$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/89b30dd2-323d-3aab-a8d9-c01b887fbf65.roa File: 89b30dd2-323d-3aab-a8d9-c01b887fbf65.roa (raw, json) Hash identifier: PHMfk8xKE0V3qe2ZSeR9mTQJkzNgXvZnRkzk73c9E14= Subject key identifier: 61:AF:5D:68:44:F5:A1:56:0E:64:C5:34:11:23:00:6E:CC:14:A9:E7 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F432858494CC94032BAA0FAE100BA22B0 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/89b30dd2-323d-3aab-a8d9-c01b887fbf65.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 13414 IP address blocks: 209.237.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:40:32:ba:a0:fa:e1:00:ba:22:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=fec666c1-cb9b-49aa-9b83-f6d4dcadfd48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e8:4c:63:02:f1:8b:d7:25:e9:e2:c5:aa:b2: 0c:45:49:9e:a7:aa:c4:e5:4b:11:da:cf:8f:42:89: 04:9b:35:35:e4:a2:92:7c:83:cb:49:ff:cd:96:fe: ac:ac:de:2c:1a:99:6b:56:b7:88:71:32:30:c1:92: 6b:7e:0b:27:df:59:3f:6b:5f:70:d5:5f:bb:b9:00: f5:d9:f5:a6:67:2c:00:43:f5:91:15:d0:46:26:fd: 1a:83:cc:c7:06:8c:3b:c0:83:75:7e:8e:75:db:a1: 8d:c8:bf:5d:82:c0:f7:77:2f:c2:dc:7a:6d:0f:28: ba:d1:f5:86:d5:c1:d6:69:a3:62:32:17:1d:2d:50: df:81:32:46:78:97:f2:7c:09:8f:91:07:aa:d5:86: 3a:0f:cf:4c:98:77:6f:68:7c:c5:9e:13:34:82:65: 9c:93:a6:f3:d7:5e:a5:b5:4b:63:cb:5c:5d:37:72: 4f:9c:05:77:7b:ee:9c:78:0e:64:7e:61:89:93:88: 1b:5f:85:6f:95:c3:60:bd:6d:e3:a2:e5:ec:93:0f: f9:0d:d8:fe:b0:07:83:5a:f4:70:80:b6:f1:f8:39: 61:b1:0b:cf:cf:3e:4d:48:5c:c3:d8:e6:7e:e2:ac: fb:1a:11:5a:cc:03:e2:55:db:46:5d:86:a2:15:6b: be:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AF:5D:68:44:F5:A1:56:0E:64:C5:34:11:23:00:6E:CC:14:A9:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/89b30dd2-323d-3aab-a8d9-c01b887fbf65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:f5:28:ce:4d:5d:a7:fd:7c:70:db:e7:8d:9a:0c:b2:a3:ec: 8f:ec:74:30:a3:38:c2:47:c9:48:40:03:6e:ff:04:49:55:b0: db:07:97:10:25:85:f9:6c:68:35:60:8b:3b:8d:16:97:fc:ee: 66:6b:27:c6:33:63:6a:c8:8b:e8:93:e3:43:97:bc:66:40:d4: 50:42:fb:e3:04:66:4b:c5:e6:06:28:41:07:08:f9:9f:b3:58: e8:74:5f:1b:66:4a:59:ab:79:02:2f:be:6d:34:5e:b5:bd:b2: c6:9e:8b:38:60:3e:65:d9:47:4d:2f:5c:99:dc:2e:92:19:0e: 71:ab:e6:50:fc:93:bd:ff:34:c9:e3:64:ee:27:7d:bb:11:ff: 48:ad:b2:fe:cc:2e:32:97:71:29:fd:4d:88:fe:d6:8a:1c:62: b4:1d:eb:77:8d:2f:d8:03:ed:af:49:6b:25:d9:df:6e:5c:bd: 0d:89:90:02:21:67:f1:b1:9b:e6:95:e7:38:04:90:16:d5:d1: 66:92:76:aa:a9:1f:d9:99:e1:75:6a:69:7f:c4:43:5d:28:0e: 76:0a:cf:61:44:29:40:71:cb:81:99:c8:cb:46:13:88:19:a2: dc:7a:13:bd:b8:80:8f:17:43:b4:43:8a:00:b3:8f:b2:b9:42: a3:f7:e9:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUAyuqD64QC6IrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk ZmVjNjY2YzEtY2I5Yi00OWFhLTliODMtZjZkNGRjYWRmZDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uhMYwLxi9cl6eLFqrIMRUmep6rE5UsR2s+P QokEmzU15KKSfIPLSf/Nlv6srN4sGplrVreIcTIwwZJrfgsn31k/a19w1V+7uQD1 2fWmZywAQ/WRFdBGJv0ag8zHBow7wIN1fo5126GNyL9dgsD3dy/C3HptDyi60fWG 1cHWaaNiMhcdLVDfgTJGeJfyfAmPkQeq1YY6D89MmHdvaHzFnhM0gmWck6bz116l tUtjy1xdN3JPnAV3e+6ceA5kfmGJk4gbX4VvlcNgvW3jouXskw/5Ddj+sAeDWvRw gLbx+DlhsQvPzz5NSFzD2OZ+4qz7GhFazAPiVdtGXYaiFWu+owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGvXWhE9aFWDmTFNBEjAG7MFKnnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvODliMzBkZDItMzIzZC0z YWFiLWE4ZDktYzAxYjg4N2ZiZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABf1KM5NXaf9fHDb542aDLKj7I/sdDCjOMJHyUhAA27/BElVsNsHlxAl hflsaDVgizuNFpf87mZrJ8YzY2rIi+iT40OXvGZA1FBC++MEZkvF5gYoQQcI+Z+z WOh0XxtmSlmreQIvvm00XrW9ssaeizhgPmXZR00vXJncLpIZDnGr5lD8k73/NMnj ZO4nfbsR/0itsv7MLjKXcSn9TYj+1oocYrQd63eNL9gD7a9JayXZ325cvQ2JkAIh Z/Gxm+aV5zgEkBbV0WaSdqqpH9mZ4XVqaX/EQ10oDnYKz2FEKUBxy4GZyMtGE4gZ otx6E724gI8XQ7RDigCzj7K5QqP36Xw= -----END CERTIFICATE-----Generated at Mon May 12 08:21:48 2025 by rpki-client