$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/da1134b4-14a8-3573-ade1-c42f592a22ce.roa File: da1134b4-14a8-3573-ade1-c42f592a22ce.roa (raw, json) Hash identifier: EuHp1zY62GFgYyR/yRlNOcuVYdEV+ash5zw3/3Z3xvI= Subject key identifier: B5:53:47:B9:38:F5:A1:98:72:51:19:1C:51:0C:DC:C5:78:88:18:58 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F432858494CC93CA0BFBF569F352B8890 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/da1134b4-14a8-3573-ade1-c42f592a22ce.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 13414 IP address blocks: 209.237.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:3c:a0:bf:bf:56:9f:35:2b:88:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=d3bc6f3a-aff6-4217-aa1b-81c58a7a6353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:02:a5:db:1f:e2:61:6e:b5:d2:02:54:5e:64: 87:98:23:8b:6f:06:1e:9a:b8:cb:0a:04:3d:74:fd: 33:6f:97:06:f1:fe:78:3f:9c:6d:ca:40:69:49:98: ea:ba:d1:dc:ce:11:03:c3:70:90:84:33:1d:66:98: bd:7b:16:ee:53:09:07:f0:98:f2:66:8a:c9:e4:d6: 20:57:3d:84:89:7e:73:bc:c4:39:70:f3:42:29:2e: 02:70:88:0b:fa:c0:4e:3c:3b:b0:06:20:5a:7f:7e: f5:50:63:0d:f9:74:87:d8:c8:c4:b6:31:1d:56:2d: 02:71:d3:5d:d8:86:78:c5:34:b3:df:40:6d:47:9f: 37:02:d9:be:cb:bf:1c:b2:fd:c9:6d:e5:2c:88:a6: fa:cf:bc:78:69:dd:45:db:b4:61:51:17:b2:7a:dd: 34:f0:21:af:15:e9:ac:56:0f:5c:cd:16:b8:7a:9e: 62:62:e3:6d:7c:f4:3a:de:c2:3c:77:0b:d1:15:5e: f1:1b:43:3f:21:bb:d8:0c:1e:46:5c:d2:86:02:fd: e3:36:d7:c8:fb:86:9f:cb:fe:66:e6:4a:0c:61:d1: da:c1:ba:ca:25:80:ca:df:2c:54:af:41:6e:8b:b1: 4f:ad:7a:14:ae:45:d4:61:7e:fc:af:13:e2:57:4f: 99:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:53:47:B9:38:F5:A1:98:72:51:19:1C:51:0C:DC:C5:78:88:18:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/da1134b4-14a8-3573-ade1-c42f592a22ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:83:59:fb:43:c7:71:5d:0a:21:b2:71:e4:4a:a1:8d:22:a3: eb:ba:f4:19:43:47:ee:b1:5b:a7:4b:33:23:11:59:f0:e4:11: bd:1a:5a:14:f4:68:81:c2:f6:ae:8d:24:61:85:95:4f:4c:d9: 86:c9:c9:42:34:12:6b:3d:4f:4b:5b:34:0f:0b:2f:60:d0:cd: b0:d8:74:63:e5:ff:d5:d7:19:71:3e:50:65:02:b7:31:10:fb: 24:ac:ab:57:75:ef:da:1e:e5:2e:08:9c:65:5a:aa:e4:8e:a1: 9e:0b:4d:7a:ea:da:a3:ad:be:98:eb:50:89:9d:cc:2e:9e:07: ea:19:17:d1:87:8b:60:ef:e6:a7:de:99:34:6f:cb:41:52:57: fe:f0:74:34:d5:f8:dc:12:d9:90:07:c2:52:5c:e3:d1:b4:de: 75:85:16:75:93:43:da:6c:72:3d:f6:b1:7f:e6:3d:74:49:c2: 60:12:42:7f:d3:16:b0:8b:dd:f2:0d:ef:3b:13:75:f0:00:47: 8a:d6:86:a0:42:6c:af:ba:59:b9:11:71:25:ee:e2:16:51:d2: f9:dc:ea:d1:2b:8d:ac:89:ff:b8:db:e4:7d:4b:52:fb:a6:26: be:25:16:76:4b:45:13:ed:44:f5:dd:b1:90:b6:28:31:c2:6d: 0e:19:56:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyTygv79WnzUriJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk ZDNiYzZmM2EtYWZmNi00MjE3LWFhMWItODFjNThhN2E2MzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQKl2x/iYW610gJUXmSHmCOLbwYemrjLCgQ9 dP0zb5cG8f54P5xtykBpSZjqutHczhEDw3CQhDMdZpi9exbuUwkH8JjyZorJ5NYg Vz2EiX5zvMQ5cPNCKS4CcIgL+sBOPDuwBiBaf371UGMN+XSH2MjEtjEdVi0CcdNd 2IZ4xTSz30BtR583Atm+y78csv3JbeUsiKb6z7x4ad1F27RhUReyet008CGvFems Vg9czRa4ep5iYuNtfPQ63sI8dwvRFV7xG0M/IbvYDB5GXNKGAv3jNtfI+4afy/5m 5koMYdHawbrKJYDK3yxUr0Fui7FPrXoUrkXUYX78rxPiV0+ZnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVTR7k49aGYclEZHFEM3MV4iBhYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZGExMTM0YjQtMTRhOC0z NTczLWFkZTEtYzQyZjU5MmEyMmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSDWftDx3FdCiGyceRKoY0io+u69BlDR+6xW6dLMyMRWfDkEb0aWhT0 aIHC9q6NJGGFlU9M2YbJyUI0Ems9T0tbNA8LL2DQzbDYdGPl/9XXGXE+UGUCtzEQ +ySsq1d179oe5S4InGVaquSOoZ4LTXrq2qOtvpjrUImdzC6eB+oZF9GHi2Dv5qfe mTRvy0FSV/7wdDTV+NwS2ZAHwlJc49G03nWFFnWTQ9pscj32sX/mPXRJwmASQn/T FrCL3fIN7zsTdfAAR4rWhqBCbK+6WbkRcSXu4hZR0vnc6tErjayJ/7jb5H1LUvum Jr4lFnZLRRPtRPXdsZC2KDHCbQ4ZVkY= -----END CERTIFICATE-----Generated at Mon May 12 08:32:57 2025 by rpki-client