$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/de26ccbd-1e4a-360a-b24e-6733d4520bbb.roa File: de26ccbd-1e4a-360a-b24e-6733d4520bbb.roa (raw, json) Hash identifier: oTtLtXIvBjggVZjM0mDaVJ0U9mBMoDq+6cTV9WZJ3iM= Subject key identifier: B4:C9:4C:F5:AC:7A:29:2A:A9:AD:BE:E8:17:10:54:C9:16:FF:5E:56 Certificate issuer: /CN=d2294e65-4da1-4c07-9bc0-820cdb1e2c48 Certificate serial: 010D0C9F43285849CBCF8AD0193C92377AAF4780 Authority key identifier: A2:FA:26:93:6E:E2:D1:F0:D6:4F:44:71:93:66:33:0D:F3:27:A1:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/de26ccbd-1e4a-360a-b24e-6733d4520bbb.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 2552 IP address blocks: 65.254.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:8a:d0:19:3c:92:37:7a:af:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2294e65-4da1-4c07-9bc0-820cdb1e2c48 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=40e81a4d-2d3c-4855-894e-40bb7a71fdd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:28:71:ef:eb:cb:22:de:ea:f5:46:41:00:33: 47:a5:2b:e0:80:1c:e1:3b:b8:67:21:24:9a:ea:36: 53:65:88:59:35:07:0e:55:0f:00:3b:a0:bd:ab:e3: 90:1a:38:81:f0:1f:21:50:05:62:5c:7c:69:ae:73: 55:d6:13:06:55:d9:0b:89:c1:f0:0b:33:6e:d3:28: 99:91:5b:34:5e:1a:3e:80:ca:95:bd:07:d9:00:82: 23:5c:2b:f8:46:79:d2:95:9d:05:f5:42:e5:ca:2e: 86:41:fc:5d:fc:25:6e:b4:f4:ee:45:e8:98:4e:4d: 71:ce:54:f2:03:96:8a:8e:29:05:15:ae:0e:64:94: c0:c2:0f:4d:b9:ee:d5:87:3a:79:cf:f0:f7:6e:a6: 94:b0:5a:fb:8c:46:d1:49:b7:98:5f:0b:ce:3a:ef: 58:fa:f6:3b:41:90:ae:f8:ca:16:5a:4c:fa:6d:75: b5:94:4e:c3:2b:74:13:9a:5b:13:94:8e:8c:19:62: 3f:8d:7a:b1:72:c9:53:ed:0c:c2:32:7c:01:7a:17: 46:5b:fa:61:58:09:ff:7f:ab:dd:84:80:9d:7a:40: 17:47:af:27:05:84:b3:dd:f3:7c:8c:a4:f5:e0:16: ac:ab:f5:b9:6b:2b:38:1e:31:c4:95:25:bc:db:c3: cf:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C9:4C:F5:AC:7A:29:2A:A9:AD:BE:E8:17:10:54:C9:16:FF:5E:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/de26ccbd-1e4a-360a-b24e-6733d4520bbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.crl X509v3 Authority Key Identifier: keyid:A2:FA:26:93:6E:E2:D1:F0:D6:4F:44:71:93:66:33:0D:F3:27:A1:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.cer sbgp-ipAddrBlock: critical IPv4: 65.254.