$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/823f045c-56e3-3844-8d04-8e44b7241d53.roa File: 823f045c-56e3-3844-8d04-8e44b7241d53.roa (raw, json) Hash identifier: /HtawhefT3x8uqfzhlByRXlWO/Bf/JBNX/Es3beLqfg= Subject key identifier: 95:61:76:EC:D3:DC:5F:73:7F:1A:6C:AE:9A:73:B6:51:56:A5:9C:92 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F432858498769BD866AA64DD76CA76B00 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/823f045c-56e3-3844-8d04-8e44b7241d53.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 394889 IP address blocks: 209.211.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:bd:86:6a:a6:4d:d7:6c:a7:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=eca4fa0b-6e42-449e-ae6e-2b288793f8e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:de:de:3b:71:c1:15:c1:ca:4d:37:90:72:73: 11:55:86:3d:d3:ed:27:73:d7:b9:09:14:a4:66:bb: 28:79:0f:3b:bc:13:d0:3e:f7:d5:a0:ab:c6:af:a3: 5f:3b:dc:30:ef:3d:ad:3a:ca:58:4e:7c:f8:d4:a3: e0:20:a1:3e:90:b4:e6:8f:53:51:bc:f6:3d:31:72: b7:61:ee:8b:ce:98:36:4b:94:7a:70:0c:66:7e:57: 95:44:bf:61:be:a9:f3:04:25:79:40:10:62:bd:82: e8:ad:3f:28:58:19:e8:6f:a7:69:8b:45:90:a7:36: 22:78:c9:ac:9e:27:6e:08:22:8c:b9:ff:47:37:81: 40:da:b7:3b:99:4e:61:5f:fd:84:f8:36:84:b3:b5: 48:a5:0f:63:a0:fa:dc:09:f1:bd:2d:83:e5:a2:02: b1:ae:cb:e8:2e:23:1a:b0:32:31:4e:c0:c7:19:f2: f6:6c:51:0b:73:23:33:0a:40:f1:8e:cf:f3:e1:56: 35:1c:94:87:56:0b:9a:db:0c:17:1b:d3:78:2d:2e: ab:09:47:73:99:78:bf:94:6b:df:a4:1e:12:7e:aa: d4:19:9a:80:b3:47:b7:dc:14:88:cb:c8:c4:20:4a: a1:5a:57:88:53:5d:bb:d9:ff:00:0e:e8:9a:51:fd: 2c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:61:76:EC:D3:DC:5F:73:7F:1A:6C:AE:9A:73:B6:51:56:A5:9C:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/823f045c-56e3-3844-8d04-8e44b7241d53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:49:95:dd:da:22:45:de:b7:78:38:12:ea:7e:3e:e3:9f:05: 98:84:eb:d2:70:5a:46:34:de:ef:12:82:e3:6a:0e:7b:21:e5: 4f:b4:e7:22:f7:b6:de:71:08:a4:ae:ac:47:69:4a:23:c4:de: c6:07:e0:0d:c2:c0:6c:2c:c3:fe:16:30:9b:0d:2c:9b:0b:fe: 33:dd:48:8d:1e:0f:8c:ca:74:d5:22:7a:bf:dd:65:3b:09:9a: 58:38:5d:1f:5b:28:88:f2:13:a3:7d:90:6e:9b:35:13:4a:ca: fd:1c:fa:00:f6:0a:11:57:32:32:c2:54:40:63:8f:16:10:a4: 9c:44:6a:89:17:14:2b:a4:9f:62:d6:b2:2b:f2:67:3d:71:ec: d3:55:10:5e:99:87:d9:99:48:64:cf:c1:34:03:a0:c1:01:63: 8d:72:ce:60:c7:6f:53:f1:b6:a0:f2:50:8c:6f:6f:95:da:fc: 6c:4a:53:37:b2:da:9e:75:a0:73:bf:9f:84:0c:08:08:3a:f8: ca:40:6b:e9:ef:64:dd:b1:a0:b0:76:ee:0a:a7:0d:61:ed:f3: 2c:72:81:77:02:e6:e9:95:bf:3c:19:ee:1e:19:3b:3c:ec:12: 8b:4e:ef:18:70:f9:c2:00:d8:43:6b:d5:5c:88:6a:3a:c0:1a: 2a:93:d3:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHab2GaqZN12ynawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk ZWNhNGZhMGItNmU0Mi00NDllLWFlNmUtMmIyODg3OTNmOGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd7eO3HBFcHKTTeQcnMRVYY90+0nc9e5CRSk ZrsoeQ87vBPQPvfVoKvGr6NfO9ww7z2tOspYTnz41KPgIKE+kLTmj1NRvPY9MXK3 Ye6Lzpg2S5R6cAxmfleVRL9hvqnzBCV5QBBivYLorT8oWBnob6dpi0WQpzYieMms niduCCKMuf9HN4FA2rc7mU5hX/2E+DaEs7VIpQ9joPrcCfG9LYPlogKxrsvoLiMa sDIxTsDHGfL2bFELcyMzCkDxjs/z4VY1HJSHVgua2wwXG9N4LS6rCUdzmXi/lGvf pB4SfqrUGZqAs0e33BSIy8jEIEqhWleIU1272f8ADuiaUf0sNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVhduzT3F9zfxpsrppztlFWpZySMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvODIzZjA0NWMtNTZlMy0z ODQ0LThkMDQtOGU0NGI3MjQxZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dMkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBJld3aIkXet3g4Eup+PuOfBZiE69JwWkY03u8SguNqDnsh5U+05yL3 tt5xCKSurEdpSiPE3sYH4A3CwGwsw/4WMJsNLJsL/jPdSI0eD4zKdNUier/dZTsJ mlg4XR9bKIjyE6N9kG6bNRNKyv0c+gD2ChFXMjLCVEBjjxYQpJxEaokXFCukn2LW sivyZz1x7NNVEF6Zh9mZSGTPwTQDoMEBY41yzmDHb1PxtqDyUIxvb5Xa/GxKUzey 2p51oHO/n4QMCAg6+MpAa+nvZN2xoLB27gqnDWHt8yxygXcC5umVvzwZ7h4ZOzzs EotO7xhw+cIA2ENr1VyIajrAGiqT0+E= -----END CERTIFICATE-----Generated at Mon May 12 09:09:01 2025 by rpki-client