$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/aa0f7c4b-9ea3-3bac-8534-6ade56186558.roa File: aa0f7c4b-9ea3-3bac-8534-6ade56186558.roa (raw, json) Hash identifier: seP+YwDmX1NnA09YPBX5RP7ma4KStzWZz2cNAleWr5Y= Subject key identifier: 69:B6:28:97:7E:6D:66:17:C1:AC:F9:83:39:69:28:44:A3:56:EE:A3 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F432858494CC9406A121B86AB590FF100 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/aa0f7c4b-9ea3-3bac-8534-6ade56186558.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 13414 IP address blocks: 209.237.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:40:6a:12:1b:86:ab:59:0f:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=bdb950c5-ccdb-426d-8473-6092afcc32fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:6a:e6:a0:eb:da:12:d4:b1:c5:71:a8:6c:ef: ff:0e:4c:bb:de:69:c6:6b:48:4e:0c:1e:1b:5b:58: 2f:53:23:4d:00:5d:39:f1:dd:4e:16:c2:99:83:2c: 3e:8a:f1:4c:6a:26:89:9c:7a:59:aa:7a:1b:0e:e0: fa:63:8f:ea:86:e9:61:23:21:8d:e3:80:c5:fc:ae: 65:8b:b7:84:39:9f:c9:6b:2b:64:3d:8b:68:e3:10: 34:31:d4:f1:d0:9e:06:a3:b5:0a:c8:56:2d:c9:37: 11:e6:fb:c7:a5:ab:d6:f9:14:de:f8:93:e3:a8:ca: c9:0f:d8:d4:44:15:a7:e2:10:14:8b:e8:60:5e:15: 5f:dd:18:2c:0b:d6:25:c1:34:fe:8c:10:5a:0f:0f: 32:bb:3f:e7:b9:60:69:59:8f:48:79:e3:f1:e1:97: 8f:d4:e7:c2:f9:b4:6a:2b:79:45:96:ed:5f:6f:76: db:6e:a8:58:11:b1:8f:b2:38:c4:25:18:73:b0:07: e3:89:4a:86:ec:5d:e8:87:a5:11:70:80:25:01:3e: df:ac:83:64:0f:55:28:0c:ad:2b:86:fd:9a:ad:14: f2:e9:e3:41:ee:f1:ea:64:fc:64:a7:2c:33:92:d2: af:a2:ee:51:33:8c:51:eb:4b:da:6d:1f:3f:c4:41: 88:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B6:28:97:7E:6D:66:17:C1:AC:F9:83:39:69:28:44:A3:56:EE:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/aa0f7c4b-9ea3-3bac-8534-6ade56186558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:03:71:53:bf:e3:88:f0:b1:a0:58:87:eb:af:8c:5d:ec:61: 7a:3f:cb:da:6a:5b:1f:b2:be:3e:cd:ad:a0:7d:ac:17:c2:58: c0:5b:76:89:24:58:74:1f:1e:f5:f2:e5:93:dd:1c:2a:f2:f3: 6d:d0:50:e2:51:7b:36:f1:09:db:5d:02:36:76:33:cb:2a:18: 81:03:4f:e4:ea:e0:15:25:18:cd:fc:f0:75:16:0c:c3:4b:c3: cd:18:1c:a6:0c:ce:b4:9e:1a:0e:7d:c7:76:1f:0e:b4:c5:b1: 4d:9f:30:a1:97:54:7c:95:0c:cc:71:6d:5a:5a:2b:2f:66:5e: bf:64:a6:17:c0:35:ab:d9:f7:ad:5b:f4:0f:6b:f7:fb:de:5b: 76:3d:2b:16:72:cb:1d:8d:b7:c0:65:31:11:40:7f:0e:02:f1: 79:4a:c3:c5:78:7e:03:3f:c6:e9:b5:09:6e:c2:03:89:4a:22: ca:67:a2:b0:61:bb:2e:3b:87:b5:0a:e7:df:6f:04:aa:b8:5e: b2:9c:3d:47:c6:f5:74:4c:8a:18:f1:f9:df:36:eb:d6:87:42: 3f:32:e6:6e:7f:56:0e:84:c0:3e:f1:32:9e:d4:17:cf:1f:e7: 03:7b:ea:f4:7d:60:dd:83:d0:2e:eb:6d:f7:98:93:74:9d:4f: 1e:04:f6:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUBqEhuGq1kP8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk YmRiOTUwYzUtY2NkYi00MjZkLTg0NzMtNjA5MmFmY2MzMmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WrmoOvaEtSxxXGobO//Dky73mnGa0hODB4b W1gvUyNNAF058d1OFsKZgyw+ivFMaiaJnHpZqnobDuD6Y4/qhulhIyGN44DF/K5l i7eEOZ/JaytkPYto4xA0MdTx0J4Go7UKyFYtyTcR5vvHpavW+RTe+JPjqMrJD9jU RBWn4hAUi+hgXhVf3RgsC9YlwTT+jBBaDw8yuz/nuWBpWY9IeePx4ZeP1OfC+bRq K3lFlu1fb3bbbqhYEbGPsjjEJRhzsAfjiUqG7F3oh6URcIAlAT7frINkD1UoDK0r hv2arRTy6eNB7vHqZPxkpywzktKvou5RM4xR60vabR8/xEGIfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGm2KJd+bWYXwaz5gzlpKESjVu6jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYWEwZjdjNGItOWVhMy0z YmFjLTg1MzQtNmFkZTU2MTg2NTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0DcVO/44jwsaBYh+uvjF3sYXo/y9pqWx+yvj7NraB9rBfCWMBbdokk WHQfHvXy5ZPdHCry823QUOJRezbxCdtdAjZ2M8sqGIEDT+Tq4BUlGM388HUWDMNL w80YHKYMzrSeGg59x3YfDrTFsU2fMKGXVHyVDMxxbVpaKy9mXr9kphfANavZ961b 9A9r9/veW3Y9KxZyyx2Nt8BlMRFAfw4C8XlKw8V4fgM/xum1CW7CA4lKIspnorBh uy47h7UK599vBKq4XrKcPUfG9XRMihjx+d8269aHQj8y5m5/Vg6EwD7xMp7UF88f 5wN76vR9YN2D0C7rbfeYk3SdTx4E9rw= -----END CERTIFICATE-----Generated at Tue May 13 00:16:09 2025 by rpki-client