$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/e74295e1-3fea-318a-91c9-1152af362bcd.roa File: e74295e1-3fea-318a-91c9-1152af362bcd.roa (raw, json) Hash identifier: 0LtSWWiGtHuYyEMj9cM58N3SQ/Xbe9jZiEMMpo/PYnY= Subject key identifier: 69:EA:EB:48:AC:1D:6D:64:F5:CF:7A:14:F6:26:12:66:BD:B4:5C:6C Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F43285849A1EF706B2527DB24EE592880 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/e74295e1-3fea-318a-91c9-1152af362bcd.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 10397 IP address blocks: 209.209.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:70:6b:25:27:db:24:ee:59:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=b46c6195-15fb-4461-8e4e-2bcae38d71a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f1:01:1f:30:75:40:c9:f0:ce:88:3e:c0:fe: a9:07:20:bf:88:27:cc:b9:7b:62:bb:93:af:75:0c: fe:6a:c4:05:8e:81:b4:10:fa:58:dc:58:8d:c7:66: 64:9c:f3:da:d9:d8:7b:fc:cb:59:66:a0:39:c7:86: fe:82:c7:ed:6c:38:58:fb:7b:47:ee:23:c3:fb:b9: 70:e7:90:fc:8a:9f:10:b2:56:e1:f0:b2:40:cd:04: c9:bc:7c:f3:05:fb:cf:12:14:c0:96:3e:43:76:af: 91:ea:75:59:97:11:ff:0a:81:b5:60:97:89:da:25: 2b:50:99:9d:62:62:00:37:b3:16:43:4b:a8:5e:a6: 01:87:9a:15:d5:ad:26:2f:32:cc:eb:12:a4:6c:aa: a4:44:c5:b3:81:59:68:05:74:f4:8f:4a:09:a3:a0: 0d:36:83:79:fd:a1:ef:4d:2c:2e:2f:a3:54:af:55: b8:47:89:da:de:c6:97:7f:54:cc:0c:e1:d0:6f:c0: 9f:50:76:8a:05:12:8f:10:77:33:ff:47:d3:dc:ac: d5:ab:a0:c7:be:21:e9:6c:26:7f:30:7d:f5:8b:15: 85:77:65:36:1b:49:20:51:b6:d6:46:e6:3e:e3:c7: 79:e6:0f:58:1b:db:c5:0d:1f:1d:5f:04:8a:be:a3: fa:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:EA:EB:48:AC:1D:6D:64:F5:CF:7A:14:F6:26:12:66:BD:B4:5C:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/e74295e1-3fea-318a-91c9-1152af362bcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.209.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:66:6f:6d:51:08:48:1a:8a:ab:e5:e5:d9:1f:23:c7:83:fa: fb:b0:20:af:69:81:19:0b:e2:12:c6:39:0e:0b:b1:bd:01:f6: 7e:e0:c3:41:6d:62:4d:5f:42:ef:dc:89:49:7a:bc:c5:36:e3: 7b:6f:94:ee:fd:97:c0:12:00:4e:4e:49:1c:f1:68:c7:c6:6c: 11:04:8e:1d:e3:18:85:ad:c5:94:66:ba:34:ef:6e:16:93:55: f9:4e:35:26:32:b5:fa:88:6d:b4:f8:ee:cc:78:57:84:16:57: 5d:67:64:ac:09:94:cd:93:65:af:36:54:3a:b6:7c:ac:7e:0e: d9:47:69:d1:32:c5:d2:ad:7b:35:8a:30:12:ae:07:81:6c:83: 17:31:aa:33:0a:21:f6:c8:84:45:09:2a:7d:e4:7e:f9:88:a4: 83:d9:b0:db:49:dd:9b:e4:6b:0d:4f:eb:95:63:1b:af:da:7a: 06:c6:8d:67:b4:78:61:93:2a:cd:78:d6:6f:5e:44:04:54:d4: 0e:49:c8:1a:e5:3e:39:2d:2f:8b:5c:24:b9:54:51:a5:64:27: 3b:cf:96:43:b9:69:2d:04:4b:0c:bb:a8:8b:b2:86:95:d7:db: 71:25:f1:de:e1:c7:fa:7f:16:dc:54:6b:e3:98:ba:f3:ae:cb: 4d:2c:5f:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh73BrJSfbJO5ZKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk YjQ2YzYxOTUtMTVmYi00NDYxLThlNGUtMmJjYWUzOGQ3MWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/EBHzB1QMnwzog+wP6pByC/iCfMuXtiu5Ov dQz+asQFjoG0EPpY3FiNx2ZknPPa2dh7/MtZZqA5x4b+gsftbDhY+3tH7iPD+7lw 55D8ip8Qslbh8LJAzQTJvHzzBfvPEhTAlj5Ddq+R6nVZlxH/CoG1YJeJ2iUrUJmd YmIAN7MWQ0uoXqYBh5oV1a0mLzLM6xKkbKqkRMWzgVloBXT0j0oJo6ANNoN5/aHv TSwuL6NUr1W4R4na3saXf1TMDOHQb8CfUHaKBRKPEHcz/0fT3KzVq6DHviHpbCZ/ MH31ixWFd2U2G0kgUbbWRuY+48d55g9YG9vFDR8dXwSKvqP6/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnq60isHW1k9c96FPYmEma9tFxsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZTc0Mjk1ZTEtM2ZlYS0z MThhLTkxYzktMTE1MmFmMzYyYmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dGRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1mb21RCEgaiqvl5dkfI8eD+vuwIK9pgRkL4hLGOQ4Lsb0B9n7gw0Ft Yk1fQu/ciUl6vMU243tvlO79l8ASAE5OSRzxaMfGbBEEjh3jGIWtxZRmujTvbhaT VflONSYytfqIbbT47sx4V4QWV11nZKwJlM2TZa82VDq2fKx+DtlHadEyxdKtezWK MBKuB4FsgxcxqjMKIfbIhEUJKn3kfvmIpIPZsNtJ3Zvkaw1P65VjG6/aegbGjWe0 eGGTKs141m9eRARU1A5JyBrlPjktL4tcJLlUUaVkJzvPlkO5aS0ESwy7qIuyhpXX 23El8d7hx/p/FtxUa+OYuvOuy00sXy4= -----END CERTIFICATE-----Generated at Tue Apr 29 07:51:56 2025 by rpki-client