$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/67477eed-64e1-395b-a913-8b8a438ebac1.roa File: 67477eed-64e1-395b-a913-8b8a438ebac1.roa (raw, json) Hash identifier: tVJIDDMgO21w92tOVvJg2+k5dpK4chGmWOuH3X14O90= Subject key identifier: 34:28:8B:09:A7:C2:23:52:91:3D:EF:FC:6D:0D:BD:82:DF:25:C0:97 Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F432858492134608F1CF897026D4A51C0 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/67477eed-64e1-395b-a913-8b8a438ebac1.roa Signing time: Sun 09 Mar 2025 10:21:02 +0000 ROA not before: Sun 09 Mar 2025 10:21:02 +0000 ROA not after: Sat 07 Jun 2025 10:21:02 +0000 asID: 36522 IP address blocks: 209.71.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:34:60:8f:1c:f8:97:02:6d:4a:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Mar 9 10:21:02 2025 GMT Not After : Jun 7 10:21:02 2025 GMT Subject: CN=f677e6dc-66cc-4fcb-94c8-58e203b06262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:11:25:0b:cd:ef:bf:61:84:21:b0:fc:47:f7: e9:4c:03:11:84:cd:69:36:16:d2:b6:a5:71:c3:b3: 9e:c0:cc:24:92:72:3d:f9:10:62:52:d8:e8:52:22: 97:6d:0d:2f:44:8c:1c:54:95:6c:0e:1f:b3:42:af: 27:e1:d8:bb:a2:d2:a7:e1:f3:7e:b7:5b:58:3b:5b: 10:e8:29:f1:7c:e8:a4:ab:ed:ba:a7:29:0a:39:b0: 16:6e:d3:3e:52:04:22:2b:25:6a:01:68:43:e4:10: 45:0a:b5:d8:a4:e8:c8:4b:95:51:d5:66:74:27:39: 91:a7:9a:7f:0e:4b:16:eb:6f:e9:85:64:ff:3e:f9: 69:26:56:a3:5d:46:69:14:0e:86:61:8d:44:f5:0b: c3:42:b8:b1:ab:71:31:89:03:43:44:7a:48:c8:5d: 4e:79:eb:12:d7:d6:9b:38:10:30:7e:ce:75:78:f3: 2c:5a:be:86:01:3a:6a:5e:09:99:73:28:43:0c:c3: 44:e7:1f:20:e6:51:6c:3c:a9:47:af:c3:6b:1c:17: c6:ba:c1:5a:17:1a:b4:ce:d3:d8:0c:7a:41:ea:07: 36:68:0e:5a:de:0e:7b:b7:b1:d5:2a:ba:5c:6f:49: b2:54:b9:d1:1a:df:a7:48:8d:8c:fc:07:88:ab:10: b4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:28:8B:09:A7:C2:23:52:91:3D:EF:FC:6D:0D:BD:82:DF:25:C0:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/67477eed-64e1-395b-a913-8b8a438ebac1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 209.71.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:87:38:dd:29:0f:f0:f3:2f:f4:dc:ca:2c:5d:a8:8d:fc:35: b2:05:92:65:75:3f:a7:6f:a0:e0:9d:b8:3b:de:c7:2e:99:28: 6b:22:28:18:6e:ac:f3:f5:09:58:92:46:1d:dc:f5:0a:76:e5: a6:29:0a:b2:ce:fa:1f:84:7a:e4:c9:83:6a:14:e3:26:de:a7: a1:65:33:15:5c:32:a9:2e:73:dd:fa:4c:6c:8e:14:a7:e7:66: 7a:55:a1:ee:e2:2d:db:bf:7b:20:1d:9d:18:24:38:52:ca:e2: 06:89:fd:e2:d3:d6:a1:e6:fb:c0:98:3b:30:4c:90:14:cf:84: 3a:a8:bd:d1:8e:43:91:ec:ab:3b:f6:2e:b6:2c:9d:8c:c5:96: 5b:35:f8:fb:4d:6f:66:85:a2:25:d0:8b:d7:87:83:f2:9f:33: ec:ff:8a:cf:64:b4:ed:ab:30:6f:e7:d4:81:d6:a2:c2:71:b2: 91:5d:b8:12:9d:09:7a:31:4a:84:d3:61:07:70:5f:c2:02:6f: 9d:08:bb:7d:c1:ab:86:05:a8:a2:68:9c:a5:f4:ed:d8:e7:35: 42:eb:92:a7:76:19:bd:d1:b1:e1:3e:bd:00:96:0b:cd:53:1b: 8b:52:54:40:57:50:ba:fb:e8:f8:e9:37:c6:9f:e5:51:5d:44: c4:33:17:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNGCPHPiXAm1KUcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI1MDMwOTEwMjEwMloXDTI1MDYwNzEwMjEwMlowLzEtMCsGA1UEAxMk ZjY3N2U2ZGMtNjZjYy00ZmNiLTk0YzgtNThlMjAzYjA2MjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBElC83vv2GEIbD8R/fpTAMRhM1pNhbStqVx w7OewMwkknI9+RBiUtjoUiKXbQ0vRIwcVJVsDh+zQq8n4di7otKn4fN+t1tYO1sQ 6CnxfOikq+26pykKObAWbtM+UgQiKyVqAWhD5BBFCrXYpOjIS5VR1WZ0JzmRp5p/ DksW62/phWT/PvlpJlajXUZpFA6GYY1E9QvDQrixq3ExiQNDRHpIyF1OeesS19ab OBAwfs51ePMsWr6GATpqXgmZcyhDDMNE5x8g5lFsPKlHr8NrHBfGusFaFxq0ztPY DHpB6gc2aA5a3g57t7HVKrpcb0myVLnRGt+nSI2M/AeIqxC0CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQoiwmnwiNSkT3v/G0NvYLfJcCXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNjc0NzdlZWQtNjRlMS0z OTViLWE5MTMtOGI4YTQzOGViYWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0UfdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuHON0pD/DzL/TcyixdqI38NbIFkmV1P6dvoOCduDvexy6ZKGsiKBhu rPP1CViSRh3c9Qp25aYpCrLO+h+EeuTJg2oU4ybep6FlMxVcMqkuc936TGyOFKfn ZnpVoe7iLdu/eyAdnRgkOFLK4gaJ/eLT1qHm+8CYOzBMkBTPhDqovdGOQ5Hsqzv2 LrYsnYzFlls1+PtNb2aFoiXQi9eHg/KfM+z/is9ktO2rMG/n1IHWosJxspFduBKd CXoxSoTTYQdwX8ICb50Iu33Bq4YFqKJonKX07djnNULrkqd2Gb3RseE+vQCWC81T G4tSVEBXULr76PjpN8af5VFdRMQzF/M= -----END CERTIFICATE-----Generated at Thu May 1 04:55:25 2025 by rpki-client