$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c50bf71f-42f4-380a-89be-7d4e918b0444.roa File: c50bf71f-42f4-380a-89be-7d4e918b0444.roa (raw, json) Hash identifier: hhbDStduiPO/2TkueOyEpDDPK7DsPOrXTvDUVfleh8E= Subject key identifier: F7:D5:45:F0:DF:12:42:1F:CE:E2:EB:BC:ED:07:41:3D:58:E6:0B:2F Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B6260FC9DB5AF993BDD44D80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c50bf71f-42f4-380a-89be-7d4e918b0444.roa Signing time: Thu 30 Jan 2025 02:00:40 +0000 ROA not before: Thu 30 Jan 2025 02:00:40 +0000 ROA not after: Wed 30 Apr 2025 01:00:40 +0000 asID: 852 IP address blocks: 209.53.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:26:0f:c9:db:5a:f9:93:bd:d4:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 30 02:00:40 2025 GMT Not After : Apr 30 01:00:40 2025 GMT Subject: CN=1586cce2-7387-4e28-b8ca-0dcc83dcb2bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9b:91:70:7c:5a:a1:61:9a:1c:c1:9a:6b:a6: 87:6f:e5:3d:f1:9e:45:2a:31:3f:b4:a3:c0:16:f0: 96:6c:fc:30:2d:49:cb:41:42:42:78:39:fa:6e:5c: bd:1d:7e:7a:67:ba:6e:aa:fc:43:5c:80:18:85:d3: 0b:1c:09:39:00:81:f2:df:69:19:03:8a:ab:ac:51: 13:cd:c7:00:f0:28:d3:29:be:24:b7:2c:e1:17:0f: 3a:65:aa:ab:fd:93:d3:b0:bd:b2:4e:15:3e:82:36: ed:f5:fb:87:99:81:29:18:0b:88:2c:2b:64:65:15: 23:10:15:90:8e:bb:e4:e6:ad:25:34:7c:d8:b9:0c: 06:56:4b:48:08:1a:72:df:8e:b8:e8:6c:d6:32:70: b6:98:0e:09:48:0c:48:6f:f6:6b:b3:74:14:8f:86: 86:b1:7f:d7:1f:d3:37:93:98:94:b5:f6:a2:7d:6e: ad:fe:ec:7a:03:73:6c:46:e6:af:b6:2b:e2:bb:bf: 8a:6b:27:ae:3e:83:8a:cd:cf:f1:7f:b9:b3:4f:67: 0d:3d:89:2e:ad:9a:59:12:80:af:8a:5c:98:b9:58: ea:fd:14:f0:42:f9:22:26:cf:b0:18:e6:a4:01:65: ff:70:a2:20:41:92:17:53:7c:22:12:78:5e:2a:04: ef:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D5:45:F0:DF:12:42:1F:CE:E2:EB:BC:ED:07:41:3D:58:E6:0B:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c50bf71f-42f4-380a-89be-7d4e918b0444.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:67:f3:6d:8d:19:de:ae:51:77:a0:92:57:b7:39:11:95:ac: b3:b3:ff:1c:60:8d:b1:77:1a:b0:40:a1:38:3a:7a:c0:4e:fd: 9f:d9:11:02:83:22:84:05:3e:de:56:de:00:09:98:54:ef:4c: 4d:0f:df:d6:cd:eb:c1:73:07:1a:5c:d1:71:b8:54:b8:3a:47: 91:5a:d6:c7:52:59:d8:c0:13:d4:75:01:52:96:68:c2:60:37: 27:eb:12:9b:b6:99:3f:e4:9f:f7:60:83:78:61:e2:3d:02:de: ae:9f:12:02:ea:dc:74:7f:75:85:20:a6:a7:63:ee:20:03:d5: 94:e6:a5:bd:e1:a5:48:1d:98:11:0d:3c:e1:fc:28:f3:a0:12: 81:03:10:49:67:16:e6:80:ae:9b:2a:31:06:1f:7b:8f:60:fe: 0b:0b:5f:bd:b8:d0:67:e7:bd:fc:f3:53:fc:db:07:c0:a8:13: ad:ee:df:5e:bf:81:70:f2:cc:a9:cc:bf:6e:c0:c2:8b:78:93: 1c:07:e2:dc:e0:1f:53:3f:4d:63:24:f4:a8:11:06:c0:47:7f: 07:f7:b8:86:56:7a:ff:d4:1c:48:70:84:97:68:9c:79:7d:b0: da:2d:30:ea:f6:f8:da:e3:cb:a9:b1:e8:8a:03:4f:5c:a9:02: 17:48:a5:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi2Jg/J21r5k73UTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEzMDAyMDA0MFoXDTI1MDQzMDAxMDA0MFowLzEtMCsGA1UEAxMk MTU4NmNjZTItNzM4Ny00ZTI4LWI4Y2EtMGRjYzgzZGNiMmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJuRcHxaoWGaHMGaa6aHb+U98Z5FKjE/tKPA FvCWbPwwLUnLQUJCeDn6bly9HX56Z7puqvxDXIAYhdMLHAk5AIHy32kZA4qrrFET zccA8CjTKb4ktyzhFw86Zaqr/ZPTsL2yThU+gjbt9fuHmYEpGAuILCtkZRUjEBWQ jrvk5q0lNHzYuQwGVktICBpy34646GzWMnC2mA4JSAxIb/Zrs3QUj4aGsX/XH9M3 k5iUtfaifW6t/ux6A3NsRuavtiviu7+KayeuPoOKzc/xf7mzT2cNPYkurZpZEoCv ilyYuVjq/RTwQvkiJs+wGOakAWX/cKIgQZIXU3wiEnheKgTvCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfVRfDfEkIfzuLrvO0HQT1Y5gsvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzUwYmY3MWYtNDJmNC0z ODBhLTg5YmUtN2Q0ZTkxOGIwNDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TWNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1n822NGd6uUXegkle3ORGVrLOz/xxgjbF3GrBAoTg6esBO/Z/ZEQKD IoQFPt5W3gAJmFTvTE0P39bN68FzBxpc0XG4VLg6R5Fa1sdSWdjAE9R1AVKWaMJg NyfrEpu2mT/kn/dgg3hh4j0C3q6fEgLq3HR/dYUgpqdj7iAD1ZTmpb3hpUgdmBEN POH8KPOgEoEDEElnFuaArpsqMQYfe49g/gsLX7240GfnvfzzU/zbB8CoE63u316/ gXDyzKnMv27Awot4kxwH4tzgH1M/TWMk9KgRBsBHfwf3uIZWev/UHEhwhJdonHl9 sNotMOr2+Nrjy6mx6IoDT1ypAhdIpdg= -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:36 2025 by rpki-client