$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b97b95ce-cd8e-3afe-9013-9c40f91ab565.roa File: b97b95ce-cd8e-3afe-9013-9c40f91ab565.roa (raw, json) Hash identifier: HOOCPiPvt4ObKmaZiqobL/RZUa3h9ZsPbteNXXkFrG8= Subject key identifier: AA:46:06:5F:27:07:23:73:AB:5C:85:64:97:38:96:61:C0:21:62:02 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F43285849BB0F7271D5A6B664F609B6C0 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b97b95ce-cd8e-3afe-9013-9c40f91ab565.roa Signing time: Sat 03 May 2025 13:01:01 +0000 ROA not before: Sat 03 May 2025 13:01:01 +0000 ROA not after: Fri 01 Aug 2025 13:01:01 +0000 asID: 209 IP address blocks: 209.3.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bb:0f:72:71:d5:a6:b6:64:f6:09:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: May 3 13:01:01 2025 GMT Not After : Aug 1 13:01:01 2025 GMT Subject: CN=13ab6ef5-f124-4261-b16e-39815efc2a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9a:47:7a:9d:93:dc:32:67:25:ed:2c:ed:c3: e0:be:08:38:9f:89:7a:68:ff:01:e7:f7:c4:92:f2: de:9c:a1:a4:3e:ef:9b:90:d9:c7:bb:2a:dd:c6:25: 59:13:1d:f0:7d:bc:b6:92:8a:f8:88:17:7a:90:9f: 3a:06:f5:b4:ca:65:71:30:6d:39:fa:e6:4d:24:11: 1a:bb:08:2c:ef:ae:95:06:38:5e:05:db:a3:6f:e5: 4e:50:c0:57:87:b2:cc:61:b8:d5:14:c2:5f:45:b5: 3f:d6:ff:70:75:ff:38:88:2a:da:2e:51:18:ef:60: 1a:38:5c:d9:5b:de:ad:37:af:b3:b3:dd:ab:7f:14: 23:38:cf:be:5a:75:f0:1b:db:b4:03:4c:4b:c3:16: e5:33:45:d6:b4:3a:f2:29:80:a2:4d:0a:5c:92:21: 24:d8:73:2f:2d:65:19:08:5d:4e:f5:f1:2d:99:e5: d0:67:8d:95:8c:2f:f8:15:12:1e:ed:f1:49:9a:56: 2d:5e:7f:be:10:1b:b7:f9:ed:69:9f:eb:3b:73:9f: 74:12:72:e5:10:23:d0:a7:0c:7d:7e:06:c8:bb:dd: 54:d0:44:2f:16:47:3f:2a:e9:85:c5:58:c6:85:10: da:80:65:da:9a:55:d8:36:be:2b:47:48:82:45:26: e9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:46:06:5F:27:07:23:73:AB:5C:85:64:97:38:96:61:C0:21:62:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b97b95ce-cd8e-3afe-9013-9c40f91ab565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.3.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:be:57:5e:bd:f6:e0:3d:2b:38:9e:cf:26:91:2d:3e:9b:14: c4:3c:75:3d:a4:78:dc:ca:31:b1:b0:5b:e9:90:a5:04:4f:e9: ae:5a:04:11:e7:b2:98:d4:56:4b:c7:6e:df:81:c1:0e:bb:2f: 29:e8:30:fd:6e:cb:76:42:95:0a:5d:34:b9:ec:e7:93:f1:18: e3:e8:8d:cf:29:bb:e3:16:31:55:25:74:af:cd:4c:ac:3a:86: b3:bf:8a:4e:97:b4:1d:ca:ca:1f:b9:49:a3:63:50:f6:15:27: 71:46:62:2c:28:1d:91:67:00:79:e7:09:00:fb:51:a6:64:8b: 88:ac:b7:26:2b:07:ca:21:43:96:f8:5f:84:41:f1:28:73:94: 48:c3:55:75:f2:8a:15:ed:6f:bd:cc:21:37:be:09:34:24:15: a4:d4:6a:94:b3:59:ae:c6:12:b7:c5:e3:f7:49:fe:29:d6:f2: 56:ab:dd:38:51:6d:cc:83:c0:f1:9e:5f:59:c4:49:6b:4d:2f: 2b:a5:55:d0:84:8b:e2:31:b6:38:8b:59:e5:8b:f3:15:bf:28: 7f:c3:9e:f6:5c:5e:30:44:67:0f:3c:03:5f:c3:17:5b:c0:f4: 77:56:ad:00:63:7e:79:f4:22:4f:18:74:69:ba:8f:d2:f2:6f: 0f:a6:72:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm7D3Jx1aa2ZPYJtsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDUwMzEzMDEwMVoXDTI1MDgwMTEzMDEwMVowLzEtMCsGA1UEAxMk MTNhYjZlZjUtZjEyNC00MjYxLWIxNmUtMzk4MTVlZmMyYTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ppHep2T3DJnJe0s7cPgvgg4n4l6aP8B5/fE kvLenKGkPu+bkNnHuyrdxiVZEx3wfby2kor4iBd6kJ86BvW0ymVxMG05+uZNJBEa uwgs766VBjheBdujb+VOUMBXh7LMYbjVFMJfRbU/1v9wdf84iCraLlEY72AaOFzZ W96tN6+zs92rfxQjOM++WnXwG9u0A0xLwxblM0XWtDryKYCiTQpckiEk2HMvLWUZ CF1O9fEtmeXQZ42VjC/4FRIe7fFJmlYtXn++EBu3+e1pn+s7c590EnLlECPQpwx9 fgbIu91U0EQvFkc/KumFxVjGhRDagGXamlXYNr4rR0iCRSbp0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpGBl8nByNzq1yFZJc4lmHAIWICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvYjk3Yjk1Y2UtY2Q4ZS0z YWZlLTkwMTMtOWM0MGY5MWFiNTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0QNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALq+V1699uA9KziezyaRLT6bFMQ8dT2keNzKMbGwW+mQpQRP6a5aBBHn spjUVkvHbt+BwQ67LynoMP1uy3ZClQpdNLns55PxGOPojc8pu+MWMVUldK/NTKw6 hrO/ik6XtB3Kyh+5SaNjUPYVJ3FGYiwoHZFnAHnnCQD7UaZki4istyYrB8ohQ5b4 X4RB8ShzlEjDVXXyihXtb73MITe+CTQkFaTUapSzWa7GErfF4/dJ/inW8lar3ThR bcyDwPGeX1nESWtNLyulVdCEi+IxtjiLWeWL8xW/KH/DnvZcXjBEZw88A1/DF1vA 9HdWrQBjfnn0Ik8YdGm6j9Lybw+mcuo= -----END CERTIFICATE-----Generated at Sat May 10 16:31:52 2025 by rpki-client