$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/c68aea4d-afd1-356f-a858-c84b8ec53edc.roa File: c68aea4d-afd1-356f-a858-c84b8ec53edc.roa (raw, json) Hash identifier: UoRPW+DTdK6Gae8pxHzhCObOjvzRDAmLJ6e8qpJCJW8= Subject key identifier: 21:8B:3A:79:54:93:CE:37:52:33:CF:7B:D5:32:4F:41:1E:D7:99:F6 Certificate issuer: /CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87 Certificate serial: 010D0C9F43285849ADB265BDC084BBCC5DCF6000 Authority key identifier: 73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/c68aea4d-afd1-356f-a858-c84b8ec53edc.roa Signing time: Mon 28 Apr 2025 18:08:07 +0000 ROA not before: Mon 28 Apr 2025 18:08:07 +0000 ROA not after: Sun 27 Jul 2025 18:08:07 +0000 asID: 5065 IP address blocks: 209.213.192.0/24 maxlen: 24 209.213.193.0/24 maxlen: 24 209.213.194.0/24 maxlen: 24 209.213.195.0/24 maxlen: 24 209.213.200.0/24 maxlen: 24 209.213.201.0/24 maxlen: 24 209.213.202.0/24 maxlen: 24 209.213.203.0/24 maxlen: 24 209.213.216.0/24 maxlen: 24 209.213.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:b2:65:bd:c0:84:bb:cc:5d:cf:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87 Validity Not Before: Apr 28 18:08:07 2025 GMT Not After : Jul 27 18:08:07 2025 GMT Subject: CN=7888400d-6d26-4a31-884e-1da25ac41826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:09:52:39:cb:e5:c7:47:db:3f:c1:a0:a9:52: 01:09:5f:1c:06:7c:77:4f:aa:3e:49:a4:ba:01:4b: 98:26:82:fd:37:b0:e4:39:4a:f3:25:10:a2:44:cd: db:99:59:e4:0b:18:8e:ee:0b:11:4d:00:67:c7:b0: 88:ab:cb:9a:e9:75:61:df:9c:b6:01:43:a6:7a:48: 4d:8a:34:e3:95:67:a1:d4:38:e7:f8:09:70:05:27: 05:cb:da:07:b8:74:a2:39:a8:7e:31:2a:9d:fa:46: 24:0c:b1:2f:45:d2:fb:0f:a9:31:bc:d0:36:df:07: e5:f6:39:24:dd:e2:c4:c7:cd:33:43:73:3f:7a:67: f9:1d:0d:3f:07:e4:03:6b:7c:a2:b8:1b:4a:db:e6: aa:bd:8f:2f:7f:ff:9c:90:fb:df:27:f1:f0:58:fb: 24:64:bf:cc:b0:6f:d9:ef:f7:b9:fe:35:f5:fb:fa: 90:09:b1:7f:a7:08:f8:d6:22:86:ca:99:76:36:43: 36:1b:80:a7:54:e1:23:6c:45:49:dc:f3:84:c5:fd: 2c:fb:6d:9f:6b:1c:74:66:a7:65:02:d8:9b:df:d4: 56:18:d2:4f:eb:7a:9e:ba:37:5a:a5:a2:24:cb:a0: 33:23:61:ea:01:49:bb:f0:ab:c9:85:a7:69:ee:7e: 4e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8B:3A:79:54:93:CE:37:52:33:CF:7B:D5:32:4F:41:1E:D7:99:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/c68aea4d-afd1-356f-a858-c84b8ec53edc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl X509v3 Authority Key Identifier: keyid:73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer sbgp-ipAddrBlock: critical IPv4: 209.213.192.0/22 209.213.200.0/22 209.213.