$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/96f9a3d4-5ecc-3130-b037-1af04b1e15a6.roa File: 96f9a3d4-5ecc-3130-b037-1af04b1e15a6.roa (raw, json) Hash identifier: ZK3DyjVie1WywG6ZNKIR5hOBI4/XYZluYo2a6qzJy9I= Subject key identifier: A9:F5:F1:56:93:4A:7A:80:32:A8:24:D1:E9:2F:87:89:2C:58:A6:83 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848BE8632E23EBDB0F8BFDACB40 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/96f9a3d4-5ecc-3130-b037-1af04b1e15a6.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 395096 IP address blocks: 209.53.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:32:e2:3e:bd:b0:f8:bf:da:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=78b74394-b479-4c7b-9725-461a36f71ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:24:eb:a4:72:51:ec:3b:24:b4:38:17:f7:58: 50:10:a0:5f:0a:67:5c:5a:bc:0f:20:e3:6f:9d:29: ad:31:0f:12:4d:d2:c1:36:32:ec:76:bb:b6:83:f9: 7e:ec:9f:79:da:23:79:a5:59:8a:50:d7:bb:8e:1c: f2:a5:00:c7:4a:25:b2:8d:b6:cc:d0:fe:2c:b6:26: be:7e:3d:44:ab:e6:20:97:51:bf:d7:89:68:2f:e7: 48:3a:4e:b6:bd:b8:a7:1a:4f:d4:36:31:f0:80:11: 9f:29:d8:6c:7b:f1:46:2c:ea:da:e2:22:97:0f:53: c7:a6:f4:00:22:29:6b:0c:3b:d4:93:96:f0:a4:6a: 87:2e:af:cd:f7:7f:b7:35:ec:08:24:5a:b0:4b:74: 69:07:70:41:b2:a7:3d:13:5e:79:1b:57:7c:aa:01: 61:d3:74:0c:e3:8f:00:a6:1f:46:5f:17:a2:e9:3b: 78:b6:7b:7d:0c:e6:9e:00:0b:1c:0c:fd:fd:fc:ab: 33:a9:d3:2c:0a:88:c6:85:16:cd:99:06:ed:84:bc: d2:f1:bc:1e:4d:d4:82:08:af:fc:b7:13:c2:d0:26: b3:b5:99:42:89:00:5b:bc:7e:28:c4:9a:7b:73:bd: 5d:15:54:f9:ca:de:38:29:87:ee:11:00:0f:8d:cd: 1a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F5:F1:56:93:4A:7A:80:32:A8:24:D1:E9:2F:87:89:2C:58:A6:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/96f9a3d4-5ecc-3130-b037-1af04b1e15a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:3a:21:f3:fa:db:db:15:a9:38:e7:fa:89:64:aa:f9:31:e8: 22:51:c4:d8:3e:b6:96:6b:60:1f:cb:8d:c0:03:f6:4e:51:5c: 28:e8:cd:f4:71:e5:8e:e4:9e:27:fa:4a:b0:61:2d:7e:aa:22: 3f:e7:a5:99:bc:bc:77:77:89:df:73:e7:a7:e0:80:0a:fe:89: c9:5c:a8:e7:2c:cd:a6:cd:16:5d:c5:5f:54:b0:f5:bc:18:ff: e2:c4:2a:b1:47:3b:1b:18:14:c0:a9:21:46:1d:f8:ec:0a:33: 3b:7f:77:f0:cb:18:4e:97:f3:07:5e:67:97:f9:72:fa:af:ea: 40:af:cd:78:fc:c1:7d:4c:c4:70:96:fe:68:72:86:d9:24:6a: 45:74:50:ca:3d:1a:c5:9e:e0:1d:db:25:25:b9:f0:21:68:8d: ba:65:58:84:4a:a9:6e:b0:e6:df:98:68:5f:70:98:32:65:9c: 42:16:a1:6f:c8:e2:5e:9d:3a:69:66:45:3b:e2:a1:93:d6:0e: d2:b0:4f:4d:bb:46:7a:a7:de:13:67:a7:a9:75:94:4a:0c:15: 70:03:75:3e:26:48:28:0a:7b:5f:5c:9c:c7:f8:16:7c:77:1f: c7:2a:bb:3c:9f:c1:2f:cf:52:53:ea:12:d3:87:cc:90:70:b9: 7e:63:0f:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hjLiPr2w+L/ay0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk NzhiNzQzOTQtYjQ3OS00YzdiLTk3MjUtNDYxYTM2ZjcxZWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyTrpHJR7DsktDgX91hQEKBfCmdcWrwPIONv nSmtMQ8STdLBNjLsdru2g/l+7J952iN5pVmKUNe7jhzypQDHSiWyjbbM0P4stia+ fj1Eq+Ygl1G/14loL+dIOk62vbinGk/UNjHwgBGfKdhse/FGLOra4iKXD1PHpvQA IilrDDvUk5bwpGqHLq/N93+3NewIJFqwS3RpB3BBsqc9E155G1d8qgFh03QM448A ph9GXxei6Tt4tnt9DOaeAAscDP39/KszqdMsCojGhRbNmQbthLzS8bweTdSCCK/8 txPC0CaztZlCiQBbvH4oxJp7c71dFVT5yt44KYfuEQAPjc0a6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKn18VaTSnqAMqgk0ekvh4ksWKaDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOTZmOWEzZDQtNWVjYy0z MTMwLWIwMzctMWFmMDRiMWUxNWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TVxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALI6IfP629sVqTjn+olkqvkx6CJRxNg+tpZrYB/LjcAD9k5RXCjozfRx 5Y7knif6SrBhLX6qIj/npZm8vHd3id9z56fggAr+iclcqOcszabNFl3FX1Sw9bwY /+LEKrFHOxsYFMCpIUYd+OwKMzt/d/DLGE6X8wdeZ5f5cvqv6kCvzXj8wX1MxHCW /mhyhtkkakV0UMo9GsWe4B3bJSW58CFojbplWIRKqW6w5t+YaF9wmDJlnEIWoW/I 4l6dOmlmRTvioZPWDtKwT027Rnqn3hNnp6l1lEoMFXADdT4mSCgKe19cnMf4Fnx3 H8cquzyfwS/PUlPqEtOHzJBwuX5jD7c= -----END CERTIFICATE-----Generated at Tue Apr 8 21:06:17 2025 by rpki-client