$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/2e6c5e30-a5e1-3b07-afe0-c214631305bf.roa File: 2e6c5e30-a5e1-3b07-afe0-c214631305bf.roa (raw, json) Hash identifier: SHfrLD6UcegOtsUobgrFqrl5KBuFBSIqo06owLqoYlQ= Subject key identifier: A7:81:52:80:30:C6:D7:33:19:38:29:96:11:EE:E8:3F:96:75:F2:2F Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F432858497DA45EABD289B674F8CD7D80 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/2e6c5e30-a5e1-3b07-afe0-c214631305bf.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 40509 IP address blocks: 209.198.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:5e:ab:d2:89:b6:74:f8:cd:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=e087cad2-2ea5-4f6c-b9df-59ac2ab2efd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c8:0b:79:38:e7:f1:a1:8e:ab:fe:65:11:9c: 14:5f:22:5a:76:cb:78:c0:15:26:d7:d5:66:c5:67: 2d:76:a9:60:5a:b4:2c:2e:b9:79:ed:30:ce:52:fd: 45:6e:0b:1e:bb:db:ca:03:d1:78:83:eb:c2:9e:c5: 94:f5:df:28:03:36:b8:a9:a0:86:41:2d:b6:77:ac: 15:0f:bd:d1:f2:a1:11:89:5a:82:fc:35:4b:b5:5b: fc:f3:19:b8:53:3c:66:54:d1:a9:1d:96:33:53:e9: 25:9d:eb:0f:b7:b8:37:4c:22:42:e0:a6:93:6c:98: fa:6b:99:3f:b8:be:fe:b5:79:70:75:0b:cc:68:0b: bf:6b:c5:b5:88:93:12:14:67:d1:37:5b:9e:0d:46: ee:4d:5c:b7:56:c5:df:a9:60:45:31:44:27:97:47: 10:bf:be:16:31:06:a3:98:f1:ab:17:4c:fb:7b:f7: 91:c6:36:59:32:fa:68:7d:af:43:13:3e:21:a4:af: 30:e7:e6:a2:82:5d:5e:e8:26:b1:54:00:cf:ef:7c: a2:04:77:83:34:ab:d0:54:f0:5b:a0:b8:cc:1a:d3: ed:16:01:ee:46:aa:9c:3e:93:50:a5:62:ae:a5:9c: d3:a7:e9:a9:dc:8f:b2:cf:28:40:04:8e:1a:26:12: 6b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:81:52:80:30:C6:D7:33:19:38:29:96:11:EE:E8:3F:96:75:F2:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/2e6c5e30-a5e1-3b07-afe0-c214631305bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 209.198.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:ce:6e:65:d0:ea:e9:79:8a:35:15:22:5b:bd:b9:0e:6b:04: bb:b4:2f:3c:67:f3:59:a0:84:fc:19:24:03:29:51:9d:59:90: dc:81:78:f9:39:cc:ce:e3:c0:18:f2:10:0f:05:9b:9b:a2:88: c9:6a:ba:61:d9:ff:49:f6:a7:35:b2:4e:c3:f9:a5:ed:42:36: eb:7e:29:a9:a3:3b:9b:c5:23:4a:cb:43:32:f9:d8:9c:8c:23: 3d:ab:35:a8:7a:9b:c9:d6:39:bc:ac:31:69:69:c3:4c:05:65: 4c:0e:32:2b:a2:1e:01:46:a0:69:75:3d:36:f8:52:9c:e2:2d: e7:e8:1d:cb:66:7f:4b:2e:ef:c6:75:79:a2:05:ba:01:30:15: e1:bf:3b:ca:f4:18:48:76:d9:ba:29:b8:b5:dd:41:91:ea:e8: f3:8e:aa:e4:5e:85:2c:5c:31:d3:09:43:6d:cb:7b:a1:9b:3e: 3f:c7:0a:d1:ab:6d:84:cc:3c:3e:c1:ab:43:a8:99:10:87:38: 5c:f2:3c:c9:5e:4e:a6:6e:08:65:b9:16:46:be:e9:62:c0:b9: 14:cf:0e:a6:93:7c:37:0e:44:fa:2a:3a:10:87:57:3e:8b:76: 9d:2c:17:30:fe:fd:14:9a:1d:ff:f6:b5:15:6b:42:90:c9:92: b9:41:19:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pF6r0om2dPjNfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZTA4N2NhZDItMmVhNS00ZjZjLWI5ZGYtNTlhYzJhYjJlZmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8gLeTjn8aGOq/5lEZwUXyJadst4wBUm19Vm xWctdqlgWrQsLrl57TDOUv1Fbgseu9vKA9F4g+vCnsWU9d8oAza4qaCGQS22d6wV D73R8qERiVqC/DVLtVv88xm4UzxmVNGpHZYzU+klnesPt7g3TCJC4KaTbJj6a5k/ uL7+tXlwdQvMaAu/a8W1iJMSFGfRN1ueDUbuTVy3VsXfqWBFMUQnl0cQv74WMQaj mPGrF0z7e/eRxjZZMvpofa9DEz4hpK8w5+aigl1e6CaxVADP73yiBHeDNKvQVPBb oLjMGtPtFgHuRqqcPpNQpWKupZzTp+mp3I+yzyhABI4aJhJrRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKeBUoAwxtczGTgplhHu6D+WdfIvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvMmU2YzVlMzAtYTVlMS0z YjA3LWFmZTAtYzIxNDYzMTMwNWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0cbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvObmXQ6ul5ijUVIlu9uQ5rBLu0Lzxn81mghPwZJAMpUZ1ZkNyBePk5 zM7jwBjyEA8Fm5uiiMlqumHZ/0n2pzWyTsP5pe1CNut+KamjO5vFI0rLQzL52JyM Iz2rNah6m8nWObysMWlpw0wFZUwOMiuiHgFGoGl1PTb4UpziLefoHctmf0su78Z1 eaIFugEwFeG/O8r0GEh22bopuLXdQZHq6POOquRehSxcMdMJQ23Le6GbPj/HCtGr bYTMPD7Bq0OomRCHOFzyPMleTqZuCGW5Fka+6WLAuRTPDqaTfDcORPoqOhCHVz6L dp0sFzD+/RSaHf/2tRVrQpDJkrlBGWA= -----END CERTIFICATE-----Generated at Mon May 12 11:25:32 2025 by rpki-client