$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/016c48b1-08e7-3fb3-9a7d-3046a1cdc2c9.roa File: 016c48b1-08e7-3fb3-9a7d-3046a1cdc2c9.roa (raw, json) Hash identifier: GK/FaFw8xRgoffzTsJwQGXhE25T1VnN2vIrbnNN8au4= Subject key identifier: 72:1E:7F:0C:7D:20:06:C1:E5:35:EF:75:E6:8F:4C:19:B0:E9:CA:14 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F43285849D62A26F3D3AC6CA10F06E580 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/016c48b1-08e7-3fb3-9a7d-3046a1cdc2c9.roa Signing time: Tue 13 May 2025 06:01:45 +0000 ROA not before: Tue 13 May 2025 06:01:45 +0000 ROA not after: Mon 11 Aug 2025 06:01:45 +0000 asID: 174 IP address blocks: 209.250.114.0/24 maxlen: 24 209.250.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d6:2a:26:f3:d3:ac:6c:a1:0f:06:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 13 06:01:45 2025 GMT Not After : Aug 11 06:01:45 2025 GMT Subject: CN=0491e5c9-e728-4f36-b711-645daedae2fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ad:a7:20:13:2a:8a:39:32:bc:bd:a2:1b:7d: 1b:17:cd:95:f2:18:96:f4:0c:66:90:5b:13:cb:28: 07:c3:65:69:ea:83:4a:f4:a8:24:3f:e2:48:c2:d0: 9c:31:04:95:09:a6:9a:43:ad:21:60:61:53:6d:21: f9:84:5d:dd:d9:bf:13:36:1d:b6:ab:fd:9e:53:00: 44:01:f0:29:84:5d:de:13:bf:02:35:1c:33:e2:78: af:05:64:25:40:c3:09:40:5c:92:85:f6:c6:7c:0c: ee:f4:37:79:69:1a:65:4f:36:40:44:55:1a:10:10: ed:fd:69:29:2f:c0:e6:c1:38:8e:2a:1b:6d:31:cf: d5:f8:a3:2c:09:1a:bc:62:d5:f5:47:8d:70:50:3d: c7:ac:50:f9:f2:4a:d6:b8:74:c0:d6:4c:c0:c2:d3: bd:5f:42:05:fa:b6:28:c5:6c:bb:a5:8c:91:4d:62: c4:0b:c2:b8:77:33:1d:cf:ce:0a:a5:66:c4:3e:45: 8a:57:28:78:1a:23:7b:fa:86:e2:24:f9:1e:da:39: ff:02:97:de:a3:c5:94:c7:4e:78:46:2d:8e:a9:76: 87:44:67:c9:73:7e:f3:61:11:67:55:69:cd:57:df: 67:a5:ae:7c:1a:a7:0c:b9:34:d0:c9:e4:f8:4d:f0: 6d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1E:7F:0C:7D:20:06:C1:E5:35:EF:75:E6:8F:4C:19:B0:E9:CA:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/016c48b1-08e7-3fb3-9a7d-3046a1cdc2c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.250.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:7c:d4:63:4c:0a:f5:96:37:90:fb:6a:75:41:8b:d8:76:54: f5:8d:f8:46:e1:3d:68:5f:ae:05:59:7d:68:21:4e:6d:d9:5d: 65:c3:54:b8:2b:e0:a7:97:8a:77:73:9c:0e:b5:00:89:83:a1: 6d:5c:1a:b2:ae:bd:6f:e6:2f:e2:14:8d:c6:17:1d:49:b2:cb: dd:d1:24:7f:4e:12:e2:0f:e5:ba:2e:2d:10:95:23:80:f1:3e: 44:09:27:3c:c2:75:dd:b1:3f:1a:e2:a4:0f:26:62:ff:87:66: 7b:a7:22:b3:bb:3a:16:72:f0:68:ef:3a:32:75:77:52:94:ee: 82:0c:98:4a:f4:2c:37:c5:4a:a6:cc:11:be:c2:4a:f0:44:ef: 3f:45:d2:13:8a:68:f6:22:15:9e:7c:0a:3c:7e:46:9f:84:5d: d8:22:d7:60:22:0b:ae:1c:57:2f:71:33:18:51:fe:96:8a:a0: 5d:ba:75:24:d6:bd:7e:dd:27:37:1c:f3:ac:05:20:4d:8b:0e: 0e:8d:6f:9a:a9:08:2e:f8:99:d3:d0:49:19:d9:42:89:18:16: 27:90:90:c1:fb:1f:0b:2f:40:97:46:c4:0d:f6:29:f7:3d:34: a0:b6:78:90:31:35:d4:41:06:b5:34:1c:39:ee:9a:4d:ab:e5: b1:6b:eb:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnWKibz06xsoQ8G5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDUxMzA2MDE0NVoXDTI1MDgxMTA2MDE0NVowLzEtMCsGA1UEAxMk MDQ5MWU1YzktZTcyOC00ZjM2LWI3MTEtNjQ1ZGFlZGFlMmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq2nIBMqijkyvL2iG30bF82V8hiW9AxmkFsT yygHw2Vp6oNK9KgkP+JIwtCcMQSVCaaaQ60hYGFTbSH5hF3d2b8TNh22q/2eUwBE AfAphF3eE78CNRwz4nivBWQlQMMJQFyShfbGfAzu9Dd5aRplTzZARFUaEBDt/Wkp L8DmwTiOKhttMc/V+KMsCRq8YtX1R41wUD3HrFD58krWuHTA1kzAwtO9X0IF+rYo xWy7pYyRTWLEC8K4dzMdz84KpWbEPkWKVyh4GiN7+obiJPke2jn/Apfeo8WUx054 Ri2OqXaHRGfJc37zYRFnVWnNV99npa58GqcMuTTQyeT4TfBtgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIefwx9IAbB5TXvdeaPTBmw6coUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDE2YzQ4YjEtMDhlNy0z ZmIzLTlhN2QtMzA0NmExY2RjMmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0fpyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF981GNMCvWWN5D7anVBi9h2VPWN+EbhPWhfrgVZfWghTm3ZXWXDVLgr 4KeXindznA61AImDoW1cGrKuvW/mL+IUjcYXHUmyy93RJH9OEuIP5bouLRCVI4Dx PkQJJzzCdd2xPxripA8mYv+HZnunIrO7OhZy8GjvOjJ1d1KU7oIMmEr0LDfFSqbM Eb7CSvBE7z9F0hOKaPYiFZ58Cjx+Rp+EXdgi12AiC64cVy9xMxhR/paKoF26dSTW vX7dJzcc86wFIE2LDg6Nb5qpCC74mdPQSRnZQokYFieQkMH7HwsvQJdGxA32Kfc9 NKC2eJAxNdRBBrU0HDnumk2r5bFr62g= -----END CERTIFICATE-----Generated at Wed May 14 12:39:19 2025 by rpki-client