$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aedbc364-26a5-320a-9ba4-fccfe653ab0f.roa File: aedbc364-26a5-320a-9ba4-fccfe653ab0f.roa (raw, json) Hash identifier: aaGSJ7ArCVwwsp/FtbQXC/osFQMRlIwJgTl5iVnAdZ4= Subject key identifier: 16:C4:D8:EA:08:D4:17:24:74:5C:18:BF:D9:8A:4D:BC:85:7B:E3:32 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B1F6290A567EBF9BE4F203E0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aedbc364-26a5-320a-9ba4-fccfe653ab0f.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 7861 IP address blocks: 209.89.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:29:0a:56:7e:bf:9b:e4:f2:03:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=ff768eff-bb73-4b48-b31e-432377521e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a0:9d:c2:ab:0c:11:45:37:ef:8e:8b:24:1f: d0:b1:90:78:e2:26:8a:05:7f:5e:13:4f:f3:17:13: 1d:59:72:2e:fe:05:5e:0b:32:8b:da:e0:c8:7a:37: ed:44:c4:84:97:ca:c7:ed:8a:5b:be:95:92:f9:ad: bd:ba:4c:57:1c:9b:51:63:24:d6:6b:94:74:44:01: 06:72:60:1e:fd:0a:cf:eb:74:80:28:be:3e:66:58: de:b7:b1:f6:b2:bf:c8:62:de:01:1b:66:69:5d:78: 0c:c0:df:a8:97:36:c7:58:1b:4a:75:3f:fa:1f:8b: c9:36:0f:42:20:0d:53:0c:c8:c5:13:11:a9:d9:14: 79:12:4f:12:7e:0a:bf:db:28:68:68:d0:2c:1f:68: 70:18:2b:68:59:e0:57:06:d0:b9:fc:83:31:5b:0e: b1:34:d0:bc:fa:fb:15:65:cf:78:4d:96:25:93:32: 7f:2f:f7:53:1f:70:35:50:07:2a:1f:fe:d6:4a:80: 33:40:c0:80:93:2b:dd:d2:51:39:ce:7e:b5:8d:3e: 26:dd:36:fd:81:cf:55:18:e9:6a:22:8d:24:3b:82: 83:d6:d1:e9:5d:3d:b0:a5:94:2c:7f:96:c2:e3:a6: 9e:28:95:5c:a0:d7:bb:0d:40:ae:10:ab:7f:31:41: 78:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C4:D8:EA:08:D4:17:24:74:5C:18:BF:D9:8A:4D:BC:85:7B:E3:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aedbc364-26a5-320a-9ba4-fccfe653ab0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.89.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:e5:3f:c1:10:ab:75:8e:44:2c:1b:d8:23:26:64:9b:1b:aa: b4:ad:32:a0:f8:77:4b:38:c3:d2:66:88:18:3d:11:8b:b8:2f: 1f:34:d3:3a:bb:81:98:f7:4f:0f:1f:a8:c8:45:25:65:b3:3b: e9:35:0c:a5:5f:4f:9a:a7:75:2f:9f:9b:97:4e:90:12:19:dc: 35:37:82:c8:e1:88:50:bc:cd:12:7e:ba:f6:72:20:9d:5f:bb: 4d:9c:72:1f:e8:96:f6:3f:0b:9b:97:ee:5a:1c:58:6b:8b:9a: 48:13:50:cd:e6:5c:6a:34:f4:07:a6:cc:dd:45:6c:54:4e:5b: f5:8e:6b:5b:24:8a:24:7a:3d:5b:98:09:1a:3d:4a:4d:c9:74: f2:7e:56:df:b8:1f:0a:9b:1d:7b:67:29:8a:9a:dd:4b:3f:18: cb:91:ed:6e:3d:3e:ad:d8:b7:24:ab:81:6b:89:52:34:f7:f9: f3:46:1c:4d:eb:5b:43:b3:94:54:5a:96:21:c6:dc:86:ec:ba: 8f:07:bd:3d:93:91:b8:31:f8:e0:99:82:8f:5d:10:93:a8:68: df:e0:37:16:c6:e6:35:23:d5:cf:ba:b7:20:1c:d4:5b:68:ad: 72:06:4a:95:35:10:71:b1:59:eb:0f:04:6a:6e:a4:a4:ce:f1: 54:07:7b:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9ikKVn6/m+TyA+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk ZmY3NjhlZmYtYmI3My00YjQ4LWIzMWUtNDMyMzc3NTIxZTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaCdwqsMEUU3746LJB/QsZB44iaKBX9eE0/z FxMdWXIu/gVeCzKL2uDIejftRMSEl8rH7YpbvpWS+a29ukxXHJtRYyTWa5R0RAEG cmAe/QrP63SAKL4+Zljet7H2sr/IYt4BG2ZpXXgMwN+olzbHWBtKdT/6H4vJNg9C IA1TDMjFExGp2RR5Ek8Sfgq/2yhoaNAsH2hwGCtoWeBXBtC5/IMxWw6xNNC8+vsV Zc94TZYlkzJ/L/dTH3A1UAcqH/7WSoAzQMCAkyvd0lE5zn61jT4m3Tb9gc9VGOlq Io0kO4KD1tHpXT2wpZQsf5bC46aeKJVcoNe7DUCuEKt/MUF4kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbE2OoI1BckdFwYv9mKTbyFe+MyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYWVkYmMzNjQtMjZhNS0z MjBhLTliYTQtZmNjZmU2NTNhYjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VlOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFblP8EQq3WORCwb2CMmZJsbqrStMqD4d0s4w9JmiBg9EYu4Lx800zq7 gZj3Tw8fqMhFJWWzO+k1DKVfT5qndS+fm5dOkBIZ3DU3gsjhiFC8zRJ+uvZyIJ1f u02cch/olvY/C5uX7locWGuLmkgTUM3mXGo09AemzN1FbFROW/WOa1skiiR6PVuY CRo9Sk3JdPJ+Vt+4HwqbHXtnKYqa3Us/GMuR7W49Pq3YtySrgWuJUjT3+fNGHE3r W0OzlFRaliHG3Ibsuo8HvT2Tkbgx+OCZgo9dEJOoaN/gNxbG5jUj1c+6tyAc1Fto rXIGSpU1EHGxWesPBGpupKTO8VQHeyg= -----END CERTIFICATE-----Generated at Tue Apr 15 05:33:20 2025 by rpki-client