$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8d4daf5a-29b3-362b-afb8-464f9de3c3d3.roa File: 8d4daf5a-29b3-362b-afb8-464f9de3c3d3.roa (raw, json) Hash identifier: P55AcTjlqC2vyOjzE4JLCfml0m63CBmn7E6yNziiclA= Subject key identifier: 8D:2A:15:C5:7E:A5:0C:D5:77:EF:2F:25:E8:83:36:3A:A3:F4:CB:DF Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584988CF25C0C5BEA4CA99274080 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8d4daf5a-29b3-362b-afb8-464f9de3c3d3.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 25668 IP address blocks: 209.53.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:25:c0:c5:be:a4:ca:99:27:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=6939aae2-48d0-4803-8670-2f767bea79e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:96:40:ad:e2:1b:f0:4f:c8:11:94:d6:ba:f6: 78:70:4b:b6:ed:a9:33:e0:42:1b:7c:ca:3b:61:70: 1c:f5:94:16:53:e7:32:f9:fe:09:09:f7:53:34:5e: 0b:54:15:ba:b1:65:68:b6:d5:5c:c3:7d:6e:6c:81: 6c:4e:24:ce:06:40:07:15:09:f3:c7:57:dd:48:a8: 25:aa:4a:56:c2:5e:10:33:73:f0:4e:40:3f:6e:69: b2:cb:e1:98:df:2c:e9:7c:dd:86:72:f8:c0:9d:8b: e6:5a:87:21:42:05:af:d4:6d:6c:37:44:11:67:4a: db:8d:f1:ac:0e:61:e0:4b:37:27:29:b9:5c:dd:6a: db:53:ea:ee:53:eb:b8:74:55:6a:47:c6:15:bd:95: f9:b6:a3:67:a3:d8:43:6c:1e:2a:52:bc:c4:7c:9f: 29:5c:80:c0:20:d3:59:39:87:a2:af:b9:5b:24:49: 4b:4f:7d:d3:15:83:35:d2:b2:d4:72:3b:c9:b7:de: f2:dc:3c:6f:26:c9:2a:b0:9a:59:31:03:60:9f:7d: 16:4f:f1:d3:8f:6f:8c:2f:3a:c5:a0:60:1c:bc:1c: bb:a2:b8:17:d3:ae:06:93:6a:13:18:db:7d:f9:58: 29:73:ed:22:07:12:e9:2a:09:74:dc:11:46:8a:86: e8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2A:15:C5:7E:A5:0C:D5:77:EF:2F:25:E8:83:36:3A:A3:F4:CB:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8d4daf5a-29b3-362b-afb8-464f9de3c3d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:51:41:a3:43:ac:b2:35:90:af:23:e8:1c:54:a0:04:e9:5e: 39:d7:8c:ae:e4:5a:b5:aa:ad:09:42:ee:45:09:e9:b1:ee:92: a1:f5:45:4e:32:f0:df:ea:8f:97:53:b6:a7:87:3a:f1:f0:9f: 95:61:de:e2:4d:c0:4b:65:27:c5:ef:a7:7a:5d:ce:2d:ab:a3: 93:84:9d:4e:b8:d4:c5:62:b4:3b:5f:ee:cb:f2:83:d9:55:1e: 7b:04:c6:17:25:05:57:5b:70:e6:06:2b:ca:22:6c:c0:d2:5f: a5:52:a0:bd:e5:69:47:3c:13:b5:b6:3a:ce:9e:93:78:21:25: 7b:9e:7a:88:d1:b8:73:83:79:96:ce:1b:c5:c8:6c:06:21:39: 1c:cf:af:88:2a:35:fe:09:fc:29:cb:f4:eb:d8:36:21:f2:db: 6b:8d:33:86:3f:d7:21:7b:b9:0b:8d:ce:b8:65:f4:85:69:b6: 61:c7:f9:7d:f9:b8:ca:f1:a3:bd:7e:77:db:9d:70:06:17:33: a0:be:0e:e1:c4:49:6f:8c:21:c4:29:26:90:cd:41:21:ca:1a: fc:70:e1:8e:a9:f9:b9:93:fe:4c:47:36:71:66:99:9c:aa:54: f2:c9:6d:36:89:be:da:79:08:c0:aa:20:55:57:c0:53:6b:c0: 47:37:a9:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzyXAxb6kypknQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk NjkzOWFhZTItNDhkMC00ODAzLTg2NzAtMmY3NjdiZWE3OWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5ZAreIb8E/IEZTWuvZ4cEu27akz4EIbfMo7 YXAc9ZQWU+cy+f4JCfdTNF4LVBW6sWVottVcw31ubIFsTiTOBkAHFQnzx1fdSKgl qkpWwl4QM3PwTkA/bmmyy+GY3yzpfN2GcvjAnYvmWochQgWv1G1sN0QRZ0rbjfGs DmHgSzcnKblc3WrbU+ruU+u4dFVqR8YVvZX5tqNno9hDbB4qUrzEfJ8pXIDAINNZ OYeir7lbJElLT33TFYM10rLUcjvJt97y3DxvJskqsJpZMQNgn30WT/HTj2+MLzrF oGAcvBy7orgX064Gk2oTGNt9+Vgpc+0iBxLpKgl03BFGioboawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0qFcV+pQzVd+8vJeiDNjqj9MvfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOGQ0ZGFmNWEtMjliMy0z NjJiLWFmYjgtNDY0ZjlkZTNjM2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TXBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANxRQaNDrLI1kK8j6BxUoATpXjnXjK7kWrWqrQlC7kUJ6bHukqH1RU4y 8N/qj5dTtqeHOvHwn5Vh3uJNwEtlJ8Xvp3pdzi2ro5OEnU641MVitDtf7svyg9lV HnsExhclBVdbcOYGK8oibMDSX6VSoL3laUc8E7W2Os6ek3ghJXueeojRuHODeZbO G8XIbAYhORzPr4gqNf4J/CnL9OvYNiHy22uNM4Y/1yF7uQuNzrhl9IVptmHH+X35 uMrxo71+d9udcAYXM6C+DuHESW+MIcQpJpDNQSHKGvxw4Y6p+bmT/kxHNnFmmZyq VPLJbTaJvtp5CMCqIFVXwFNrwEc3qRA= -----END CERTIFICATE-----Generated at Sat May 10 16:49:27 2025 by rpki-client