$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/138497f4-eab8-37a3-8d4e-8dddf2b99925.roa File: 138497f4-eab8-37a3-8d4e-8dddf2b99925.roa (raw, json) Hash identifier: yhAwQRoNW+Vr/YWBfPsEYJe/dYUIaAiPsg3+GMoQTtc= Subject key identifier: A9:58:50:5A:00:5B:D8:83:A8:E7:CA:10:06:3E:6E:E3:9D:53:2F:2B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849A4B9F40C6CA9160E0B073B80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/138497f4-eab8-37a3-8d4e-8dddf2b99925.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 0 IP address blocks: 209.24.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:b9:f4:0c:6c:a9:16:0e:0b:07:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b12ae936-8662-47e2-89f7-6954e10d09b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:05:11:f3:89:7c:a0:a5:27:f3:ad:d0:71:1e: bc:f0:64:d7:87:ad:2c:32:00:4c:cc:93:c7:16:ea: 2c:ff:13:42:a6:43:23:44:69:c0:5c:bf:44:e6:54: 54:d9:e6:1f:85:07:ca:4e:13:ff:b7:cc:95:df:aa: 21:20:e9:eb:a7:51:5e:7d:81:3d:68:81:d1:ea:4a: 5b:2d:f6:40:8d:af:e8:92:77:08:09:da:4b:c6:87: b2:6c:b3:51:9f:fe:8d:d0:b0:51:78:c3:f4:23:aa: e2:dc:fa:60:17:ef:36:ec:34:7d:f7:34:4c:f8:90: 90:3f:67:78:69:76:b6:44:94:78:de:87:fb:bb:23: 6e:d7:3e:fd:ca:b7:cd:54:00:6f:3a:6e:4d:9e:9b: 83:27:21:fc:6a:05:23:7f:50:92:19:0e:48:f1:6f: 6b:a9:75:ae:8b:9b:de:a8:23:72:ad:58:7f:8e:a2: 78:2a:94:a5:81:2e:22:67:85:02:6b:1e:4e:31:86: 16:10:ed:c7:1d:eb:28:83:06:23:1a:ea:53:e0:3b: c1:7a:ea:c3:a1:48:4f:04:87:e6:70:c5:e9:55:27: 85:a5:f3:86:34:66:a9:14:4d:e5:d5:27:a0:a1:f3: 95:56:23:48:07:8b:f6:60:28:a4:63:cf:43:c5:9c: d8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:58:50:5A:00:5B:D8:83:A8:E7:CA:10:06:3E:6E:E3:9D:53:2F:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/138497f4-eab8-37a3-8d4e-8dddf2b99925.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 209.24.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:19:c7:0b:3e:fd:45:02:be:ea:84:6f:87:ca:a9:2f:bc:96: 99:d1:c7:e8:a6:33:f1:62:f0:3b:ee:8e:42:f2:55:f8:58:8a: 78:3e:da:c7:38:3a:bf:9a:8e:30:ae:80:8a:30:3c:ab:a9:34: 32:8e:1d:28:3f:3a:63:54:11:02:ca:3a:ae:c4:60:2f:11:12: 2a:25:c4:cf:04:3b:73:c7:ae:56:0a:f4:07:13:cd:43:46:34: 1a:77:1a:9e:2e:b6:d1:29:b6:a9:26:13:7c:c3:5a:27:3e:21: 33:9a:3c:c6:ee:66:2c:01:d0:b5:2b:08:33:f3:f4:ed:ec:01: c2:80:8b:4c:c0:87:53:06:a2:23:10:57:53:95:1b:c5:15:2d: 4b:37:70:8c:38:13:50:ba:f9:46:84:f1:b8:da:23:3e:43:ca: d3:7b:0f:a9:d4:e0:bc:82:93:a8:c3:7e:c5:44:7f:16:50:e3: 22:11:41:1b:74:0b:ae:80:5e:95:72:4e:b6:24:5a:05:58:57: 56:cc:79:93:eb:06:27:ee:ff:f0:cd:83:d4:cf:81:a8:d9:6d: df:b2:2a:a3:23:05:cc:5d:b8:47:b5:d2:a5:7e:35:8d:6f:a0: 53:04:ba:e7:a1:de:ba:96:ec:cf:ea:02:be:89:f2:0a:9f:6c: 21:8b:4f:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkufQMbKkWDgsHO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YjEyYWU5MzYtODY2Mi00N2UyLTg5ZjctNjk1NGUxMGQwOWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQUR84l8oKUn863QcR688GTXh60sMgBMzJPH Fuos/xNCpkMjRGnAXL9E5lRU2eYfhQfKThP/t8yV36ohIOnrp1FefYE9aIHR6kpb LfZAja/okncICdpLxoeybLNRn/6N0LBReMP0I6ri3PpgF+827DR99zRM+JCQP2d4 aXa2RJR43of7uyNu1z79yrfNVABvOm5NnpuDJyH8agUjf1CSGQ5I8W9rqXWui5ve qCNyrVh/jqJ4KpSlgS4iZ4UCax5OMYYWEO3HHesogwYjGupT4DvBeurDoUhPBIfm cMXpVSeFpfOGNGapFE3l1SegofOVViNIB4v2YCikY89DxZzY5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlYUFoAW9iDqOfKEAY+buOdUy8rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMTM4NDk3ZjQtZWFiOC0z N2EzLThkNGUtOGRkZGYyYjk5OTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0Zxws+/UUCvuqEb4fKqS+8lpnRx+imM/Fi8DvujkLyVfhYing+2sc4 Or+ajjCugIowPKupNDKOHSg/OmNUEQLKOq7EYC8REiolxM8EO3PHrlYK9AcTzUNG NBp3Gp4uttEptqkmE3zDWic+ITOaPMbuZiwB0LUrCDPz9O3sAcKAi0zAh1MGoiMQ V1OVG8UVLUs3cIw4E1C6+UaE8bjaIz5DytN7D6nU4LyCk6jDfsVEfxZQ4yIRQRt0 C66AXpVyTrYkWgVYV1bMeZPrBifu//DNg9TPgajZbd+yKqMjBcxduEe10qV+NY1v oFMEuueh3rqW7M/qAr6J8gqfbCGLTyU= -----END CERTIFICATE-----Generated at Sat May 10 07:30:58 2025 by rpki-client