$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/2744b9df-6b90-37a0-ad0e-89af24e611e0.roa File: 2744b9df-6b90-37a0-ad0e-89af24e611e0.roa (raw, json) Hash identifier: +wKPQAX8/1C1njKHc/Pd3SJS4uMSlBhJf9aUcvto3Ok= Subject key identifier: BA:E5:08:86:A9:A3:EE:23:A7:B5:BF:F4:38:A2:F5:8E:8E:86:05:61 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F432858493C09313F3A58E25C451F9E80 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/2744b9df-6b90-37a0-ad0e-89af24e611e0.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 4213 IP address blocks: 209.11.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:31:3f:3a:58:e2:5c:45:1f:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=b811532d-e73f-4f34-9325-9125fa4724a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:25:1e:02:d0:f3:85:a5:9b:05:c6:a2:a0:d3: 8f:6f:e4:78:aa:78:9d:d7:60:8c:6a:17:a1:90:7e: 80:f2:be:c8:2f:de:df:d2:05:33:7e:db:9c:a8:b5: 3d:44:ac:23:8d:e7:71:dd:ed:3c:15:c9:32:cb:27: 9a:16:a5:be:97:2a:e7:e2:8b:1e:71:e4:e3:cd:ea: 54:ec:a0:3c:68:8e:39:ef:5b:9b:71:d6:ed:9a:4d: 21:40:4a:a6:90:2c:26:19:e3:6c:d9:c6:0e:44:6a: 10:00:49:49:cd:56:b7:05:43:89:3b:78:40:d8:b9: 2b:63:4a:f0:cb:41:1d:b5:32:4a:7d:ea:ed:05:27: fd:45:9a:bb:6f:83:06:d8:c7:fe:21:38:ed:0c:f8: 1c:4a:98:cf:de:80:42:71:5c:d5:5a:14:d2:14:74: bc:77:68:c9:19:76:11:72:af:52:58:38:1c:37:04: dc:d6:d0:22:4e:82:14:a7:cc:c9:e9:3a:5a:70:c2: 3f:c0:e6:6b:92:bd:0b:3c:96:04:61:25:57:89:d3: 79:84:c0:7e:51:22:5c:a8:57:6d:c6:d3:9d:2f:bd: 73:57:e8:1b:34:1d:7a:64:7e:5e:11:33:89:a2:aa: 3f:ee:85:83:d0:92:30:66:70:a3:21:39:6c:42:1b: e8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E5:08:86:A9:A3:EE:23:A7:B5:BF:F4:38:A2:F5:8E:8E:86:05:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/2744b9df-6b90-37a0-ad0e-89af24e611e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 209.11.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:fe:d6:91:5e:e7:00:f1:3f:82:33:04:45:7e:27:ca:fb:ef: ad:fb:2e:43:cb:6f:02:f8:7a:0c:70:9a:9d:61:71:d5:49:e3: 29:44:30:32:38:f1:75:ae:88:8d:1e:b2:72:87:e7:a0:ff:d7: 33:f7:52:46:e2:46:bc:c3:8d:aa:87:0a:91:ea:e9:65:d6:a2: ac:b7:3b:75:84:6b:78:93:58:d4:80:8d:5b:24:69:b2:34:75: 15:97:1b:48:e4:a7:5d:bc:a4:03:52:7b:9b:75:ea:bd:98:6d: 62:55:8d:45:d1:82:ab:05:b4:e3:d3:13:04:29:b3:7a:b1:38: e5:d9:97:9b:ac:d7:f9:a8:c3:09:06:8a:4b:ea:71:5a:9f:b2: ba:1b:99:65:8d:fb:eb:76:96:69:40:78:44:df:0f:44:5e:3a: 28:4a:25:22:f7:d9:da:62:fb:0a:19:e8:0f:1b:c8:8b:bc:e7: 61:a9:ee:00:3b:ca:b3:17:e2:df:cd:68:58:5e:c8:6f:1b:8a: 5a:f5:73:93:10:3a:d4:32:9b:c7:18:e3:7d:4e:f3:e6:a4:78: e7:1c:81:e9:4a:14:bb:b6:15:f8:cd:8e:ec:68:fc:b5:50:61: cd:f4:03:3e:95:1b:dd:a8:da:9e:34:b0:09:64:53:3f:9e:d7: cd:a8:94:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CTE/OljiXEUfnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk YjgxMTUzMmQtZTczZi00ZjM0LTkzMjUtOTEyNWZhNDcyNGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCUeAtDzhaWbBcaioNOPb+R4qnid12CMaheh kH6A8r7IL97f0gUzftucqLU9RKwjjedx3e08FckyyyeaFqW+lyrn4oseceTjzepU 7KA8aI4571ubcdbtmk0hQEqmkCwmGeNs2cYORGoQAElJzVa3BUOJO3hA2LkrY0rw y0EdtTJKfertBSf9RZq7b4MG2Mf+ITjtDPgcSpjP3oBCcVzVWhTSFHS8d2jJGXYR cq9SWDgcNwTc1tAiToIUp8zJ6TpacMI/wOZrkr0LPJYEYSVXidN5hMB+USJcqFdt xtOdL71zV+gbNB16ZH5eETOJoqo/7oWD0JIwZnCjITlsQhvoXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrlCIapo+4jp7W/9Dii9Y6OhgVhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvMjc0NGI5ZGYtNmI5MC0z N2EwLWFkMGUtODlhZjI0ZTYxMWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Qv5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADT+1pFe5wDxP4IzBEV+J8r77637LkPLbwL4egxwmp1hcdVJ4ylEMDI4 8XWuiI0esnKH56D/1zP3UkbiRrzDjaqHCpHq6WXWoqy3O3WEa3iTWNSAjVskabI0 dRWXG0jkp128pANSe5t16r2YbWJVjUXRgqsFtOPTEwQps3qxOOXZl5us1/mowwkG ikvqcVqfsrobmWWN++t2lmlAeETfD0ReOihKJSL32dpi+woZ6A8byIu852Gp7gA7 yrMX4t/NaFheyG8bilr1c5MQOtQym8cY431O8+akeOccgelKFLu2FfjNjuxo/LVQ Yc30Az6VG92o2p40sAlkUz+e182olPQ= -----END CERTIFICATE-----Generated at Sun Apr 27 02:56:54 2025 by rpki-client