$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3727bb01-e2bf-39d3-b8a0-b0e2572a970b.roa File: 3727bb01-e2bf-39d3-b8a0-b0e2572a970b.roa (raw, json) Hash identifier: jXbJUHmb7+5R+U/7eTg5DD0xARSMbiFEmW4i5Q6N4LY= Subject key identifier: 17:F1:04:01:4B:A7:CE:06:FF:2C:19:B0:97:62:BB:4F:1D:61:A2:A1 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F432858494CC93FD2D2634C64BC70A500 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3727bb01-e2bf-39d3-b8a0-b0e2572a970b.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 13414 IP address blocks: 209.237.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:3f:d2:d2:63:4c:64:bc:70:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=43016a2a-278a-4426-9756-4fa209a320ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:25:35:d2:5f:f1:da:3a:52:27:42:57:09:21: 8d:0d:c4:47:e3:ca:a6:5f:6b:fa:b5:75:20:32:4f: 9c:e4:47:be:21:05:a8:20:ae:1c:0f:44:33:5b:90: 72:aa:04:e5:ca:9a:8b:e2:4f:91:c3:a4:db:88:4d: 7f:94:0b:8f:ed:70:67:de:43:4c:7e:f3:24:de:6a: 91:e9:a0:90:7f:7f:bd:12:08:de:8c:fc:a1:d0:bc: 7f:12:9c:70:9d:cb:29:87:68:de:90:82:aa:0d:de: 02:fe:81:e5:7b:95:2c:19:7f:be:2d:d7:91:1b:17: 56:4c:f3:4e:4f:60:14:05:61:e8:24:57:d5:42:1c: be:4f:85:f8:eb:f9:cf:0c:35:23:a1:da:c1:74:77: 3d:1d:e3:34:f3:6c:3c:15:c6:aa:d3:28:12:e3:c1: d4:a0:af:83:1e:63:eb:1e:d3:96:eb:6d:e2:d9:44: d4:f5:23:cf:e4:65:63:f8:de:0e:74:38:84:33:00: 52:11:97:5a:5d:e7:f4:b9:9b:13:48:91:4b:d3:af: 30:f8:e0:a5:3b:03:d7:11:68:95:65:77:a2:0b:13: bd:00:9a:e2:68:1a:e0:55:e1:d3:ad:a6:e2:2e:ff: 97:f0:ae:f1:f0:0c:a9:6b:4d:61:4e:a7:34:95:bb: ed:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F1:04:01:4B:A7:CE:06:FF:2C:19:B0:97:62:BB:4F:1D:61:A2:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3727bb01-e2bf-39d3-b8a0-b0e2572a970b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:aa:04:f8:1c:b6:0d:53:7a:03:5a:42:66:51:7c:cb:b6:e4: b6:0d:ff:5a:38:a3:3d:dd:14:cc:1c:43:2a:87:1e:14:4e:c4: d1:ad:b1:fe:15:e0:e0:23:24:d2:36:ec:3a:a1:4b:0a:5e:65: a3:aa:4d:27:77:1c:2f:ae:9a:3d:a8:30:80:98:d4:b6:d8:a1: 95:b9:16:26:4b:e1:00:ee:67:76:0b:3b:dd:e8:24:55:ef:8b: 57:0f:30:6a:ef:7f:c4:fd:fb:93:99:26:be:89:fc:53:d4:09: 34:60:37:8f:b7:ec:3e:c0:3d:1f:5d:5e:88:8b:c3:4b:c4:10: 77:8a:75:cc:e5:8b:a0:89:1b:50:39:b6:98:da:f9:2b:ef:53: ce:d0:2b:af:cf:a7:a3:13:77:73:5a:6d:91:ec:08:d0:2b:97: 24:0e:1f:4c:50:83:10:46:ec:e9:b3:45:d9:7a:87:13:ea:15: a2:82:4a:d4:44:9a:87:7f:60:32:aa:86:13:53:b7:66:36:11: 5e:3e:4e:18:40:4d:53:57:36:9d:98:a0:97:0d:27:48:90:17: b5:45:1b:11:47:84:a1:f2:fe:bf:8b:17:97:7f:97:c4:a5:54: 8a:62:1d:a6:5b:af:45:12:04:8c:88:34:29:7b:b4:9a:db:5e: 95:55:a8:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyT/S0mNMZLxwpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk NDMwMTZhMmEtMjc4YS00NDI2LTk3NTYtNGZhMjA5YTMyMGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyU10l/x2jpSJ0JXCSGNDcRH48qmX2v6tXUg Mk+c5Ee+IQWoIK4cD0QzW5ByqgTlypqL4k+Rw6TbiE1/lAuP7XBn3kNMfvMk3mqR 6aCQf3+9EgjejPyh0Lx/Epxwncsph2jekIKqDd4C/oHle5UsGX++LdeRGxdWTPNO T2AUBWHoJFfVQhy+T4X46/nPDDUjodrBdHc9HeM082w8Fcaq0ygS48HUoK+DHmPr HtOW623i2UTU9SPP5GVj+N4OdDiEMwBSEZdaXef0uZsTSJFL068w+OClOwPXEWiV ZXeiCxO9AJriaBrgVeHTrabiLv+X8K7x8Aypa01hTqc0lbvthwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfxBAFLp84G/ywZsJdiu08dYaKhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvMzcyN2JiMDEtZTJiZi0z OWQzLWI4YTAtYjBlMjU3MmE5NzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCqBPgctg1TegNaQmZRfMu25LYN/1o4oz3dFMwcQyqHHhROxNGtsf4V 4OAjJNI27DqhSwpeZaOqTSd3HC+umj2oMICY1LbYoZW5FiZL4QDuZ3YLO93oJFXv i1cPMGrvf8T9+5OZJr6J/FPUCTRgN4+37D7APR9dXoiLw0vEEHeKdczli6CJG1A5 tpja+SvvU87QK6/Pp6MTd3NabZHsCNArlyQOH0xQgxBG7OmzRdl6hxPqFaKCStRE mod/YDKqhhNTt2Y2EV4+ThhATVNXNp2YoJcNJ0iQF7VFGxFHhKHy/r+LF5d/l8Sl VIpiHaZbr0USBIyINCl7tJrbXpVVqG0= -----END CERTIFICATE-----Generated at Tue Apr 29 02:52:27 2025 by rpki-client