$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33334af2-b76c-3f3d-9a71-46ea21b30ce6.roa File: 33334af2-b76c-3f3d-9a71-46ea21b30ce6.roa (raw, json) Hash identifier: 2gSPhf0LJlDfcSiT7ddsWLxxIc3GxCYlvdRAxI1Zz+8= Subject key identifier: 73:5F:C6:E4:CF:80:83:5C:3A:06:3B:A6:A7:D0:4B:10:32:64:64:25 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858498CFF019DE6465EAF9FD3E100 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33334af2-b76c-3f3d-9a71-46ea21b30ce6.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 21723 IP address blocks: 209.53.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:01:9d:e6:46:5e:af:9f:d3:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=cc8cc918-9f43-4903-8ad9-418c4b796f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:83:a8:a2:91:81:0e:e7:89:77:b9:96:31:1f: 40:6c:62:fd:ee:c0:01:fc:ea:2b:68:c5:a6:72:ff: 12:4c:c7:7e:33:a8:ba:c5:41:44:2a:7d:97:0c:c8: 6d:47:79:ef:fd:6b:94:a5:09:f3:7d:e5:0c:50:38: e8:d6:38:37:d9:45:34:ce:93:2c:94:06:f8:d8:fa: 39:07:6d:12:34:c7:4d:a5:bd:9b:f6:73:60:f9:ff: 3c:2b:83:1d:a1:db:36:98:ca:54:b0:b9:1a:c3:72: 79:c2:b6:dd:2c:13:1a:5c:c1:86:33:14:ed:02:3b: 15:7d:aa:5e:1d:39:ae:77:81:21:fd:65:8e:43:b9: 65:a0:b4:7c:b2:ea:de:fc:95:66:f9:ee:21:59:7d: 52:94:f9:8a:d7:a5:15:c3:d8:ee:26:e2:02:55:77: 42:73:87:c6:fb:29:b3:b2:13:d6:22:e1:39:e8:cd: 65:d7:97:07:10:40:75:e8:d0:56:17:f1:80:44:02: c5:bb:93:c4:62:df:7d:80:33:39:eb:24:89:4f:6b: 8f:7a:59:e6:68:40:29:92:27:44:59:5f:07:d3:50: c1:8f:dc:28:6a:60:b7:4f:cb:ec:41:e9:a7:5f:95: 85:30:f9:23:51:cc:88:0b:20:7c:6b:ae:07:f6:64: 66:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5F:C6:E4:CF:80:83:5C:3A:06:3B:A6:A7:D0:4B:10:32:64:64:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33334af2-b76c-3f3d-9a71-46ea21b30ce6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:8c:2b:c6:01:e3:94:68:5d:8c:05:1d:bd:93:6d:9c:3e:ae: a8:9f:47:3f:05:5d:5d:fb:d1:40:a1:74:fc:a6:29:fe:e0:53: e4:52:ab:46:6f:f9:53:d2:01:8e:5a:98:43:43:02:e1:bb:b2: 96:82:a8:24:e0:26:11:8e:65:bd:3e:b7:71:d7:fd:53:16:b5: e7:e8:bb:70:87:31:95:89:30:f4:bc:28:db:9e:01:d5:6e:46: 3f:c5:7f:28:fd:0a:18:e0:d7:b2:41:db:43:de:e3:13:2c:1e: ce:14:e1:4c:2e:8d:a0:60:aa:cd:cb:83:d9:44:71:16:8d:2e: 7c:0d:f0:e5:e7:cd:90:95:61:37:9f:e5:dd:43:9e:a7:e9:f9: 49:c5:12:fe:ad:6e:18:0b:7e:d6:fd:6b:fd:5c:9b:30:02:94: e1:84:33:7a:79:07:27:59:57:df:3c:5e:73:a4:5f:cf:82:17: e2:0b:de:a4:6a:ca:2d:9c:0c:9e:3f:a5:51:49:76:9b:6b:ce: 71:6e:e4:96:fd:16:ed:07:09:ed:89:bb:2e:c1:cd:04:79:26: 9c:4f:ec:fa:2e:9c:75:b9:33:f8:23:e4:f1:7a:be:c6:50:b1: 7c:e9:9a:24:4b:8b:10:7d:cc:12:40:81:15:b0:42:6b:6f:22: 4c:2f:96:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/wGd5kZer5/T4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk Y2M4Y2M5MTgtOWY0My00OTAzLThhZDktNDE4YzRiNzk2ZjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYOoopGBDueJd7mWMR9AbGL97sAB/OoraMWm cv8STMd+M6i6xUFEKn2XDMhtR3nv/WuUpQnzfeUMUDjo1jg32UU0zpMslAb42Po5 B20SNMdNpb2b9nNg+f88K4Mdods2mMpUsLkaw3J5wrbdLBMaXMGGMxTtAjsVfape HTmud4Eh/WWOQ7lloLR8sure/JVm+e4hWX1SlPmK16UVw9juJuICVXdCc4fG+ymz shPWIuE56M1l15cHEEB16NBWF/GARALFu5PEYt99gDM56ySJT2uPelnmaEApkidE WV8H01DBj9woamC3T8vsQemnX5WFMPkjUcyICyB8a64H9mRm0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNfxuTPgINcOgY7pqfQSxAyZGQlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzMzMzRhZjItYjc2Yy0z ZjNkLTlhNzEtNDZlYTIxYjMwY2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TVrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMSMK8YB45RoXYwFHb2TbZw+rqifRz8FXV370UChdPymKf7gU+RSq0Zv +VPSAY5amENDAuG7spaCqCTgJhGOZb0+t3HX/VMWtefou3CHMZWJMPS8KNueAdVu Rj/Ffyj9Chjg17JB20Pe4xMsHs4U4UwujaBgqs3Lg9lEcRaNLnwN8OXnzZCVYTef 5d1Dnqfp+UnFEv6tbhgLftb9a/1cmzAClOGEM3p5BydZV988XnOkX8+CF+IL3qRq yi2cDJ4/pVFJdptrznFu5Jb9Fu0HCe2Juy7BzQR5JpxP7PounHW5M/gj5PF6vsZQ sXzpmiRLixB9zBJAgRWwQmtvIkwvllY= -----END CERTIFICATE-----Generated at Sun May 11 03:46:08 2025 by rpki-client