$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/af04d1ea-2b61-30e8-9a48-0300a4f75436.roa File: af04d1ea-2b61-30e8-9a48-0300a4f75436.roa (raw, json) Hash identifier: oo0uP5FuhrLANiB+NAGygPhVQ1YWIPnAOY4xF6G3Opg= Subject key identifier: CD:FE:CB:DC:6D:2D:B4:14:BF:DA:3F:82:F5:D9:71:69:9A:72:B0:0D Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F432858498769D26193FFED3868C96880 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/af04d1ea-2b61-30e8-9a48-0300a4f75436.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 10753 IP address blocks: 209.211.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:d2:61:93:ff:ed:38:68:c9:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=a54a30df-cc83-43b3-81b2-b9c6d593a0e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c6:46:0a:ef:da:7a:14:0b:67:43:f0:f6:8c: 38:25:d1:eb:4a:8e:73:7b:74:f8:22:b7:50:8a:9e: 58:07:43:c8:c4:23:75:2a:79:84:b7:f9:71:69:af: c5:5d:77:85:f5:68:8d:2b:ad:e4:30:3f:05:7f:8c: cf:28:30:4b:bd:7f:55:46:12:e1:00:bd:98:2c:56: 4f:34:f2:be:3e:9b:10:23:b5:f4:b9:03:06:80:59: fd:c6:f6:ce:df:3c:25:de:d9:db:79:dd:e8:ec:f0: 1e:8a:31:9c:90:2a:4c:0e:88:9b:fa:11:03:67:fa: e1:b7:7d:e5:e1:49:0e:62:b7:7a:33:21:d0:0a:d1: 45:d6:7c:4b:da:3d:d4:f1:46:dd:81:36:0c:65:0c: 07:f5:4e:8f:97:6e:a1:0c:86:4b:61:ba:17:4e:64: de:38:02:46:01:4d:19:20:4b:c5:6f:40:c2:84:e3: 9f:f4:a8:76:87:8c:a8:c7:35:49:b2:fc:50:5b:a7: cf:c4:02:50:fb:5e:ff:5e:62:50:ae:9c:4b:90:df: 86:94:d1:ba:f7:c7:95:8f:b4:7b:fc:f3:7a:f5:95: ad:5e:8c:ff:3a:26:3e:4d:c7:7a:94:c8:ad:8f:c4: 2f:3e:8b:60:32:10:cf:31:bc:50:dd:b9:97:3e:3a: a3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:FE:CB:DC:6D:2D:B4:14:BF:DA:3F:82:F5:D9:71:69:9A:72:B0:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/af04d1ea-2b61-30e8-9a48-0300a4f75436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:9c:b5:af:f5:74:a0:0e:36:bb:f3:b2:41:0d:f1:1c:e5:46: c8:bb:20:b5:f7:46:40:cc:78:6a:3b:d7:2f:29:89:d4:3a:3a: 0c:8d:4c:83:85:b7:b0:cc:c4:0b:d3:b3:e5:56:1f:36:bc:78: 89:48:70:c6:2c:b8:b7:15:be:16:7a:27:cb:cb:fd:62:f2:41: 10:46:1c:92:d1:df:71:d3:61:f0:80:c7:8a:e5:50:05:27:2f: 60:8c:c4:25:27:0a:42:65:56:2a:28:61:b9:c8:5d:60:2e:6d: ba:f5:e1:fb:75:b5:15:38:bb:19:3a:d9:bd:bf:1b:13:5e:5e: de:88:b7:a5:c7:72:d8:7f:7d:cb:52:a3:fc:90:0a:12:a2:64: 2c:6d:77:7c:c0:75:81:4b:76:82:e3:e8:92:f2:19:88:41:84: f6:c8:2e:28:e5:fd:5e:d0:54:b5:f7:2f:2b:80:a2:f1:b7:23: 0f:9a:92:b5:e8:11:ec:e1:8d:ee:6f:4e:b4:18:d3:df:f5:e6: 17:c6:05:84:eb:50:da:51:18:56:21:8e:6c:d5:2c:44:db:9a: 6d:fb:27:ae:42:ea:e4:5c:20:66:bd:59:88:4d:f9:80:35:f7: fc:c2:12:73:66:20:cc:77:1b:5e:06:f7:60:65:17:46:9d:9b: 96:69:d0:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHadJhk//tOGjJaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk YTU0YTMwZGYtY2M4My00M2IzLTgxYjItYjljNmQ1OTNhMGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMZGCu/aehQLZ0Pw9ow4JdHrSo5ze3T4IrdQ ip5YB0PIxCN1KnmEt/lxaa/FXXeF9WiNK63kMD8Ff4zPKDBLvX9VRhLhAL2YLFZP NPK+PpsQI7X0uQMGgFn9xvbO3zwl3tnbed3o7PAeijGckCpMDoib+hEDZ/rht33l 4UkOYrd6MyHQCtFF1nxL2j3U8UbdgTYMZQwH9U6Pl26hDIZLYboXTmTeOAJGAU0Z IEvFb0DChOOf9Kh2h4yoxzVJsvxQW6fPxAJQ+17/XmJQrpxLkN+GlNG698eVj7R7 /PN69ZWtXoz/OiY+Tcd6lMitj8QvPotgMhDPMbxQ3bmXPjqjkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3+y9xtLbQUv9o/gvXZcWmacrANMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvYWYwNGQxZWEtMmI2MS0z MGU4LTlhNDgtMDMwMGE0Zjc1NDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dPNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKucta/1dKAONrvzskEN8RzlRsi7ILX3RkDMeGo71y8pidQ6OgyNTIOF t7DMxAvTs+VWHza8eIlIcMYsuLcVvhZ6J8vL/WLyQRBGHJLR33HTYfCAx4rlUAUn L2CMxCUnCkJlViooYbnIXWAubbr14ft1tRU4uxk62b2/GxNeXt6It6XHcth/fctS o/yQChKiZCxtd3zAdYFLdoLj6JLyGYhBhPbILijl/V7QVLX3LyuAovG3Iw+akrXo Eezhje5vTrQY09/15hfGBYTrUNpRGFYhjmzVLETbmm37J65C6uRcIGa9WYhN+YA1 9/zCEnNmIMx3G14G92BlF0adm5Zp0F8= -----END CERTIFICATE-----Generated at Sat Apr 26 22:58:15 2025 by rpki-client