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:1a:1a:7f:b8:a3:67:0d:8f:ef:00:d6:70:5a:e3:e9:03:e4: 68:6e:0b:cd:82:65:3b:18:08:e8:dc:00:96:74:66:ef:8d:11: ca:08:fb:6f:b9:b6:24:04:57:ab:1d:73:91:27:17:23:9c:a7: 25:4b:f5:26:ec:e8:54:bf:89:2c:c0:0b:ea:b1:a5:87:ff:25: 36:a9:ac:c6:36:9a:ba:5d:40:16:0f:57:4c:8f:bb:26:5c:09: 20:c9:4f:01:11:dc:ba:fb:7f:f8:bc:8d:6e:da:35:73:4b:2f: cc:68:26:9e:d1:a7:33:eb:01:62:33:29:e4:c8:99:10:6d:93: 2a:e4:5c:4b:66:3d:25:43:3f:db:4c:a9:c7:5f:ab:73:32:c1: a8:9c:6b:86:e4:49:dc:52:1f:2d:36:a5:81:7d:3a:45:44:21: 76:1d:8e:89:c8:e7:5b:32:18:ec:a5:33:34:15:f4:37:27:18: c8:77:da:3b:5d:b8:f8:e9:5f:a6:ca:38:ba:08:7e:81:9b:1a: 4c:b8:ab:51:00:66:a2:43:e8:ef:54:55:dc:21:14:5d:0b:01: cb:9d:e7:26:41:80:d3:82:fc:6b:51:a8:49:00:1f:57:51:7f: a7:05:d5:e4:29:e4:1a:a9:8d:4a:2a:bc:f6:38:51:c6:bc:0b: 27:d0:b3:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz4rQGTySN3qvR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIyOTRlNjUtNGRhMS00YzA3LTliYzAtODIwY2RiMWUy YzQ4MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk NDBlODFhNGQtMmQzYy00ODU1LTg5NGUtNDBiYjdhNzFmZGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlihx7+vLIt7q9UZBADNHpSvggBzhO7hnISSa 6jZTZYhZNQcOVQ8AO6C9q+OQGjiB8B8hUAViXHxprnNV1hMGVdkLicHwCzNu0yiZ kVs0Xho+gMqVvQfZAIIjXCv4RnnSlZ0F9ULlyi6GQfxd/CVutPTuReiYTk1xzlTy A5aKjikFFa4OZJTAwg9Nue7Vhzp5z/D3bqaUsFr7jEbRSbeYXwvOOu9Y+vY7QZCu +MoWWkz6bXW1lE7DK3QTmlsTlI6MGWI/jXqxcslT7QzCMnwBehdGW/phWAn/f6vd hICdekAXR68nBYSz3fN8jKT14Basq/W5ays4HjHElSW828PPNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTJTPWseikqqa2+6BcQVMkW/15WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kMjI5 NGU2NS00ZGExLTRjMDctOWJjMC04MjBjZGIxZTJjNDgvZGUyNmNjYmQtMWU0YS0z NjBhLWIyNGUtNjczM2Q0NTIwYmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDIyOTRlNjUtNGRhMS00YzA3LTli YzAtODIwY2RiMWUyYzQ4L2QyMjk0ZTY1LTRkYTEtNGMwNy05YmMwLTgyMGNkYjFl MmM0OC5jcmwwHwYDVR0jBBgwFoAUovomk27i0fDWT0Rxk2YzDfMnofUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kMjI5NGU2NS00ZGExLTRjMDctOWJjMC04MjBj ZGIxZTJjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQf5tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYaGn+4o2cNj+8A1nBa4+kD5GhuC82CZTsYCOjcAJZ0Zu+NEcoI+2+5 tiQEV6sdc5EnFyOcpyVL9Sbs6FS/iSzAC+qxpYf/JTaprMY2mrpdQBYPV0yPuyZc CSDJTwER3Lr7f/i8jW7aNXNLL8xoJp7RpzPrAWIzKeTImRBtkyrkXEtmPSVDP9tM qcdfq3Mywaica4bkSdxSHy02pYF9OkVEIXYdjonI51syGOylMzQV9DcnGMh32jtd uPjpX6bKOLoIfoGbGky4q1EAZqJD6O9UVdwhFF0LAcud5yZBgNOC/GtRqEkAH1dR f6cF1eQp5BqpjUoqvPY4Uca8CyfQs4M= -----END CERTIFICATE-----Generated at Mon May 12 20:26:56 2025 by rpki-client