$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d18ff211-0ee2-3022-8c45-6711b4123785.roa File: d18ff211-0ee2-3022-8c45-6711b4123785.roa (raw, json) Hash identifier: wFff6H3Cz1620HQ54o8yvYlJGFXy8GlmmDuFVba7+lw= Subject key identifier: B2:1C:8E:01:17:BC:05:F0:AA:59:31:60:69:33:EF:87:BC:68:52:11 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848BE86272F241B4E5FA898BD20 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d18ff211-0ee2-3022-8c45-6711b4123785.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 852 IP address blocks: 209.29.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:27:2f:24:1b:4e:5f:a8:98:bd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=6fdd760d-59d1-4cca-ae78-2bab0d2e93d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b1:eb:ee:3a:21:71:47:fc:c0:75:5d:c6:b4: 79:95:f0:24:48:5b:19:87:7b:ac:08:ba:ad:93:9d: 15:b1:5c:ca:77:05:11:69:71:98:91:46:a4:75:19: e0:12:41:c1:8e:f9:89:5f:93:1d:3c:bf:59:f4:21: 29:08:95:49:c7:5a:9f:51:24:ab:80:19:92:6d:51: 8f:70:de:a4:08:47:71:5c:6c:7c:6f:db:34:d7:2b: 3f:a3:c3:de:94:25:58:78:d0:1b:b4:af:24:5d:d6: 8b:db:36:df:99:b5:f7:8f:e9:03:05:78:59:cd:72: f6:e7:7a:8e:53:1c:0f:4a:66:e9:96:85:b5:f6:53: b3:57:ac:67:ee:66:4d:cb:9f:e3:24:66:66:06:b4: b3:4b:b4:c1:7d:c8:c2:cc:b1:34:9f:38:d3:00:96: d8:9b:56:68:94:c3:08:64:f6:9a:a1:ed:6d:f0:48: bf:45:bb:65:97:7c:86:23:bc:af:a8:68:aa:8f:47: 21:6e:59:6d:d0:0b:34:39:f7:23:8d:98:1f:62:f3: d0:40:df:5a:89:d9:0b:67:ac:26:ca:e0:c5:9f:00: fa:95:94:72:c9:7e:9b:fb:f7:38:48:a1:29:34:d4: 6c:fd:e3:5b:84:aa:35:6c:53:af:e4:47:75:00:30: e7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1C:8E:01:17:BC:05:F0:AA:59:31:60:69:33:EF:87:BC:68:52:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d18ff211-0ee2-3022-8c45-6711b4123785.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:e6:01:76:56:08:ce:3f:7d:ea:b3:88:3e:ec:a8:9d:f5:ed: 4a:24:85:fd:0d:26:5a:78:b2:e9:68:22:c8:5b:4a:67:84:80: 32:33:dd:98:23:ab:2f:17:44:93:70:67:4c:34:c3:df:ba:b8: 31:bc:8e:4e:3c:44:07:dd:28:09:9f:ff:f4:23:2e:88:74:47: c6:e6:f2:6e:50:8e:b4:d4:4b:f2:39:d2:e6:4c:77:5b:b6:2a: 4f:d8:18:65:ff:d5:ef:53:2e:32:66:b5:8a:d2:77:cd:b9:50: 6e:e4:22:c8:a9:89:e3:c0:7f:9c:ae:2b:fa:5c:d7:e8:83:a5: 44:e2:4e:8a:04:f8:0e:cf:79:77:0c:be:f5:86:8b:a2:d1:27: 1d:94:19:bb:ce:5d:81:65:f7:b1:29:28:d0:c4:66:43:76:da: 16:82:88:09:65:03:cc:84:a4:de:e9:4a:92:27:d9:d2:ea:e6: 0d:f2:f8:9b:08:b0:e8:b8:0a:a2:bb:22:65:dc:19:33:ac:98: 3d:ce:f5:8d:59:1c:78:48:a5:3f:29:65:35:a0:1b:41:94:a8: 61:b2:11:00:12:1d:0f:60:ac:c9:76:64:3a:9f:f5:f7:c5:ae: 31:09:f4:2f:eb:d2:57:71:0a:16:e0:48:46:07:ab:ec:39:01: be:8b:c6:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hicvJBtOX6iYvSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk NmZkZDc2MGQtNTlkMS00Y2NhLWFlNzgtMmJhYjBkMmU5M2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbHr7johcUf8wHVdxrR5lfAkSFsZh3usCLqt k50VsVzKdwURaXGYkUakdRngEkHBjvmJX5MdPL9Z9CEpCJVJx1qfUSSrgBmSbVGP cN6kCEdxXGx8b9s01ys/o8PelCVYeNAbtK8kXdaL2zbfmbX3j+kDBXhZzXL253qO UxwPSmbploW19lOzV6xn7mZNy5/jJGZmBrSzS7TBfcjCzLE0nzjTAJbYm1ZolMMI ZPaaoe1t8Ei/Rbtll3yGI7yvqGiqj0chbllt0As0OfcjjZgfYvPQQN9aidkLZ6wm yuDFnwD6lZRyyX6b+/c4SKEpNNRs/eNbhKo1bFOv5Ed1ADDn6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIcjgEXvAXwqlkxYGkz74e8aFIRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDE4ZmYyMTEtMGVlMi0z MDIyLThjNDUtNjcxMWI0MTIzNzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0R1rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfmAXZWCM4/feqziD7sqJ317Uokhf0NJlp4suloIshbSmeEgDIz3Zgj qy8XRJNwZ0w0w9+6uDG8jk48RAfdKAmf//QjLoh0R8bm8m5QjrTUS/I50uZMd1u2 Kk/YGGX/1e9TLjJmtYrSd825UG7kIsipiePAf5yuK/pc1+iDpUTiTooE+A7PeXcM vvWGi6LRJx2UGbvOXYFl97EpKNDEZkN22haCiAllA8yEpN7pSpIn2dLq5g3y+JsI sOi4CqK7ImXcGTOsmD3O9Y1ZHHhIpT8pZTWgG0GUqGGyEQASHQ9grMl2ZDqf9ffF rjEJ9C/r0ldxChbgSEYHq+w5Ab6LxqY= -----END CERTIFICATE-----Generated at Sun Apr 6 06:07:22 2025 by rpki-client