$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ba6a2a50-610d-30d5-92b0-69d079d11724.roa File: ba6a2a50-610d-30d5-92b0-69d079d11724.roa (raw, json) Hash identifier: Tf/5NZSpJNyg6kjye7+HhSDDnSi8Iv5dYuF6potBSbM= Subject key identifier: 57:13:06:2E:70:52:A1:F1:EF:6D:F3:64:37:14:7D:E0:DF:D3:40:86 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F432858499D51FCAC9893615B5E332CE0 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ba6a2a50-610d-30d5-92b0-69d079d11724.roa Signing time: Tue 22 Apr 2025 21:20:56 +0000 ROA not before: Tue 22 Apr 2025 21:20:56 +0000 ROA not after: Mon 21 Jul 2025 21:20:56 +0000 asID: 6079 IP address blocks: 209.236.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:51:fc:ac:98:93:61:5b:5e:33:2c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Apr 22 21:20:56 2025 GMT Not After : Jul 21 21:20:56 2025 GMT Subject: CN=b9251873-a613-4f08-8cbb-1362bbfa538b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3b:51:0b:ce:b1:cd:58:f0:ae:fc:c5:17:33: 5b:64:43:14:bc:ca:8a:e1:52:16:29:76:e8:c5:dc: 0a:29:77:a8:96:f1:bc:fc:7e:ff:44:6b:5e:72:79: 75:4f:33:e1:a4:02:09:49:e9:07:da:58:64:73:7d: 6f:d7:9a:a4:89:f5:af:bf:f5:35:51:0e:56:8a:00: 23:ff:6a:35:d1:98:69:23:3d:f4:ff:0b:2e:92:50: b7:6b:4d:88:7d:73:64:53:b2:84:63:35:60:ad:b5: d8:e6:0e:2b:40:dc:af:4b:db:2b:47:4d:80:a1:32: a9:9a:6c:71:49:35:29:99:c7:2d:9f:d2:31:49:91: b8:51:6b:65:7a:10:0a:fc:9c:4f:41:5a:d6:03:bb: aa:3f:cd:9b:ea:c4:44:c9:47:bf:94:07:dc:df:16: a2:c3:19:78:e7:83:d5:b1:87:56:e6:d5:87:a3:0e: 5c:51:ad:34:20:11:7a:c1:e0:d4:44:82:d2:6b:d3: f9:23:e8:b6:e3:0e:5e:d7:5e:b2:70:99:3b:53:bb: a3:0e:36:d1:58:19:62:66:bc:88:56:31:3f:bc:3d: bb:88:e7:cd:89:4f:d7:99:5f:d1:22:a9:85:84:78: 76:0e:ca:bf:c3:59:47:34:92:63:15:d6:24:e0:73: ee:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:13:06:2E:70:52:A1:F1:EF:6D:F3:64:37:14:7D:E0:DF:D3:40:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ba6a2a50-610d-30d5-92b0-69d079d11724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:bd:34:6e:98:2e:c5:1f:81:7e:e9:ed:cb:51:4e:d5:cc:52: 45:e9:10:15:58:79:de:c8:90:63:d6:f8:4e:86:de:a4:b0:8d: 25:4f:c7:e8:17:b5:d8:fe:85:84:88:b1:fd:4b:fa:11:60:91: 05:b3:71:18:82:9c:5f:bc:38:09:06:e2:c7:eb:66:14:a7:8c: 88:39:70:10:b3:1d:7e:02:71:d6:f1:cc:4f:ba:57:47:3c:19: 7a:e4:f1:41:3e:48:d5:70:b9:a2:85:aa:a4:9a:89:da:ac:44: 09:d5:12:bf:b6:34:c1:57:c2:bc:4c:46:9e:cc:f1:5b:a2:47: 99:65:95:5d:3d:5b:06:cb:73:f8:b9:a4:d4:ec:05:ed:b9:30: f5:67:43:c7:62:e9:68:fd:14:e1:8c:f6:48:9b:06:c7:ae:17: 9f:e6:e9:b8:96:06:02:f4:aa:6f:86:93:55:d2:86:da:8f:21: 78:d4:a0:a4:df:ac:02:d1:1a:72:07:01:5d:b1:22:49:ea:b9: 0b:72:55:fd:58:48:9a:2b:7a:52:77:59:72:c2:33:93:12:9c: 54:5a:94:e9:a3:f4:1e:e1:2f:22:c3:e8:74:ae:af:3a:32:44: 9a:60:d6:b7:93:c0:3c:ac:ab:4e:ca:38:02:1b:89:cc:14:7d: 26:3c:b8:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdUfysmJNhW14zLOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDQyMjIxMjA1NloXDTI1MDcyMTIxMjA1NlowLzEtMCsGA1UEAxMk YjkyNTE4NzMtYTYxMy00ZjA4LThjYmItMTM2MmJiZmE1MzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoztRC86xzVjwrvzFFzNbZEMUvMqK4VIWKXbo xdwKKXeolvG8/H7/RGtecnl1TzPhpAIJSekH2lhkc31v15qkifWvv/U1UQ5WigAj /2o10ZhpIz30/wsuklC3a02IfXNkU7KEYzVgrbXY5g4rQNyvS9srR02AoTKpmmxx STUpmcctn9IxSZG4UWtlehAK/JxPQVrWA7uqP82b6sREyUe/lAfc3xaiwxl454PV sYdW5tWHow5cUa00IBF6weDURILSa9P5I+i24w5e116ycJk7U7ujDjbRWBliZryI VjE/vD27iOfNiU/XmV/RIqmFhHh2Dsq/w1lHNJJjFdYk4HPuyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcTBi5wUqHx723zZDcUfeDf00CGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvYmE2YTJhNTAtNjEwZC0z MGQ1LTkyYjAtNjlkMDc5ZDExNzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ezzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAm9NG6YLsUfgX7p7ctRTtXMUkXpEBVYed7IkGPW+E6G3qSwjSVPx+gX tdj+hYSIsf1L+hFgkQWzcRiCnF+8OAkG4sfrZhSnjIg5cBCzHX4CcdbxzE+6V0c8 GXrk8UE+SNVwuaKFqqSaidqsRAnVEr+2NMFXwrxMRp7M8VuiR5lllV09WwbLc/i5 pNTsBe25MPVnQ8di6Wj9FOGM9kibBseuF5/m6biWBgL0qm+Gk1XShtqPIXjUoKTf rALRGnIHAV2xIknquQtyVf1YSJorelJ3WXLCM5MSnFRalOmj9B7hLyLD6HSurzoy RJpg1reTwDysq07KOAIbicwUfSY8uNI= -----END CERTIFICATE-----Generated at Sun May 11 04:09:32 2025 by rpki-client