$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a6b0fc63-790c-3d06-9b98-527c4eaa4586.roa File: a6b0fc63-790c-3d06-9b98-527c4eaa4586.roa (raw, json) Hash identifier: hOqH+DXvq0AM9Bxxo0GRvqWWnskTpI6ggnj5O66ikU8= Subject key identifier: 70:79:5D:62:C2:AA:3B:0F:1E:EA:D8:FB:0E:5E:6E:47:A1:14:20:E4 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F432858498769D28A3A7BD1A90C67F340 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a6b0fc63-790c-3d06-9b98-527c4eaa4586.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 11273 IP address blocks: 209.211.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:d2:8a:3a:7b:d1:a9:0c:67:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=ef6d9fde-236d-4745-8b58-e94ab8d2c7c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:05:07:f0:9e:20:f6:4c:53:60:da:fe:37:e9: 8d:77:16:2f:92:c0:23:4e:b1:b7:2d:77:2a:50:bb: fe:36:51:25:df:81:9d:82:7d:83:db:ea:74:d1:86: d4:5a:eb:e8:ac:83:04:df:c9:83:83:ac:cf:3a:4e: b7:62:45:e3:8d:bd:bc:b3:be:bd:74:32:c6:1e:6e: 19:da:23:dc:5c:9b:54:05:36:a5:50:f6:77:0a:82: e6:1a:d1:6e:2a:e0:ae:f0:d3:6d:bf:9a:a4:f1:5c: df:9e:12:7d:6e:2f:21:5b:7f:8c:42:c8:26:36:56: 24:80:61:cc:34:d4:3b:d5:d5:67:48:71:04:7c:04: 62:51:f5:44:55:27:91:b1:19:ef:26:e8:cb:da:cd: 56:ed:29:6b:b1:e7:7c:5b:72:c9:57:09:37:85:46: b6:88:1b:a4:57:44:b1:6f:16:af:92:68:47:73:bf: b4:ee:5b:5c:6b:e7:b0:02:76:7d:d8:96:18:1d:41: cc:ed:af:9f:3a:a2:61:3d:ce:86:93:ea:87:15:42: c9:e5:a5:ca:51:cb:90:97:f3:13:0c:85:da:49:51: c2:ef:3d:f9:1f:fc:b8:a3:19:97:56:79:ca:22:13: 80:63:5d:1c:69:14:ba:d8:8d:fc:52:8f:f9:de:36: e6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:79:5D:62:C2:AA:3B:0F:1E:EA:D8:FB:0E:5E:6E:47:A1:14:20:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a6b0fc63-790c-3d06-9b98-527c4eaa4586.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:fa:b3:48:10:92:b4:d6:9c:1e:67:fa:12:ce:d3:dc:1e:02: 93:e3:94:c8:f4:18:b5:80:e3:15:d5:12:cc:7d:45:04:23:a2: f8:c1:8b:88:09:77:e9:97:80:01:70:b1:0e:e5:fd:da:67:2a: 86:46:c6:b2:7b:07:32:57:54:f3:d7:e3:38:08:14:e4:d8:06: 14:7a:e8:e4:a3:ef:c0:b2:93:f0:27:b9:bc:f7:c4:4b:a5:1d: 5f:8a:9e:a2:92:a6:7a:d9:7a:7d:55:8e:fb:dc:f0:1a:b2:6b: f1:43:2c:f9:09:57:86:e3:a2:58:09:71:b1:6f:36:12:2d:be: b6:a7:e7:f1:35:19:db:96:77:73:c6:f9:e4:80:7c:43:82:98: 26:17:f4:7f:81:ca:30:54:0a:c8:f2:5a:b4:fd:37:cb:da:aa: b7:0e:6b:28:24:8c:d3:75:6e:ed:82:37:df:ea:78:1a:f0:0d: e9:dd:81:f8:90:05:01:e8:4a:0d:3a:89:24:00:0d:90:33:b9: f1:19:bd:56:9b:ff:2f:8d:22:73:54:b7:c7:a2:fd:12:23:d9: 32:a5:a3:b9:82:e7:26:2d:22:b7:f6:31:1d:22:e4:16:ab:6d: 66:8f:5c:98:99:19:2f:0c:62:56:5c:12:04:c1:7c:8d:b3:60: 4e:0c:f9:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHadKKOnvRqQxn80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk ZWY2ZDlmZGUtMjM2ZC00NzQ1LThiNTgtZTk0YWI4ZDJjN2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQUH8J4g9kxTYNr+N+mNdxYvksAjTrG3LXcq ULv+NlEl34Gdgn2D2+p00YbUWuvorIME38mDg6zPOk63YkXjjb28s769dDLGHm4Z 2iPcXJtUBTalUPZ3CoLmGtFuKuCu8NNtv5qk8VzfnhJ9bi8hW3+MQsgmNlYkgGHM NNQ71dVnSHEEfARiUfVEVSeRsRnvJujL2s1W7Slrsed8W3LJVwk3hUa2iBukV0Sx bxavkmhHc7+07ltca+ewAnZ92JYYHUHM7a+fOqJhPc6Gk+qHFULJ5aXKUcuQl/MT DIXaSVHC7z35H/y4oxmXVnnKIhOAY10caRS62I38Uo/53jbmzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHB5XWLCqjsPHurY+w5ebkehFCDkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvYTZiMGZjNjMtNzkwYy0z ZDA2LTliOTgtNTI3YzRlYWE0NTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dPiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADr6s0gQkrTWnB5n+hLO09weApPjlMj0GLWA4xXVEsx9RQQjovjBi4gJ d+mXgAFwsQ7l/dpnKoZGxrJ7BzJXVPPX4zgIFOTYBhR66OSj78Cyk/Anubz3xEul HV+KnqKSpnrZen1Vjvvc8Bqya/FDLPkJV4bjolgJcbFvNhItvran5/E1GduWd3PG +eSAfEOCmCYX9H+ByjBUCsjyWrT9N8vaqrcOaygkjNN1bu2CN9/qeBrwDendgfiQ BQHoSg06iSQADZAzufEZvVab/y+NInNUt8ei/RIj2TKlo7mC5yYtIrf2MR0i5Bar bWaPXJiZGS8MYlZcEgTBfI2zYE4M+a0= -----END CERTIFICATE-----Generated at Tue Jul 1 04:52:31 2025 by rpki-client