$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/10347e71-7fe6-3944-aafa-f5029b5f87c1.roa File: 10347e71-7fe6-3944-aafa-f5029b5f87c1.roa (raw, json) Hash identifier: smFm4Msi8SpqQnRBTi3pxrtCV9ivNPN6ISeh27lQc3I= Subject key identifier: A1:79:EB:CA:AF:F7:47:F9:7D:46:B6:38:22:F9:F6:69:3F:DD:AC:32 Certificate issuer: /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Certificate serial: 010D0C9F432858499AF48C551DEF06EB86D3FE80 Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/10347e71-7fe6-3944-aafa-f5029b5f87c1.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 398465 IP address blocks: 209.250.11.0/24 maxlen: 24 209.250.21.0/24 maxlen: 24 209.250.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:8c:55:1d:ef:06:eb:86:d3:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=5e50ee1b-bf2d-423b-a838-b012efd9ab53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:94:2b:86:a2:3e:3f:76:1e:37:20:f6:bf:b7: 2c:ec:3e:54:26:4c:91:f7:a6:4e:d8:3c:ef:ac:80: 7b:7a:8d:45:28:ca:f0:c5:c8:47:66:37:ec:d1:2a: 81:ae:e9:4d:ed:57:c1:8a:68:0f:68:68:8b:4c:e8: 5c:37:cb:3b:f7:e9:93:67:24:b4:c2:16:43:5b:04: c3:2e:22:d6:71:6d:60:d0:f7:8d:eb:12:18:ff:47: 32:f2:26:21:ab:a1:7e:1a:b0:b4:91:f7:57:f4:6c: 1a:50:3f:88:9f:5a:e0:18:d9:4d:18:77:ea:5d:7e: de:a4:1a:94:f0:b0:83:ae:d5:a6:0b:ab:86:5f:15: 03:53:2c:f2:62:0d:cb:95:1d:6b:ee:eb:11:26:f0: 39:78:dc:36:e8:4f:58:4c:d2:f3:37:f6:bb:db:66: 14:0c:a2:ef:35:77:c6:8e:2e:ce:2b:d1:41:0b:49: 5a:42:f2:da:56:73:93:2e:49:1a:f6:85:00:88:04: 49:08:5e:c5:81:34:54:65:2a:ab:62:4b:a6:4f:5c: 34:6f:38:fe:71:82:76:9b:bb:9b:02:5f:ff:27:17: 6e:5b:63:9e:17:f2:67:aa:88:f0:d6:87:fe:05:24: 4c:9e:f3:98:cb:b2:17:41:21:3d:d3:eb:ad:d6:f4: e3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:79:EB:CA:AF:F7:47:F9:7D:46:B6:38:22:F9:F6:69:3F:DD:AC:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/10347e71-7fe6-3944-aafa-f5029b5f87c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl X509v3 Authority Key Identifier: keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer sbgp-ipAddrBlock: critical IPv4: 209.250.11.0/24 209.250.21.0-209.250.22.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:7b:52:7e:9c:03:0d:37:cf:89:7c:ab:b2:fd:13:8e:08:a4: 89:c8:87:ef:b9:2e:84:91:55:39:0b:7e:5a:97:4b:1d:7d:bd: 3c:d3:7f:98:ba:b6:98:55:2f:24:04:eb:72:77:aa:fe:ff:2c: 4c:f5:29:ec:41:ad:39:fb:97:d2:66:87:a0:e3:d5:6a:70:56: 73:cd:71:75:92:1c:9a:3b:d7:0e:90:f2:c4:65:f2:1e:08:9c: b5:ac:47:2b:61:4b:8f:5a:34:ea:fc:37:b1:74:71:0d:82:c4: f4:1b:09:a5:8e:14:2c:74:1f:7b:54:56:ef:ad:16:a3:c6:46: 25:70:e4:2b:4d:fd:60:b9:90:86:2b:64:1b:62:dc:5c:d5:3f: 23:2c:56:dc:8f:c8:ec:74:11:7b:3f:94:74:97:b6:d8:ae:24: 80:08:99:37:51:ff:d3:00:67:1d:41:34:53:37:e9:34:e1:3b: b4:75:ff:67:df:dc:53:ed:a0:71:2e:a6:89:2e:2c:56:cd:1f: 3c:ab:bc:62:45:03:91:b2:1e:dd:84:1d:3d:59:c9:ee:bc:cc: 87:37:f1:65:9f:77:e0:c6:47:cf:3d:2b:3f:7a:34:b4:dc:d3: 1f:4f:79:d2:09:ab:0a:b6:39:37:83:e2:2d:fd:17:a2:ff:26: 59:af:49:c8 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEma9IxVHe8G64bT/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2YjZjNjUtMTFiYi00MDVlLWEzNGEtYjcxNmZjZGM3 ZGQ0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NWU1MGVlMWItYmYyZC00MjNiLWE4MzgtYjAxMmVmZDlhYjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpQrhqI+P3YeNyD2v7cs7D5UJkyR96ZO2Dzv rIB7eo1FKMrwxchHZjfs0SqBrulN7VfBimgPaGiLTOhcN8s79+mTZyS0whZDWwTD LiLWcW1g0PeN6xIY/0cy8iYhq6F+GrC0kfdX9GwaUD+In1rgGNlNGHfqXX7epBqU 8LCDrtWmC6uGXxUDUyzyYg3LlR1r7usRJvA5eNw26E9YTNLzN/a722YUDKLvNXfG ji7OK9FBC0laQvLaVnOTLkka9oUAiARJCF7FgTRUZSqrYkumT1w0bzj+cYJ2m7ub Al//JxduW2OeF/Jnqojw1of+BSRMnvOYy7IXQSE90+ut1vTjzwIDAQABo4IDYzCC A18wHQYDVR0OBBYEFKF568qv90f5fUa2OCL59mk/3awyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZi NmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2ZmNkYzdkZDQvMTAzNDdlNzEtN2ZlNi0z OTQ0LWFhZmEtZjUwMjliNWY4N2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjk2YjZjNjUtMTFiYi00MDVlLWEz NGEtYjcxNmZjZGM3ZGQ0L2Y5NmI2YzY1LTExYmItNDA1ZS1hMzRhLWI3MTZmY2Rj N2RkNC5jcmwwHwYDVR0jBBgwFoAUXA5zSiCBvLBmexmGdhkHGO6ne+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZiNmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2 ZmNkYzdkZDQuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQA0foLMAwD BADR+hUDBADR+hYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAG3tSfpwDDTfPiXyrsv0TjgikiciH77kuhJFV OQt+WpdLHX29PNN/mLq2mFUvJATrcneq/v8sTPUp7EGtOfuX0maHoOPVanBWc81x dZIcmjvXDpDyxGXyHgictaxHK2FLj1o06vw3sXRxDYLE9BsJpY4ULHQfe1RW760W o8ZGJXDkK039YLmQhitkG2LcXNU/IyxW3I/I7HQRez+UdJe22K4kgAiZN1H/0wBn HUE0UzfpNOE7tHX/Z9/cU+2gcS6miS4sVs0fPKu8YkUDkbIe3YQdPVnJ7rzMhzfx ZZ934MZHzz0rP3o0tNzTH0950gmrCrY5N4PiLf0Xov8mWa9JyA== -----END CERTIFICATE-----Generated at Sat Apr 26 16:24:06 2025 by rpki-client