$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/24cd566e-cce5-31a0-9029-1e2d74307ceb.roa File: 24cd566e-cce5-31a0-9029-1e2d74307ceb.roa (raw, json) Hash identifier: zABFHWJ3+NOZUhNrEQBJozoAJfZg0EwRWEFnoxO3fhc= Subject key identifier: 62:90:84:BA:34:95:3F:48:D2:0F:64:20:60:D0:07:B8:D4:F3:A0:8F Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F432858494CC9402161499A5E21ED72F8 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/24cd566e-cce5-31a0-9029-1e2d74307ceb.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 13414 IP address blocks: 209.237.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:40:21:61:49:9a:5e:21:ed:72:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=674ca772-39c0-4a1f-8215-55867b342204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d5:a1:39:ee:3e:9d:23:58:ce:84:c3:b7:e9: 6d:ca:47:1b:aa:2e:5c:47:94:3e:0f:a8:8d:89:b4: 58:53:2f:09:28:c7:85:55:ae:95:8a:57:05:bc:66: c7:7e:47:64:fc:11:61:ce:a1:d5:fd:9d:38:00:56: b7:27:c1:29:c5:3e:a8:9f:e5:39:52:15:c4:cc:d0: e0:4f:b5:10:a5:3f:e6:d2:79:37:dc:44:80:30:e8: ab:0f:c9:eb:d3:21:71:75:51:ed:55:67:9a:05:5e: 7b:bb:6f:05:e1:f5:4b:88:5b:b0:a5:f2:ce:b2:4b: 25:5e:9c:75:84:22:a7:20:b5:4c:0d:a3:b5:e7:fc: a8:da:74:2e:20:b7:0d:97:83:fe:c3:81:9a:d1:54: 27:f2:bd:03:34:df:01:fe:49:8f:1e:cd:45:68:76: fc:e7:51:ac:98:86:be:b0:15:e0:84:64:d0:5a:5b: eb:c6:08:39:e7:82:b4:13:96:08:f7:1d:14:6d:4f: ab:0b:8a:1d:c8:0f:44:dd:fe:ad:23:9b:f5:2a:a8: 81:c8:97:fd:56:db:f2:ae:5e:e9:2a:c4:eb:d1:e9: 91:cf:17:95:6f:58:99:6c:09:bc:61:0b:dc:2c:2c: 4f:bd:0d:5f:21:58:b0:b6:fa:30:6b:13:7a:74:6f: 4e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:90:84:BA:34:95:3F:48:D2:0F:64:20:60:D0:07:B8:D4:F3:A0:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/24cd566e-cce5-31a0-9029-1e2d74307ceb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:c6:3c:97:a5:3e:4d:fc:42:33:3c:cb:60:23:19:11:2f:e6: 80:63:54:fb:c2:b3:d2:4d:96:40:19:af:78:2c:d9:eb:32:40: 99:af:ce:40:35:cb:7f:6b:95:a2:c6:60:6c:7b:96:6f:5b:d2: 76:cb:09:20:aa:a0:df:9c:33:a2:7f:1b:be:b3:5e:c2:be:5f: b5:97:c4:71:c2:50:e9:24:6c:28:c7:9e:79:1d:45:75:e3:a5: 60:56:8b:b8:9d:9b:fe:c7:30:62:44:81:c3:0e:4f:f2:ec:67: 55:ef:80:d9:84:53:fc:7c:06:75:0d:0d:7f:15:f3:1a:0d:21: 8c:81:17:55:30:5d:a4:b6:a5:c8:10:2b:3e:08:3a:75:18:15: 8d:2c:8e:03:e8:7a:c8:43:bb:e5:0c:2c:e8:5d:65:fe:de:ae: 87:64:a7:d7:7a:00:72:9a:07:dc:16:a1:e7:05:1b:88:22:58: 50:17:c1:96:d4:dc:a6:d9:0e:6e:d8:f3:dc:c5:ea:fe:ee:74: c2:4b:2a:6a:df:24:cf:6a:6d:0b:0f:b8:7f:ca:96:c3:b1:20: 56:c9:e8:89:7c:95:9c:4f:aa:45:7b:64:c4:c1:f0:d9:8e:dd: 98:0f:4b:9f:3e:70:19:cd:f9:5f:9c:42:f2:06:e3:e2:59:a7: b1:c5:f9:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUAhYUmaXiHtcvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk Njc0Y2E3NzItMzljMC00YTFmLTgyMTUtNTU4NjdiMzQyMjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9WhOe4+nSNYzoTDt+ltykcbqi5cR5Q+D6iN ibRYUy8JKMeFVa6VilcFvGbHfkdk/BFhzqHV/Z04AFa3J8EpxT6on+U5UhXEzNDg T7UQpT/m0nk33ESAMOirD8nr0yFxdVHtVWeaBV57u28F4fVLiFuwpfLOskslXpx1 hCKnILVMDaO15/yo2nQuILcNl4P+w4Ga0VQn8r0DNN8B/kmPHs1FaHb851GsmIa+ sBXghGTQWlvrxgg554K0E5YI9x0UbU+rC4odyA9E3f6tI5v1KqiByJf9Vtvyrl7p KsTr0emRzxeVb1iZbAm8YQvcLCxPvQ1fIViwtvowaxN6dG9OcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKQhLo0lT9I0g9kIGDQB7jU86CPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvMjRjZDU2NmUtY2NlNS0z MWEwLTkwMjktMWUyZDc0MzA3Y2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTGPJelPk38QjM8y2AjGREv5oBjVPvCs9JNlkAZr3gs2esyQJmvzkA1 y39rlaLGYGx7lm9b0nbLCSCqoN+cM6J/G76zXsK+X7WXxHHCUOkkbCjHnnkdRXXj pWBWi7idm/7HMGJEgcMOT/LsZ1XvgNmEU/x8BnUNDX8V8xoNIYyBF1UwXaS2pcgQ Kz4IOnUYFY0sjgPoeshDu+UMLOhdZf7erodkp9d6AHKaB9wWoecFG4giWFAXwZbU 3KbZDm7Y89zF6v7udMJLKmrfJM9qbQsPuH/KlsOxIFbJ6Il8lZxPqkV7ZMTB8NmO 3ZgPS58+cBnN+V+cQvIG4+JZp7HF+bk= -----END CERTIFICATE-----Generated at Tue Apr 29 07:11:02 2025 by rpki-client