$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/e22cd4fa-5665-39d4-843f-a7ad97b70800.roa File: e22cd4fa-5665-39d4-843f-a7ad97b70800.roa (raw, json) Hash identifier: KCxO2M75wnytyXQljPvFc9TySFQiTot5omfL+q83oc4= Subject key identifier: CF:A6:50:D8:D2:71:31:04:C4:0C:99:63:A8:36:5B:A9:14:38:13:A3 Certificate issuer: /CN=40163235-a725-497c-92e8-c077e46672e7 Certificate serial: 010D0C9F432858499AF472E8A9C4AF5EA1910180 Authority key identifier: 09:85:22:05:AF:AE:B9:30:AC:FE:43:2E:92:53:EC:11:2F:B3:33:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/e22cd4fa-5665-39d4-843f-a7ad97b70800.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 33083 IP address blocks: 209.135.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:72:e8:a9:c4:af:5e:a1:91:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40163235-a725-497c-92e8-c077e46672e7 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=f7cdae29-fd28-448b-aa40-624a709adb92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e1:f0:eb:fa:f5:e5:6f:71:46:96:7c:9c:9b: c2:f0:58:ff:69:30:fe:64:34:95:5d:bb:87:83:50: 14:c0:d5:b7:fa:f3:e2:b0:c5:16:7c:1a:d6:ed:48: 40:e1:32:18:da:23:50:00:3e:5d:34:07:06:ff:7d: c3:1b:cb:75:ba:7d:e8:6f:d9:60:24:93:62:4e:de: 71:74:17:79:0a:f7:5c:51:bf:c1:f7:53:8e:8e:49: ef:ab:b0:e0:bc:92:16:ed:24:ce:da:09:38:e3:b5: 35:c1:e1:bf:35:dd:fd:37:85:c5:12:6f:f8:1c:56: 4b:3a:20:0e:60:06:79:e9:82:17:cb:49:dc:ec:4c: 01:29:54:ec:49:1c:4f:11:ba:de:ca:2e:6f:a4:f6: 62:fb:55:9a:de:9c:3a:e0:25:3a:09:ed:b8:86:5a: b4:f7:02:97:81:0e:11:8b:56:55:af:27:40:70:20: 87:38:71:47:30:5d:52:fd:cb:d7:0a:b9:87:e6:5f: e2:62:f4:b3:37:23:65:ad:7a:97:2c:06:d4:af:24: 9d:74:fa:7d:c9:a9:bb:c0:84:fc:ec:09:06:b9:62: 36:b0:6a:36:00:fd:92:9b:f2:74:2f:0c:43:34:52: 42:d6:a2:95:d1:74:99:a1:27:5b:a4:57:30:b8:8a: 18:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A6:50:D8:D2:71:31:04:C4:0C:99:63:A8:36:5B:A9:14:38:13:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/e22cd4fa-5665-39d4-843f-a7ad97b70800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.crl X509v3 Authority Key Identifier: keyid:09:85:22:05:AF:AE:B9:30:AC:FE:43:2E:92:53:EC:11:2F:B3:33:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer sbgp-ipAddrBlock: critical IPv4: 209.135.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:58:70:c2:c7:be:10:de:fa:65:cb:1c:d2:59:fb:d1:e1:b5: 40:7f:40:ea:8f:6f:3a:47:3f:80:41:80:d1:20:92:13:bd:0c: 79:f7:9b:a1:03:6a:cd:74:81:99:76:95:e6:f0:31:55:a0:20: b2:46:a1:fb:c9:c5:40:22:13:5b:db:fb:5b:64:75:2a:31:db: f4:f5:43:2d:a4:83:69:76:05:dd:45:a0:7d:0b:a3:f1:bd:92: 3b:86:d3:3e:a2:3f:fa:3d:2a:ff:a2:f7:43:06:af:a7:68:bc: 47:b5:5d:b4:58:75:be:b3:12:73:03:91:cf:ae:06:35:49:5e: bc:34:8e:a7:70:b9:d1:8d:a8:9f:a1:1e:ae:71:bc:a5:57:12: 08:16:fe:e1:54:05:d1:41:7b:84:66:5c:a6:67:b0:a4:e3:d3: d9:07:8b:b3:3e:9c:6d:b2:05:44:33:57:15:9e:fb:d7:a5:58: 3e:70:a7:00:04:12:3f:24:74:c1:03:83:4c:b8:05:ae:bf:dd: c9:b7:f8:db:db:b7:e9:5d:dc:0c:7b:4e:56:f7:66:93:5d:a0: 72:ae:21:9b:0b:77:0d:02:e4:95:0f:47:e8:85:cf:fc:e5:81: 07:2e:34:b9:92:ff:70:50:73:42:ec:b1:79:35:1f:13:b9:6f: 68:59:1e:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9HLoqcSvXqGRAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAxNjMyMzUtYTcyNS00OTdjLTkyZTgtYzA3N2U0NjY3 MmU3MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZjdjZGFlMjktZmQyOC00NDhiLWFhNDAtNjI0YTcwOWFkYjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+Hw6/r15W9xRpZ8nJvC8Fj/aTD+ZDSVXbuH g1AUwNW3+vPisMUWfBrW7UhA4TIY2iNQAD5dNAcG/33DG8t1un3ob9lgJJNiTt5x dBd5CvdcUb/B91OOjknvq7DgvJIW7STO2gk447U1weG/Nd39N4XFEm/4HFZLOiAO YAZ56YIXy0nc7EwBKVTsSRxPEbreyi5vpPZi+1Wa3pw64CU6Ce24hlq09wKXgQ4R i1ZVrydAcCCHOHFHMF1S/cvXCrmH5l/iYvSzNyNlrXqXLAbUrySddPp9yam7wIT8 7AkGuWI2sGo2AP2Sm/J0LwxDNFJC1qKV0XSZoSdbpFcwuIoYGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+mUNjScTEExAyZY6g2W6kUOBOjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80MDE2 MzIzNS1hNzI1LTQ5N2MtOTJlOC1jMDc3ZTQ2NjcyZTcvZTIyY2Q0ZmEtNTY2NS0z OWQ0LTg0M2YtYTdhZDk3YjcwODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDAxNjMyMzUtYTcyNS00OTdjLTky ZTgtYzA3N2U0NjY3MmU3LzQwMTYzMjM1LWE3MjUtNDk3Yy05MmU4LWMwNzdlNDY2 NzJlNy5jcmwwHwYDVR0jBBgwFoAUCYUiBa+uuTCs/kMuklPsES+zM88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80MDE2MzIzNS1hNzI1LTQ5N2MtOTJlOC1jMDc3 ZTQ2NjcyZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YenMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFYcMLHvhDe+mXLHNJZ+9HhtUB/QOqPbzpHP4BBgNEgkhO9DHn3m6ED as10gZl2lebwMVWgILJGofvJxUAiE1vb+1tkdSox2/T1Qy2kg2l2Bd1FoH0Lo/G9 kjuG0z6iP/o9Kv+i90MGr6dovEe1XbRYdb6zEnMDkc+uBjVJXrw0jqdwudGNqJ+h Hq5xvKVXEggW/uFUBdFBe4RmXKZnsKTj09kHi7M+nG2yBUQzVxWe+9elWD5wpwAE Ej8kdMEDg0y4Ba6/3cm3+Nvbt+ld3Ax7Tlb3ZpNdoHKuIZsLdw0C5JUPR+iFz/zl gQcuNLmS/3BQc0LssXk1HxO5b2hZHmU= -----END CERTIFICATE-----Generated at Sat May 10 16:39:24 2025 by rpki-client