$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/caef0813-709f-3639-aad7-06f54ab67b07.roa File: caef0813-709f-3639-aad7-06f54ab67b07.roa (raw, json) Hash identifier: 3QXP0QqlZAw7Zrzb2qA+kTb6bOS9ImSDTUaL0AB2hDI= Subject key identifier: 02:BC:8E:52:AA:61:39:C9:B1:83:E5:A6:74:FA:12:6D:5B:90:55:71 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F43285849B57A15756FD519768C50DFC0 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/caef0813-709f-3639-aad7-06f54ab67b07.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 55246 IP address blocks: 209.237.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:15:75:6f:d5:19:76:8c:50:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=a50c0fbe-289e-4fda-bd91-40ebbaefafb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:10:48:5a:d7:94:63:17:79:42:09:4d:98:8b: 31:b4:6d:7c:04:0c:05:11:40:8e:25:da:d5:05:d6: f2:1d:b5:d3:4b:0a:23:9c:34:65:4c:d4:86:e9:40: f1:a4:f3:d3:47:71:50:cd:0c:3f:8c:dd:6d:61:85: 8f:46:cd:30:20:29:b3:51:78:3a:9a:47:dd:e9:b5: d9:1b:4c:38:06:8b:34:87:6f:ee:d5:c3:0a:d4:3c: 34:6e:af:30:cd:e2:df:83:77:72:13:5c:f2:dc:e1: 3a:bd:a1:31:a1:48:cc:a5:57:20:73:61:97:a8:34: 08:da:f5:82:34:28:cf:e6:b3:50:87:10:2e:63:3b: 63:bf:43:4b:75:91:71:ca:fb:56:eb:d5:27:49:01: 2d:13:86:6e:51:8f:dc:29:c1:ee:8d:a7:7c:47:58: 30:7d:0b:84:70:c8:63:8a:52:ff:48:7d:5f:7f:56: 27:e2:1d:c6:19:e2:60:7d:ab:67:ae:37:41:88:08: 19:69:a3:09:b6:e7:8d:c0:3b:14:41:70:7b:69:76: c0:c7:1c:bb:33:42:5b:dd:1c:c9:0e:88:f5:d8:16: c0:f4:9b:1e:fb:85:77:e0:b4:79:bd:d6:4b:d2:f0: 68:86:f0:bb:98:5a:21:7c:d8:d7:fc:58:c8:5f:cb: f9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BC:8E:52:AA:61:39:C9:B1:83:E5:A6:74:FA:12:6D:5B:90:55:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/caef0813-709f-3639-aad7-06f54ab67b07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:2a:99:b5:b8:54:72:87:37:70:a5:9e:ca:4a:34:66:a3:61: 83:20:4a:1d:f7:00:18:a6:06:f6:cf:5a:9b:8e:e1:ed:2c:d1: 0c:2f:fb:9d:fd:76:c2:1f:27:ef:75:16:51:68:f5:ca:10:eb: 15:6c:fd:9e:a7:60:0e:10:45:ef:b0:c1:8d:9c:ce:d4:56:07: cc:20:5a:0d:b3:e7:2c:c4:36:68:28:d8:79:58:5e:e4:6e:94: 34:a6:53:e2:d8:fd:c5:a1:81:6d:6d:28:a9:29:fd:1e:a5:30: 10:c0:86:71:3b:62:ce:5f:7f:73:ec:33:d0:02:fa:53:bb:88: 2b:02:ac:03:a8:6c:b9:d0:c6:0a:81:8c:42:9a:a0:ad:5c:be: e7:e9:0c:a3:43:3e:8b:3e:0a:f7:0f:d9:3f:42:3b:ca:db:ce: 4e:07:ee:04:27:76:a8:ca:64:2b:a8:5e:35:00:5e:0a:ea:dd: 88:27:78:44:71:b7:81:54:dc:e3:b9:96:c8:38:2b:58:b1:a3: d0:0e:8a:ff:39:c9:1a:5c:80:0a:41:70:c0:47:d1:38:64:c0: d2:ac:e1:07:13:6f:39:8c:46:3d:7e:db:c0:3c:18:84:f8:91: 90:3e:b7:07:3e:b4:08:ea:18:a6:7f:47:4b:cc:7e:07:5d:86: 6a:73:08:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1ehV1b9UZdoxQ38AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk YTUwYzBmYmUtMjg5ZS00ZmRhLWJkOTEtNDBlYmJhZWZhZmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBBIWteUYxd5QglNmIsxtG18BAwFEUCOJdrV BdbyHbXTSwojnDRlTNSG6UDxpPPTR3FQzQw/jN1tYYWPRs0wICmzUXg6mkfd6bXZ G0w4Bos0h2/u1cMK1Dw0bq8wzeLfg3dyE1zy3OE6vaExoUjMpVcgc2GXqDQI2vWC NCjP5rNQhxAuYztjv0NLdZFxyvtW69UnSQEtE4ZuUY/cKcHujad8R1gwfQuEcMhj ilL/SH1ff1Yn4h3GGeJgfatnrjdBiAgZaaMJtueNwDsUQXB7aXbAxxy7M0Jb3RzJ Doj12BbA9Jse+4V34LR5vdZL0vBohvC7mFohfNjX/FjIX8v5LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAK8jlKqYTnJsYPlpnT6Em1bkFVxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvY2FlZjA4MTMtNzA5Zi0z NjM5LWFhZDctMDZmNTRhYjY3YjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEqmbW4VHKHN3ClnspKNGajYYMgSh33ABimBvbPWpuO4e0s0Qwv+539 dsIfJ+91FlFo9coQ6xVs/Z6nYA4QRe+wwY2cztRWB8wgWg2z5yzENmgo2HlYXuRu lDSmU+LY/cWhgW1tKKkp/R6lMBDAhnE7Ys5ff3PsM9AC+lO7iCsCrAOobLnQxgqB jEKaoK1cvufpDKNDPos+CvcP2T9CO8rbzk4H7gQndqjKZCuoXjUAXgrq3YgneERx t4FU3OO5lsg4K1ixo9AOiv85yRpcgApBcMBH0ThkwNKs4QcTbzmMRj1+28A8GIT4 kZA+twc+tAjqGKZ/R0vMfgddhmpzCFk= -----END CERTIFICATE-----Generated at Tue May 6 04:43:10 2025 by rpki-client