$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/84d8ae1b-a2b3-35b1-a4e5-7546b59cc588.roa File: 84d8ae1b-a2b3-35b1-a4e5-7546b59cc588.roa (raw, json) Hash identifier: TQPTOhgBeq0r+SwiF/d9r3lf+QjNk8gD3fGKcwess7k= Subject key identifier: 9E:E0:28:08:76:DB:E5:C9:0F:07:93:E4:07:C9:9F:65:E0:35:6F:06 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B35B62A99962FD4C2B6614C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/84d8ae1b-a2b3-35b1-a4e5-7546b59cc588.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 7861 IP address blocks: 209.29.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:62:a9:99:62:fd:4c:2b:66:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=c7c64f02-cddd-4d9f-90b7-f4b11f8a45e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b6:aa:61:38:02:8f:75:a3:4d:31:f3:cc:7a: 78:1f:8f:a8:20:de:06:5a:b9:0e:62:63:26:8f:2c: 20:f8:f9:11:53:eb:a0:f2:05:a7:a4:46:81:2c:d4: ef:8a:ca:73:c9:37:79:e0:14:3d:60:64:73:a1:cd: 6d:46:4d:af:17:a2:8f:6d:e4:2a:89:8f:14:b4:a7: 44:06:a5:69:8f:06:26:f2:a0:9c:95:ef:25:6e:7e: 07:a0:78:22:97:06:f3:c9:48:19:0b:f9:1c:64:57: b9:32:4f:b6:db:1b:78:20:3d:5d:ef:ea:81:f8:4d: 32:92:8e:b6:a9:71:81:43:0c:3e:1e:4f:02:e4:fc: 28:dc:25:2a:06:6e:1e:b3:11:4f:de:77:c4:9c:8c: f0:47:0e:2c:51:4b:c1:78:ae:6e:d7:33:6e:f7:59: 3d:ef:cc:26:e8:17:68:79:b0:b3:60:73:76:5e:42: d3:6a:5f:00:e4:19:5d:04:2a:21:a6:85:3d:42:dd: 24:9b:2e:97:5c:dc:a9:08:ef:10:b2:c2:ff:58:f8: 2a:f9:61:fa:73:aa:8f:0a:5f:0e:da:9b:ce:7b:50: 05:7a:ad:d2:31:0e:06:4e:c5:b3:00:5a:59:e1:7e: 5b:bc:8a:df:6c:28:50:56:c7:36:38:19:dd:54:bb: ff:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E0:28:08:76:DB:E5:C9:0F:07:93:E4:07:C9:9F:65:E0:35:6F:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/84d8ae1b-a2b3-35b1-a4e5-7546b59cc588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:1b:a1:45:d3:06:72:77:ed:8e:fd:5f:20:7d:f8:4e:b1:f4: 89:be:15:23:54:8c:f1:74:2a:54:a0:94:1d:ff:f6:99:78:69: f1:a8:5b:51:a0:66:5b:57:7c:ca:9d:0e:af:ca:e6:f1:c6:14: 24:80:03:ea:93:78:6b:9c:56:39:7a:7e:8d:fe:7f:62:bd:44: 9d:f8:c4:98:e9:24:b5:54:df:8f:2b:fd:84:d6:15:c9:8a:0a: 23:b6:38:1b:fc:41:2e:6e:e8:67:29:bd:32:bc:96:c6:d0:27: fb:ea:db:09:33:ac:df:f6:0b:ff:34:c3:db:46:8a:26:90:de: e2:3d:2a:f0:48:39:06:26:9c:9b:eb:5a:6b:fd:fd:e6:75:82: fa:50:eb:bb:2c:08:b1:ef:4e:b2:b9:02:d7:70:65:ee:58:83: 03:69:d9:a3:ec:80:ca:c8:8d:fe:a2:74:ba:2c:e4:f2:09:b2: 74:08:08:ea:7c:5e:b6:18:02:e7:a5:19:79:42:e5:62:7d:dc: 10:38:d9:59:b8:00:66:09:ab:93:08:8e:be:e9:ef:c1:ab:8e: 49:6f:fa:92:a4:1c:dd:f9:8f:20:5f:55:c5:58:67:f9:86:fc: a6:2c:db:d0:9e:e3:68:48:f3:2a:25:ed:90:05:cb:e5:76:d2: 68:85:72:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW2KpmWL9TCtmFMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk YzdjNjRmMDItY2RkZC00ZDlmLTkwYjctZjRiMTFmOGE0NWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhraqYTgCj3WjTTHzzHp4H4+oIN4GWrkOYmMm jywg+PkRU+ug8gWnpEaBLNTvispzyTd54BQ9YGRzoc1tRk2vF6KPbeQqiY8UtKdE BqVpjwYm8qCcle8lbn4HoHgilwbzyUgZC/kcZFe5Mk+22xt4ID1d7+qB+E0yko62 qXGBQww+Hk8C5Pwo3CUqBm4esxFP3nfEnIzwRw4sUUvBeK5u1zNu91k978wm6Bdo ebCzYHN2XkLTal8A5BldBCohpoU9Qt0kmy6XXNypCO8QssL/WPgq+WH6c6qPCl8O 2pvOe1AFeq3SMQ4GTsWzAFpZ4X5bvIrfbChQVsc2OBndVLv/AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7gKAh22+XJDweT5AfJn2XgNW8GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODRkOGFlMWItYTJiMy0z NWIxLWE0ZTUtNzU0NmI1OWNjNTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0R3yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUboUXTBnJ37Y79XyB9+E6x9Im+FSNUjPF0KlSglB3/9pl4afGoW1Gg ZltXfMqdDq/K5vHGFCSAA+qTeGucVjl6fo3+f2K9RJ34xJjpJLVU348r/YTWFcmK CiO2OBv8QS5u6GcpvTK8lsbQJ/vq2wkzrN/2C/80w9tGiiaQ3uI9KvBIOQYmnJvr Wmv9/eZ1gvpQ67ssCLHvTrK5AtdwZe5YgwNp2aPsgMrIjf6idLos5PIJsnQICOp8 XrYYAuelGXlC5WJ93BA42Vm4AGYJq5MIjr7p78Grjklv+pKkHN35jyBfVcVYZ/mG /KYs29Ce42hI8yol7ZAFy+V20miFcuo= -----END CERTIFICATE-----Generated at Wed Feb 19 20:37:16 2025 by rpki-client