$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e89af54f-c2c4-33af-9b3f-df8464bb9ec7.roa File: e89af54f-c2c4-33af-9b3f-df8464bb9ec7.roa (raw, json) Hash identifier: nsZuJu7mD1qsv6YiqEt5KhXgw+kiMb4phPFqPiAoQAY= Subject key identifier: 51:AA:3B:2C:77:58:E6:45:CB:EF:D8:18:04:68:5D:ED:7B:73:9C:9A Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F432858498769B8EF20498AAFD6A47300 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e89af54f-c2c4-33af-9b3f-df8464bb9ec7.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 54196 IP address blocks: 209.211.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:b8:ef:20:49:8a:af:d6:a4:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=d3becc69-4b7d-42be-bef7-03e94a5c3ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5e:97:47:6b:c6:01:11:5d:de:20:9e:77:1b: cf:d5:54:89:56:7f:eb:6d:a4:c8:10:f4:f1:59:90: 85:ed:fa:fa:d8:d4:1e:35:98:86:63:9c:ba:5e:81: 6a:cb:07:00:52:d4:07:0f:b2:43:8e:96:5f:1f:c2: 66:20:9e:a1:b1:8e:9f:06:38:9a:bf:47:b5:78:24: f0:c1:7e:34:97:9e:89:ac:00:04:10:15:5b:19:9b: 4a:e8:1d:e7:73:bf:50:70:5c:36:10:47:e8:64:4b: f4:35:90:5e:70:3c:93:3c:16:a7:1f:ac:1e:e7:17: e0:17:3a:c2:92:9b:14:d2:22:1f:47:bb:62:d8:9c: 1b:87:6c:ca:25:e8:7d:a3:b0:dd:2f:31:f4:da:96: 39:0f:10:38:63:8f:a9:7c:15:3c:96:15:35:3d:cf: d2:7f:cc:4c:d9:d8:20:df:6f:db:2c:85:85:83:e0: fd:48:0b:f9:16:7c:d0:93:a1:d8:4e:67:30:a9:83: cd:51:15:d0:c9:e3:c8:69:0e:bf:d6:ba:2a:f4:4e: eb:13:3f:d8:bc:6e:f8:d9:28:4c:41:ea:f2:51:74: 5b:17:2a:9a:41:a5:6a:0c:77:f7:3b:c5:a1:ba:08: 77:4f:5a:7d:eb:01:ab:f6:54:3c:e6:82:aa:bd:85: 87:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:AA:3B:2C:77:58:E6:45:CB:EF:D8:18:04:68:5D:ED:7B:73:9C:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e89af54f-c2c4-33af-9b3f-df8464bb9ec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:38:d9:18:fd:dd:8b:47:02:25:a0:a3:54:b3:30:98:f2:4c: 39:0f:fd:cf:f5:a8:ea:fd:5e:43:6b:9e:06:41:da:cd:65:51: 42:50:55:39:63:6a:76:1f:be:4f:bb:91:db:ab:5a:74:0a:a1: a7:7d:58:9b:a3:34:1f:b2:b1:59:bc:18:1e:29:8d:3e:14:7c: e2:2c:60:87:7e:31:4d:f6:7d:57:cb:87:40:7f:42:6c:c5:ef: 1e:80:28:08:c0:7f:70:e2:c9:52:c8:8e:a8:a2:74:d8:a4:a4: 89:2c:5b:70:f1:13:3f:12:21:14:bd:d5:39:15:66:dc:2b:26: 67:dd:de:69:c9:05:d7:72:00:74:80:71:67:6d:cc:9a:e4:0a: f3:ad:75:aa:c5:15:d4:7f:3c:c5:bc:29:11:a8:27:58:a0:90: d4:72:84:48:a2:2e:f0:cd:52:44:44:66:15:e0:99:0a:f5:c0: 53:70:e7:aa:7f:ef:7d:8a:aa:05:25:f0:6c:62:f2:13:b9:2b: 45:b2:cd:44:04:43:64:3a:70:d7:a2:2a:89:40:51:ce:ea:ea: ee:e9:81:18:b7:00:f6:fb:11:a2:04:6b:78:44:79:12:05:76: 16:48:17:be:97:ea:c3:fe:a9:24:86:7f:09:42:26:b7:71:3d: f5:c6:75:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHabjvIEmKr9akcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk ZDNiZWNjNjktNGI3ZC00MmJlLWJlZjctMDNlOTRhNWMzYWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV6XR2vGARFd3iCedxvP1VSJVn/rbaTIEPTx WZCF7fr62NQeNZiGY5y6XoFqywcAUtQHD7JDjpZfH8JmIJ6hsY6fBjiav0e1eCTw wX40l56JrAAEEBVbGZtK6B3nc79QcFw2EEfoZEv0NZBecDyTPBanH6we5xfgFzrC kpsU0iIfR7ti2Jwbh2zKJeh9o7DdLzH02pY5DxA4Y4+pfBU8lhU1Pc/Sf8xM2dgg 32/bLIWFg+D9SAv5FnzQk6HYTmcwqYPNURXQyePIaQ6/1roq9E7rEz/YvG742ShM QeryUXRbFyqaQaVqDHf3O8Whugh3T1p96wGr9lQ85oKqvYWHNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGqOyx3WOZFy+/YGARoXe17c5yaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZTg5YWY1NGYtYzJjNC0z M2FmLTliM2YtZGY4NDY0YmI5ZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dMcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALE42Rj93YtHAiWgo1SzMJjyTDkP/c/1qOr9XkNrngZB2s1lUUJQVTlj anYfvk+7kdurWnQKoad9WJujNB+ysVm8GB4pjT4UfOIsYId+MU32fVfLh0B/QmzF 7x6AKAjAf3DiyVLIjqiidNikpIksW3DxEz8SIRS91TkVZtwrJmfd3mnJBddyAHSA cWdtzJrkCvOtdarFFdR/PMW8KRGoJ1igkNRyhEiiLvDNUkREZhXgmQr1wFNw56p/ 732KqgUl8Gxi8hO5K0WyzUQEQ2Q6cNeiKolAUc7q6u7pgRi3APb7EaIEa3hEeRIF dhZIF76X6sP+qSSGfwlCJrdxPfXGdYs= -----END CERTIFICATE-----Generated at Sun May 11 04:03:48 2025 by rpki-client