$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/929d6704-0887-38bf-80da-9c831cd58557.roa File: 929d6704-0887-38bf-80da-9c831cd58557.roa (raw, json) Hash identifier: pcSJcBoJ+9Hk5ms5vl4ePTTmrbMclZ0Tay3pFUpgjSs= Subject key identifier: 23:FE:30:F8:D5:B0:89:64:43:4A:E0:B0:AD:82:8D:43:C1:81:2B:5C Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F43285849B57A1585BB9DB2A3D4662800 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/929d6704-0887-38bf-80da-9c831cd58557.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 55246 IP address blocks: 209.237.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:15:85:bb:9d:b2:a3:d4:66:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=641845c5-2662-4dca-994c-250b43603601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1b:04:1a:76:66:cb:32:cf:b3:2a:52:e0:2f: 73:d4:1a:b5:73:99:63:fe:d1:71:07:97:b7:2a:61: 2c:1d:c2:c0:e1:78:a5:3f:b1:92:ad:59:a9:bc:ab: 09:b3:0e:ab:5e:4a:44:90:19:99:cc:14:4b:c7:a4: 54:3a:71:e4:dc:15:37:c7:8f:cb:55:6f:65:d8:55: 6a:5e:a3:17:af:3b:dc:c7:da:c8:35:d4:18:77:61: 6b:d9:ce:84:9e:86:0a:4e:73:c0:49:23:46:dd:20: ae:1c:67:7e:bb:a5:f9:b9:b8:b1:38:66:8e:d4:ab: 69:47:df:7f:49:6c:a9:30:e9:f6:b1:63:42:00:63: 25:8e:9a:8f:30:da:95:39:77:10:49:94:ce:d6:0c: e5:62:87:e6:9e:88:fc:09:6a:54:ea:eb:e8:54:06: 05:c8:4c:eb:18:91:10:62:22:2b:93:23:aa:63:fb: 36:30:7e:28:c2:51:c4:73:50:7f:e7:1d:97:9c:70: 26:de:3b:62:c7:2c:8e:c5:c0:8c:55:79:23:fe:f5: 0c:0c:36:ad:df:cd:ef:1a:df:f4:23:cd:25:d3:5d: 70:3d:22:85:bc:dd:5f:96:16:1e:ee:38:3e:ed:7d: f7:18:ac:d9:1a:47:37:72:e6:d1:df:9e:33:e3:98: 0b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FE:30:F8:D5:B0:89:64:43:4A:E0:B0:AD:82:8D:43:C1:81:2B:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/929d6704-0887-38bf-80da-9c831cd58557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:15:d8:68:69:15:9b:34:5c:bd:b8:2b:13:9a:35:77:c1:09: 58:80:d1:87:67:26:bb:9c:60:e1:44:35:ea:dc:d0:df:65:6a: a2:2f:19:42:7a:94:8f:0b:89:16:9a:a4:7b:88:3d:30:e2:88: a1:4e:1f:b4:9a:e1:c5:e9:1f:58:e7:96:5f:14:92:97:30:bc: ed:d9:7f:f9:04:9e:c7:9a:4e:57:0c:02:9a:30:22:c1:63:08: 95:14:8c:ca:cf:d3:23:47:50:b1:b5:ab:3a:6a:ea:12:29:1d: c9:eb:c7:f2:ae:13:8a:93:18:2b:8e:d0:d2:a1:19:64:e4:88: e6:5f:46:6d:b1:e6:e7:f9:80:e6:5d:f6:82:ab:43:6f:15:a2: 42:2f:b7:c2:47:e1:ad:65:96:8f:d0:c0:88:95:85:20:11:f0: 21:c9:ed:b8:73:bf:30:a1:c9:82:4b:2e:de:3f:fa:d5:6e:06: 35:5c:72:24:15:13:d1:69:a0:a5:84:7c:29:f2:49:69:b0:01: 42:f6:c9:87:5a:36:1e:98:1c:6e:d0:52:3d:8a:99:32:41:be: 85:c0:1d:a7:6b:70:24:0a:80:5b:d3:24:fa:dc:6f:5e:c9:52: 0f:9d:56:86:29:99:47:a5:11:43:e9:25:25:c2:78:3a:3f:ba: 42:64:16:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1ehWFu52yo9RmKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk NjQxODQ1YzUtMjY2Mi00ZGNhLTk5NGMtMjUwYjQzNjAzNjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxsEGnZmyzLPsypS4C9z1Bq1c5lj/tFxB5e3 KmEsHcLA4XilP7GSrVmpvKsJsw6rXkpEkBmZzBRLx6RUOnHk3BU3x4/LVW9l2FVq XqMXrzvcx9rINdQYd2Fr2c6EnoYKTnPASSNG3SCuHGd+u6X5ubixOGaO1KtpR99/ SWypMOn2sWNCAGMljpqPMNqVOXcQSZTO1gzlYofmnoj8CWpU6uvoVAYFyEzrGJEQ YiIrkyOqY/s2MH4owlHEc1B/5x2XnHAm3jtixyyOxcCMVXkj/vUMDDat383vGt/0 I80l011wPSKFvN1flhYe7jg+7X33GKzZGkc3cubR354z45gLBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCP+MPjVsIlkQ0rgsK2CjUPBgStcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvOTI5ZDY3MDQtMDg4Ny0z OGJmLTgwZGEtOWM4MzFjZDU4NTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsV2GhpFZs0XL24KxOaNXfBCViA0YdnJrucYOFENerc0N9laqIvGUJ6 lI8LiRaapHuIPTDiiKFOH7Sa4cXpH1jnll8UkpcwvO3Zf/kEnseaTlcMApowIsFj CJUUjMrP0yNHULG1qzpq6hIpHcnrx/KuE4qTGCuO0NKhGWTkiOZfRm2x5uf5gOZd 9oKrQ28VokIvt8JH4a1llo/QwIiVhSAR8CHJ7bhzvzChyYJLLt4/+tVuBjVcciQV E9FpoKWEfCnySWmwAUL2yYdaNh6YHG7QUj2KmTJBvoXAHadrcCQKgFvTJPrcb17J Ug+dVoYpmUelEUPpJSXCeDo/ukJkFow= -----END CERTIFICATE-----Generated at Sat May 10 09:49:39 2025 by rpki-client