$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ae662cba-3801-3b72-94e1-576c6050fea2.roa File: ae662cba-3801-3b72-94e1-576c6050fea2.roa (raw, json) Hash identifier: OdFsBRKg78FrSkd8h8N7fhitz/PTLuqbFoMfWE1+3ww= Subject key identifier: 58:10:CC:07:AE:11:94:A8:2D:53:4D:BF:6C:C1:C0:19:BE:DF:A0:51 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848BE86268EAD4520AFAAEB3680 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ae662cba-3801-3b72-94e1-576c6050fea2.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 852 IP address blocks: 209.52.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:26:8e:ad:45:20:af:aa:eb:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=0c3d943a-4186-4c11-b0e2-521230f0029d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f1:1d:57:d8:c1:55:49:91:b6:5c:44:db:f5: f4:b8:e9:3a:d4:ea:e8:af:ef:cf:5a:3e:e8:91:18: 79:ee:f1:3e:ed:5b:f4:fe:32:30:62:90:3b:50:93: 11:81:29:70:16:f6:b8:20:5f:bf:cf:ef:2b:ec:5f: 55:84:66:73:09:2d:8f:21:8d:45:ed:a4:b0:bd:ad: e3:56:b4:10:9f:52:2d:a6:0e:41:c5:f6:cb:2e:be: b8:37:7f:4d:90:a2:25:54:38:1b:44:8a:4f:30:41: 58:d5:c5:f5:90:14:19:60:af:86:a3:a0:f8:9b:13: ea:a6:f0:a7:28:1c:54:7d:bf:17:03:cf:cf:ae:d9: a3:1c:9a:25:fe:80:21:81:0e:8e:a9:7f:2f:60:b2: f7:a4:e1:05:a6:92:c0:b5:20:1b:8f:69:14:1b:01: 38:a5:26:e7:e2:66:3f:95:5e:4e:a8:c8:9e:df:6d: 7e:17:b4:59:e7:df:10:13:91:14:7b:53:05:75:7e: c5:7d:7f:a6:ca:12:a3:f3:51:0c:79:b2:2e:0b:8c: 35:e9:b1:0b:83:19:f2:10:e9:5a:64:a4:79:35:9b: 08:fe:81:84:78:35:1f:1a:07:c8:ee:29:88:53:25: 85:19:5f:1d:a8:98:cf:14:2c:e2:5b:ab:61:41:2d: 5d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:10:CC:07:AE:11:94:A8:2D:53:4D:BF:6C:C1:C0:19:BE:DF:A0:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ae662cba-3801-3b72-94e1-576c6050fea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:d8:1d:38:22:fb:8c:14:9f:5f:4d:08:4e:b5:9a:fc:ab:ea: 6e:0f:e0:bd:fc:00:fc:4c:7a:80:25:3d:48:c8:9f:24:f0:5e: 4f:09:bc:88:4d:5b:f4:34:3d:6e:3a:da:1c:3f:07:7a:71:c9: f5:94:bb:ad:e6:bb:19:d9:85:29:1b:aa:ad:b1:7c:f4:16:c7: 50:3d:63:e4:d3:18:9a:17:95:7a:4a:fb:6a:ca:43:8f:a4:01: bf:c6:34:8d:0d:e8:61:d2:cf:b2:05:5e:93:d8:4f:e4:a2:ea: b6:1f:1f:34:f0:9f:88:bb:8a:a1:bc:54:1a:ce:d4:77:86:e2: d1:45:8a:21:9e:eb:90:1e:7b:fb:50:de:8e:ed:48:3e:40:fb: ec:68:eb:ae:1f:f2:69:c5:03:e8:59:c0:e1:ba:50:ca:d1:3a: 9f:29:24:3c:d9:b3:57:25:ed:be:36:7a:0b:a7:52:fd:9f:05: ca:60:e7:dc:0c:b8:35:cb:fa:f1:f9:1a:44:4f:02:a9:4f:37: cd:86:c8:40:34:e1:30:c7:33:ca:17:3f:e5:41:90:7d:f5:5d: 1c:d0:73:08:26:e8:74:c3:50:da:42:34:cd:99:68:de:5a:69: 9a:f0:bc:a5:fd:98:5c:29:bc:00:77:d2:23:15:13:b3:03:78: 43:4b:12:85 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEi+hiaOrUUgr6rrNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk MGMzZDk0M2EtNDE4Ni00YzExLWIwZTItNTIxMjMwZjAwMjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvEdV9jBVUmRtlxE2/X0uOk61Oror+/PWj7o kRh57vE+7Vv0/jIwYpA7UJMRgSlwFva4IF+/z+8r7F9VhGZzCS2PIY1F7aSwva3j VrQQn1Itpg5BxfbLLr64N39NkKIlVDgbRIpPMEFY1cX1kBQZYK+Go6D4mxPqpvCn KBxUfb8XA8/PrtmjHJol/oAhgQ6OqX8vYLL3pOEFppLAtSAbj2kUGwE4pSbn4mY/ lV5OqMie321+F7RZ598QE5EUe1MFdX7FfX+myhKj81EMebIuC4w16bELgxnyEOla ZKR5NZsI/oGEeDUfGgfI7imIUyWFGV8dqJjPFCziW6thQS1d0QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFgQzAeuEZSoLVNNv2zBwBm+36BRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYWU2NjJjYmEtMzgwMS0z YjcyLTk0ZTEtNTc2YzYwNTBmZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMB0TQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAcNgdOCL7jBSfX00ITrWa/Kvqbg/gvfwA/Ex6gCU9SMifJPBeTwm8iE1b 9DQ9bjraHD8HenHJ9ZS7rea7GdmFKRuqrbF89BbHUD1j5NMYmheVekr7aspDj6QB v8Y0jQ3oYdLPsgVek9hP5KLqth8fNPCfiLuKobxUGs7Ud4bi0UWKIZ7rkB57+1De ju1IPkD77Gjrrh/yacUD6FnA4bpQytE6nykkPNmzVyXtvjZ6C6dS/Z8FymDn3Ay4 Ncv68fkaRE8CqU83zYbIQDThMMczyhc/5UGQffVdHNBzCCbodMNQ2kI0zZlo3lpp mvC8pf2YXCm8AHfSIxUTswN4Q0sShQ== -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:57 2025 by rpki-client