$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8668bf6b-67ad-366d-8a67-fcf862d9d45b.roa File: 8668bf6b-67ad-366d-8a67-fcf862d9d45b.roa (raw, json) Hash identifier: qgiw6GJNNBW8lKdRbCIs62I6oV2OZTczC2PSvLaN7+8= Subject key identifier: D4:B9:B0:FC:4A:F9:2F:55:BF:D5:9B:DD:F2:0E:85:AF:A7:BC:CD:A0 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584930DE5E0BCB3796C68E908970 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8668bf6b-67ad-366d-8a67-fcf862d9d45b.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 7861 IP address blocks: 209.29.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:5e:0b:cb:37:96:c6:8e:90:89:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=99a6109a-704e-4437-a4b9-a90dcbdad357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fe:82:b6:6b:fa:94:1f:f7:bf:9b:0c:c6:38: 62:7e:6d:47:62:6a:61:c2:7f:5d:83:eb:f3:1d:76: a3:df:61:fb:cd:11:57:ad:a6:1d:d6:1e:b5:a1:01: bd:96:9c:69:51:b1:14:2b:03:a4:f4:e2:ff:5d:1e: 35:a6:0c:e6:ed:7b:da:24:28:94:cb:ab:ac:cd:ba: 29:98:57:93:7f:2a:f3:65:6d:14:1e:1b:3e:fa:cc: 64:d5:3e:d5:96:38:92:06:05:27:af:bc:56:8b:5f: 95:f1:09:d9:e9:92:9f:29:61:7b:9a:81:7d:03:82: 9f:1c:99:9e:e6:23:96:27:94:79:ed:5b:7e:4b:cf: 75:f8:01:ab:19:8e:1d:e4:e5:36:45:4c:90:8b:c3: bd:77:34:c9:8c:2f:de:71:60:37:91:00:49:c3:e5: 99:f9:2f:34:1d:7d:f4:c7:1b:ee:9e:4a:e2:ba:a6: 16:1d:a9:0b:7d:51:59:be:81:25:04:1f:91:cc:70: d5:87:5c:7d:95:0d:28:87:38:4b:fe:4f:c4:af:e2: a1:f0:0d:aa:06:93:f7:14:4a:85:cd:ce:a4:a5:93: 16:59:c4:f4:c1:d5:da:9a:15:b1:e0:1d:c2:6f:d6: 0b:d5:5c:d1:c6:b0:17:fe:a0:89:68:fe:87:57:3a: cd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B9:B0:FC:4A:F9:2F:55:BF:D5:9B:DD:F2:0E:85:AF:A7:BC:CD:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8668bf6b-67ad-366d-8a67-fcf862d9d45b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:3d:b5:40:e1:4d:96:4c:18:ae:45:b8:d3:65:b3:bb:92:c7: 9e:5d:4e:2b:70:08:32:a9:1c:9b:40:4a:7b:4f:ef:6b:ce:10: 49:ef:c8:43:cc:5d:78:29:a5:74:24:65:d1:cf:4b:bf:ba:a0: aa:be:14:b3:97:31:b4:ab:e7:78:c1:b4:0f:bb:0e:1d:5d:40: 78:b9:9e:fb:57:6b:e4:72:67:96:cc:32:5e:0c:1f:ac:4d:4f: 5b:7d:ce:b4:56:14:78:71:63:bd:1c:f1:e5:dc:25:ac:e4:2a: 90:04:89:4f:41:e4:51:01:da:8b:24:85:57:16:09:f7:e0:dd: 2b:24:63:4c:19:ba:a1:72:44:6e:1b:1b:c5:36:0e:90:94:0c: 42:1f:10:f3:46:0c:b4:31:73:96:13:0d:4b:d6:f4:e4:d1:3e: 1a:9a:bd:7e:2a:18:d6:d2:de:05:eb:0f:e7:72:a2:46:8f:c0: 8a:52:69:72:78:ab:df:bf:c3:87:cb:8f:5b:38:c1:d9:5d:4d: 13:39:8d:3d:4f:3e:0f:52:79:47:db:31:3a:e3:7b:57:7f:7a: fb:c2:fe:17:47:70:44:6d:41:96:9a:0a:02:3d:33:0b:f5:06: db:ba:55:88:b3:93:9f:a6:c9:25:08:be:41:12:63:f5:5a:de: 87:ab:87:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3l4LyzeWxo6QiXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk OTlhNjEwOWEtNzA0ZS00NDM3LWE0YjktYTkwZGNiZGFkMzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv6Ctmv6lB/3v5sMxjhifm1HYmphwn9dg+vz HXaj32H7zRFXraYd1h61oQG9lpxpUbEUKwOk9OL/XR41pgzm7XvaJCiUy6uszbop mFeTfyrzZW0UHhs++sxk1T7VljiSBgUnr7xWi1+V8QnZ6ZKfKWF7moF9A4KfHJme 5iOWJ5R57Vt+S891+AGrGY4d5OU2RUyQi8O9dzTJjC/ecWA3kQBJw+WZ+S80HX30 xxvunkriuqYWHakLfVFZvoElBB+RzHDVh1x9lQ0ohzhL/k/Er+Kh8A2qBpP3FEqF zc6kpZMWWcT0wdXamhWx4B3Cb9YL1VzRxrAX/qCJaP6HVzrN+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNS5sPxK+S9Vv9Wb3fIOha+nvM2gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODY2OGJmNmItNjdhZC0z NjZkLThhNjctZmNmODYyZDlkNDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0R2iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQ9tUDhTZZMGK5FuNNls7uSx55dTitwCDKpHJtASntP72vOEEnvyEPM XXgppXQkZdHPS7+6oKq+FLOXMbSr53jBtA+7Dh1dQHi5nvtXa+RyZ5bMMl4MH6xN T1t9zrRWFHhxY70c8eXcJazkKpAEiU9B5FEB2oskhVcWCffg3SskY0wZuqFyRG4b G8U2DpCUDEIfEPNGDLQxc5YTDUvW9OTRPhqavX4qGNbS3gXrD+dyokaPwIpSaXJ4 q9+/w4fLj1s4wdldTRM5jT1PPg9SeUfbMTrje1d/evvC/hdHcERtQZaaCgI9Mwv1 Btu6VYizk5+mySUIvkESY/Va3oerh04= -----END CERTIFICATE-----Generated at Tue Apr 15 05:35:56 2025 by rpki-client