$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/a84baf16-04c5-3be6-b2ff-91936a207335.roa File: a84baf16-04c5-3be6-b2ff-91936a207335.roa (raw, json) Hash identifier: VTdyY24G2sk8akrXEnsZ2TuFg1PFpKF8Y/LtTmdgSVY= Subject key identifier: D1:7B:49:0B:DD:F4:2A:03:BB:9D:33:AD:41:92:89:B5:0C:C9:B6:F1 Certificate issuer: /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Certificate serial: 010D0C9F432858499AF48C27966C68C953A39880 Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/a84baf16-04c5-3be6-b2ff-91936a207335.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 6079 IP address blocks: 209.250.11.0/24 maxlen: 24 209.250.21.0/24 maxlen: 24 209.250.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:8c:27:96:6c:68:c9:53:a3:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=05d8f5ba-ced0-4535-bd10-839cc65f3ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a1:74:05:93:fd:a1:25:52:4c:46:aa:99:21: 01:2f:31:af:86:db:73:45:a3:6f:cb:c1:ff:ac:18: b4:03:15:02:d4:14:6b:34:63:b0:01:38:74:12:8c: 1a:ff:68:bd:4e:e8:9e:4d:a7:53:ad:65:62:7b:68: 70:52:0f:04:29:c6:fd:eb:31:4a:82:85:a8:f1:d2: 6b:b1:b9:1c:fc:1d:9e:2a:33:4a:fe:1e:d4:68:27: 08:fb:7a:34:1e:bc:35:6f:2c:14:27:a4:4d:15:5c: 75:13:29:8b:f2:eb:2f:bb:6a:80:5f:7c:3d:07:55: 66:48:63:d5:f1:9f:5b:c4:74:1a:fb:8c:2c:fc:b8: 76:4f:1b:60:f5:fe:80:3d:9c:f3:49:9f:70:91:bf: 10:65:7b:4e:a6:68:98:a8:fd:3d:54:30:4b:94:f8: 88:57:46:06:a2:c0:29:ba:e3:75:57:b7:f2:28:f0: 3e:93:71:5d:87:b7:61:e2:3f:47:15:b0:ab:0f:34: d6:d3:05:c7:dc:67:fb:b8:74:18:a6:eb:ce:ac:a6: 3f:1c:c3:51:f2:da:08:00:92:35:04:7f:65:b7:36: 2a:23:81:7a:48:f4:1b:15:05:55:fe:78:94:01:9a: e2:e6:2e:06:b2:73:7d:5b:b4:6a:23:b0:e8:79:67: 91:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7B:49:0B:DD:F4:2A:03:BB:9D:33:AD:41:92:89:B5:0C:C9:B6:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/a84baf16-04c5-3be6-b2ff-91936a207335.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl X509v3 Authority Key Identifier: keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer sbgp-ipAddrBlock: critical IPv4: 209.250.11.0/24 209.250.21.0-209.250.22.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:21:cc:97:c9:01:90:a7:a3:97:44:6e:eb:d5:88:4b:72:b7: 5f:9c:a4:72:7f:86:e6:4c:bc:22:88:87:39:c9:ae:1c:16:53: 57:90:5e:64:3f:d1:ea:ee:84:53:73:49:79:3d:4d:cd:b6:21: 78:24:ba:25:fa:ac:22:b8:88:72:c4:fc:01:d7:b1:e1:d9:f6: 2a:08:d3:64:02:b0:e8:5f:97:31:f3:85:7e:ab:59:f9:a8:62: 6a:b7:09:0e:5b:e4:06:3d:51:12:b0:0b:2e:dd:a7:fc:bd:48: 83:3c:33:14:6a:6f:7d:73:11:3a:31:6c:9e:63:39:5d:65:6e: 2e:d5:8f:a8:18:6c:b4:64:28:40:7d:3d:9a:8c:21:07:2a:6f: a6:b3:a8:0b:57:33:1d:d1:8e:b1:a1:e2:e8:18:89:06:a4:15: 02:0b:aa:02:47:55:fe:b7:86:1f:93:f7:e6:c7:e9:b5:e0:a1: 74:7e:58:b0:4a:e4:df:cd:08:0b:2a:52:56:98:14:0a:50:ec: 8f:12:c6:ab:6a:c6:9a:b7:96:62:0b:e2:bb:f4:85:98:0a:04: ff:9c:d2:d0:f3:32:3c:46:91:5e:79:ed:b2:6e:5d:00:9f:53: 1e:cd:1d:0e:4b:02:03:dd:76:31:37:7f:37:94:db:30:0a:dc: ba:ec:15:db -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEma9IwnlmxoyVOjmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2YjZjNjUtMTFiYi00MDVlLWEzNGEtYjcxNmZjZGM3 ZGQ0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MDVkOGY1YmEtY2VkMC00NTM1LWJkMTAtODM5Y2M2NWYzYmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKF0BZP9oSVSTEaqmSEBLzGvhttzRaNvy8H/ rBi0AxUC1BRrNGOwATh0Eowa/2i9TuieTadTrWVie2hwUg8EKcb96zFKgoWo8dJr sbkc/B2eKjNK/h7UaCcI+3o0Hrw1bywUJ6RNFVx1EymL8usvu2qAX3w9B1VmSGPV 8Z9bxHQa+4ws/Lh2Txtg9f6APZzzSZ9wkb8QZXtOpmiYqP09VDBLlPiIV0YGosAp uuN1V7fyKPA+k3Fdh7dh4j9HFbCrDzTW0wXH3Gf7uHQYpuvOrKY/HMNR8toIAJI1 BH9ltzYqI4F6SPQbFQVV/niUAZri5i4GsnN9W7RqI7DoeWeRkwIDAQABo4IDYzCC A18wHQYDVR0OBBYEFNF7SQvd9CoDu50zrUGSibUMybbxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZi NmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2ZmNkYzdkZDQvYTg0YmFmMTYtMDRjNS0z YmU2LWIyZmYtOTE5MzZhMjA3MzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjk2YjZjNjUtMTFiYi00MDVlLWEz NGEtYjcxNmZjZGM3ZGQ0L2Y5NmI2YzY1LTExYmItNDA1ZS1hMzRhLWI3MTZmY2Rj N2RkNC5jcmwwHwYDVR0jBBgwFoAUXA5zSiCBvLBmexmGdhkHGO6ne+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZiNmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2 ZmNkYzdkZDQuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQA0foLMAwD BADR+hUDBADR+hYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAgCHMl8kBkKejl0Ru69WIS3K3X5ykcn+G5ky8 IoiHOcmuHBZTV5BeZD/R6u6EU3NJeT1NzbYheCS6JfqsIriIcsT8Adex4dn2KgjT ZAKw6F+XMfOFfqtZ+ahiarcJDlvkBj1RErALLt2n/L1IgzwzFGpvfXMROjFsnmM5 XWVuLtWPqBhstGQoQH09mowhBypvprOoC1czHdGOsaHi6BiJBqQVAguqAkdV/reG H5P35sfpteChdH5YsErk380ICypSVpgUClDsjxLGq2rGmreWYgviu/SFmAoE/5zS 0PMyPEaRXnntsm5dAJ9THs0dDksCA912MTd/N5TbMArcuuwV2w== -----END CERTIFICATE-----Generated at Mon Apr 28 14:29:03 2025 by rpki-client