$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/92d70a3f-36ef-3c14-8a5d-13bfe8d634f1.roa File: 92d70a3f-36ef-3c14-8a5d-13bfe8d634f1.roa (raw, json) Hash identifier: ZJvVqPFypWQIB+tvs4PLGDuw9jsq2bKiWG6z4VLRN5Y= Subject key identifier: F8:AF:BF:8B:62:E3:09:96:D1:FD:50:72:49:B5:A4:0C:23:F9:AC:35 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849955F1EF8172531335549CBC0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/92d70a3f-36ef-3c14-8a5d-13bfe8d634f1.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 209.171.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:1e:f8:17:25:31:33:55:49:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=f0e0ddb8-8ece-4c49-9cd6-722ed74aaf13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5d:91:0a:1d:11:a0:1a:d7:84:c5:c8:9d:0f: 53:f6:ba:a1:45:ea:27:52:72:5a:ba:2e:57:f0:66: dd:01:cd:39:42:e2:9b:0c:77:97:1c:0f:bf:fe:d6: 69:a1:78:e8:c0:e8:a0:a1:72:5f:f5:3c:e4:41:6b: 63:a4:c9:f1:28:25:9e:2d:98:37:b1:bd:5d:fd:d5: 7e:3a:8e:7b:d0:51:00:a1:7a:7d:db:f7:40:e7:aa: ed:89:99:eb:96:31:27:8e:a9:43:99:8a:79:78:d8: 14:1b:32:11:58:fc:bd:25:62:12:b2:8e:ec:22:6b: 4f:cb:23:fa:86:59:5c:18:87:cd:50:c8:20:06:55: 68:a0:41:5e:7f:35:25:6f:f5:4e:61:67:0c:6b:f9: f8:ff:0f:71:39:71:f7:70:8b:83:e9:98:98:d0:e7: f6:36:83:59:2a:c4:6f:ee:fc:45:2a:aa:46:c4:1a: c0:86:eb:bd:5c:bb:4b:41:6a:67:01:a6:70:5b:05: 39:2f:80:bb:17:c2:9e:2f:f1:a7:e9:3a:ab:3c:e6: c6:bd:7f:78:b1:a8:dd:94:29:d3:6a:c0:bf:9c:da: ea:76:e9:52:f5:fe:ab:8d:8d:87:6f:7f:65:0b:c6: d3:55:d7:fc:b7:25:f8:d8:0d:54:37:06:99:87:e7: 0f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AF:BF:8B:62:E3:09:96:D1:FD:50:72:49:B5:A4:0C:23:F9:AC:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/92d70a3f-36ef-3c14-8a5d-13bfe8d634f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.171.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:99:18:99:8b:d4:90:34:49:94:24:df:6c:e3:b2:d7:25:e4: 10:41:8e:48:e2:30:35:9d:3a:66:17:b5:31:9d:74:f7:73:2e: d4:72:17:85:ac:a4:a4:e1:9c:42:99:c8:a7:1a:43:70:71:d9: 51:50:6a:27:cc:d2:31:9e:ea:fb:e7:26:58:45:34:ba:ce:c3: 98:bc:83:20:00:9a:25:6c:88:72:04:b5:8d:6f:f3:a7:c5:7c: 9c:45:57:0b:53:25:69:bb:c9:5c:03:7f:cd:24:d9:08:5b:ca: 07:b3:ee:70:80:2c:49:14:e1:c0:53:aa:00:d2:bb:1f:3a:9d: a3:0c:32:2f:1d:fc:ec:d3:44:3c:f0:ca:4c:c4:cd:68:80:ae: 2c:87:1a:f4:4f:e2:30:1c:eb:a5:52:4a:4f:26:90:a2:95:1a: a3:b3:42:30:b8:0f:e6:39:64:09:af:06:82:bc:e5:c6:fd:39: ff:a6:8d:81:56:4e:fa:7c:8a:21:d0:c2:13:33:42:67:39:d3: fc:02:e6:ef:04:ab:67:2a:6a:47:9a:be:11:58:6a:70:31:f6: 8c:90:98:35:71:7b:58:f9:90:f6:02:3d:66:c8:fd:f5:24:c6: 90:b9:a6:32:da:4b:bc:b2:32:df:d5:33:30:37:1d:32:79:0f: fc:11:97:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXx74FyUxM1VJy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk ZjBlMGRkYjgtOGVjZS00YzQ5LTljZDYtNzIyZWQ3NGFhZjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl2RCh0RoBrXhMXInQ9T9rqhReonUnJaui5X 8GbdAc05QuKbDHeXHA+//tZpoXjowOigoXJf9TzkQWtjpMnxKCWeLZg3sb1d/dV+ Oo570FEAoXp92/dA56rtiZnrljEnjqlDmYp5eNgUGzIRWPy9JWISso7sImtPyyP6 hllcGIfNUMggBlVooEFefzUlb/VOYWcMa/n4/w9xOXH3cIuD6ZiY0Of2NoNZKsRv 7vxFKqpGxBrAhuu9XLtLQWpnAaZwWwU5L4C7F8KeL/Gn6TqrPObGvX94sajdlCnT asC/nNrqdulS9f6rjY2Hb39lC8bTVdf8tyX42A1UNwaZh+cP7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPivv4ti4wmW0f1Qckm1pAwj+aw1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOTJkNzBhM2YtMzZlZi0z YzE0LThhNWQtMTNiZmU4ZDYzNGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0asNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKZGJmL1JA0SZQk32zjstcl5BBBjkjiMDWdOmYXtTGddPdzLtRyF4Ws pKThnEKZyKcaQ3Bx2VFQaifM0jGe6vvnJlhFNLrOw5i8gyAAmiVsiHIEtY1v86fF fJxFVwtTJWm7yVwDf80k2Qhbygez7nCALEkU4cBTqgDSux86naMMMi8d/OzTRDzw ykzEzWiAriyHGvRP4jAc66VSSk8mkKKVGqOzQjC4D+Y5ZAmvBoK85cb9Of+mjYFW Tvp8iiHQwhMzQmc50/wC5u8Eq2cqakeavhFYanAx9oyQmDVxe1j5kPYCPWbI/fUk xpC5pjLaS7yyMt/VMzA3HTJ5D/wRl9c= -----END CERTIFICATE-----Generated at Sun May 11 01:34:34 2025 by rpki-client