$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b11f0458-b61c-3e5a-9df7-55e9dc385389.roa File: b11f0458-b61c-3e5a-9df7-55e9dc385389.roa (raw, json) Hash identifier: q204M48ZpqbxOuY/vNI7QBzGavc5jHDXlROJcOKXCMs= Subject key identifier: B8:7B:CD:01:00:0B:25:6D:1A:3F:AB:CF:1F:88:3D:E3:5B:48:C5:50 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F432858498769D26F21C4FA21C6A8E700 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b11f0458-b61c-3e5a-9df7-55e9dc385389.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 10753 IP address blocks: 209.211.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:d2:6f:21:c4:fa:21:c6:a8:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=e7b3f9c1-8c85-4ed1-9f05-352382e4e1fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3e:9e:df:69:18:e2:3d:9a:21:0a:6c:5a:16: f5:b9:75:aa:5c:b7:27:d3:70:5c:37:a3:4e:d6:9a: 78:8a:19:5d:2e:a5:fd:94:31:cf:1f:f3:bb:58:8c: d0:39:6c:25:fc:57:69:95:10:4a:8c:00:62:0b:23: 1d:39:8a:f6:98:69:af:8b:95:b7:3b:3f:bc:c4:7c: c9:d1:67:ca:69:47:e9:07:15:dc:97:c1:9b:62:fc: e7:f3:eb:16:f8:12:2e:23:3f:b8:da:2e:b8:a9:05: 53:f8:af:15:61:30:ee:01:16:cb:84:75:ed:bc:48: 10:4d:0e:cb:3f:9b:6f:47:b2:5f:bb:dc:98:73:cc: cf:fc:37:0d:4c:2b:d4:d8:10:42:18:cb:71:2b:37: 48:b5:1b:70:b4:bb:9d:3d:b5:f8:48:0a:94:05:8c: 78:1f:00:1a:ee:2b:7c:cd:19:c9:ca:9a:88:b1:3b: 09:63:93:86:c6:95:c5:e6:7b:22:0f:d2:a2:8c:42: 84:75:ad:6b:2f:25:0a:8d:92:40:db:c1:06:7b:c9: 89:9b:0a:56:cb:9d:55:b3:81:18:ce:96:c8:ef:ac: 20:9b:89:73:c3:ef:b0:e3:99:c7:3f:8e:e2:ed:bd: 81:d7:b1:17:b9:f0:41:95:fd:47:72:1d:f9:4b:ba: 2b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7B:CD:01:00:0B:25:6D:1A:3F:AB:CF:1F:88:3D:E3:5B:48:C5:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b11f0458-b61c-3e5a-9df7-55e9dc385389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:a9:65:db:4a:dd:64:e7:6f:d5:2b:68:3b:4a:e3:42:01:7d: 3b:48:51:44:80:b6:96:4c:46:d1:95:76:b2:a1:a1:6f:a2:bb: 45:89:8a:47:3c:a8:0c:e3:b0:c4:a0:99:02:9b:5f:6b:c3:fd: b8:87:8e:25:1f:78:8a:4b:52:a6:92:7b:d6:98:f4:b4:f6:86: da:dd:39:af:11:14:0f:c3:46:a0:b0:ac:c6:1c:c6:3c:7b:b5: b5:14:83:46:5c:77:e3:17:46:18:c6:57:17:29:16:e5:a8:07: 29:03:3e:37:0d:35:a5:a8:d1:59:c1:e9:e5:db:18:40:d4:11: 19:ea:37:51:b1:6b:00:6d:e3:19:00:cd:45:f5:16:e3:3f:0e: ae:48:53:17:ca:01:31:f9:0b:fc:b0:4b:41:15:e9:9c:90:8d: d1:e0:6e:58:a4:50:27:63:c5:55:69:37:8c:01:db:f1:5d:ef: 0c:42:13:39:ba:a5:88:07:38:ee:ac:16:41:b9:f4:a9:fa:e6: ac:ef:1d:35:a8:82:68:b0:59:ef:b0:da:68:9b:81:4d:3d:e6: cb:92:9e:d2:7f:2f:83:54:0c:5c:9f:3f:b6:c5:c0:8b:a0:ec: 78:de:15:f3:0e:fe:1c:a1:b5:5a:5c:5e:30:c5:bb:94:2d:db: 50:c3:c4:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHadJvIcT6Icao5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk ZTdiM2Y5YzEtOGM4NS00ZWQxLTlmMDUtMzUyMzgyZTRlMWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD6e32kY4j2aIQpsWhb1uXWqXLcn03BcN6NO 1pp4ihldLqX9lDHPH/O7WIzQOWwl/FdplRBKjABiCyMdOYr2mGmvi5W3Oz+8xHzJ 0WfKaUfpBxXcl8GbYvzn8+sW+BIuIz+42i64qQVT+K8VYTDuARbLhHXtvEgQTQ7L P5tvR7Jfu9yYc8zP/DcNTCvU2BBCGMtxKzdItRtwtLudPbX4SAqUBYx4HwAa7it8 zRnJypqIsTsJY5OGxpXF5nsiD9KijEKEda1rLyUKjZJA28EGe8mJmwpWy51Vs4EY zpbI76wgm4lzw++w45nHP47i7b2B17EXufBBlf1Hch35S7orTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLh7zQEACyVtGj+rzx+IPeNbSMVQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvYjExZjA0NTgtYjYxYy0z ZTVhLTlkZjctNTVlOWRjMzg1Mzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dPOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSpZdtK3WTnb9UraDtK40IBfTtIUUSAtpZMRtGVdrKhoW+iu0WJikc8 qAzjsMSgmQKbX2vD/biHjiUfeIpLUqaSe9aY9LT2htrdOa8RFA/DRqCwrMYcxjx7 tbUUg0Zcd+MXRhjGVxcpFuWoBykDPjcNNaWo0VnB6eXbGEDUERnqN1GxawBt4xkA zUX1FuM/Dq5IUxfKATH5C/ywS0EV6ZyQjdHgblikUCdjxVVpN4wB2/Fd7wxCEzm6 pYgHOO6sFkG59Kn65qzvHTWogmiwWe+w2mibgU095suSntJ/L4NUDFyfP7bFwIug 7HjeFfMO/hyhtVpcXjDFu5Qt21DDxCI= -----END CERTIFICATE-----Generated at Sun Apr 27 00:17:41 2025 by rpki-client