$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/91f0db5a-4400-3591-af55-e22c5016a52d.roa File: 91f0db5a-4400-3591-af55-e22c5016a52d.roa (raw, json) Hash identifier: Y8FiTg0GLKjXbgKQ+EoH4KtXdBeX/X6zO0WT77sAfcs= Subject key identifier: 23:56:B5:E0:68:D9:E5:5A:B8:72:3A:72:10:F2:D6:B5:81:78:BB:3B Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F432858494B640D192DCD89A6BE3165C0 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/91f0db5a-4400-3591-af55-e22c5016a52d.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 13414 IP address blocks: 209.237.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:0d:19:2d:cd:89:a6:be:31:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=bdebfa79-26fa-4278-94ee-96c467ce54d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:15:dd:46:fb:74:33:a9:23:2d:bc:36:52:f7: bf:95:41:d6:1b:78:ad:2d:7d:ee:70:fc:86:9d:10: c9:b8:22:0c:37:b2:9b:ec:3f:b0:b0:42:15:46:e8: 76:da:1e:09:8c:3a:84:2e:f2:64:99:0c:0a:af:fa: 37:07:6a:29:a9:88:55:bb:8c:91:a7:f9:76:f6:f9: e5:25:f4:66:7f:ce:22:1c:e7:05:d0:b3:c5:af:87: c2:9f:16:5d:be:f2:bc:ad:f1:04:b0:cb:bf:10:95: 1d:71:5b:01:fe:ca:ff:44:d8:92:ab:58:28:a2:3c: bd:19:c5:26:62:28:e9:67:ac:ec:52:2a:f6:36:7f: c7:62:3d:1e:36:65:c3:e7:9d:0f:71:90:f6:96:28: 30:41:8f:a9:ee:d6:2d:ec:18:bb:00:b7:e1:9b:30: b9:e0:9c:81:5a:23:49:63:57:28:07:73:ab:89:45: 3d:37:1e:3f:1e:02:ed:9f:d7:41:2e:39:9a:ea:9a: b7:41:2f:f4:5b:44:f3:18:1f:7d:24:bb:8a:87:4e: ec:b3:cc:af:51:4f:b5:cd:b9:eb:5d:8c:df:37:5a: 25:33:01:3e:c2:a8:54:75:77:a7:33:81:a9:88:08: 9e:6e:3f:44:bc:a9:36:b2:1c:0e:66:92:7c:b5:7a: cc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:56:B5:E0:68:D9:E5:5A:B8:72:3A:72:10:F2:D6:B5:81:78:BB:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/91f0db5a-4400-3591-af55-e22c5016a52d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:01:dc:45:ed:d6:a3:63:7a:46:bc:60:bd:eb:66:f3:b7:73: 99:ce:0d:5c:2d:29:bc:a2:27:8f:86:8a:14:02:94:1a:37:86: 4d:96:c6:63:d8:ff:8a:5c:fa:69:0d:3f:ea:01:41:0e:68:f9: 47:47:5f:54:5a:e8:f3:98:06:8e:8e:be:32:8e:ed:32:3e:c1: 2d:9c:c6:25:6d:c4:c8:1e:62:1c:ee:cf:26:ef:2c:8f:61:ba: d2:40:6d:41:b1:a0:0b:e5:4c:19:8b:92:f8:e4:e5:0c:5c:75: ac:53:23:1d:df:e6:b5:84:cb:2e:58:1e:d0:17:2d:b3:73:b8: d4:5c:aa:00:c8:da:02:81:19:79:75:69:15:e0:8f:be:eb:40: 8b:8f:87:2a:04:49:68:12:be:a8:6c:e4:94:10:90:c2:f3:17: 4a:06:e9:85:80:b1:e0:7c:fd:f9:bc:b4:c6:a3:8f:e5:ca:c5: 4f:a9:18:38:c2:57:9d:0d:3b:1c:46:87:8f:86:f1:93:4b:a6: 40:ac:da:4d:04:2c:44:0a:54:cb:1c:7d:af:a8:a1:a5:90:ef: 64:a8:80:f0:74:68:33:4b:cd:1f:2b:f5:38:61:14:d7:ab:ad: fb:6d:4f:60:4f:9a:d1:99:ea:30:c1:f2:57:61:61:a1:19:7c: 6e:7e:0c:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZA0ZLc2Jpr4xZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk YmRlYmZhNzktMjZmYS00Mjc4LTk0ZWUtOTZjNDY3Y2U1NGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRXdRvt0M6kjLbw2Uve/lUHWG3itLX3ucPyG nRDJuCIMN7Kb7D+wsEIVRuh22h4JjDqELvJkmQwKr/o3B2opqYhVu4yRp/l29vnl JfRmf84iHOcF0LPFr4fCnxZdvvK8rfEEsMu/EJUdcVsB/sr/RNiSq1goojy9GcUm YijpZ6zsUir2Nn/HYj0eNmXD550PcZD2ligwQY+p7tYt7Bi7ALfhmzC54JyBWiNJ Y1coB3OriUU9Nx4/HgLtn9dBLjma6pq3QS/0W0TzGB99JLuKh07ss8yvUU+1zbnr XYzfN1olMwE+wqhUdXenM4GpiAiebj9EvKk2shwOZpJ8tXrM9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNWteBo2eVauHI6chDy1rWBeLs7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvOTFmMGRiNWEtNDQwMC0z NTkxLWFmNTUtZTIyYzUwMTZhNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsB3EXt1qNjeka8YL3rZvO3c5nODVwtKbyiJ4+GihQClBo3hk2WxmPY /4pc+mkNP+oBQQ5o+UdHX1Ra6POYBo6OvjKO7TI+wS2cxiVtxMgeYhzuzybvLI9h utJAbUGxoAvlTBmLkvjk5QxcdaxTIx3f5rWEyy5YHtAXLbNzuNRcqgDI2gKBGXl1 aRXgj77rQIuPhyoESWgSvqhs5JQQkMLzF0oG6YWAseB8/fm8tMajj+XKxU+pGDjC V50NOxxGh4+G8ZNLpkCs2k0ELEQKVMscfa+ooaWQ72SogPB0aDNLzR8r9ThhFNer rfttT2BPmtGZ6jDB8ldhYaEZfG5+DBs= -----END CERTIFICATE-----Generated at Wed Apr 30 07:17:59 2025 by rpki-client