6a:b0:eb:ab:a9:44:d2:bf:fe:57:92: 68:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CF:0A:72:2D:85:61:86:69:04:6D:72:A2:0F:B3:F2:AC:55:F8:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7f94ca6f-ad93-3660-886e-eb166a876a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.20.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:3d:eb:43:d3:ad:e5:3b:5c:6f:da:a1:f8:84:5d:03:7e:8d: 23:5c:90:34:ba:59:86:58:e4:4d:f8:a4:73:e8:ab:ce:89:f0: ef:25:04:69:40:da:f8:43:3a:76:c1:9c:de:51:9e:55:03:72: 61:5f:e3:a8:ed:b6:90:6a:f2:75:46:ed:fa:33:86:0c:50:55: 84:98:cc:da:a2:f2:ac:94:42:66:30:d1:fa:8e:c8:96:cf:6a: 45:f1:c0:c0:64:45:2c:6b:92:0f:60:a9:1a:35:c0:16:1d:98: 4a:0f:8d:62:63:f9:2a:55:2c:85:30:0d:5e:c1:71:eb:3e:07: e0:58:70:90:55:6c:8a:c2:77:f4:ef:99:d4:37:45:a7:e5:69: 1f:79:c4:94:7f:d5:13:87:c3:6c:29:31:bc:17:a4:49:14:8d: 8a:1d:50:5a:ac:63:ef:49:da:b6:45:29:f2:0c:08:62:47:52: da:d5:19:e6:84:b0:56:a4:a4:67:e4:da:5f:11:96:60:4c:6e: ac:41:b7:56:14:c3:c4:37:6f:47:da:71:0c:9c:3a:45:36:0d: 01:3d:26:21:0a:a0:87:ff:77:1d:67:44:6b:08:75:35:1d:ea: db:7f:bf:0b:eb:40:0e:5c:72:6f:d1:f6:84:69:5b:46:92:f7: d2:70:e6:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl2qZSnkg+VTGY0oUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQwOTAxMDA0N1oXDTI1MDcwODAxMDA0N1owLzEtMCsGA1UEAxMk NzIxMzc1YWUtMDFjYy00ODkzLTg1ZTUtZGE0MzFlYzFhZmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1v4oAq5WnyjmTVhfBdEX5XX/nRcozvCHoY6q 79PSwyXeDPi1sKmVA8PTdB3ctnt9Rpfg/QhetxniQIZeUqsUnZhMuatmjycntYKQ W86U+DrGCBQgiFXR6awSesfRmb3tK4v2rW7KNlvAEpVIDNHQ7Zn54+wvzvAyo9qH n2FPEy4UWu4AKVn3fZU/Uyfppr184VSOxsZUiCVrbEp7p/O1lDfxCMsEJnZefx1m u3p0gx3PnYARXNOvjyD6EE/UaNj149BO4J88JzLF7Y295f1GbtS1Ry05DJdFFEXE 5U6PdOJ++KTBWpllPaC+BdzNeeXz1fRjarDrq6lE0r/+V5JoMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7PCnIthWGGaQRtcqIPs/KsVfilMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvN2Y5NGNhNmYtYWQ5My0z NjYwLTg4NmUtZWIxNjZhODc2YTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0RQ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKk960PTreU7XG/aofiEXQN+jSNckDS6WYZY5E34pHPoq86J8O8lBGlA 2vhDOnbBnN5RnlUDcmFf46jttpBq8nVG7fozhgxQVYSYzNqi8qyUQmYw0fqOyJbP akXxwMBkRSxrkg9gqRo1wBYdmEoPjWJj+SpVLIUwDV7Bces+B+BYcJBVbIrCd/Tv mdQ3RaflaR95xJR/1ROHw2wpMbwXpEkUjYodUFqsY+9J2rZFKfIMCGJHUtrVGeaE sFakpGfk2l8RlmBMbqxBt1YUw8Q3b0facQycOkU2DQE9JiEKoIf/dx1nRGsIdTUd 6tt/vwvrQA5ccm/R9oRpW0aS99Jw5m0= -----END CERTIFICATE-----Generated at Tue Apr 15 06:01:48 2025 by rpki-client