$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/87e99bf2-5548-3267-817c-a07659bc6f1d.roa File: 87e99bf2-5548-3267-817c-a07659bc6f1d.roa (raw, json) Hash identifier: j7aIq8bBW9CegqasjfkAzn76KByCN8G9Za79viFuGr0= Subject key identifier: 5A:33:B7:5B:54:2B:00:83:66:4C:B6:C2:CA:E8:1B:B1:91:F9:25:52 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B8F0C5E162DFA840A7431830 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/87e99bf2-5548-3267-817c-a07659bc6f1d.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 852 IP address blocks: 209.29.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:c5:e1:62:df:a8:40:a7:43:18:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=aebbe3c1-5b80-4fe3-9f52-bd5a531dd536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c7:3b:5f:72:66:4d:d9:b9:bd:12:06:b3:04: e2:41:22:b8:63:65:d1:ee:55:11:07:1b:54:e5:be: b8:5b:bf:d2:79:00:1d:46:5e:a0:89:7f:dd:6c:07: e7:70:a5:08:af:54:b6:78:d0:72:f1:f2:fd:5e:22: 79:ce:50:61:ee:ec:ac:7f:ed:d8:e1:48:ef:9f:36: 3f:b0:c0:55:82:60:e9:cb:a4:83:f3:b5:2f:43:d3: fd:c2:86:81:d0:07:3a:f5:9c:bd:1a:b8:e4:e4:db: 98:ee:c5:4a:7c:de:97:5d:85:6f:5c:24:00:f5:0a: 9a:bb:75:2d:9c:ec:51:9b:72:86:0e:82:3f:a9:2d: ba:20:93:76:fd:22:2d:68:c1:8d:77:d1:86:e8:6c: bd:12:11:95:c4:e3:18:e9:2e:18:c4:75:ed:58:a3: 81:8a:39:d3:39:59:cd:e7:4a:19:cb:38:a3:46:4f: ff:78:26:ea:cd:a1:a5:46:c1:24:c7:db:3b:22:1a: ce:39:1a:07:ce:d0:c7:de:b1:cd:06:f9:b6:c7:f8: c6:67:00:3d:a7:e8:a5:06:3c:73:dc:8c:f4:73:eb: 80:0b:42:2b:3b:ee:4c:cf:2a:81:0e:f6:0a:7a:89: 8a:6b:70:3d:f1:f7:0e:92:b3:b9:ee:4e:09:25:6b: bf:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:33:B7:5B:54:2B:00:83:66:4C:B6:C2:CA:E8:1B:B1:91:F9:25:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/87e99bf2-5548-3267-817c-a07659bc6f1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:f5:b5:9e:cf:ec:e6:75:62:54:5e:fe:35:66:81:b6:ea:8a: 20:8d:49:b3:8a:17:01:05:b1:9f:dc:5e:4a:43:18:55:bf:b2: 4c:2e:11:f6:23:b7:70:ed:6d:16:4e:15:bb:29:e9:76:70:b2: aa:8d:18:b8:07:9b:18:f9:8b:4b:cb:82:95:87:8c:4b:e8:3e: 18:55:95:f5:fe:27:70:0b:08:82:09:75:56:a5:78:9d:73:ac: 20:3e:5b:05:7f:19:8d:c2:94:dc:ce:25:4a:23:bb:a2:d5:15: 5e:5a:84:a1:a5:98:6c:d3:8b:37:15:ea:9e:48:9e:90:3f:48: e2:47:38:fb:83:f2:ad:57:96:d7:53:82:41:af:08:23:ed:08: 4d:8c:34:6d:58:53:c4:fb:6b:00:c4:54:0f:63:c5:ab:81:a9: cd:b3:00:79:f4:4a:45:35:0a:bc:dd:8d:09:a8:49:87:09:d9: 15:05:c7:06:07:93:21:51:1c:00:f1:0d:83:62:6a:81:67:9d: bd:6a:82:da:44:2e:1f:79:eb:c6:0c:c8:25:6c:d9:a6:4a:06: 29:6c:c4:bf:62:30:d5:11:1b:e5:66:43:8c:5e:32:00:da:48: e8:2c:ca:f7:7a:52:cc:3d:ef:cc:de:f7:68:3c:57:9a:2f:b3: 20:6a:77:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48MXhYt+oQKdDGDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk YWViYmUzYzEtNWI4MC00ZmUzLTlmNTItYmQ1YTUzMWRkNTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsc7X3JmTdm5vRIGswTiQSK4Y2XR7lURBxtU 5b64W7/SeQAdRl6giX/dbAfncKUIr1S2eNBy8fL9XiJ5zlBh7uysf+3Y4UjvnzY/ sMBVgmDpy6SD87UvQ9P9woaB0Ac69Zy9Grjk5NuY7sVKfN6XXYVvXCQA9Qqau3Ut nOxRm3KGDoI/qS26IJN2/SItaMGNd9GG6Gy9EhGVxOMY6S4YxHXtWKOBijnTOVnN 50oZyzijRk//eCbqzaGlRsEkx9s7IhrOORoHztDH3rHNBvm2x/jGZwA9p+ilBjxz 3Iz0c+uAC0IrO+5MzyqBDvYKeomKa3A98fcOkrO57k4JJWu/vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFozt1tUKwCDZky2wsroG7GR+SVSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODdlOTliZjItNTU0OC0z MjY3LTgxN2MtYTA3NjU5YmM2ZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0R1CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/1tZ7P7OZ1YlRe/jVmgbbqiiCNSbOKFwEFsZ/cXkpDGFW/skwuEfYj t3DtbRZOFbsp6XZwsqqNGLgHmxj5i0vLgpWHjEvoPhhVlfX+J3ALCIIJdValeJ1z rCA+WwV/GY3ClNzOJUoju6LVFV5ahKGlmGzTizcV6p5InpA/SOJHOPuD8q1XltdT gkGvCCPtCE2MNG1YU8T7awDEVA9jxauBqc2zAHn0SkU1CrzdjQmoSYcJ2RUFxwYH kyFRHADxDYNiaoFnnb1qgtpELh9568YMyCVs2aZKBilsxL9iMNURG+VmQ4xeMgDa SOgsyvd6Usw978ze92g8V5ovsyBqd/U= -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:46 2025 by rpki-client