$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/88f8b444-dc1b-374c-844b-0bfe001c8fb5.roa File: 88f8b444-dc1b-374c-844b-0bfe001c8fb5.roa (raw, json) Hash identifier: 30BkGVJFIJirId1i6gOmIOaTdZyetPjbyrfxdGUY6pw= Subject key identifier: 93:6A:6E:C0:1A:E7:0D:61:6E:33:8B:2E:54:55:92:A7:B4:E6:2B:E4 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848ADC608EE68D1F660BA01F300 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/88f8b444-dc1b-374c-844b-0bfe001c8fb5.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 21723 IP address blocks: 209.53.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:08:ee:68:d1:f6:60:ba:01:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=cee2514d-34e4-42cb-b09b-597197ca8ccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:23:13:f5:66:3f:a4:bf:13:9c:d7:d8:65:de: b0:f5:4c:c6:90:bc:d1:93:86:b7:96:11:41:55:90: bb:86:fb:0f:58:8e:97:b0:a4:97:c1:ca:93:08:3b: ef:21:f2:3c:24:5b:51:9c:99:67:7d:b5:87:be:ff: 95:73:46:36:40:ec:2b:68:ac:74:47:bf:b1:70:84: fa:9e:8e:a1:62:13:03:5d:75:98:12:24:e2:9d:be: 31:08:6d:5e:fe:b3:cb:81:3c:44:27:48:b7:31:e5: 4c:06:a8:7b:ed:87:ce:e7:10:fe:36:50:ef:76:cb: 81:91:63:a3:21:46:0b:0c:bf:39:90:0f:fb:1f:98: d9:67:c3:f3:aa:6c:80:cc:1e:7c:b7:e2:ee:5e:e6: 00:a8:89:8d:54:3e:6c:08:59:66:a2:63:f2:50:be: 8a:27:44:6c:2a:cb:c0:d1:be:f9:41:74:de:a5:b1: d9:3e:e8:e9:31:80:6e:7f:d3:01:41:d0:81:93:b0: e8:79:7e:85:28:ce:af:e5:77:21:39:0f:5c:c6:96: a3:89:fd:54:82:3f:c7:02:5c:48:a3:32:29:b6:f2: 42:ba:8c:06:aa:0d:e8:97:89:9d:f0:1e:9d:e7:ce: 1e:cd:07:13:36:51:f2:0f:63:90:82:8a:cc:9d:6b: 6d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:6A:6E:C0:1A:E7:0D:61:6E:33:8B:2E:54:55:92:A7:B4:E6:2B:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/88f8b444-dc1b-374c-844b-0bfe001c8fb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption df:7b:07:2d:4b:0f:bd:f6:e3:aa:8e:a3:95:1f:9c:dc:bf:90: 14:88:1f:2d:a0:f7:52:6f:9a:6b:33:f7:26:07:56:55:81:a6: 13:20:6e:7c:18:4e:67:d9:69:24:fd:56:74:5d:0f:a6:47:d3: 8a:1f:05:c7:ba:44:68:ef:55:1b:e3:4f:14:c5:23:bd:f1:6f: 28:2a:c3:37:a4:95:4d:af:87:17:a6:72:f4:3f:9d:03:9e:9b: c3:bb:98:97:63:f9:4e:1c:4d:6c:96:30:2a:1a:f1:9b:22:ea: f3:5c:c7:91:92:dd:70:1b:73:fc:20:00:fa:d4:7a:86:bb:ca: 29:3b:70:5f:6e:fe:21:d3:db:a4:8d:61:88:7b:ab:db:17:00: 0a:9b:7f:fb:21:3f:16:b2:68:7d:b3:24:93:72:2f:a3:36:7c: cd:d9:4b:b8:f4:83:df:9f:6c:aa:89:2a:f8:21:24:25:bd:7d: 35:b4:fd:2b:1d:32:47:2e:00:11:ab:ad:92:48:4c:cf:ad:94: b3:ab:26:b9:94:96:85:ec:be:e3:c5:4f:46:0f:bd:59:71:8f: e3:5e:df:6f:ef:47:1c:d5:ba:30:76:06:5d:94:77:c8:cf:1f: 9e:23:d5:6e:76:ad:9a:e5:17:90:dd:c5:37:60:ee:f2:8a:f2: 54:a8:0b:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxgjuaNH2YLoB8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk Y2VlMjUxNGQtMzRlNC00MmNiLWIwOWItNTk3MTk3Y2E4Y2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiMT9WY/pL8TnNfYZd6w9UzGkLzRk4a3lhFB VZC7hvsPWI6XsKSXwcqTCDvvIfI8JFtRnJlnfbWHvv+Vc0Y2QOwraKx0R7+xcIT6 no6hYhMDXXWYEiTinb4xCG1e/rPLgTxEJ0i3MeVMBqh77YfO5xD+NlDvdsuBkWOj IUYLDL85kA/7H5jZZ8PzqmyAzB58t+LuXuYAqImNVD5sCFlmomPyUL6KJ0RsKsvA 0b75QXTepbHZPujpMYBuf9MBQdCBk7DoeX6FKM6v5XchOQ9cxpajif1Ugj/HAlxI ozIptvJCuowGqg3ol4md8B6d584ezQcTNlHyD2OQgorMnWtt2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNqbsAa5w1hbjOLLlRVkqe05ivkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODhmOGI0NDQtZGMxYi0z NzRjLTg0NGItMGJmZTAwMWM4ZmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TWqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN97By1LD73246qOo5UfnNy/kBSIHy2g91Jvmmsz9yYHVlWBphMgbnwY TmfZaST9VnRdD6ZH04ofBce6RGjvVRvjTxTFI73xbygqwzeklU2vhxemcvQ/nQOe m8O7mJdj+U4cTWyWMCoa8Zsi6vNcx5GS3XAbc/wgAPrUeoa7yik7cF9u/iHT26SN YYh7q9sXAAqbf/shPxayaH2zJJNyL6M2fM3ZS7j0g9+fbKqJKvghJCW9fTW0/Ssd MkcuABGrrZJITM+tlLOrJrmUloXsvuPFT0YPvVlxj+Ne32/vRxzVujB2Bl2Ud8jP H54j1W52rZrlF5DdxTdg7vKK8lSoC5k= -----END CERTIFICATE-----Generated at Tue Apr 8 07:21:28 2025 by rpki-client