$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ce3af1c7-43c9-367b-a21d-717aaaf44463.roa File: ce3af1c7-43c9-367b-a21d-717aaaf44463.roa (raw, json) Hash identifier: 6i3RWlqbkq2nat7f6UE/OlPfZMJ3lrpYPwa4CUa29H4= Subject key identifier: A2:8D:17:53:B4:BE:85:81:E4:9B:F6:0F:DC:29:D1:96:16:BD:D6:09 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F432858499CF95EBC21861B062D174980 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ce3af1c7-43c9-367b-a21d-717aaaf44463.roa Signing time: Tue 22 Apr 2025 18:22:23 +0000 ROA not before: Tue 22 Apr 2025 18:22:23 +0000 ROA not after: Mon 21 Jul 2025 18:22:23 +0000 asID: 7029 IP address blocks: 209.236.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:f9:5e:bc:21:86:1b:06:2d:17:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Apr 22 18:22:23 2025 GMT Not After : Jul 21 18:22:23 2025 GMT Subject: CN=bfd260be-6ae5-4788-8ebb-5bee5ab7b4b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3a:05:d3:f5:c1:28:73:e6:df:af:ff:c4:1b: 15:58:a8:9c:12:d9:48:56:76:46:b6:d3:e8:13:fe: 7f:f5:02:03:d7:1b:b9:ec:6e:24:ca:4b:98:b3:2a: 4c:a7:75:05:95:65:b9:ea:b1:6d:a3:ec:8b:58:6c: 9a:ff:b0:1a:72:bc:84:36:ce:0d:28:81:55:fb:a2: 00:a3:ba:16:4d:fe:4e:1e:35:a1:57:c4:f0:10:f6: 8d:f1:67:52:50:20:65:0b:2d:44:f8:1c:54:ec:6d: cf:07:4f:e0:ad:7a:a1:ed:cc:38:40:db:1c:3f:3d: fb:75:e8:d3:d1:17:ba:62:c4:03:bf:82:66:9d:a2: 8d:47:3b:3f:3f:e0:73:50:1d:83:70:14:03:07:fc: 98:1e:cd:ad:f1:19:c6:67:50:9f:37:ab:6e:c5:3f: 0f:40:23:42:de:91:19:54:b3:d5:e6:47:3c:a6:f0: d1:61:1a:b4:e2:12:a3:5f:16:83:b1:a7:73:87:25: c2:6e:3b:74:a1:12:dd:48:17:91:74:99:59:07:72: 78:f5:4e:05:7d:27:e5:82:9f:df:cb:79:b0:0f:4a: d2:5f:74:72:1d:f8:31:35:41:a2:6b:c0:06:c0:1b: a2:f3:6d:87:07:68:cf:35:26:43:c8:ba:19:1d:e6: 07:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8D:17:53:B4:BE:85:81:E4:9B:F6:0F:DC:29:D1:96:16:BD:D6:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ce3af1c7-43c9-367b-a21d-717aaaf44463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:ef:07:b6:04:48:ce:b5:0e:38:51:4e:d8:0e:67:50:3e:a9: cc:b9:19:13:4b:70:35:eb:3d:e7:75:b3:ad:49:18:c3:c8:41: 83:7c:6d:48:be:86:14:1d:da:8a:f5:f8:96:67:04:7a:bb:5f: 22:81:79:ea:09:4a:0c:57:d0:01:be:7c:bd:f8:08:59:7e:f9: e1:0a:1b:55:16:9a:f6:fc:07:b0:33:85:bf:7b:31:fe:a5:61: a6:6a:fa:d7:9c:84:38:07:91:e0:44:8c:f2:9a:ed:43:a3:84: b0:bc:68:0d:30:d1:2c:4d:31:68:ed:ff:61:d7:b1:57:7a:53: 0c:bb:ea:46:ff:e1:f0:65:8e:0e:4b:69:6d:d4:13:05:eb:87: 2b:21:93:73:96:d0:e4:b6:64:74:54:53:48:46:17:18:fb:21: 0c:55:44:5d:fc:36:aa:e5:b9:7e:9f:a7:10:b4:16:fa:3b:6f: 4d:cb:96:7b:fa:ab:53:ba:cd:20:d9:37:26:a7:a6:41:cf:58: 52:a5:95:57:90:1f:d9:bf:43:4a:c1:9b:ef:49:54:48:f3:bf: 30:e7:e8:29:12:26:99:8c:d9:47:27:aa:53:56:ef:b0:b7:11: d1:6a:0b:a3:bd:c7:6c:53:49:d2:bc:e5:7c:14:71:7b:71:94: 3b:92:5f:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmc+V68IYYbBi0XSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDQyMjE4MjIyM1oXDTI1MDcyMTE4MjIyM1owLzEtMCsGA1UEAxMk YmZkMjYwYmUtNmFlNS00Nzg4LThlYmItNWJlZTVhYjdiNGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkToF0/XBKHPm36//xBsVWKicEtlIVnZGttPo E/5/9QID1xu57G4kykuYsypMp3UFlWW56rFto+yLWGya/7AacryENs4NKIFV+6IA o7oWTf5OHjWhV8TwEPaN8WdSUCBlCy1E+BxU7G3PB0/grXqh7cw4QNscPz37dejT 0Re6YsQDv4JmnaKNRzs/P+BzUB2DcBQDB/yYHs2t8RnGZ1CfN6tuxT8PQCNC3pEZ VLPV5kc8pvDRYRq04hKjXxaDsadzhyXCbjt0oRLdSBeRdJlZB3J49U4FfSflgp/f y3mwD0rSX3RyHfgxNUGia8AGwBui822HB2jPNSZDyLoZHeYHmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKNF1O0voWB5Jv2D9wp0ZYWvdYJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvY2UzYWYxYzctNDNjOS0z NjdiLWEyMWQtNzE3YWFhZjQ0NDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLvB7YESM61DjhRTtgOZ1A+qcy5GRNLcDXrPed1s61JGMPIQYN8bUi+ hhQd2or1+JZnBHq7XyKBeeoJSgxX0AG+fL34CFl++eEKG1UWmvb8B7Azhb97Mf6l YaZq+techDgHkeBEjPKa7UOjhLC8aA0w0SxNMWjt/2HXsVd6Uwy76kb/4fBljg5L aW3UEwXrhyshk3OW0OS2ZHRUU0hGFxj7IQxVRF38NqrluX6fpxC0Fvo7b03Llnv6 q1O6zSDZNyanpkHPWFKllVeQH9m/Q0rBm+9JVEjzvzDn6CkSJpmM2UcnqlNW77C3 EdFqC6O9x2xTSdK85XwUcXtxlDuSX6g= -----END CERTIFICATE-----Generated at Fri May 9 02:51:39 2025 by rpki-client