$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ae69ce2-4544-31e7-aafe-abe7adf953e7.roa File: 6ae69ce2-4544-31e7-aafe-abe7adf953e7.roa (raw, json) Hash identifier: 0WZ0mLR3MIDrzQd2lwSku/WVgKhWHq3wcHqU5D8+CPs= Subject key identifier: 06:F5:5F:A4:5A:09:08:6E:5F:F8:32:DC:4B:DC:D3:37:BF:49:53:C7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849287E6FA73889D0D8C313F320 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ae69ce2-4544-31e7-aafe-abe7adf953e7.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 396828 IP address blocks: 209.112.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:6f:a7:38:89:d0:d8:c3:13:f3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=d2addd13-d2e0-473f-bc71-78fa33a666f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:aa:ff:be:ec:c5:49:3a:eb:e3:f3:0e:7d:95: 52:b6:26:53:5a:78:06:6c:06:f0:34:f8:4a:f3:b3: be:4c:22:67:bb:5b:c6:4f:e3:38:48:47:c7:ea:ff: 6d:be:67:40:d9:45:91:28:e5:25:db:16:b6:cc:95: ab:9f:17:b4:c5:15:f3:88:49:49:fb:61:a0:6b:49: d8:74:6a:6e:82:42:a7:c8:88:4a:1f:1a:8d:d2:a3: 97:c9:d6:b5:16:71:54:b5:90:43:f5:9b:77:c9:ff: 39:a6:29:32:71:9b:1e:d3:f6:11:24:90:27:59:15: 18:5b:ba:7b:c0:52:b3:71:4f:76:96:66:a5:d7:72: 2c:ab:fa:45:7a:13:aa:2b:08:61:07:54:93:51:6e: 14:99:da:c4:01:d7:5e:8d:cc:fd:6d:a2:e3:15:28: 3b:17:74:95:ac:a6:3f:0d:9f:86:dc:8b:a1:7e:06: bb:58:24:bf:64:ac:a8:b3:d5:e9:32:2c:c1:ff:84: 43:65:79:e8:23:2a:b3:8f:e1:ad:ad:fc:9a:0b:53: e0:44:a7:c1:ea:51:ba:7f:00:b3:1a:73:73:ea:f5: 38:9b:f8:82:4c:2e:2a:17:0e:e8:4d:0d:bf:f3:97: 55:df:6b:80:57:f4:9c:b7:22:37:d9:98:a6:8d:7b: 4e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F5:5F:A4:5A:09:08:6E:5F:F8:32:DC:4B:DC:D3:37:BF:49:53:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ae69ce2-4544-31e7-aafe-abe7adf953e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:ae:11:96:01:73:fe:de:48:c6:c2:3f:d4:07:79:27:e8:79: 45:eb:50:82:93:fe:f1:ac:eb:28:69:68:49:87:42:01:6a:00: 6f:b2:7e:6f:59:9f:a3:c0:40:2d:11:78:ee:8d:9a:3d:33:4c: 06:64:36:9d:f3:17:8a:3c:01:2a:2c:76:bf:b8:c2:e5:fa:7b: 8b:85:f6:11:27:b8:70:ae:29:35:a0:41:c2:aa:ff:77:07:e4: d9:3b:46:c7:f3:71:29:c8:96:9a:88:40:0f:5b:6c:ae:74:7b: 7d:7e:ac:af:5a:54:08:7d:b9:7a:14:72:17:34:31:11:73:51: 49:a2:08:8c:11:10:e8:e4:99:b9:02:14:51:25:0a:b2:03:aa: 8a:f0:96:ba:20:89:42:a2:06:18:c1:09:01:3e:a4:d6:69:fa: 9d:f1:f2:6b:34:a8:f4:4d:d5:18:85:7b:d1:b9:68:ee:c5:b3: 1d:fc:ff:b7:37:5b:6b:62:b4:dc:04:c2:db:f8:25:81:5d:dc: 0c:ff:f7:52:ca:14:e6:b4:a0:26:e2:8d:dd:19:18:b7:fa:82: 8f:07:9c:d4:b4:54:55:90:2f:1a:bb:b0:15:1a:17:a5:f7:86: 34:5b:d8:ba:dd:21:ec:b4:73:5c:91:cc:b7:87:f8:06:3d:d7: 5a:b1:65:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofm+nOInQ2MMT8yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZDJhZGRkMTMtZDJlMC00NzNmLWJjNzEtNzhmYTMzYTY2NmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqr/vuzFSTrr4/MOfZVStiZTWngGbAbwNPhK 87O+TCJnu1vGT+M4SEfH6v9tvmdA2UWRKOUl2xa2zJWrnxe0xRXziElJ+2Gga0nY dGpugkKnyIhKHxqN0qOXyda1FnFUtZBD9Zt3yf85pikycZse0/YRJJAnWRUYW7p7 wFKzcU92lmal13Isq/pFehOqKwhhB1STUW4UmdrEAddejcz9baLjFSg7F3SVrKY/ DZ+G3Iuhfga7WCS/ZKyos9XpMizB/4RDZXnoIyqzj+GtrfyaC1PgRKfB6lG6fwCz GnNz6vU4m/iCTC4qFw7oTQ2/85dV32uAV/SctyI32ZimjXtOkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAb1X6RaCQhuX/gy3Evc0ze/SVPHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmFlNjljZTItNDU0NC0z MWU3LWFhZmUtYWJlN2FkZjk1M2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuuEZYBc/7eSMbCP9QHeSfoeUXrUIKT/vGs6yhpaEmHQgFqAG+yfm9Z n6PAQC0ReO6Nmj0zTAZkNp3zF4o8ASosdr+4wuX6e4uF9hEnuHCuKTWgQcKq/3cH 5Nk7RsfzcSnIlpqIQA9bbK50e31+rK9aVAh9uXoUchc0MRFzUUmiCIwREOjkmbkC FFElCrIDqorwlrogiUKiBhjBCQE+pNZp+p3x8ms0qPRN1RiFe9G5aO7Fsx38/7c3 W2titNwEwtv4JYFd3Az/91LKFOa0oCbijd0ZGLf6go8HnNS0VFWQLxq7sBUaF6X3 hjRb2LrdIey0c1yRzLeH+AY911qxZS8= -----END CERTIFICATE-----Generated at Sun Apr 27 01:14:41 2025 by rpki-client