$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f6a52efd-474d-33ea-8616-746a15ea162e.roa File: f6a52efd-474d-33ea-8616-746a15ea162e.roa (raw, json) Hash identifier: LBqJYBCJM7u/Asmbp4In2eZY+HhLqlqV/NJFo5LCguI= Subject key identifier: FD:FE:BA:76:61:C3:47:D2:66:ED:A1:77:FE:CA:3F:7F:10:DF:A9:DC Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F432858494CC94078ABEBBF004E414980 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f6a52efd-474d-33ea-8616-746a15ea162e.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 13414 IP address blocks: 209.237.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:40:78:ab:eb:bf:00:4e:41:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=f051d5cb-6d9a-4fe0-8282-1a503ba26e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8e:ae:ca:23:2b:16:7a:10:c9:27:ff:79:ba: b9:09:51:0e:9e:5f:99:e4:4c:ef:38:07:aa:cd:cc: 51:cd:2a:f6:e7:b5:46:ae:e0:fa:1c:fa:3a:1f:b9: c6:28:18:f8:ce:9e:4c:21:c1:ec:d5:54:24:c8:47: 59:af:bb:23:44:0e:2b:ad:bc:ea:83:42:12:0b:0e: 94:60:c8:26:66:f6:19:48:d0:5f:6c:0e:d3:7c:3d: d0:84:83:b4:53:4a:b0:0d:ae:33:ed:c7:2d:8b:67: e4:c9:69:ca:da:d8:2c:9e:6a:60:f0:8b:08:1d:d0: 15:94:64:60:22:84:01:05:53:2b:7b:78:7a:08:cc: 7c:1b:fb:2c:1f:dc:bf:5f:0e:e2:1d:6a:58:de:b1: d5:ae:b9:0f:6d:7b:58:52:b4:fe:ce:3c:c9:2c:a0: 24:b2:f2:76:da:85:e6:72:af:0b:a8:71:d8:90:99: 5c:a6:41:42:e6:f4:c1:ae:cf:6b:f0:d4:38:4b:a5: 15:b9:29:d8:8c:94:3c:31:0b:c5:75:9f:b4:b2:8c: 74:52:74:b1:b9:90:57:68:e8:a0:45:7b:fe:f0:32: dd:a0:01:fb:bc:d5:11:c3:1c:62:e6:b3:f4:c5:87: 3a:fe:bc:98:e7:24:e9:f9:a7:d4:17:e9:e6:73:c0: 4e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FE:BA:76:61:C3:47:D2:66:ED:A1:77:FE:CA:3F:7F:10:DF:A9:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f6a52efd-474d-33ea-8616-746a15ea162e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:44:c6:d0:ac:62:a0:ee:e8:04:e7:a2:81:f5:46:54:b9:2d: d2:00:35:d2:c6:27:94:c7:5c:c9:da:e8:4b:47:37:94:6f:f7: 01:75:10:07:e9:5a:b9:09:b6:e4:64:c4:4b:d2:12:39:62:7f: 0a:8d:cb:11:b8:25:24:ae:88:fd:8c:ad:e6:72:ab:3b:e3:ff: 8e:88:f9:fb:8b:e5:a6:cb:ce:d7:1b:48:ae:77:01:79:fc:d9: da:b9:4f:de:1c:2a:4a:6f:63:4f:06:2b:00:e3:2c:f5:d2:fb: 37:32:60:43:d6:27:03:4d:ff:df:30:1d:8f:b8:c8:fa:20:a8: c4:2d:48:82:79:a7:90:2c:af:11:d0:86:7f:15:cb:7c:29:8c: e0:78:76:4d:f2:43:b8:e7:02:5c:f1:ef:3b:fe:aa:f8:7d:c5: a9:0b:04:75:a7:a7:62:f9:e0:2d:25:34:86:16:bb:f5:73:01: e0:a7:b6:82:ea:58:69:86:d5:80:1d:d4:fd:2c:23:a9:17:f5: 90:46:4d:5d:c6:15:6e:4e:94:76:7f:eb:3b:ed:8d:22:c9:0a: 1f:58:0e:69:4e:08:85:6e:65:dd:12:ba:b6:8e:0c:31:cb:81: 16:9e:0c:2a:81:3a:fa:9f:15:9d:4f:f6:91:3d:5e:28:a8:09: 0f:74:a6:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUB4q+u/AE5BSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk ZjA1MWQ1Y2ItNmQ5YS00ZmUwLTgyODItMWE1MDNiYTI2ZTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm46uyiMrFnoQySf/ebq5CVEOnl+Z5EzvOAeq zcxRzSr257VGruD6HPo6H7nGKBj4zp5MIcHs1VQkyEdZr7sjRA4rrbzqg0ISCw6U YMgmZvYZSNBfbA7TfD3QhIO0U0qwDa4z7ccti2fkyWnK2tgsnmpg8IsIHdAVlGRg IoQBBVMre3h6CMx8G/ssH9y/Xw7iHWpY3rHVrrkPbXtYUrT+zjzJLKAksvJ22oXm cq8LqHHYkJlcpkFC5vTBrs9r8NQ4S6UVuSnYjJQ8MQvFdZ+0sox0UnSxuZBXaOig RXv+8DLdoAH7vNURwxxi5rP0xYc6/ryY5yTp+afUF+nmc8BOkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3+unZhw0fSZu2hd/7KP38Q36ncMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZjZhNTJlZmQtNDc0ZC0z M2VhLTg2MTYtNzQ2YTE1ZWExNjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNExtCsYqDu6ATnooH1RlS5LdIANdLGJ5THXMna6EtHN5Rv9wF1EAfp WrkJtuRkxEvSEjlifwqNyxG4JSSuiP2MreZyqzvj/46I+fuL5abLztcbSK53AXn8 2dq5T94cKkpvY08GKwDjLPXS+zcyYEPWJwNN/98wHY+4yPogqMQtSIJ5p5AsrxHQ hn8Vy3wpjOB4dk3yQ7jnAlzx7zv+qvh9xakLBHWnp2L54C0lNIYWu/VzAeCntoLq WGmG1YAd1P0sI6kX9ZBGTV3GFW5OlHZ/6zvtjSLJCh9YDmlOCIVuZd0SuraODDHL gRaeDCqBOvqfFZ1P9pE9XiioCQ90pvI= -----END CERTIFICATE-----Generated at Wed Apr 30 22:00:10 2025 by rpki-client