$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1beebeaf-1f0e-319d-a76d-aa110fadd44c.roa File: 1beebeaf-1f0e-319d-a76d-aa110fadd44c.roa (raw, json) Hash identifier: bIKWr1Tty5BZqcD9CV9s2pLQBsXYuF2hFMoM0TkX2zc= Subject key identifier: 0E:80:5A:E9:3F:FE:90:4D:B4:8D:10:D1:12:1D:BA:20:23:97:CC:55 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499829CAA9EA4523F15D1E9F00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1beebeaf-1f0e-319d-a76d-aa110fadd44c.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 209.52.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:ca:a9:ea:45:23:f1:5d:1e:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=9984f603-878d-45fb-ba02-0ff7a80ea8f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1b:3a:cf:89:3b:c6:9c:78:e7:d4:9f:6e:47: 96:29:c0:91:7c:01:55:8e:ec:b7:ce:af:66:70:a3: 45:a4:4c:a9:e6:60:9d:f9:76:47:49:5e:b5:65:7f: 77:66:f8:f9:54:b1:7b:fb:e4:b5:c2:1e:52:8e:76: 97:66:b7:62:47:c8:23:5f:83:ca:45:b9:90:e4:5c: 69:50:b2:a6:03:f8:c0:ae:c7:a5:40:d2:7f:29:59: 7f:dd:9b:90:52:34:3b:63:ca:39:cb:77:12:42:32: a7:02:b7:33:88:51:7d:09:90:00:29:ff:c8:66:45: e0:b4:28:5a:65:1c:9d:7d:4c:01:83:7f:55:92:3b: 08:40:52:52:ee:e7:36:b4:67:24:a6:c0:ac:d7:eb: 14:01:7e:4a:41:86:da:a1:be:5c:fe:33:fe:b1:27: 36:f3:3a:13:2b:26:fc:6a:a9:32:67:e3:70:15:a0: d6:b7:68:2d:00:ab:fc:f9:07:80:fe:15:5e:a4:d0: 78:05:c4:c7:95:22:ec:d2:7d:1d:9b:cd:d6:db:0e: f5:0c:b3:1b:10:8f:f2:23:b2:db:2c:85:b6:5e:b3: 7c:0a:c6:bd:51:d0:55:42:41:18:30:78:cd:b0:4b: 7b:52:68:2c:61:2e:af:de:78:0d:c1:9b:32:4b:e9: 7c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:80:5A:E9:3F:FE:90:4D:B4:8D:10:D1:12:1D:BA:20:23:97:CC:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1beebeaf-1f0e-319d-a76d-aa110fadd44c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:1f:27:10:99:39:71:81:4c:22:00:59:60:d9:bd:52:31:b3: 4a:5a:97:0a:df:c3:b6:9a:28:a0:7f:f5:9a:db:e1:00:d9:15: 03:95:77:5f:f9:04:e9:dd:9a:a9:8a:8f:ef:13:21:f5:ed:07: f7:3d:5b:a6:2d:bf:cc:f0:a7:44:ca:7f:9b:31:1f:1e:26:93: 3b:37:4c:ed:4f:ec:5e:e3:a8:ad:61:45:f0:b7:2b:0c:a3:1f: 5c:72:0c:52:88:4f:0d:a5:3f:0b:c0:81:b8:f2:6c:d7:66:f6: 96:75:78:fd:8f:f4:3c:39:59:6e:d6:2a:e6:23:aa:d7:63:08: 40:06:b7:57:c5:70:28:46:50:4a:4f:97:6a:61:d8:09:01:de: 88:a1:b5:10:b3:06:00:82:0d:85:ec:cd:5d:58:72:c8:3c:98: 8f:48:47:7c:c4:55:11:63:a1:ba:95:38:4f:d4:e5:c7:0b:84: cc:d6:79:d1:f2:d7:06:1c:2a:30:60:92:f6:8b:c5:47:d5:a6: bd:52:f7:f0:28:b8:98:7d:19:8f:61:6b:18:59:40:3b:03:b6: 2b:07:5a:29:eb:16:eb:c7:3f:e8:fe:2e:b5:c9:72:3a:f8:18: 6a:75:ee:78:86:60:3d:d8:ef:8a:98:f8:44:15:72:c9:28:71: 4e:4e:e3:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKcqp6kUj8V0enwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk OTk4NGY2MDMtODc4ZC00NWZiLWJhMDItMGZmN2E4MGVhOGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhs6z4k7xpx459SfbkeWKcCRfAFVjuy3zq9m cKNFpEyp5mCd+XZHSV61ZX93Zvj5VLF7++S1wh5SjnaXZrdiR8gjX4PKRbmQ5Fxp ULKmA/jArselQNJ/KVl/3ZuQUjQ7Y8o5y3cSQjKnArcziFF9CZAAKf/IZkXgtCha ZRydfUwBg39VkjsIQFJS7uc2tGckpsCs1+sUAX5KQYbaob5c/jP+sSc28zoTKyb8 aqkyZ+NwFaDWt2gtAKv8+QeA/hVepNB4BcTHlSLs0n0dm83W2w71DLMbEI/yI7Lb LIW2XrN8Csa9UdBVQkEYMHjNsEt7UmgsYS6v3ngNwZsyS+l8YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6AWuk//pBNtI0Q0RIduiAjl8xVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMWJlZWJlYWYtMWYwZS0z MTlkLWE3NmQtYWExMTBmYWRkNDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0TQoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwfJxCZOXGBTCIAWWDZvVIxs0palwrfw7aaKKB/9Zrb4QDZFQOVd1/5 BOndmqmKj+8TIfXtB/c9W6Ytv8zwp0TKf5sxHx4mkzs3TO1P7F7jqK1hRfC3Kwyj H1xyDFKITw2lPwvAgbjybNdm9pZ1eP2P9Dw5WW7WKuYjqtdjCEAGt1fFcChGUEpP l2ph2AkB3oihtRCzBgCCDYXszV1Ycsg8mI9IR3zEVRFjobqVOE/U5ccLhMzWedHy 1wYcKjBgkvaLxUfVpr1S9/AouJh9GY9haxhZQDsDtisHWinrFuvHP+j+LrXJcjr4 GGp17niGYD3Y74qY+EQVcskocU5O49k= -----END CERTIFICATE-----Generated at Sat May 10 07:07:06 2025 by rpki-client