$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/09f43a57-985a-3a3e-a281-4bd6a23b81c4.roa File: 09f43a57-985a-3a3e-a281-4bd6a23b81c4.roa (raw, json) Hash identifier: jqTmnOHy4s7qCMF/5TJ5T1RF8wgHFvNZ/n8S67ojZ0o= Subject key identifier: 4B:AF:37:C2:07:9F:E9:C6:A4:F0:E8:59:8C:D6:20:4F:0A:8A:86:50 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499AF47E4FE1C02A667EEB1A80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/09f43a57-985a-3a3e-a281-4bd6a23b81c4.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 198.53.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:7e:4f:e1:c0:2a:66:7e:eb:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=880eae58-e516-455a-91df-72c4b451c15b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cb:7d:50:c3:a1:ed:2b:eb:d3:3f:9e:c0:43: cf:e7:41:60:0d:90:32:aa:c9:50:c9:c8:2d:ba:d5: 16:86:2d:97:13:a8:5e:38:14:db:85:3d:d2:a3:b7: bc:15:9d:b3:d0:32:aa:e8:af:cc:f5:7c:ae:eb:27: 71:8d:bd:66:61:06:87:09:08:07:b1:af:8a:c2:cc: 03:c1:a3:e3:95:d8:f1:7b:ec:81:37:ab:69:ab:7b: 49:db:dd:b6:8f:af:4c:23:c3:6d:e4:fe:ed:cf:4c: d4:48:bc:6f:cb:55:4f:88:2d:a5:c9:7f:3e:29:0e: 2a:05:58:f5:ce:e9:3f:ae:17:38:1a:f4:40:28:34: bf:19:e5:ed:b6:47:e5:9c:c8:dc:2e:f4:97:02:45: 5e:3f:7c:c6:02:df:53:24:a1:60:f1:46:3d:8b:20: 91:63:49:d3:26:92:41:c8:50:3c:24:f6:31:a6:d6: d0:c1:27:e1:58:f8:5b:ba:4f:14:e0:0c:1b:b7:ed: 95:ca:b6:ec:65:e1:0c:b4:db:00:66:ce:86:d5:f7: 80:71:0e:36:e5:1c:e7:59:b4:4e:a7:f0:3e:c6:82: a0:5c:b7:04:de:83:ab:3a:45:c2:68:bc:6b:c5:eb: ca:cb:d8:77:95:81:87:d5:a7:3a:f9:6f:75:8f:eb: 61:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AF:37:C2:07:9F:E9:C6:A4:F0:E8:59:8C:D6:20:4F:0A:8A:86:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/09f43a57-985a-3a3e-a281-4bd6a23b81c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 198.53.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:d7:84:ab:49:11:a6:cf:e7:14:37:30:a8:d0:70:2d:62:71: ca:c8:9a:54:f1:2f:06:0e:c7:20:9a:bb:44:9b:93:fb:66:37: 6c:a2:e0:2e:09:15:02:02:f2:92:db:30:c6:b7:ca:1d:6f:e0: c7:43:03:61:2a:f4:98:26:c4:13:dd:f5:53:f5:6f:c7:26:17: 5f:89:fe:0c:1e:c8:e0:89:38:93:7d:a3:64:5b:bb:6b:41:4f: 8e:44:87:54:e4:3d:7e:93:d9:e0:3b:52:0f:fa:03:0f:12:fe: 45:f9:48:f1:0f:f3:e0:e8:af:dd:fc:d3:66:9d:1f:62:1d:7f: 1e:49:76:7e:04:fe:c5:fd:14:da:52:43:5f:50:0d:37:e4:cd: 71:45:6d:7b:e3:8e:ca:6e:eb:b4:19:8d:ff:d1:9c:da:bb:0d: a1:2d:56:73:7f:ac:40:05:83:e9:0b:c8:9e:58:0d:49:45:bb: 46:a1:56:4c:71:47:4f:d9:db:56:73:48:67:5a:80:12:6f:5f: 85:28:77:85:a7:65:55:0c:06:ce:35:54:a8:57:a3:dc:b6:e0: d6:40:f9:bb:a5:15:bb:71:48:92:f7:47:81:eb:b9:b4:e9:cb: 29:5f:e8:5c:5d:d2:8d:4d:b9:4f:f7:b4:72:56:56:83:df:e2: b5:a1:c9:e8 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEma9H5P4cAqZn7rGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ODgwZWFlNTgtZTUxNi00NTVhLTkxZGYtNzJjNGI0NTFjMTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8t9UMOh7Svr0z+ewEPP50FgDZAyqslQycgt utUWhi2XE6heOBTbhT3So7e8FZ2z0DKq6K/M9Xyu6ydxjb1mYQaHCQgHsa+KwswD waPjldjxe+yBN6tpq3tJ2922j69MI8Nt5P7tz0zUSLxvy1VPiC2lyX8+KQ4qBVj1 zuk/rhc4GvRAKDS/GeXttkflnMjcLvSXAkVeP3zGAt9TJKFg8UY9iyCRY0nTJpJB yFA8JPYxptbQwSfhWPhbuk8U4Awbt+2VyrbsZeEMtNsAZs6G1feAcQ425RznWbRO p/A+xoKgXLcE3oOrOkXCaLxrxevKy9h3lYGH1ac6+W91j+thHwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEuvN8IHn+nGpPDoWYzWIE8KioZQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMDlmNDNhNTctOTg1YS0z YTNlLWEyODEtNGJkNmEyM2I4MWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxjUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAv9eEq0kRps/nFDcwqNBwLWJxysiaVPEvBg7HIJq7RJuT+2Y3bKLgLgkV AgLyktswxrfKHW/gx0MDYSr0mCbEE931U/VvxyYXX4n+DB7I4Ik4k32jZFu7a0FP jkSHVOQ9fpPZ4DtSD/oDDxL+RflI8Q/z4Oiv3fzTZp0fYh1/Hkl2fgT+xf0U2lJD X1ANN+TNcUVte+OOym7rtBmN/9Gc2rsNoS1Wc3+sQAWD6QvInlgNSUW7RqFWTHFH T9nbVnNIZ1qAEm9fhSh3hadlVQwGzjVUqFej3Lbg1kD5u6UVu3FIkvdHgeu5tOnL KV/oXF3SjU25T/e0clZWg9/itaHJ6A== -----END CERTIFICATE-----Generated at Wed May 7 19:09:23 2025 by rpki-client