$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/efa0bfa3-8943-3fb1-a803-a0f7b010ace9.roa File: efa0bfa3-8943-3fb1-a803-a0f7b010ace9.roa (raw, json) Hash identifier: hqPzTL2JhMTXXHMD+fvHCwFRHhIZErFIyjjsDW1m3S4= Subject key identifier: B7:FB:39:42:87:90:A2:15:FF:62:6C:70:91:21:FF:1E:AE:DF:8E:FB Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F432858498769BDA181B562E12ABAFBC0 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/efa0bfa3-8943-3fb1-a803-a0f7b010ace9.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 30473 IP address blocks: 209.211.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:bd:a1:81:b5:62:e1:2a:ba:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=c76cf00c-e935-4b83-8bdf-dbfc536b5d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bb:5a:05:0c:18:a8:f9:e2:0c:cd:4e:ca:3d: 15:05:5b:a5:7d:1b:b3:aa:be:ca:ed:49:6a:da:b5: af:d9:7f:ce:43:b4:6a:2f:2e:b2:c1:f8:e1:3a:2b: 23:37:4d:5e:b0:23:d6:0e:ad:55:1f:42:51:a3:53: c7:20:86:52:30:4e:f0:f5:b4:78:d9:f0:54:39:f6: 44:5e:f3:11:e6:21:c9:a2:33:07:c0:6a:0a:48:83: 3e:4c:c7:20:8e:dc:5b:3b:38:58:e4:fe:0e:fd:ef: e5:48:7c:64:21:b6:36:c6:8b:fa:14:d0:a8:5b:30: c5:88:61:c6:da:d4:b9:86:aa:4e:7e:05:10:a6:0f: c6:6e:1c:90:6a:9e:ce:f8:d5:da:1d:42:31:62:d5: 44:b8:5d:bb:ca:d0:b0:7a:db:c6:bd:86:91:ae:3a: 71:b5:5c:af:56:26:e0:09:a0:d0:9e:a2:db:cd:9a: 92:ab:08:30:ef:09:71:6b:1d:a1:ce:df:5c:cb:8f: 3c:0d:1d:06:ee:8d:f0:b1:9f:39:f7:3b:e8:5b:7c: ec:cb:da:7f:89:07:19:ce:40:54:fd:8b:68:0b:c2: 8a:5d:cc:76:a0:d9:65:ea:c8:7d:dd:ab:5a:54:1b: 76:b5:1d:d7:6b:87:e5:fc:ec:c2:48:c6:79:ab:19: a9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FB:39:42:87:90:A2:15:FF:62:6C:70:91:21:FF:1E:AE:DF:8E:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/efa0bfa3-8943-3fb1-a803-a0f7b010ace9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:f3:1f:91:82:a9:d5:27:a5:38:b7:d2:7e:56:22:44:75:b8: e3:76:ed:b4:76:17:1e:ff:1f:a7:97:24:fa:03:4b:66:e1:79: a0:17:9a:b3:d3:f6:f6:08:79:28:27:e1:f9:b1:ee:d1:3d:09: 2a:8d:31:78:a3:5a:81:18:20:cd:87:31:42:60:96:f4:e6:09: d2:fe:2a:71:d9:ef:6e:d6:59:d5:58:83:a4:62:e8:d2:66:5f: c8:7c:da:f5:3d:1d:fa:fc:4f:74:63:71:f7:17:3d:67:b6:99: 8e:75:20:22:e1:d1:f6:07:78:7f:c6:ce:53:6e:4b:b0:19:f9: 06:95:8f:c0:6c:2b:4c:38:07:3b:0e:2a:19:b1:f9:05:0b:24: c1:2d:1d:4f:21:4a:49:e4:c3:0a:fb:53:48:71:13:5f:70:50: 8c:68:3c:8d:1f:43:a3:9b:6a:7b:b7:08:3e:05:8b:8c:84:7c: c3:3e:06:74:90:07:dc:de:fd:2e:97:62:54:45:12:cf:70:3b: a5:bb:01:9f:bb:85:74:9a:b7:bb:79:66:5a:fc:e2:67:bb:05: 0e:ab:65:6a:db:25:5a:65:61:7a:90:70:83:a9:c3:a7:9e:5a: 9b:dc:aa:26:80:4b:29:32:84:83:c8:1f:94:85:ad:77:63:bf: f4:b7:00:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHab2hgbVi4Sq6+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk Yzc2Y2YwMGMtZTkzNS00YjgzLThiZGYtZGJmYzUzNmI1ZDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7taBQwYqPniDM1Oyj0VBVulfRuzqr7K7Ulq 2rWv2X/OQ7RqLy6ywfjhOisjN01esCPWDq1VH0JRo1PHIIZSME7w9bR42fBUOfZE XvMR5iHJojMHwGoKSIM+TMcgjtxbOzhY5P4O/e/lSHxkIbY2xov6FNCoWzDFiGHG 2tS5hqpOfgUQpg/GbhyQap7O+NXaHUIxYtVEuF27ytCwetvGvYaRrjpxtVyvVibg CaDQnqLbzZqSqwgw7wlxax2hzt9cy488DR0G7o3wsZ859zvoW3zsy9p/iQcZzkBU /YtoC8KKXcx2oNll6sh93ataVBt2tR3Xa4fl/OzCSMZ5qxmptwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLf7OUKHkKIV/2JscJEh/x6u3477MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZWZhMGJmYTMtODk0My0z ZmIxLWE4MDMtYTBmN2IwMTBhY2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dNHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXzH5GCqdUnpTi30n5WIkR1uON27bR2Fx7/H6eXJPoDS2bheaAXmrPT 9vYIeSgn4fmx7tE9CSqNMXijWoEYIM2HMUJglvTmCdL+KnHZ727WWdVYg6Ri6NJm X8h82vU9Hfr8T3RjcfcXPWe2mY51ICLh0fYHeH/GzlNuS7AZ+QaVj8BsK0w4BzsO Khmx+QULJMEtHU8hSknkwwr7U0hxE19wUIxoPI0fQ6Obanu3CD4Fi4yEfMM+BnSQ B9ze/S6XYlRFEs9wO6W7AZ+7hXSat7t5Zlr84me7BQ6rZWrbJVplYXqQcIOpw6ee WpvcqiaASykyhIPIH5SFrXdjv/S3ACY= -----END CERTIFICATE-----Generated at Mon May 12 08:49:32 2025 by rpki-client