$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/8e5a05a2-0b0a-34bb-92e7-96d38e1f41ef.roa File: 8e5a05a2-0b0a-34bb-92e7-96d38e1f41ef.roa (raw, json) Hash identifier: r6qGUAoW61bPMH4YnWhTl41+LOYtKRvhjZ30CEbSNdE= Subject key identifier: 87:69:05:AC:26:37:5A:95:62:9A:81:A8:66:9B:2B:24:DC:E8:70:E4 Certificate issuer: /CN=5dc12714-5247-41c5-b244-d0edceb32982 Certificate serial: 010D0C9F43285849A784C48EAC3863284CDCEB80 Authority key identifier: 1D:F2:65:5D:FA:A6:94:E2:F8:5F:02:FD:43:1D:AE:D7:53:97:1A:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/8e5a05a2-0b0a-34bb-92e7-96d38e1f41ef.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 22856 IP address blocks: 209.237.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c4:8e:ac:38:63:28:4c:dc:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dc12714-5247-41c5-b244-d0edceb32982 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=b1fcd9f2-4600-4b5f-b78a-77279f0b39d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:10:e5:49:b4:d5:9c:3c:1b:71:1b:35:86:14: b6:66:c4:91:15:9b:c3:ed:ea:88:41:55:b6:9d:4d: ff:eb:9e:dd:4a:91:93:eb:dc:43:65:28:11:c6:2f: 80:50:ac:c3:80:5c:08:c5:c2:93:33:67:41:0c:0f: 57:6f:3b:ba:ce:80:f3:d0:2a:cb:7d:60:bd:03:06: bd:60:c2:6d:dc:84:0e:c8:72:c7:ab:e4:e1:60:44: 43:ea:88:f8:c8:bd:d2:d2:b0:f3:20:0c:31:61:10: a1:ee:07:ce:ab:0c:32:9b:17:d1:d1:54:fd:52:bd: 4e:b4:6f:a3:cf:85:20:ea:43:06:d5:f0:c8:c6:a9: 49:95:e4:e6:c1:c7:e5:d7:f6:99:c1:c7:34:d8:63: 0a:f5:25:a4:08:8c:08:c0:cc:d6:7f:e6:56:07:14: d8:d9:e8:bc:c3:ce:0a:96:42:6c:50:f6:2f:be:c1: b1:d8:51:a2:c5:43:d1:1c:b5:a2:ae:23:30:44:7d: 82:56:7d:39:fc:08:d3:b9:cc:9a:4a:00:99:ce:fc: f0:1c:84:44:42:3c:fb:8b:3b:bc:7f:4b:1d:ca:a2: 8b:2c:6d:06:f8:f9:56:94:cd:85:40:5c:0e:f7:92: c9:cb:06:d9:31:5f:cd:cf:7b:c0:89:03:df:88:47: d7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:69:05:AC:26:37:5A:95:62:9A:81:A8:66:9B:2B:24:DC:E8:70:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/8e5a05a2-0b0a-34bb-92e7-96d38e1f41ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.crl X509v3 Authority Key Identifier: keyid:1D:F2:65:5D:FA:A6:94:E2:F8:5F:02:FD:43:1D:AE:D7:53:97:1A:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer sbgp-ipAddrBlock: critical IPv4: 209.237.