$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f94bd76f-26db-3baa-9cf0-9560be7adc04.roa File: f94bd76f-26db-3baa-9cf0-9560be7adc04.roa (raw, json) Hash identifier: x5FXNXwPOdyIRO5OaFON28kdPWIsktAsXuhZE56NjyA= Subject key identifier: E2:8A:76:E3:D8:75:E2:B0:A6:4E:99:C8:DF:36:CA:15:E0:A0:08:2E Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F432858494CC93CC513895F59DAE47E40 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f94bd76f-26db-3baa-9cf0-9560be7adc04.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 13414 IP address blocks: 209.237.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:3c:c5:13:89:5f:59:da:e4:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=6ade548b-a7ea-41cc-a4b9-dbb5a30be59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7d:e8:ad:e3:3d:aa:d2:f2:8f:55:94:d3:ab: 64:4a:06:11:ce:12:16:02:d9:b0:78:f4:3d:1e:6e: 2b:9b:2f:ea:49:44:42:92:17:00:26:f5:8a:58:32: 34:a9:92:fd:3d:b8:bc:6d:fa:73:2f:df:7b:2c:fb: 07:ef:0c:46:80:0c:17:25:41:94:90:ab:de:1a:7f: de:16:c8:00:52:00:fc:71:9d:17:1e:ad:9e:cc:da: 83:ad:c5:7f:ab:e4:cb:4e:a1:d7:0e:81:93:9c:4e: 5b:d6:dd:a6:03:bf:17:a9:21:49:c9:7e:18:15:89: 20:2c:3a:52:cd:8d:57:3a:6e:b1:15:9a:88:95:d2: 50:4d:40:a4:75:f9:f4:9c:ea:91:13:0a:ae:b6:54: 6a:e2:06:98:1b:76:67:99:04:a9:65:68:98:8a:b4: e5:fe:3e:f6:2b:ac:73:13:e5:f3:f9:c5:5d:c5:90: 77:2f:65:67:b4:07:67:ce:01:0e:6b:b3:3a:7d:0d: c9:d0:91:d7:53:b7:f0:c0:6b:8f:04:b0:67:aa:a5: d9:fa:8f:c6:69:93:ef:db:78:83:d5:fe:6b:a3:e5: 29:13:43:d3:94:f9:78:c5:ba:11:bb:37:74:45:7f: d8:60:57:53:0f:15:72:1b:09:18:26:d0:7a:d4:6e: ca:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8A:76:E3:D8:75:E2:B0:A6:4E:99:C8:DF:36:CA:15:E0:A0:08:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f94bd76f-26db-3baa-9cf0-9560be7adc04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:84:b2:54:84:02:f1:ee:8b:ed:a3:68:89:6b:e4:4f:c4:c7: 5b:bf:6a:6e:21:cd:13:99:f1:26:6d:e3:44:75:68:21:66:f6: ae:be:83:35:50:34:50:8c:77:a1:fd:f2:b5:38:62:ff:dd:35: de:54:17:89:2a:a3:39:35:72:5b:ae:91:56:28:a8:d3:d0:ec: 39:59:56:bf:29:d8:46:a6:e0:34:4f:d0:2b:ee:7c:b6:bc:ad: 55:66:be:4e:b7:35:f2:cf:e0:5d:36:54:d2:4e:3c:0d:92:53: 33:d1:c6:7b:b2:01:cd:4d:84:a6:b5:e8:a0:6c:8e:0b:eb:f0: b9:98:12:26:b7:a9:01:7e:15:aa:d2:83:43:57:02:9f:a8:ba: 72:d4:ce:a3:cc:4c:8f:53:9b:a3:51:43:f6:4a:ba:fe:3b:fd: 79:50:93:72:df:a7:28:b1:94:f0:3a:28:d4:ce:f5:5c:5f:79: c5:59:6e:af:9e:a1:48:7f:a9:d9:e3:4c:bf:3d:2b:37:bd:c8: fd:a2:de:c5:61:9c:22:17:f1:18:0b:d5:8b:de:8e:f8:6a:27: a0:93:ea:a5:b9:71:39:ae:9b:b1:06:61:b0:66:a8:06:c9:a9: 1b:17:3c:4b:b9:04:08:61:64:c8:d2:d7:1f:03:09:75:be:40: cd:82:ae:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyTzFE4lfWdrkfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk NmFkZTU0OGItYTdlYS00MWNjLWE0YjktZGJiNWEzMGJlNTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn3oreM9qtLyj1WU06tkSgYRzhIWAtmwePQ9 Hm4rmy/qSURCkhcAJvWKWDI0qZL9Pbi8bfpzL997LPsH7wxGgAwXJUGUkKveGn/e FsgAUgD8cZ0XHq2ezNqDrcV/q+TLTqHXDoGTnE5b1t2mA78XqSFJyX4YFYkgLDpS zY1XOm6xFZqIldJQTUCkdfn0nOqREwqutlRq4gaYG3ZnmQSpZWiYirTl/j72K6xz E+Xz+cVdxZB3L2VntAdnzgEOa7M6fQ3J0JHXU7fwwGuPBLBnqqXZ+o/GaZPv23iD 1f5ro+UpE0PTlPl4xboRuzd0RX/YYFdTDxVyGwkYJtB61G7KyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKKduPYdeKwpk6ZyN82yhXgoAguMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZjk0YmQ3NmYtMjZkYi0z YmFhLTljZjAtOTU2MGJlN2FkYzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2EslSEAvHui+2jaIlr5E/Ex1u/am4hzROZ8SZt40R1aCFm9q6+gzVQ NFCMd6H98rU4Yv/dNd5UF4kqozk1cluukVYoqNPQ7DlZVr8p2Eam4DRP0CvufLa8 rVVmvk63NfLP4F02VNJOPA2SUzPRxnuyAc1NhKa16KBsjgvr8LmYEia3qQF+FarS g0NXAp+ounLUzqPMTI9Tm6NRQ/ZKuv47/XlQk3LfpyixlPA6KNTO9VxfecVZbq+e oUh/qdnjTL89Kze9yP2i3sVhnCIX8RgL1YvejvhqJ6CT6qW5cTmum7EGYbBmqAbJ qRsXPEu5BAhhZMjS1x8DCXW+QM2Crq0= -----END CERTIFICATE-----Generated at Mon May 12 10:59:42 2025 by rpki-client