$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ce510425-5e54-3a61-844b-46fd91d3c5f4.roa File: ce510425-5e54-3a61-844b-46fd91d3c5f4.roa (raw, json) Hash identifier: kH94P0V8+F1vXF/lnjYU3kb0hnuA14LoKcTiOnuYIxs= Subject key identifier: 25:8B:2D:A9:84:77:2A:8D:AE:C4:C0:74:AF:61:D0:91:77:ED:97:16 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848ADC608C282E3192424858D80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ce510425-5e54-3a61-844b-46fd91d3c5f4.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 21723 IP address blocks: 209.52.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:08:c2:82:e3:19:24:24:85:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=e620dbff-315a-4c21-99e9-2dcd3214dd48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d9:6b:82:4d:51:83:f4:e1:8a:c7:ca:dd:92: 29:cd:85:67:88:55:21:85:ae:2f:1a:ed:19:0b:cc: 87:2b:39:92:c3:d4:77:3e:91:70:97:60:ba:23:b4: ac:f4:7e:2f:86:2f:11:2f:74:fd:0c:0e:d3:5b:ec: f2:89:6e:22:02:6d:af:60:88:e7:bc:e9:db:06:12: a4:77:14:33:f3:86:8e:78:7a:93:58:32:77:39:8f: d9:a8:39:8c:e9:c1:72:84:9e:be:2a:6d:8c:57:0f: 09:6d:1f:d1:29:e1:e3:17:ed:5e:2b:21:c0:33:07: 7e:af:f6:0a:45:54:ea:fd:85:e2:8b:e3:b3:1f:4b: 92:f0:6f:ff:4b:ab:75:d1:fd:fe:f9:55:6f:75:6b: 11:6d:44:45:38:e5:1a:8b:d0:61:41:d7:c4:7d:46: 10:18:05:95:1e:82:a4:d2:7f:5f:86:3e:8d:f5:60: bb:03:39:df:12:22:88:f3:be:09:bc:e8:1f:29:26: 34:b9:96:e3:00:d1:08:cf:a0:64:72:d8:5c:78:aa: 88:e1:b8:d5:22:12:e4:83:f4:10:f2:9d:9a:34:dd: 7b:c9:c0:18:5f:de:5b:e0:db:1a:b3:63:6f:e3:86: 74:e7:4c:7d:26:2f:4d:59:a1:a5:9b:8c:d3:16:56: a6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8B:2D:A9:84:77:2A:8D:AE:C4:C0:74:AF:61:D0:91:77:ED:97:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ce510425-5e54-3a61-844b-46fd91d3c5f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e5:77:f6:4d:6b:17:f5:33:50:82:96:2c:48:01:1f:53:81:07: 08:e4:bc:b9:cb:a1:2e:67:27:e9:98:c1:8d:cb:c0:80:e6:6b: 86:d7:68:6e:b3:f2:b6:a1:ab:1f:55:32:ba:6a:bd:58:2b:d4: 89:3b:53:bd:0b:eb:ae:dc:fb:2c:04:ef:26:76:b0:9a:18:ab: 2f:53:6e:fa:6c:50:e5:7a:31:72:a5:98:4b:6a:e2:1e:76:11: 0a:22:f5:18:0d:16:85:c9:b8:07:13:a2:4c:5b:59:1b:62:7c: 63:07:66:2e:39:1e:c4:8b:2a:7e:fa:12:cd:76:92:4a:84:d9: 5a:2b:83:02:75:f9:6e:b2:5d:53:b2:2b:f0:d2:80:d1:91:7e: 33:63:5f:dd:84:29:97:c2:cf:75:79:e3:0b:83:05:6a:11:c2: a1:2a:2c:28:6f:6b:79:46:29:d1:f3:92:68:3e:07:52:e8:dd: 94:dc:cf:20:04:a8:c5:35:7c:25:54:e3:94:12:82:17:7d:a4: 25:7b:c8:31:20:ea:41:96:74:42:26:6b:3f:d9:31:67:90:00: 7a:73:11:36:fb:95:6d:0a:3e:f0:89:8d:16:3e:42:44:02:97: 0b:6f:e4:37:71:b4:18:3a:25:6d:fe:a4:8c:ef:18:0b:c5:39: 01:ae:f3:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxgjCguMZJCSFjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk ZTYyMGRiZmYtMzE1YS00YzIxLTk5ZTktMmRjZDMyMTRkZDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNlrgk1Rg/ThisfK3ZIpzYVniFUhha4vGu0Z C8yHKzmSw9R3PpFwl2C6I7Ss9H4vhi8RL3T9DA7TW+zyiW4iAm2vYIjnvOnbBhKk dxQz84aOeHqTWDJ3OY/ZqDmM6cFyhJ6+Km2MVw8JbR/RKeHjF+1eKyHAMwd+r/YK RVTq/YXii+OzH0uS8G//S6t10f3++VVvdWsRbURFOOUai9BhQdfEfUYQGAWVHoKk 0n9fhj6N9WC7AznfEiKI874JvOgfKSY0uZbjANEIz6BkcthceKqI4bjVIhLkg/QQ 8p2aNN17ycAYX95b4Nsas2Nv44Z050x9Ji9NWaGlm4zTFlamVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWLLamEdyqNrsTAdK9h0JF37ZcWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvY2U1MTA0MjUtNWU1NC0z YTYxLTg0NGItNDZmZDkxZDNjNWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TS4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOV39k1rF/UzUIKWLEgBH1OBBwjkvLnLoS5nJ+mYwY3LwIDma4bXaG6z 8rahqx9VMrpqvVgr1Ik7U70L667c+ywE7yZ2sJoYqy9TbvpsUOV6MXKlmEtq4h52 EQoi9RgNFoXJuAcTokxbWRtifGMHZi45HsSLKn76Es12kkqE2VorgwJ1+W6yXVOy K/DSgNGRfjNjX92EKZfCz3V54wuDBWoRwqEqLChva3lGKdHzkmg+B1Lo3ZTczyAE qMU1fCVU45QSghd9pCV7yDEg6kGWdEImaz/ZMWeQAHpzETb7lW0KPvCJjRY+QkQC lwtv5DdxtBg6JW3+pIzvGAvFOQGu81I= -----END CERTIFICATE-----Generated at Tue Apr 8 07:34:08 2025 by rpki-client