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:2c:ca:6c:17:19:89:b7:2a:81:ec:3f:b9:cd:7f:37:b7:e0: f2:e6:d8:60:9f:fb:1d:92:71:ed:cb:51:b5:19:80:0f:28:12: 68:48:c5:ce:c5:fe:ec:f1:f1:33:53:5b:67:b7:a2:22:5f:05: 6b:3c:02:68:02:16:35:d8:77:a5:c1:46:97:a5:c3:ca:05:d1: b2:c1:52:86:47:b6:59:0b:57:f0:85:a3:14:16:7d:ba:b8:f2: 73:d1:4e:bb:45:40:8a:a6:ce:9e:d6:8e:a4:56:44:ea:dd:e8: fe:c1:fe:80:1b:e8:39:99:84:78:6e:9b:89:a9:ce:9b:a7:c0: 7b:51:d8:87:25:02:7b:5b:24:93:11:b4:8e:10:d8:ef:1b:94: 01:0a:2d:2e:d2:90:d8:35:0d:5b:8b:9f:7b:39:ff:59:cc:ff: 89:c5:b2:4b:ce:b4:78:1b:18:a1:53:02:2d:dc:62:3d:f5:c6: 89:50:b3:a5:fc:f3:d6:de:51:a7:5e:e9:c6:61:9e:04:28:43: fa:0d:6f:86:c6:75:0f:5d:51:f3:11:e0:10:1e:3f:42:2f:f1: 24:a4:85:e5:78:5e:46:8a:36:f6:06:72:0c:09:fa:90:65:4b: b8:bb:cd:41:9c:6e:40:bf:8f:c6:df:c7:f7:ed:66:99:1d:9c: b1:50:2a:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMSOrDhjKEzc64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjMTI3MTQtNTI0Ny00MWM1LWIyNDQtZDBlZGNlYjMy OTgyMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YjFmY2Q5ZjItNDYwMC00YjVmLWI3OGEtNzcyNzlmMGIzOWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhDlSbTVnDwbcRs1hhS2ZsSRFZvD7eqIQVW2 nU3/657dSpGT69xDZSgRxi+AUKzDgFwIxcKTM2dBDA9Xbzu6zoDz0CrLfWC9Awa9 YMJt3IQOyHLHq+ThYERD6oj4yL3S0rDzIAwxYRCh7gfOqwwymxfR0VT9Ur1OtG+j z4Ug6kMG1fDIxqlJleTmwcfl1/aZwcc02GMK9SWkCIwIwMzWf+ZWBxTY2ei8w84K lkJsUPYvvsGx2FGixUPRHLWiriMwRH2CVn05/AjTucyaSgCZzvzwHIREQjz7izu8 f0sdyqKLLG0G+PlWlM2FQFwO95LJywbZMV/Nz3vAiQPfiEfXkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdpBawmN1qVYpqBqGabKyTc6HDkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81ZGMx MjcxNC01MjQ3LTQxYzUtYjI0NC1kMGVkY2ViMzI5ODIvOGU1YTA1YTItMGIwYS0z NGJiLTkyZTctOTZkMzhlMWY0MWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWRjMTI3MTQtNTI0Ny00MWM1LWIy NDQtZDBlZGNlYjMyOTgyLzVkYzEyNzE0LTUyNDctNDFjNS1iMjQ0LWQwZWRjZWIz Mjk4Mi5jcmwwHwYDVR0jBBgwFoAUHfJlXfqmlOL4XwL9Qx2u11OXGlUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81ZGMxMjcxNC01MjQ3LTQxYzUtYjI0NC1kMGVk Y2ViMzI5ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e2ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYsymwXGYm3KoHsP7nNfze34PLm2GCf+x2Sce3LUbUZgA8oEmhIxc7F /uzx8TNTW2e3oiJfBWs8AmgCFjXYd6XBRpelw8oF0bLBUoZHtlkLV/CFoxQWfbq4 8nPRTrtFQIqmzp7WjqRWROrd6P7B/oAb6DmZhHhum4mpzpunwHtR2IclAntbJJMR tI4Q2O8blAEKLS7SkNg1DVuLn3s5/1nM/4nFskvOtHgbGKFTAi3cYj31xolQs6X8 89beUade6cZhngQoQ/oNb4bGdQ9dUfMR4BAeP0Iv8SSkheV4XkaKNvYGcgwJ+pBl S7i7zUGcbkC/j8bfx/ftZpkdnLFQKiw= -----END CERTIFICATE-----Generated at Mon May 12 14:34:23 2025 by rpki-client