$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7253bf54-50b6-3248-9cd9-f777bdd3845d.roa File: 7253bf54-50b6-3248-9cd9-f777bdd3845d.roa (raw, json) Hash identifier: aymGFXbtyDa2hwKgIIi8wGQD14xZ2byqwdRWYYBtKR8= Subject key identifier: 7E:1B:13:AB:B0:6E:74:51:30:B2:29:EF:A8:B6:63:56:16:4B:0F:9D Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584979743D5BF51D55EFBDBFAE00 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7253bf54-50b6-3248-9cd9-f777bdd3845d.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 13536 IP address blocks: 209.198.82.0/24 maxlen: 24 209.198.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:3d:5b:f5:1d:55:ef:bd:bf:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=ecd4de2c-1d67-4292-bfb7-11f14c452bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b0:d8:6e:5c:7e:51:2f:29:f3:8b:df:9d:94: 3a:f6:58:e7:4b:25:32:88:ab:ab:9b:ff:03:3c:96: 24:fc:b3:d7:e2:d9:7e:a1:b1:e5:77:b0:0c:8c:c3: 33:90:25:69:ef:a3:e8:c5:dc:f2:33:d0:65:23:55: ab:03:14:36:0e:0d:91:5c:5a:ee:bf:6f:22:4f:b2: b4:95:df:2d:9e:bd:b6:f6:a0:44:b0:48:0f:9d:e1: e5:9a:e6:e3:0b:c7:8a:c7:19:33:9c:37:27:18:e0: a9:91:6f:ac:23:10:40:1d:9b:4e:42:f8:68:20:54: 25:c2:85:0d:57:20:a4:6a:71:a3:ae:8d:1e:71:4c: 65:a4:e0:88:d5:47:de:b1:85:53:a3:97:96:69:63: 41:e3:55:97:ec:ab:ce:41:0b:03:ca:a1:a9:46:c1: 69:b9:f3:64:fd:ae:02:64:c9:3c:28:72:36:1c:74: 3f:ac:9f:1e:f6:6b:de:87:f0:15:1d:a1:63:2a:7e: 4f:05:27:79:8d:15:30:ab:95:ce:28:3e:95:21:3d: e6:21:c3:8b:d8:90:9f:df:52:b7:68:b5:ea:81:47: cb:39:ad:13:de:cc:d4:64:b8:4c:92:7c:66:31:ce: 0a:6b:e2:2a:ae:2c:c8:55:f7:b4:00:0b:55:bc:64: 67:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1B:13:AB:B0:6E:74:51:30:B2:29:EF:A8:B6:63:56:16:4B:0F:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7253bf54-50b6-3248-9cd9-f777bdd3845d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 209.198.82.0/24 209.198.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:09:70:22:bd:61:9e:49:0a:cd:71:df:b2:b8:3c:eb:62:e5: ce:a1:c8:25:89:f8:63:0c:af:ee:fc:79:9e:66:79:7b:31:01: c3:a2:bd:5a:c9:34:46:3b:32:1e:18:11:f9:c0:28:62:12:81: b9:2c:1b:2f:65:39:f0:69:5a:70:67:f4:b3:3a:bf:39:ad:2d: 5f:f7:b4:cf:72:ed:13:3b:5e:7c:29:88:10:7a:2f:d8:ec:8d: 29:bf:4e:20:ba:2a:aa:69:21:27:f3:ef:14:7d:4c:ff:b9:4a: 57:d9:b2:ee:d2:b4:43:ee:8d:1a:b0:3b:a9:62:98:d1:26:18: d3:a8:93:48:71:0e:f2:b0:a9:0f:67:9a:3b:e2:bb:b0:d0:23: cc:60:35:71:8f:76:25:a3:69:f7:93:cb:59:27:3a:56:cf:05: 02:51:f1:16:16:72:55:79:53:df:77:c2:79:42:94:9a:fa:0f: 8a:e3:93:3b:f0:9a:23:13:fb:f1:9b:f4:75:55:56:51:6f:47: e7:75:e3:2c:2e:f4:98:5e:db:69:ad:34:3e:27:0e:38:de:c0: 6f:11:2e:cc:73:5a:fe:f5:a8:c5:c2:52:9a:fd:4d:3f:e3:f8: 07:d6:4c:01:b9:b0:a4:8c:f3:7b:36:e7:95:5b:cd:05:8e:06: 3d:47:7b:89 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEl5dD1b9R1V772/rgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk ZWNkNGRlMmMtMWQ2Ny00MjkyLWJmYjctMTFmMTRjNDUyYmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbDYblx+US8p84vfnZQ69ljnSyUyiKurm/8D PJYk/LPX4tl+obHld7AMjMMzkCVp76PoxdzyM9BlI1WrAxQ2Dg2RXFruv28iT7K0 ld8tnr229qBEsEgPneHlmubjC8eKxxkznDcnGOCpkW+sIxBAHZtOQvhoIFQlwoUN VyCkanGjro0ecUxlpOCI1UfesYVTo5eWaWNB41WX7KvOQQsDyqGpRsFpufNk/a4C ZMk8KHI2HHQ/rJ8e9mveh/AVHaFjKn5PBSd5jRUwq5XOKD6VIT3mIcOL2JCf31K3 aLXqgUfLOa0T3szUZLhMknxmMc4Ka+IqrizIVfe0AAtVvGRnBQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFH4bE6uwbnRRMLIp76i2Y1YWSw+dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNzI1M2JmNTQtNTBiNi0z MjQ4LTljZDktZjc3N2JkZDM4NDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0cZSAwQA 0cZdMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABMJcCK9YZ5JCs1x37K4POti5c6hyCWJ+GMMr+78eZ5meXsx AcOivVrJNEY7Mh4YEfnAKGISgbksGy9lOfBpWnBn9LM6vzmtLV/3tM9y7RM7Xnwp iBB6L9jsjSm/TiC6KqppISfz7xR9TP+5SlfZsu7StEPujRqwO6limNEmGNOok0hx DvKwqQ9nmjviu7DQI8xgNXGPdiWjafeTy1knOlbPBQJR8RYWclV5U993wnlClJr6 D4rjkzvwmiMT+/Gb9HVVVlFvR+d14ywu9Jhe22mtND4nDjjewG8RLsxzWv71qMXC Upr9TT/j+AfWTAG5sKSM83s255VbzQWOBj1He4k= -----END CERTIFICATE-----Generated at Tue Apr 29 09:45:08 2025 by rpki-client