$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/866e5acf-ad02-3689-8207-fee6bcc3ab49.roa File: 866e5acf-ad02-3689-8207-fee6bcc3ab49.roa (raw, json) Hash identifier: HbZ813luKzUh4ZIF0aGeh0RkbjZhmWgy997wuEmG258= Subject key identifier: 97:CF:57:B6:2F:EC:2D:C7:CC:E9:C4:CD:6F:03:ED:35:17:AC:3D:F7 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F43285849849EFCC7097EF08586B5CBC0 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/866e5acf-ad02-3689-8207-fee6bcc3ab49.roa Signing time: Mon 14 Apr 2025 01:00:43 +0000 ROA not before: Mon 14 Apr 2025 01:00:43 +0000 ROA not after: Sun 13 Jul 2025 01:00:43 +0000 asID: 11233 IP address blocks: 209.237.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:84:9e:fc:c7:09:7e:f0:85:86:b5:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Apr 14 01:00:43 2025 GMT Not After : Jul 13 01:00:43 2025 GMT Subject: CN=9bec2c7e-4bff-410e-b1f5-66d3cccb60f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f5:0a:bc:11:bd:9d:5b:d0:44:72:1e:78:12: 77:1c:ec:63:74:6e:ae:bb:d5:cc:83:24:73:2e:fd: 3c:82:94:37:92:0d:9c:60:3f:59:d6:37:e2:be:85: f0:67:5a:90:0c:b2:65:75:c1:52:4f:fe:71:c2:59: 19:2c:17:40:81:37:15:20:17:58:a4:77:70:4b:d6: 80:17:68:d1:fe:c4:2e:1e:60:e6:ab:85:d6:6a:33: 9b:b0:45:de:51:a8:5a:a3:8c:e7:70:6e:3a:05:3f: 8c:d8:a9:bc:54:9b:d7:3c:5d:cf:2e:dc:a8:8d:d9: af:76:6c:5b:12:61:34:5f:e4:40:f3:51:1f:bc:72: 08:a5:96:0b:ec:e8:6f:55:35:9a:30:ad:90:2b:fd: 39:12:1a:53:b4:03:4e:b4:7d:26:b7:c2:89:e5:70: ff:93:06:c1:a1:2c:6a:dc:ef:08:8f:49:af:ff:7e: c1:9b:3c:ab:0c:92:18:c8:c4:14:df:f3:8d:10:0c: d5:0d:2a:53:41:f3:5b:5e:b0:d0:7b:48:87:05:b6: d0:c2:83:8a:79:d5:c5:95:9a:79:d4:24:f8:9e:0f: d6:4d:66:2b:4a:54:03:c6:a8:03:a7:61:1e:3e:fd: a0:e2:48:c7:ce:71:6d:b3:8e:b9:18:b9:c6:be:df: 25:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:CF:57:B6:2F:EC:2D:C7:CC:E9:C4:CD:6F:03:ED:35:17:AC:3D:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/866e5acf-ad02-3689-8207-fee6bcc3ab49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:36:89:3f:bf:c6:f3:c2:e8:8e:58:45:0f:19:8e:c4:f8:02: 4e:1b:6c:50:e7:32:63:9c:0d:f3:9f:f5:09:b1:d0:86:dd:b3: 45:60:88:09:03:83:16:4c:2e:a8:85:0a:4d:9e:be:6c:63:c9: 5e:0f:13:2c:a2:d5:95:e6:e9:68:37:de:22:87:12:46:60:49: 17:80:2a:4a:b4:e8:36:73:d7:44:7b:36:d0:05:56:28:33:bc: 46:df:5f:4f:9a:ee:2f:ea:8f:eb:b8:2e:50:d3:8b:a1:43:d1: 46:50:4f:89:6a:6b:ce:f6:94:1e:86:3a:e9:95:7e:1d:18:f3: 4b:45:30:d8:df:52:ef:ca:ce:e7:4e:06:5c:f0:57:4c:46:1e: e2:d2:4a:de:07:13:15:5c:b0:70:7d:60:de:13:98:7f:0e:95: 49:fb:05:71:b5:23:73:e1:68:6a:c3:c8:aa:35:50:2c:71:dd: 6d:6b:4c:e9:3f:89:8a:e9:9d:46:00:7c:c6:cb:99:7c:06:52: 0b:d6:1f:db:b1:21:07:fe:05:f3:6e:c5:75:f4:35:70:66:3c: d8:d2:7a:4a:4d:5f:b8:dd:87:12:aa:c4:0f:38:f4:2c:df:cc: df:1e:86:5b:df:4b:42:0f:7f:a8:a4:34:cf:58:f7:a9:95:ed: 20:6e:4a:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmEnvzHCX7whYa1y8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDQxNDAxMDA0M1oXDTI1MDcxMzAxMDA0M1owLzEtMCsGA1UEAxMk OWJlYzJjN2UtNGJmZi00MTBlLWIxZjUtNjZkM2NjY2I2MGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvUKvBG9nVvQRHIeeBJ3HOxjdG6uu9XMgyRz Lv08gpQ3kg2cYD9Z1jfivoXwZ1qQDLJldcFST/5xwlkZLBdAgTcVIBdYpHdwS9aA F2jR/sQuHmDmq4XWajObsEXeUahao4zncG46BT+M2Km8VJvXPF3PLtyojdmvdmxb EmE0X+RA81EfvHIIpZYL7OhvVTWaMK2QK/05EhpTtANOtH0mt8KJ5XD/kwbBoSxq 3O8Ij0mv/37BmzyrDJIYyMQU3/ONEAzVDSpTQfNbXrDQe0iHBbbQwoOKedXFlZp5 1CT4ng/WTWYrSlQDxqgDp2EePv2g4kjHznFts465GLnGvt8lKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfPV7Yv7C3HzOnEzW8D7TUXrD33MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvODY2ZTVhY2YtYWQwMi0z Njg5LTgyMDctZmVlNmJjYzNhYjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFc2iT+/xvPC6I5YRQ8ZjsT4Ak4bbFDnMmOcDfOf9Qmx0Ibds0VgiAkD gxZMLqiFCk2evmxjyV4PEyyi1ZXm6Wg33iKHEkZgSReAKkq06DZz10R7NtAFVigz vEbfX0+a7i/qj+u4LlDTi6FD0UZQT4lqa872lB6GOumVfh0Y80tFMNjfUu/KzudO BlzwV0xGHuLSSt4HExVcsHB9YN4TmH8OlUn7BXG1I3PhaGrDyKo1UCxx3W1rTOk/ iYrpnUYAfMbLmXwGUgvWH9uxIQf+BfNuxXX0NXBmPNjSekpNX7jdhxKqxA849Czf zN8ehlvfS0IPf6ikNM9Y96mV7SBuSi8= -----END CERTIFICATE-----Generated at Tue Apr 29 23:28:46 2025 by rpki-client