$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e0cc4af5-f6e7-34e2-b340-f72c79b412b2.roa File: e0cc4af5-f6e7-34e2-b340-f72c79b412b2.roa (raw, json) Hash identifier: SfnfncMFytvaAJYzdmPUxnWLf7UYRdlXGRKuI0GBNq4= Subject key identifier: 43:08:94:05:8D:EA:63:61:6E:65:36:52:7F:0D:87:C2:E7:D2:12:97 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848BBBB7A06C15A75AE19AC2580 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e0cc4af5-f6e7-34e2-b340-f72c79b412b2.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 852 IP address blocks: 209.52.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:7a:06:c1:5a:75:ae:19:ac:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=e75e4060-cff4-4eb1-a421-8c208b327243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:28:6f:fc:f0:4b:e1:d4:94:f1:62:3d:4f:0e: a3:b6:d7:7b:70:df:b8:f3:73:53:0e:cf:de:ac:3c: 60:83:df:02:d8:ee:65:b4:7c:82:61:67:8c:bd:d4: e5:67:75:90:ae:41:ab:55:5f:b1:f0:bb:fd:70:70: 3a:4a:27:ab:66:a4:48:78:68:38:24:08:ee:f7:c4: f6:28:12:9c:e3:ab:ec:81:de:9b:3c:19:7c:61:03: be:fb:0b:7e:d2:98:2a:06:7a:29:e8:30:9e:4e:6d: 44:04:d2:8a:c9:1a:d7:77:2c:8d:d1:a4:3d:f1:ea: b0:dc:d7:b2:1e:7d:f5:47:66:c5:95:9e:4a:af:2c: fd:b9:61:f4:fd:62:ea:ac:ce:5a:9c:47:88:5d:05: 13:e3:12:71:bc:ff:ea:57:b4:16:d9:4a:ce:54:68: 0d:85:99:72:69:3a:c5:70:8e:5c:1b:a7:6c:7b:4b: 02:4e:cb:d2:26:27:4f:d7:10:32:79:e4:38:2f:7e: 1a:a2:c0:ec:c7:b4:63:55:71:46:e2:11:1c:99:2a: a5:0c:08:ef:df:0a:22:44:b9:44:f4:a0:60:d2:ed: 1d:f1:ad:95:0f:d6:38:76:c3:cb:fa:6a:7a:c8:95: ec:dd:a1:3a:07:49:0b:bd:68:0f:6f:ab:a5:0e:b1: 04:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:08:94:05:8D:EA:63:61:6E:65:36:52:7F:0D:87:C2:E7:D2:12:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e0cc4af5-f6e7-34e2-b340-f72c79b412b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ed:c7:02:fe:c8:bb:c2:a3:39:a7:a5:46:c6:42:a7:b4:ae: 72:8f:8a:23:50:26:ed:2e:8a:5d:7a:15:73:76:94:e7:d8:fa: f4:1f:73:8a:18:7f:ea:b0:f9:25:e6:3a:85:c9:0a:c9:e0:04: d5:a7:8f:b7:21:df:87:1b:51:ad:05:b0:61:d4:14:cb:14:de: 63:f4:73:49:ec:65:f9:3e:da:d2:a7:38:00:a8:74:3c:75:7d: 84:69:d2:0f:c1:0a:71:5c:3e:47:43:07:3c:f0:a2:dc:e3:83: 38:45:9e:12:29:bc:93:97:68:34:2d:51:b7:c3:21:07:b2:f2: df:07:fc:9c:8d:f6:81:d8:a4:a2:71:ae:5f:d5:8c:fc:58:76: d2:8e:56:ab:3b:50:48:cf:59:6c:94:1e:1b:27:41:fa:04:59: 80:07:cb:30:9e:8c:79:af:73:66:b5:e8:41:65:df:9e:54:2a: 00:b1:af:89:d3:f1:3d:6b:e0:bc:d5:98:04:7c:30:b7:03:3b: fc:af:4b:c5:62:19:8a:4e:99:94:8d:10:d3:4c:44:51:90:e5: 35:f0:4b:2e:a2:38:e2:68:92:05:ca:3e:a2:bd:40:43:62:d0: cd:e7:b5:aa:85:94:36:f7:fe:76:00:d9:f6:ea:cd:45:2c:09: 11:e9:ac:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u3oGwVp1rhmsJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk ZTc1ZTQwNjAtY2ZmNC00ZWIxLWE0MjEtOGMyMDhiMzI3MjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtihv/PBL4dSU8WI9Tw6jttd7cN+483NTDs/e rDxgg98C2O5ltHyCYWeMvdTlZ3WQrkGrVV+x8Lv9cHA6SierZqRIeGg4JAju98T2 KBKc46vsgd6bPBl8YQO++wt+0pgqBnop6DCeTm1EBNKKyRrXdyyN0aQ98eqw3Ney Hn31R2bFlZ5Kryz9uWH0/WLqrM5anEeIXQUT4xJxvP/qV7QW2UrOVGgNhZlyaTrF cI5cG6dse0sCTsvSJidP1xAyeeQ4L34aosDsx7RjVXFG4hEcmSqlDAjv3woiRLlE 9KBg0u0d8a2VD9Y4dsPL+mp6yJXs3aE6B0kLvWgPb6ulDrEEjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMIlAWN6mNhbmU2Un8Nh8Ln0hKXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZTBjYzRhZjUtZjZlNy0z NGUyLWIzNDAtZjcyYzc5YjQxMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0TRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjtxwL+yLvCozmnpUbGQqe0rnKPiiNQJu0uil16FXN2lOfY+vQfc4oY f+qw+SXmOoXJCsngBNWnj7ch34cbUa0FsGHUFMsU3mP0c0nsZfk+2tKnOACodDx1 fYRp0g/BCnFcPkdDBzzwotzjgzhFnhIpvJOXaDQtUbfDIQey8t8H/JyN9oHYpKJx rl/VjPxYdtKOVqs7UEjPWWyUHhsnQfoEWYAHyzCejHmvc2a16EFl355UKgCxr4nT 8T1r4LzVmAR8MLcDO/yvS8ViGYpOmZSNENNMRFGQ5TXwSy6iOOJokgXKPqK9QENi 0M3ntaqFlDb3/nYA2fbqzUUsCRHprMQ= -----END CERTIFICATE-----Generated at Sun Feb 16 20:45:51 2025 by rpki-client