$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/4b6eb474-288c-33da-aed0-92825457eff1.roa File: 4b6eb474-288c-33da-aed0-92825457eff1.roa (raw, json) Hash identifier: njibMhaJVXKfGtFGfF8qXqDEaGh5sZ4BD7RNLe9csLw= Subject key identifier: B5:61:6C:A6:95:13:A5:F6:32:0B:8D:A3:74:4A:F3:56:A4:01:9E:87 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F432858498769D27D34E062CA3B4432C0 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/4b6eb474-288c-33da-aed0-92825457eff1.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 18590 IP address blocks: 209.211.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:d2:7d:34:e0:62:ca:3b:44:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=9de792a4-e32f-41be-91c6-66aa870be083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1c:84:ba:07:ef:87:bc:9d:f7:96:85:7a:98: 2d:04:fa:f9:ec:75:25:44:7d:6f:b6:18:d4:f6:3b: 50:8c:8d:08:00:34:b7:ea:07:fd:06:f6:25:de:2a: 39:40:04:d1:a0:d6:87:93:39:81:c5:2f:f7:1e:1e: 38:30:69:b6:0c:a5:6b:1e:6b:d0:3e:5d:83:12:3b: bd:15:2d:e7:c7:d0:18:52:c3:67:b6:ae:54:54:90: 97:e9:a1:87:16:60:f4:8b:ae:ee:e9:3e:a9:3d:8c: e2:b3:40:21:c8:f7:89:9e:40:e7:41:b3:fa:18:e9: 41:1b:ff:e1:8d:af:4e:0f:75:57:e2:48:f3:20:25: 6d:4b:f0:ad:cd:42:4d:37:5a:b5:2f:b1:bd:30:5e: c3:3d:21:14:61:d6:b1:75:b2:90:90:bc:9a:e1:19: 50:a1:be:39:b4:eb:c2:4e:11:45:a0:e0:ef:6f:c7: 4f:f0:41:84:9c:f7:85:25:9f:a1:dd:f0:ee:34:4c: 51:c6:9e:5b:33:c7:d5:a7:7e:17:11:74:27:64:53: fb:6a:d4:38:fa:d6:67:92:49:c3:33:0c:02:8f:b6: 57:50:9e:98:cb:f2:c3:8e:26:1c:0b:3e:d7:76:0c: 2f:01:d1:6c:1d:20:9e:d1:f5:7f:6f:e4:b5:4d:f5: 87:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:61:6C:A6:95:13:A5:F6:32:0B:8D:A3:74:4A:F3:56:A4:01:9E:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/4b6eb474-288c-33da-aed0-92825457eff1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:df:26:10:08:c3:d7:ee:c6:50:17:ea:fc:96:0c:e3:ae:4a: 75:33:e1:56:ef:9b:eb:c2:22:ad:26:1d:b1:fa:1d:ef:72:c1: 88:c7:37:8d:f4:83:12:20:0c:12:5a:61:50:53:cf:5e:a4:28: b7:fe:04:6f:d5:40:c1:e1:cb:21:e4:b2:c5:76:b8:d6:ce:b0: 50:fd:6a:dc:d1:6e:ed:d4:71:71:59:08:2c:f5:d0:fa:9e:f6: 5e:d0:70:4b:ca:94:8e:64:ec:75:cc:5f:d5:4b:fc:93:2e:eb: e5:30:6e:92:c0:31:7b:57:59:d6:91:9a:c6:ec:d9:01:19:80: fd:45:56:23:4f:e9:b5:e6:cd:be:93:38:7d:80:a2:f9:d3:30: 83:04:50:d8:49:c5:1c:90:0b:3d:26:29:a2:57:81:4e:b8:e7: e3:85:b1:3f:56:ed:93:ec:84:e8:d6:ca:dc:a2:77:80:c9:e7: ce:70:56:8e:e1:2f:b6:9d:d8:bb:c3:c7:74:b2:8a:c0:50:82: 7d:e2:02:c3:d0:17:0b:4d:52:7e:5f:35:d4:2f:7a:53:9b:a2: b2:5c:6b:01:71:de:8f:a7:e9:bf:8d:7d:2c:05:e8:45:db:d4: 98:ed:d7:99:fc:5e:c7:73:13:c5:2f:5e:b0:8b:bb:d0:2b:bd: e0:44:48:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHadJ9NOBiyjtEMsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk OWRlNzkyYTQtZTMyZi00MWJlLTkxYzYtNjZhYTg3MGJlMDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthyEugfvh7yd95aFepgtBPr57HUlRH1vthjU 9jtQjI0IADS36gf9BvYl3io5QATRoNaHkzmBxS/3Hh44MGm2DKVrHmvQPl2DEju9 FS3nx9AYUsNntq5UVJCX6aGHFmD0i67u6T6pPYzis0AhyPeJnkDnQbP6GOlBG//h ja9OD3VX4kjzICVtS/CtzUJNN1q1L7G9MF7DPSEUYdaxdbKQkLya4RlQob45tOvC ThFFoODvb8dP8EGEnPeFJZ+h3fDuNExRxp5bM8fVp34XEXQnZFP7atQ4+tZnkknD MwwCj7ZXUJ6Yy/LDjiYcCz7XdgwvAdFsHSCe0fV/b+S1TfWHnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVhbKaVE6X2MguNo3RK81akAZ6HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvNGI2ZWI0NzQtMjg4Yy0z M2RhLWFlZDAtOTI4MjU0NTdlZmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzfJhAIw9fuxlAX6vyWDOOuSnUz4Vbvm+vCIq0mHbH6He9ywYjHN430 gxIgDBJaYVBTz16kKLf+BG/VQMHhyyHkssV2uNbOsFD9atzRbu3UcXFZCCz10Pqe 9l7QcEvKlI5k7HXMX9VL/JMu6+UwbpLAMXtXWdaRmsbs2QEZgP1FViNP6bXmzb6T OH2AovnTMIMEUNhJxRyQCz0mKaJXgU645+OFsT9W7ZPshOjWytyid4DJ585wVo7h L7ad2LvDx3SyisBQgn3iAsPQFwtNUn5fNdQvelOborJcawFx3o+n6b+NfSwF6EXb 1Jjt15n8XsdzE8UvXrCLu9ArveBESIA= -----END CERTIFICATE-----Generated at Mon May 12 16:40:20 2025 by rpki-client