$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7716c7f-2ec7-3b0d-acc1-8e1f1ecf7f55.roa File: c7716c7f-2ec7-3b0d-acc1-8e1f1ecf7f55.roa (raw, json) Hash identifier: qKKU6q7MOzXvBht4Z/IAHPUG56hQSTAa575avtpRDAY= Subject key identifier: E5:BA:82:80:4C:E0:FE:26:03:B5:34:DF:EE:6C:0D:6A:58:DB:07:B1 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848ADC6098B0E49CDA600457740 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7716c7f-2ec7-3b0d-acc1-8e1f1ecf7f55.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 19905 IP address blocks: 209.53.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:09:8b:0e:49:cd:a6:00:45:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=bf8856f3-e781-4629-9f97-ac72bf5a5b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1d:d3:a4:b7:89:0e:a7:0f:b3:fc:36:92:38: 08:fa:62:0d:22:df:1c:0a:e4:cb:45:b4:48:3d:56: 90:f4:ab:53:51:d3:cc:79:33:7f:43:03:ba:c5:1e: 42:ae:b8:04:b2:77:8f:24:a1:dc:2f:bc:48:bc:a9: ad:d0:09:93:b3:57:c4:38:19:01:35:d4:9d:61:45: a0:74:1e:ea:9e:e5:3b:3b:26:83:a9:7f:cb:4e:8a: 97:56:5a:92:2d:d6:8d:94:d2:5c:b4:f3:a9:1e:78: 3f:f7:07:95:0b:05:16:f1:ed:77:73:40:ac:eb:05: a0:0f:0a:24:f3:b6:e3:c2:4f:6d:fa:fb:b8:ec:e3: d3:f0:92:43:14:71:22:38:bc:fe:89:56:4d:fc:f1: c5:b4:79:28:30:b1:18:ea:92:02:b3:8f:22:3a:d0: ce:91:63:a0:6e:d0:f3:1a:5c:59:eb:80:c4:f8:d2: e0:af:6f:a4:6e:7f:58:fe:71:5f:7e:47:17:17:2a: 74:a1:35:da:50:6b:0c:b0:c0:52:f2:35:64:cc:48: 0a:6f:43:6b:e4:f7:09:81:7d:d1:10:60:f7:16:c2: f5:b7:e0:38:44:ae:1d:fb:f6:dd:a6:57:dc:40:0c: 8d:88:77:b9:dc:08:57:0c:09:5f:b2:a3:f5:32:ad: 1e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:BA:82:80:4C:E0:FE:26:03:B5:34:DF:EE:6C:0D:6A:58:DB:07:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7716c7f-2ec7-3b0d-acc1-8e1f1ecf7f55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:09:83:96:6c:6a:5c:fa:73:af:bf:c1:d4:24:80:e8:7a:f9: 06:97:f1:ee:85:27:f0:2a:ab:6b:84:7f:12:13:ac:5d:22:f5: 48:61:ef:0d:0a:ae:0f:97:fb:3f:32:65:8c:79:a8:2c:5d:b7: 74:d4:ee:6f:b3:ff:bb:30:95:94:89:ba:ed:a3:57:4b:c7:b3: 01:dd:01:79:5c:34:f1:c3:13:1f:34:eb:71:1a:80:7d:1b:91: ba:1e:d2:39:ad:bd:a1:76:8b:12:8a:0c:43:66:08:fe:f5:a8: 31:91:31:ae:cd:d8:f8:70:94:d9:94:74:2f:4d:a5:7c:44:f4: f1:9b:e7:25:e3:88:61:88:04:83:42:1f:5c:f3:75:2f:e8:86: 67:ad:54:f4:38:e1:48:61:bd:fa:6f:10:df:ed:78:ee:a2:ef: 3b:dd:ad:4c:17:f5:1a:d8:fd:6c:e0:18:48:d6:62:07:d3:42: f7:af:e2:97:84:bd:68:52:68:b2:4d:e7:95:4c:df:5b:66:32: 07:99:2b:6b:75:68:de:73:01:58:b3:92:1b:18:4b:11:b0:5e: 6b:7a:0c:68:e8:7f:72:1e:aa:0f:6d:60:5c:38:7c:fe:0c:8b: e8:70:17:96:ed:b7:f5:fd:73:64:59:2c:4f:54:92:75:88:af: 07:f6:17:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxgmLDknNpgBFd0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk YmY4ODU2ZjMtZTc4MS00NjI5LTlmOTctYWM3MmJmNWE1YjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx3TpLeJDqcPs/w2kjgI+mINIt8cCuTLRbRI PVaQ9KtTUdPMeTN/QwO6xR5CrrgEsnePJKHcL7xIvKmt0AmTs1fEOBkBNdSdYUWg dB7qnuU7OyaDqX/LToqXVlqSLdaNlNJctPOpHng/9weVCwUW8e13c0Cs6wWgDwok 87bjwk9t+vu47OPT8JJDFHEiOLz+iVZN/PHFtHkoMLEY6pICs48iOtDOkWOgbtDz GlxZ64DE+NLgr2+kbn9Y/nFffkcXFyp0oTXaUGsMsMBS8jVkzEgKb0Nr5PcJgX3R EGD3FsL1t+A4RK4d+/bdplfcQAyNiHe53AhXDAlfsqP1Mq0e2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOW6goBM4P4mA7U03+5sDWpY2wexMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzc3MTZjN2YtMmVjNy0z YjBkLWFjYzEtOGUxZjFlY2Y3ZjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TWuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQJg5Zsalz6c6+/wdQkgOh6+QaX8e6FJ/Aqq2uEfxITrF0i9Uhh7w0K rg+X+z8yZYx5qCxdt3TU7m+z/7swlZSJuu2jV0vHswHdAXlcNPHDEx8063EagH0b kboe0jmtvaF2ixKKDENmCP71qDGRMa7N2PhwlNmUdC9NpXxE9PGb5yXjiGGIBINC H1zzdS/ohmetVPQ44UhhvfpvEN/teO6i7zvdrUwX9RrY/WzgGEjWYgfTQvev4peE vWhSaLJN55VM31tmMgeZK2t1aN5zAVizkhsYSxGwXmt6DGjof3Ieqg9tYFw4fP4M i+hwF5btt/X9c2RZLE9UknWIrwf2Fw0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:00 2025 by rpki-client