$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/626acb6f-a9f2-3ded-95e5-811dd7647975.roa File: 626acb6f-a9f2-3ded-95e5-811dd7647975.roa (raw, json) Hash identifier: CSDt3cUISJORFFq0jhZMHagDe+2ekezqpY36Tv4iyLw= Subject key identifier: B6:B6:56:B9:35:AE:FD:86:EB:E5:04:9D:1F:DA:95:5B:7A:92:62:23 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849C79F6275BC98F6ACFCF1F000 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/626acb6f-a9f2-3ded-95e5-811dd7647975.roa Signing time: Thu 08 May 2025 01:00:47 +0000 ROA not before: Thu 08 May 2025 01:00:47 +0000 ROA not after: Wed 06 Aug 2025 01:00:47 +0000 asID: 54359 IP address blocks: 209.52.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:9f:62:75:bc:98:f6:ac:fc:f1:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: May 8 01:00:47 2025 GMT Not After : Aug 6 01:00:47 2025 GMT Subject: CN=bd684b51-0e9a-4c58-9490-edabea91b390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2b:28:95:a5:d3:0f:c3:5a:99:6f:2f:ca:cb: cc:e0:30:1f:11:2b:7e:b7:a5:cf:b1:29:50:c6:31: 31:43:b4:c6:81:2d:69:84:08:d9:6d:73:bf:14:df: 1e:03:ae:80:3a:71:c1:02:9e:77:d6:00:7c:f7:27: bd:6b:f0:0b:19:34:89:20:f6:bd:1c:f9:d6:be:e8: 32:8b:61:04:a4:63:e7:37:72:1b:3a:df:c2:be:67: 61:90:10:d6:34:c4:a3:a9:f4:83:f0:5b:58:f7:09: 70:2d:59:4b:2b:04:09:e7:71:d3:f0:b4:bb:c3:10: 38:97:16:78:98:2f:eb:5d:ce:63:c7:81:d5:79:27: 28:39:8e:66:68:ba:90:bb:ee:ae:89:04:69:ab:7c: 23:bb:4a:f1:42:ce:b8:26:98:07:b7:5d:e1:7b:2b: 43:6a:62:19:c6:89:9d:cd:92:a4:5d:4c:5e:d4:b6: 9c:35:bd:a4:5c:c7:f4:3e:1c:1f:6b:79:e8:03:a8: d7:46:81:fa:e8:92:3a:1b:58:6e:09:af:94:ed:d9: a9:7f:dc:19:70:f6:e3:ea:97:00:e1:e5:bb:6e:1e: 85:48:91:1b:90:ed:03:ed:46:65:e5:02:44:1e:5f: 56:3e:e0:22:52:eb:60:d1:cf:a5:7b:38:15:da:e0: c6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B6:56:B9:35:AE:FD:86:EB:E5:04:9D:1F:DA:95:5B:7A:92:62:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/626acb6f-a9f2-3ded-95e5-811dd7647975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:01:f9:b4:93:09:0e:b3:6b:78:2f:90:e6:1b:f8:2b:6f:47: 52:8f:aa:4a:28:08:47:4a:3d:ed:4f:d8:cf:7f:20:16:2e:b6: 8d:64:d2:86:89:cb:e4:af:80:d7:bb:27:76:35:91:0d:0a:1b: 72:58:1e:82:ca:af:e4:ce:2d:59:3a:23:e7:67:5b:eb:42:b9: 66:9d:f9:69:ca:b6:6e:ac:59:ee:70:39:e9:cc:8f:24:23:84: 00:3c:15:e7:4f:56:84:ef:37:89:01:7c:3c:e2:bd:75:a2:19: b0:a6:9f:7b:e6:0d:13:53:f0:a9:5c:48:61:34:3a:b9:c1:a0: 85:b4:3e:b3:c7:dd:6e:48:77:58:f0:a2:61:9a:84:f4:e3:07: d2:76:e6:16:41:d9:75:fe:84:c7:c4:e4:f6:4b:68:31:ce:e4: 80:2a:60:bb:69:90:98:72:1c:e2:c9:81:6c:b8:33:f0:3d:06: 49:6b:b0:79:53:8c:4b:6e:47:86:7d:17:42:2f:53:cc:cc:5c: c1:b4:dc:d2:a6:f1:68:7d:1a:9c:4d:f5:c4:2f:78:a4:78:30: 75:2b:41:45:58:41:bf:39:6e:33:ce:cb:d8:56:e6:20:77:ac: 83:1b:85:7e:7b:19:6e:bb:a0:f3:6e:6b:58:01:72:54:a6:2a: ac:aa:20:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn2J1vJj2rPzx8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk YmQ2ODRiNTEtMGU5YS00YzU4LTk0OTAtZWRhYmVhOTFiMzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsysolaXTD8NamW8vysvM4DAfESt+t6XPsSlQ xjExQ7TGgS1phAjZbXO/FN8eA66AOnHBAp531gB89ye9a/ALGTSJIPa9HPnWvugy i2EEpGPnN3IbOt/CvmdhkBDWNMSjqfSD8FtY9wlwLVlLKwQJ53HT8LS7wxA4lxZ4 mC/rXc5jx4HVeScoOY5maLqQu+6uiQRpq3wju0rxQs64JpgHt13heytDamIZxomd zZKkXUxe1LacNb2kXMf0Phwfa3noA6jXRoH66JI6G1huCa+U7dmpf9wZcPbj6pcA 4eW7bh6FSJEbkO0D7UZl5QJEHl9WPuAiUutg0c+lezgV2uDGJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLa2Vrk1rv2G6+UEnR/alVt6kmIjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNjI2YWNiNmYtYTlmMi0z ZGVkLTk1ZTUtODExZGQ3NjQ3OTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0TTsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0B+bSTCQ6za3gvkOYb+CtvR1KPqkooCEdKPe1P2M9/IBYuto1k0oaJ y+SvgNe7J3Y1kQ0KG3JYHoLKr+TOLVk6I+dnW+tCuWad+WnKtm6sWe5wOenMjyQj hAA8FedPVoTvN4kBfDzivXWiGbCmn3vmDRNT8KlcSGE0OrnBoIW0PrPH3W5Id1jw omGahPTjB9J25hZB2XX+hMfE5PZLaDHO5IAqYLtpkJhyHOLJgWy4M/A9BklrsHlT jEtuR4Z9F0IvU8zMXMG03NKm8Wh9GpxN9cQveKR4MHUrQUVYQb85bjPOy9hW5iB3 rIMbhX57GW67oPNua1gBclSmKqyqIDc= -----END CERTIFICATE-----Generated at Mon May 12 20:50:18 2025 by rpki-client