$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/ed276f00-0fe1-37e7-9db6-634e6a00d519.roa File: ed276f00-0fe1-37e7-9db6-634e6a00d519.roa (raw, json) Hash identifier: JHo06mcFPq+JAk2ew9TyWTgfwG73ScGQbOKg6ycsGlo= Subject key identifier: EB:EE:6E:43:72:B0:0F:D1:E2:08:45:C6:15:9D:60:EE:5E:D6:F5:1A Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F43285848D0ABAEADEE9A7D4DB8AD0300 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/ed276f00-0fe1-37e7-9db6-634e6a00d519.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 55286 IP address blocks: 209.234.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:ae:ad:ee:9a:7d:4d:b8:ad:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=53594792-0070-4730-b06c-67344c665a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2d:81:1c:f8:b7:a0:d9:5c:b2:81:61:6e:04: c3:6c:b5:d3:6f:2d:86:f5:89:c0:c0:74:e7:e0:57: 3a:2e:df:47:56:5d:d3:75:6e:96:39:ca:94:d6:e6: 63:33:4e:5d:fe:b9:73:d8:77:e6:20:09:80:22:5c: 0b:3e:8d:6e:51:d1:b8:f2:1a:28:8b:e2:5c:5b:e0: da:11:97:f2:81:6a:3a:df:c7:c2:ef:c1:69:7a:0a: e1:cf:63:cb:88:73:94:c2:b6:62:07:65:1f:8d:48: 14:bd:ef:4c:27:f9:70:e6:b4:2a:62:85:9a:f4:96: 8c:05:f0:54:ea:58:58:4d:7a:67:2d:2f:bc:4d:e2: e8:3f:6c:b2:77:86:4f:3b:68:a7:bc:3d:09:d5:48: 9f:07:0c:34:77:88:08:dc:a6:ac:df:6e:9b:19:5e: 97:58:8a:b0:50:7e:90:0d:7a:78:e7:a6:19:7a:7e: 91:58:e8:1b:b6:4c:47:51:1d:7d:8e:a0:d0:b7:e2: 54:57:d0:c6:4a:57:7b:79:87:21:1f:65:10:72:5a: d2:16:b5:e2:81:54:b4:a9:2e:51:e0:08:d4:20:96: 3d:fc:41:a2:e3:74:80:da:a9:0f:98:a2:4b:b4:f9: 34:4b:6a:a5:ce:9b:f7:cf:27:77:14:b5:53:74:3d: 84:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EE:6E:43:72:B0:0F:D1:E2:08:45:C6:15:9D:60:EE:5E:D6:F5:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/ed276f00-0fe1-37e7-9db6-634e6a00d519.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.234.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:81:e2:32:cf:88:a9:a6:ce:75:60:36:fe:40:fa:2e:d2:40: 81:6e:18:00:d3:a2:e4:5c:71:57:18:b8:59:95:5d:c5:9a:fa: 98:2e:a5:79:73:11:97:16:22:63:bf:54:8e:d3:18:81:60:1e: ec:17:de:1c:ed:b1:84:70:39:73:ec:3c:e5:11:b7:db:5a:86: 5d:c7:6b:0e:23:28:7c:d9:58:79:87:65:85:a5:23:e2:c9:58: 66:b0:86:13:85:48:11:4e:a4:e0:ff:a7:b5:3d:0e:e3:56:50: 3f:b2:01:15:47:ba:66:bf:2c:4b:83:c9:0c:c5:3d:42:ba:d2: 59:bb:99:66:47:11:0a:9c:4d:6d:15:2b:06:51:ee:25:30:b8: 5a:52:4a:e6:ff:8d:9a:e8:af:5b:cd:43:08:e6:b0:11:27:1e: a7:73:47:e9:dd:04:8d:73:fd:e5:a6:eb:17:de:b4:96:bc:30: 77:ed:c7:56:57:47:0f:2a:a4:c3:b0:95:c8:48:3b:e8:e1:59: 7d:da:04:2f:d7:23:34:4a:80:17:8d:7f:c7:2d:63:1f:ac:17: 3c:65:6f:61:86:8f:bf:65:fb:14:ea:d5:21:45:9a:1c:03:36: 4c:bb:72:ca:be:30:54:9b:aa:d7:7f:8e:c3:2d:71:ed:be:5b: e9:50:9c:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq66t7pp9TbitAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk NTM1OTQ3OTItMDA3MC00NzMwLWIwNmMtNjczNDRjNjY1YTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi2BHPi3oNlcsoFhbgTDbLXTby2G9YnAwHTn 4Fc6Lt9HVl3TdW6WOcqU1uZjM05d/rlz2HfmIAmAIlwLPo1uUdG48hooi+JcW+Da EZfygWo638fC78Fpegrhz2PLiHOUwrZiB2UfjUgUve9MJ/lw5rQqYoWa9JaMBfBU 6lhYTXpnLS+8TeLoP2yyd4ZPO2invD0J1UifBww0d4gI3Kas326bGV6XWIqwUH6Q DXp456YZen6RWOgbtkxHUR19jqDQt+JUV9DGSld7eYchH2UQclrSFrXigVS0qS5R 4AjUIJY9/EGi43SA2qkPmKJLtPk0S2qlzpv3zyd3FLVTdD2EQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvubkNysA/R4ghFxhWdYO5e1vUaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvZWQyNzZmMDAtMGZlMS0z N2U3LTlkYjYtNjM0ZTZhMDBkNTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0er9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiB4jLPiKmmznVgNv5A+i7SQIFuGADTouRccVcYuFmVXcWa+pgupXlz EZcWImO/VI7TGIFgHuwX3hztsYRwOXPsPOURt9tahl3Haw4jKHzZWHmHZYWlI+LJ WGawhhOFSBFOpOD/p7U9DuNWUD+yARVHuma/LEuDyQzFPUK60lm7mWZHEQqcTW0V KwZR7iUwuFpSSub/jZror1vNQwjmsBEnHqdzR+ndBI1z/eWm6xfetJa8MHftx1ZX Rw8qpMOwlchIO+jhWX3aBC/XIzRKgBeNf8ctYx+sFzxlb2GGj79l+xTq1SFFmhwD Nky7csq+MFSbqtd/jsMtce2+W+lQnAY= -----END CERTIFICATE-----Generated at Sun Apr 27 13:11:54 2025 by rpki-client