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:9b:38:28:c1:53:ca:60:60:aa:8a:d2:e0:e5:06:25:ce:90: d0:52:1a:c8:39:a7:3d:dc:b6:0f:7d:12:88:da:45:27:a7:75: 8d:13:03:15:a0:f2:0b:83:95:c7:1c:f9:b2:cb:73:34:fe:f9: bc:ed:8d:1f:d2:c4:8a:f6:a9:17:3c:7a:b5:74:e4:46:55:5d: 3a:03:d7:c7:a8:29:7c:82:9f:e1:0d:f5:d9:c8:39:83:66:09: 84:36:95:8b:09:98:3c:ec:70:a6:7c:73:4d:58:ac:e3:ec:1d: 9b:8f:c9:a7:ba:08:47:73:fd:7c:ec:48:dd:d6:81:9f:de:ca: 90:38:dd:35:37:97:f7:a8:24:15:25:43:ea:13:3f:d1:e3:26: 60:ff:82:dd:2e:b7:80:a1:7d:8e:12:70:ad:86:26:a6:18:23: 3d:37:f9:45:0d:96:4d:c9:db:c4:c5:44:c8:3b:43:df:8d:9b: 47:02:7b:0b:67:64:b0:80:fa:51:df:6e:01:13:3f:21:a9:f0: 35:59:3c:a5:b2:b8:a9:81:ce:1d:1d:7e:b4:bd:5b:95:17:c5: e4:74:a5:12:c1:56:9f:cb:cc:46:90:96:a0:a5:61:78:3f:67: 83:d0:4c:6b:ed:ae:5b:3f:cf:0f:30:1e:4e:8b:45:2e:1f:08: 02:21:27:ea -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEmtsmW9wIS7zF3PYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNiNTkwZTgtMzBjNS00OTk3LWJiZjMtZjJmZTEwYTI5 ZTg3MB4XDTI1MDQyODE4MDgwN1oXDTI1MDcyNzE4MDgwN1owLzEtMCsGA1UEAxMk Nzg4ODQwMGQtNmQyNi00YTMxLTg4NGUtMWRhMjVhYzQxODI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAlSOcvlx0fbP8GgqVIBCV8cBnx3T6o+SaS6 AUuYJoL9N7DkOUrzJRCiRM3bmVnkCxiO7gsRTQBnx7CIq8ua6XVh35y2AUOmekhN ijTjlWeh1Djn+AlwBScFy9oHuHSiOah+MSqd+kYkDLEvRdL7D6kxvNA23wfl9jkk 3eLEx80zQ3M/emf5HQ0/B+QDa3yiuBtK2+aqvY8vf/+ckPvfJ/HwWPskZL/MsG/Z 7/e5/jX1+/qQCbF/pwj41iKGypl2NkM2G4CnVOEjbEVJ3POExf0s+22faxx0Zqdl Atib39RWGNJP63qeujdapaIky6AzI2HqAUm78KvJhadp7n5OXwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFCGLOnlUk843UjPPe9UyT0Ee15n2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yM2I1 OTBlOC0zMGM1LTQ5OTctYmJmMy1mMmZlMTBhMjllODcvYzY4YWVhNGQtYWZkMS0z NTZmLWE4NTgtYzg0YjhlYzUzZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjNiNTkwZTgtMzBjNS00OTk3LWJi ZjMtZjJmZTEwYTI5ZTg3LzIzYjU5MGU4LTMwYzUtNDk5Ny1iYmYzLWYyZmUxMGEy OWU4Ny5jcmwwHwYDVR0jBBgwFoAUcy1hwgTHlLBjGpuuELFhCs6jUygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yM2I1OTBlOC0zMGM1LTQ5OTctYmJmMy1mMmZl MTBhMjllODcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQC0dXAAwQC 0dXIAwQB0dXYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBALmbOCjBU8pgYKqK0uDlBiXOkNBSGsg5pz3ctg99 EojaRSendY0TAxWg8guDlccc+bLLczT++bztjR/SxIr2qRc8erV05EZVXToD18eo KXyCn+EN9dnIOYNmCYQ2lYsJmDzscKZ8c01YrOPsHZuPyae6CEdz/XzsSN3WgZ/e ypA43TU3l/eoJBUlQ+oTP9HjJmD/gt0ut4ChfY4ScK2GJqYYIz03+UUNlk3J28TF RMg7Q9+Nm0cCewtnZLCA+lHfbgETPyGp8DVZPKWyuKmBzh0dfrS9W5UXxeR0pRLB Vp/LzEaQlqClYXg/Z4PQTGvtrls/zw8wHk6LRS4fCAIhJ+o= -----END CERTIFICATE-----Generated at Wed May 7 14:35:59 2025 by rpki-client