$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e6f17482-2e80-32d6-aed8-df301d8c4d4d.roa File: e6f17482-2e80-32d6-aed8-df301d8c4d4d.roa (raw, json) Hash identifier: QuLtpjGiFUwGAYjTXO6V2i11LKM/3L+nJjMhXqJU/xo= Subject key identifier: B1:F4:6D:14:F7:30:DA:C4:6B:AF:6E:7F:26:81:A3:B9:FA:9E:CD:1E Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B35B6247753BA7D95CAFAF40 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e6f17482-2e80-32d6-aed8-df301d8c4d4d.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 40934 IP address blocks: 209.121.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:62:47:75:3b:a7:d9:5c:af:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=570afca8-8d6c-4c3f-b710-46329712d715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:68:0f:ab:58:48:c7:cd:97:1d:d6:7f:09:0d: f4:70:29:d7:eb:af:c9:52:94:b8:f5:65:88:d3:0c: 93:e3:ba:19:db:80:6d:3b:7a:5d:ad:04:6b:b6:f8: 30:d4:f2:df:88:15:2d:2c:60:fb:46:b5:8f:57:d8: cc:60:8f:7a:5b:a1:3b:92:9b:b6:36:de:12:24:c8: 6a:e9:0a:a1:17:a9:a2:ad:e8:09:02:31:4d:b1:f7: 73:e6:6f:67:5c:4f:20:22:05:7d:ac:e1:68:82:e7: 90:9c:95:12:b8:a4:a9:c4:bd:7c:0f:dc:c5:92:46: eb:9d:57:0a:4d:cc:38:dc:91:20:f6:38:b4:07:4f: b1:52:dc:85:8a:b7:0d:b8:b1:1f:5d:70:30:6b:d8: 07:32:cc:70:42:d6:21:3c:66:8f:ac:af:78:aa:12: 2b:b7:87:24:8b:f3:cb:c8:d7:21:af:2c:ee:a8:93: cc:f7:1d:7b:c5:a2:dd:cb:a4:cd:e8:db:1c:a4:34: 35:89:27:b7:73:8f:84:df:42:3c:d9:64:12:f9:4c: 4c:e1:25:24:0b:94:6b:b4:c6:29:44:fd:c9:b8:76: b3:2d:f0:29:26:72:03:e8:91:43:d3:8a:99:74:9f: 83:ef:89:5d:bc:bb:19:57:b2:9b:b4:41:e1:96:e4: 71:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F4:6D:14:F7:30:DA:C4:6B:AF:6E:7F:26:81:A3:B9:FA:9E:CD:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e6f17482-2e80-32d6-aed8-df301d8c4d4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.121.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption f8:9e:d0:e1:f1:f2:48:11:1a:ed:17:e0:b2:97:2f:86:a9:69: 8d:25:54:54:8c:2d:a9:77:3a:82:7e:63:bf:07:85:15:e9:0e: 2e:86:a5:7a:58:94:c5:1b:98:af:98:62:cf:be:4a:27:30:39: 79:ff:75:3f:32:a3:57:4c:81:35:9e:82:fc:4c:f5:8e:ee:5e: 1e:9b:4d:66:da:a5:c1:8d:ec:7a:ed:f2:74:e1:de:5b:b0:47: ca:49:2a:8f:ef:84:84:98:0a:3a:b4:e3:3f:e0:49:2e:1d:5e: 71:d1:1b:91:c1:19:fe:4e:f1:47:ce:b9:81:0c:bb:07:da:9f: 9e:f6:4c:05:cf:b3:8f:37:7e:7e:d7:40:ba:ec:f6:c1:2d:44: c2:c3:66:1e:9e:c8:cd:6f:65:e8:66:4c:c3:d4:af:fb:20:3c: 36:c3:a6:55:75:39:10:f4:ac:9b:02:ac:64:e9:03:95:f4:1f: ba:1e:44:b3:95:73:b8:1b:c4:ff:45:72:5e:57:19:79:10:65: 75:72:ce:07:3e:47:d1:09:8c:18:e9:bf:d5:40:56:7f:55:05: 14:4a:81:66:88:c0:fa:b5:f4:1b:38:bc:81:e7:6d:91:eb:34: 8d:15:96:5d:9e:1d:8e:25:24:01:30:b2:9a:0e:13:fe:a3:f6: 91:06:10:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW2JHdTun2Vyvr0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk NTcwYWZjYTgtOGQ2Yy00YzNmLWI3MTAtNDYzMjk3MTJkNzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mgPq1hIx82XHdZ/CQ30cCnX66/JUpS49WWI 0wyT47oZ24BtO3pdrQRrtvgw1PLfiBUtLGD7RrWPV9jMYI96W6E7kpu2Nt4SJMhq 6QqhF6miregJAjFNsfdz5m9nXE8gIgV9rOFogueQnJUSuKSpxL18D9zFkkbrnVcK Tcw43JEg9ji0B0+xUtyFircNuLEfXXAwa9gHMsxwQtYhPGaPrK94qhIrt4cki/PL yNchryzuqJPM9x17xaLdy6TN6NscpDQ1iSe3c4+E30I82WQS+UxM4SUkC5RrtMYp RP3JuHazLfApJnID6JFD04qZdJ+D74ldvLsZV7KbtEHhluRxXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLH0bRT3MNrEa69ufyaBo7n6ns0eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZTZmMTc0ODItMmU4MC0z MmQ2LWFlZDgtZGYzMDFkOGM0ZDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XkfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAPie0OHx8kgRGu0X4LKXL4apaY0lVFSMLal3OoJ+Y78HhRXpDi6GpXpY lMUbmK+YYs++SicwOXn/dT8yo1dMgTWegvxM9Y7uXh6bTWbapcGN7Hrt8nTh3luw R8pJKo/vhISYCjq04z/gSS4dXnHRG5HBGf5O8UfOuYEMuwfan572TAXPs483fn7X QLrs9sEtRMLDZh6eyM1vZehmTMPUr/sgPDbDplV1ORD0rJsCrGTpA5X0H7oeRLOV c7gbxP9Fcl5XGXkQZXVyzgc+R9EJjBjpv9VAVn9VBRRKgWaIwPq19Bs4vIHnbZHr NI0Vll2eHY4lJAEwspoOE/6j9pEGEMU= -----END CERTIFICATE-----Generated at Wed Apr 9 19:48:21 2025 by rpki-client