$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/286dff2e-c72b-39d5-9019-431053745837.roa File: 286dff2e-c72b-39d5-9019-431053745837.roa (raw, json) Hash identifier: 0LXXOYq/m/wqtDJnDDPis68uvAse0nHmafmCMRLnLCA= Subject key identifier: F9:E3:5D:9B:98:F6:5D:DC:DB:A0:7B:68:1B:BB:3A:7E:D2:AA:4D:D4 Certificate issuer: /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Certificate serial: 010D0C9F432858495EEEE9861EB52AFEFE1A2800 Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/286dff2e-c72b-39d5-9019-431053745837.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 400727 IP address blocks: 209.35.100.0/22 maxlen: 22 209.35.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:e9:86:1e:b5:2a:fe:fe:1a:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=2fe0df0c-ac6b-42c2-891d-b0b0b707b5f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6d:86:38:36:06:a0:fe:73:7c:f0:57:54:2b: 10:4d:c6:29:01:8d:f3:64:22:b8:ee:5a:27:a1:51: 02:8d:e4:b7:2c:c3:4a:1b:68:8e:f8:c7:be:e1:6c: d7:5c:8d:e9:91:c4:55:f3:42:c9:39:d3:61:cd:2f: 52:5a:06:d6:50:dd:52:fe:1d:eb:18:90:5e:92:ed: 6a:58:fc:59:3b:5a:c5:61:65:cd:31:3e:28:90:c3: 1d:ec:a5:ec:77:46:31:68:ad:5d:b2:fd:a9:e6:d7: 62:b1:46:d4:7d:c7:95:19:27:31:fb:04:e3:b4:3e: b6:47:c4:07:24:7a:e4:e0:3c:0d:40:2f:bf:a3:c1: c7:96:6c:7a:f7:52:45:95:f8:29:c9:01:90:a8:fe: af:ab:a5:9e:93:b7:bd:c4:ea:5b:2a:a5:f2:64:29: 11:85:73:4d:2f:b3:d7:cf:5b:60:c0:0d:e3:25:05: aa:d1:fd:4f:e9:88:61:13:8a:2b:59:4b:84:13:d6: 82:91:33:ef:58:51:af:05:61:8b:c1:53:b8:78:29: d4:45:27:f4:a2:ed:c9:9e:de:be:ee:2a:20:ef:3a: b7:0e:75:b7:1e:ce:a0:8c:9e:54:61:5c:86:79:ea: a9:81:24:3e:7b:06:c4:77:ed:11:7e:96:b6:08:c6: 60:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E3:5D:9B:98:F6:5D:DC:DB:A0:7B:68:1B:BB:3A:7E:D2:AA:4D:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/286dff2e-c72b-39d5-9019-431053745837.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl X509v3 Authority Key Identifier: keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer sbgp-ipAddrBlock: critical IPv4: 209.35.100.0/22 209.35.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:38:0d:7d:7a:a9:94:42:06:8c:bf:2c:24:e5:80:3e:65:70: b7:d9:1a:34:34:4d:23:b4:46:44:3d:fb:6f:0a:8c:5d:e8:f2: ea:2f:cc:b1:d1:84:6c:56:ad:31:e7:6a:1b:71:92:a3:4f:3c: b8:62:aa:04:e3:c3:00:3f:1e:9e:93:8e:2a:c3:a4:f5:bf:3b: 51:3e:4d:33:23:aa:b7:9e:63:76:64:0e:72:29:ea:3e:98:c1: 80:3b:fb:00:f5:4d:39:ef:65:d8:e2:52:8b:89:75:8f:86:4c: 37:7a:26:25:42:5b:6d:e2:d5:ea:7f:d4:ae:6d:42:53:23:66: 4e:bf:5f:31:80:70:5f:0e:ea:93:ce:c1:2a:3c:03:b5:51:7a: f3:d5:98:73:af:41:c9:37:a9:c5:cc:bd:e7:5b:8e:14:a7:46: 39:71:a2:db:69:de:3e:9d:9e:83:66:9f:4f:15:74:f6:a4:71: ea:b5:8c:c7:ad:35:19:58:81:a9:11:cd:a6:57:c8:8c:5a:73: ab:87:aa:c0:97:34:6d:a8:2d:d8:4e:8d:76:7b:cd:af:dd:e2: 85:40:1c:7b:d1:ea:cd:5f:23:4d:07:89:d0:cf:f0:a7:f0:0e: 91:b1:01:d6:55:a9:8e:9c:0e:17:3f:65:9b:9b:19:48:09:d0: 34:fe:8f:4f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEle7umGHrUq/v4aKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjNTk5NTktZTg5OC00MmFkLTlkMGEtZjFiODdhN2Qw MTE0MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk MmZlMGRmMGMtYWM2Yi00MmMyLTg5MWQtYjBiMGI3MDdiNWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG2GODYGoP5zfPBXVCsQTcYpAY3zZCK47lon oVECjeS3LMNKG2iO+Me+4WzXXI3pkcRV80LJOdNhzS9SWgbWUN1S/h3rGJBeku1q WPxZO1rFYWXNMT4okMMd7KXsd0YxaK1dsv2p5tdisUbUfceVGScx+wTjtD62R8QH JHrk4DwNQC+/o8HHlmx691JFlfgpyQGQqP6vq6Wek7e9xOpbKqXyZCkRhXNNL7PX z1tgwA3jJQWq0f1P6YhhE4orWUuEE9aCkTPvWFGvBWGLwVO4eCnURSf0ou3Jnt6+ 7iog7zq3DnW3Hs6gjJ5UYVyGeeqpgSQ+ewbEd+0Rfpa2CMZg2wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPnjXZuY9l3c26B7aBu7On7Sqk3UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1 OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4N2E3ZDAxMTQvMjg2ZGZmMmUtYzcyYi0z OWQ1LTkwMTktNDMxMDUzNzQ1ODM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWFjNTk5NTktZTg5OC00MmFkLTlk MGEtZjFiODdhN2QwMTE0L2FhYzU5OTU5LWU4OTgtNDJhZC05ZDBhLWYxYjg3YTdk MDExNC5jcmwwHwYDVR0jBBgwFoAUul4Dp25dfBcjybWEUNyNWEuvgL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4 N2E3ZDAxMTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC0SNkAwQC 0SOYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAC44DX16qZRCBoy/LCTlgD5lcLfZGjQ0TSO0RkQ9+28KjF3o 8uovzLHRhGxWrTHnahtxkqNPPLhiqgTjwwA/Hp6TjirDpPW/O1E+TTMjqreeY3Zk DnIp6j6YwYA7+wD1TTnvZdjiUouJdY+GTDd6JiVCW23i1ep/1K5tQlMjZk6/XzGA cF8O6pPOwSo8A7VRevPVmHOvQck3qcXMvedbjhSnRjlxottp3j6dnoNmn08VdPak ceq1jMetNRlYgakRzaZXyIxac6uHqsCXNG2oLdhOjXZ7za/d4oVAHHvR6s1fI00H idDP8KfwDpGxAdZVqY6cDhc/ZZubGUgJ0DT+j08= -----END CERTIFICATE-----Generated at Tue Apr 29 15:02:10 2025 by rpki-client