$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a2887002-8c8e-341e-a9fb-69b032ffd4d6.roa File: a2887002-8c8e-341e-a9fb-69b032ffd4d6.roa (raw, json) Hash identifier: OcwB8fcV5UwUZ7MsA60ij4G2mnF86OjQEc+pIS01Te0= Subject key identifier: 90:9F:EB:60:8C:E6:EB:C6:1A:83:F8:E2:2F:00:88:9E:3C:76:4B:BE Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F432858498769D2B3696D908F2D0D9420 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a2887002-8c8e-341e-a9fb-69b032ffd4d6.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 7743 IP address blocks: 209.211.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:d2:b3:69:6d:90:8f:2d:0d:94:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=301a6375-2d0e-4430-8848-3db073ad76cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9b:d8:ff:d3:33:47:40:10:f8:e5:93:2b:ce: 41:9d:95:04:d9:5b:84:0f:dd:c5:9a:fb:d2:c8:7d: 19:76:6e:47:98:02:52:24:53:53:a0:df:f6:46:4b: 26:b5:12:d2:d7:e9:c4:1e:16:4f:ca:54:f7:c7:03: 1b:99:48:8a:01:ee:2e:9d:f4:e0:d5:34:97:22:1e: 07:ba:20:d3:50:f1:c2:1f:f7:e4:25:01:11:41:48: 23:b1:e9:1e:95:41:20:a3:85:7d:8f:40:14:de:d9: fb:64:dc:1b:f8:dc:83:23:b9:8f:ef:5a:18:95:ee: cb:20:7c:21:9f:74:48:e9:06:a4:d7:46:96:e7:4f: cc:8d:7f:09:9f:d2:9d:04:12:f4:e5:cd:cc:d7:69: 41:0c:7f:2c:06:6b:b9:22:2f:56:44:c2:d1:09:c3: b4:0b:3c:cd:ec:ce:06:24:4b:e4:9f:1e:05:c3:dd: 6a:a0:1e:6b:5f:0e:0c:29:39:65:70:b2:9a:e2:d1: 54:bf:8c:9d:c8:12:99:0c:59:71:54:24:69:e0:23: 14:d1:bb:0c:b0:82:80:f5:19:5b:05:f3:9f:11:f9: 9d:cc:df:07:40:fb:49:5b:0c:cb:ca:24:08:8e:2d: 2c:80:26:ff:9b:0b:bb:18:3e:f5:0b:a5:61:1c:18: 5f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9F:EB:60:8C:E6:EB:C6:1A:83:F8:E2:2F:00:88:9E:3C:76:4B:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a2887002-8c8e-341e-a9fb-69b032ffd4d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:c7:d3:2a:7d:ed:31:87:d9:40:f6:6b:0c:e1:fa:e2:4d:0b: fb:9a:38:3a:38:f8:d9:8a:d4:08:c4:d4:ea:27:3b:f6:fc:4a: b0:c0:b9:e1:c8:7e:de:20:f6:a5:08:94:58:b5:5a:d9:67:05: 1a:5b:37:18:86:76:b4:5f:30:25:e5:b8:7d:09:e0:73:e4:8b: 0f:6a:d4:e5:0e:27:b7:f9:d5:4d:c7:83:2d:f0:1e:78:fb:f4: 52:ed:8e:b9:4e:bd:b1:29:e0:78:94:08:50:a2:f0:6f:64:f8: d7:3a:93:2b:78:72:40:20:a4:9a:df:f5:7f:a8:41:94:8b:8d: 19:3f:97:58:02:88:16:61:78:a0:ce:35:be:05:d3:cb:ef:e8: 1f:3c:fb:63:72:28:21:04:5a:5c:68:0a:1a:58:a9:74:56:0f: 76:12:96:e2:d5:11:60:cf:03:d5:1f:fe:52:1d:ed:56:f0:36: e9:7c:d9:61:f4:11:c8:91:e8:1b:9e:a3:4c:a6:50:17:64:57: 36:16:c0:a0:6f:db:29:c3:e3:be:58:bf:6f:3a:2f:25:29:69: ce:c0:60:65:1b:f5:4b:05:cb:62:d1:ab:d4:ad:8f:46:08:2e: 16:e3:01:11:ab:42:5f:15:a0:f4:97:fd:65:0a:a3:ea:14:fb: 17:33:d2:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHadKzaW2Qjy0NlCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk MzAxYTYzNzUtMmQwZS00NDMwLTg4NDgtM2RiMDczYWQ3NmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5vY/9MzR0AQ+OWTK85BnZUE2VuED93FmvvS yH0Zdm5HmAJSJFNToN/2RksmtRLS1+nEHhZPylT3xwMbmUiKAe4unfTg1TSXIh4H uiDTUPHCH/fkJQERQUgjsekelUEgo4V9j0AU3tn7ZNwb+NyDI7mP71oYle7LIHwh n3RI6Qak10aW50/MjX8Jn9KdBBL05c3M12lBDH8sBmu5Ii9WRMLRCcO0CzzN7M4G JEvknx4Fw91qoB5rXw4MKTllcLKa4tFUv4ydyBKZDFlxVCRp4CMU0bsMsIKA9Rlb BfOfEfmdzN8HQPtJWwzLyiQIji0sgCb/mwu7GD71C6VhHBhfKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCf62CM5uvGGoP44i8AiJ48dku+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvYTI4ODcwMDItOGM4ZS0z NDFlLWE5ZmItNjliMDMyZmZkNGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0dPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLH0yp97TGH2UD2awzh+uJNC/uaODo4+NmK1AjE1OonO/b8SrDAueHI ft4g9qUIlFi1WtlnBRpbNxiGdrRfMCXluH0J4HPkiw9q1OUOJ7f51U3Hgy3wHnj7 9FLtjrlOvbEp4HiUCFCi8G9k+Nc6kyt4ckAgpJrf9X+oQZSLjRk/l1gCiBZheKDO Nb4F08vv6B88+2NyKCEEWlxoChpYqXRWD3YSluLVEWDPA9Uf/lId7VbwNul82WH0 EciR6Bueo0ymUBdkVzYWwKBv2ynD475Yv286LyUpac7AYGUb9UsFy2LRq9Stj0YI LhbjARGrQl8VoPSX/WUKo+oU+xcz0tM= -----END CERTIFICATE-----Generated at Mon May 12 11:03:33 2025 by rpki-client