$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7ff8f5ad-c373-3172-a8a8-8c2d336d2346.roa File: 7ff8f5ad-c373-3172-a8a8-8c2d336d2346.roa (raw, json) Hash identifier: shgLeVu5+AOnkSLVXxMdZUoiucJimctDutpm6FAJKmI= Subject key identifier: 67:10:12:E5:8A:B2:1A:10:D0:46:53:F8:DF:E0:3D:92:AA:58:41:68 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848ADC610B615BDDECAF8831B00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7ff8f5ad-c373-3172-a8a8-8c2d336d2346.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 15247 IP address blocks: 209.53.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:10:b6:15:bd:de:ca:f8:83:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=d0c439e5-6a6b-4eb0-a2fe-a1bdf5b082a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bb:b9:78:d7:56:3e:48:ec:58:88:b2:ae:8c: a0:34:ca:df:bd:76:7f:b4:6d:08:70:e3:7e:c1:20: 12:d6:73:8d:1f:f8:52:a9:2e:27:c9:7a:b7:e5:50: f8:0e:e3:76:cd:17:aa:98:e8:f6:e1:d7:aa:df:33: 9a:f5:5b:99:91:fa:9e:71:a1:8f:cf:1a:ed:cb:b8: 46:0c:75:ea:fd:59:ba:6d:c7:38:05:de:ec:f6:81: 07:f1:2a:1d:06:b5:fb:b9:e6:bf:e4:c0:1a:20:ab: 85:9f:b1:4d:d8:91:35:6e:0f:20:ca:28:74:6e:3a: c3:35:34:7d:16:e8:6b:08:e1:0a:de:9a:8d:d8:9d: 74:7f:23:b5:05:fa:df:fa:7a:93:72:f2:f2:ac:a8: f7:b8:81:40:fd:9e:5b:38:7a:b3:68:2a:e5:9d:5d: 29:a2:d7:77:99:bc:76:be:3a:97:e4:bb:ee:de:72: f4:7b:a5:9b:c6:e6:cf:38:16:c3:8d:9a:eb:c6:0e: 1a:a5:e6:34:94:59:65:73:de:46:2a:1c:10:4b:d3: 34:a7:1c:70:bd:f8:94:ca:a4:0d:0d:f7:9f:b0:0a: 64:51:1f:93:fb:5b:67:75:64:32:70:24:3b:a8:6d: c1:2a:30:fb:70:f9:81:15:07:74:1b:c4:05:fb:22: f1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:10:12:E5:8A:B2:1A:10:D0:46:53:F8:DF:E0:3D:92:AA:58:41:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7ff8f5ad-c373-3172-a8a8-8c2d336d2346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:a0:28:32:6f:c3:20:a9:76:b3:03:54:35:cc:70:5c:ff:f4: 24:6f:d8:e8:c5:5c:88:2a:6d:1c:2c:87:c1:1e:a9:96:ad:e9: c9:f3:34:10:eb:a2:f4:3b:83:75:88:a7:c2:1c:4f:61:5f:6e: 87:a5:69:e4:1a:6d:69:74:00:59:f8:5c:f4:49:2d:46:a4:c8: 75:9f:b8:b2:c3:94:62:18:56:54:d0:39:ed:5e:d1:0a:59:c0: 26:ee:ed:15:aa:7e:68:a9:fa:61:70:25:00:38:78:d8:84:dd: d1:d0:0a:e8:e4:d5:ad:51:b8:a6:80:e5:4a:ff:aa:a6:6c:10: 25:38:88:38:55:d9:0d:ac:f7:19:81:99:09:d6:6a:82:79:1c: 7d:42:ae:53:4b:96:98:81:34:d3:d5:af:d0:e3:ac:d6:13:23: 56:ae:b8:6b:21:77:6c:50:35:2b:70:d5:5e:91:88:e7:12:b4: 2e:54:ac:e5:cd:03:59:b9:e6:ba:8e:90:9e:2b:ae:97:50:a2: 3f:d5:4b:d3:17:fe:88:25:1e:61:61:90:cc:aa:54:71:0c:0e: d1:f0:17:36:69:54:2a:54:2d:e2:f4:a0:c7:2f:0e:97:67:da: f2:db:67:28:5c:18:ea:84:29:8a:95:98:75:d5:b8:4a:29:8b: c8:22:bf:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxhC2Fb3eyviDGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk ZDBjNDM5ZTUtNmE2Yi00ZWIwLWEyZmUtYTFiZGY1YjA4MmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLu5eNdWPkjsWIiyroygNMrfvXZ/tG0IcON+ wSAS1nONH/hSqS4nyXq35VD4DuN2zReqmOj24deq3zOa9VuZkfqecaGPzxrty7hG DHXq/Vm6bcc4Bd7s9oEH8SodBrX7uea/5MAaIKuFn7FN2JE1bg8gyih0bjrDNTR9 FuhrCOEK3pqN2J10fyO1Bfrf+nqTcvLyrKj3uIFA/Z5bOHqzaCrlnV0potd3mbx2 vjqX5Lvu3nL0e6WbxubPOBbDjZrrxg4apeY0lFllc95GKhwQS9M0pxxwvfiUyqQN DfefsApkUR+T+1tndWQycCQ7qG3BKjD7cPmBFQd0G8QF+yLx6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcQEuWKshoQ0EZT+N/gPZKqWEFoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvN2ZmOGY1YWQtYzM3My0z MTcyLWE4YTgtOGMyZDMzNmQyMzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TWqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJugKDJvwyCpdrMDVDXMcFz/9CRv2OjFXIgqbRwsh8EeqZat6cnzNBDr ovQ7g3WIp8IcT2FfboelaeQabWl0AFn4XPRJLUakyHWfuLLDlGIYVlTQOe1e0QpZ wCbu7RWqfmip+mFwJQA4eNiE3dHQCujk1a1RuKaA5Ur/qqZsECU4iDhV2Q2s9xmB mQnWaoJ5HH1CrlNLlpiBNNPVr9DjrNYTI1auuGshd2xQNStw1V6RiOcStC5UrOXN A1m55rqOkJ4rrpdQoj/VS9MX/oglHmFhkMyqVHEMDtHwFzZpVCpULeL0oMcvDpdn 2vLbZyhcGOqEKYqVmHXVuEopi8givyw= -----END CERTIFICATE-----Generated at Tue Apr 15 05:59:10 2025 by rpki-client