$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dd1f4fa7-af0e-3f85-bf49-27de74094131.roa File: dd1f4fa7-af0e-3f85-bf49-27de74094131.roa (raw, json) Hash identifier: ritCkHvpPQaCodQa93PpLaWHsPRZ5lqEXydKoo/oDbQ= Subject key identifier: AE:C4:E7:1A:AE:36:86:03:5B:92:38:CC:13:3C:28:44:2B:3D:80:B2 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499829CA28E252389DB501BC00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dd1f4fa7-af0e-3f85-bf49-27de74094131.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 209.121.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:ca:28:e2:52:38:9d:b5:01:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=502e47fc-610c-4759-b4a5-b258498940c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fe:d4:9f:4b:24:4c:12:bf:b1:2e:8b:de:9a: fa:1a:54:38:41:2e:94:1f:f8:92:f8:25:bc:11:ba: cf:f4:6d:f3:f5:b2:98:eb:63:f0:5c:49:68:d2:66: 37:50:cb:23:15:4b:76:67:c8:be:2c:ee:54:72:65: d6:4e:79:3c:cb:39:bd:c8:40:8e:64:04:c2:21:bf: 8a:b4:aa:ac:9f:d1:f3:c6:ac:7d:b4:dc:1d:e8:05: 47:b0:28:12:1f:7c:d1:61:ff:57:cf:93:2e:ee:aa: ef:4b:df:fd:f8:58:cf:55:45:7e:d5:93:ee:b2:62: a8:ff:7a:11:cd:21:e1:d3:82:b8:2b:69:08:94:2a: a9:db:1b:bf:ff:4a:fa:8d:12:e3:77:ec:88:c0:6e: ab:d4:44:e9:91:b0:09:46:62:48:35:53:81:b5:10: 6b:b6:56:57:31:db:da:57:51:4c:02:93:71:57:83: 7e:8a:b1:10:ed:a7:dc:9d:e6:fa:9b:35:52:a1:5b: af:54:af:c1:9b:6d:7e:f1:b5:ad:c0:be:ee:23:2a: 72:73:22:6a:8b:38:fb:41:1d:23:98:1d:59:0e:ea: 44:70:5d:6e:91:1c:a6:5f:a3:ae:fc:19:69:3c:6d: 5f:68:a5:0c:df:5f:25:6b:0f:8b:7b:9f:aa:e6:c4: fb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C4:E7:1A:AE:36:86:03:5B:92:38:CC:13:3C:28:44:2B:3D:80:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dd1f4fa7-af0e-3f85-bf49-27de74094131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.121.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:a4:b4:85:cd:41:48:19:65:db:90:4a:3b:10:cb:f1:f8:12: 07:4b:48:73:93:99:78:b8:19:59:a6:9e:11:80:80:e7:b6:e5: 0d:c9:c6:56:4a:20:f1:f0:3c:4d:1e:7b:84:58:e0:34:d2:ac: b5:ee:fe:b7:5a:70:a2:f2:32:51:80:5a:e8:13:f8:17:fb:f9: 71:ac:19:4e:60:04:41:c0:ba:d4:db:26:02:00:a7:d5:8e:fd: 79:be:9b:17:f5:03:4d:32:0c:bd:c2:00:98:59:25:73:29:1c: af:f4:5a:e4:fb:27:0a:f4:99:7e:60:22:04:16:ca:bc:65:dc: fe:b4:0c:8d:84:9a:f0:ce:a2:da:9c:a5:9f:6b:ca:c9:38:20: 9e:43:67:3e:dd:ed:92:88:e6:ae:90:33:38:c3:b0:0b:77:77: 48:4f:ff:a4:79:ff:f9:db:e6:5a:90:1e:45:60:db:07:63:e3: c7:4b:a3:e2:2d:43:7c:91:9d:b1:18:e2:39:e8:f6:87:4c:bb: f2:40:33:8e:cd:8c:5d:1f:75:73:a2:6a:ea:23:45:94:bd:f8: fd:a3:b8:a9:ff:7d:c1:a5:77:3e:b7:37:b1:8f:df:ef:93:44: c6:bd:4f:ab:36:aa:e0:6e:65:a3:f7:d0:e2:ab:b8:8a:f5:b7: 30:19:87:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKcoo4lI4nbUBvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk NTAyZTQ3ZmMtNjEwYy00NzU5LWI0YTUtYjI1ODQ5ODk0MGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP7Un0skTBK/sS6L3pr6GlQ4QS6UH/iS+CW8 EbrP9G3z9bKY62PwXElo0mY3UMsjFUt2Z8i+LO5UcmXWTnk8yzm9yECOZATCIb+K tKqsn9Hzxqx9tNwd6AVHsCgSH3zRYf9Xz5Mu7qrvS9/9+FjPVUV+1ZPusmKo/3oR zSHh04K4K2kIlCqp2xu//0r6jRLjd+yIwG6r1ETpkbAJRmJINVOBtRBrtlZXMdva V1FMApNxV4N+irEQ7afcneb6mzVSoVuvVK/Bm21+8bWtwL7uIypycyJqizj7QR0j mB1ZDupEcF1ukRymX6Ou/BlpPG1faKUM318law+Le5+q5sT75QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7E5xquNoYDW5I4zBM8KEQrPYCyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZGQxZjRmYTctYWYwZS0z Zjg1LWJmNDktMjdkZTc0MDk0MTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Xm0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOktIXNQUgZZduQSjsQy/H4EgdLSHOTmXi4GVmmnhGAgOe25Q3JxlZK IPHwPE0ee4RY4DTSrLXu/rdacKLyMlGAWugT+Bf7+XGsGU5gBEHAutTbJgIAp9WO /Xm+mxf1A00yDL3CAJhZJXMpHK/0WuT7Jwr0mX5gIgQWyrxl3P60DI2EmvDOotqc pZ9rysk4IJ5DZz7d7ZKI5q6QMzjDsAt3d0hP/6R5//nb5lqQHkVg2wdj48dLo+It Q3yRnbEY4jno9odMu/JAM47NjF0fdXOiauojRZS9+P2juKn/fcGldz63N7GP3++T RMa9T6s2quBuZaP30OKruIr1tzAZh8o= -----END CERTIFICATE-----Generated at Sat May 10 07:34:33 2025 by rpki-client