$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/db8f199a-62c8-36d3-a41d-64390cd86118.roa File: db8f199a-62c8-36d3-a41d-64390cd86118.roa (raw, json) Hash identifier: f9ltkOIcjpiIEAAcvkayWoh+ENz8HLr/qjZ+d10lVZU= Subject key identifier: D4:EC:5E:FC:CD:07:12:70:10:DC:96:C3:A7:44:E7:AF:02:A9:3D:B3 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F43285849849EFCB6C819065B2FB24000 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/db8f199a-62c8-36d3-a41d-64390cd86118.roa Signing time: Mon 14 Apr 2025 01:00:43 +0000 ROA not before: Mon 14 Apr 2025 01:00:43 +0000 ROA not after: Sun 13 Jul 2025 01:00:43 +0000 asID: 11233 IP address blocks: 209.237.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:84:9e:fc:b6:c8:19:06:5b:2f:b2:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Apr 14 01:00:43 2025 GMT Not After : Jul 13 01:00:43 2025 GMT Subject: CN=f9ffadb4-9c20-4676-a1f5-5114b9f33556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:07:2f:f9:3d:0a:42:2d:8d:28:da:6d:69:fe: 1c:b5:fb:d0:0d:15:f6:1b:2a:f3:cc:da:67:a3:7b: 5c:4f:c1:ef:71:df:a5:fc:ee:7e:6f:56:78:05:ec: 3f:ca:a4:71:a4:65:93:c2:ad:d5:e3:f9:85:f3:43: d7:8e:e8:ad:0b:49:02:29:29:14:49:29:83:99:c0: b9:2f:f1:39:b4:31:ca:27:9d:c7:a8:d1:06:a6:d3: fc:fd:15:8e:68:68:35:e5:4a:5d:7b:13:81:64:ec: aa:e8:85:48:21:4c:d1:ee:4a:65:47:4c:8b:64:3c: 0f:82:21:cb:40:40:7c:92:6c:5f:bd:7f:3a:22:73: 31:f7:84:a3:6c:d4:dc:34:0e:d1:21:cb:36:7c:11: e1:33:cc:52:b1:41:92:38:51:a6:12:48:34:12:e3: 00:85:09:63:c3:a5:9c:f0:7f:fe:ad:7b:52:90:c6: a2:d3:8f:5e:14:c5:16:aa:88:c9:1a:ec:f1:f4:de: de:aa:b6:5a:22:f4:94:7d:e5:ca:d4:16:0a:ef:31: 43:eb:f7:81:80:be:cf:f3:ce:99:e4:eb:cf:69:2a: 02:aa:08:d0:b4:7c:84:cb:0f:1a:3e:e6:a4:ce:ba: 21:93:3a:db:aa:3c:5f:73:29:58:39:38:4d:44:57: cc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:EC:5E:FC:CD:07:12:70:10:DC:96:C3:A7:44:E7:AF:02:A9:3D:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/db8f199a-62c8-36d3-a41d-64390cd86118.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:3a:f1:fa:72:9f:37:b2:e9:d9:cc:ca:08:74:ec:1b:bc:3b: 13:ef:ea:4d:f5:a9:c3:0b:b5:6e:cb:fa:b7:6c:f7:0e:f5:f0: a8:a7:2e:4d:e4:17:f9:ef:ac:e9:86:b1:ba:c2:4d:1c:10:f2: 62:de:72:56:dc:f9:fc:0d:1c:05:38:18:30:e5:81:56:2e:48: b3:08:b1:d9:b6:ad:89:5f:17:a5:72:c8:a0:b6:85:e0:bf:78: b2:7d:44:33:6c:1a:dc:f7:c0:13:27:4b:40:8b:83:71:7e:14: d4:2f:46:10:28:80:62:3d:43:9f:98:93:ef:f0:e8:3b:81:72: 83:18:fa:82:7e:90:ed:e4:16:25:20:c1:96:fd:ca:68:45:87: c9:2d:78:3d:0e:30:7a:59:df:a3:39:d6:83:4e:54:1a:4e:81: c1:ef:3c:83:05:88:e3:26:2b:a7:da:34:04:83:89:fb:c9:1f: e3:aa:cd:f0:c7:74:f0:cf:f4:bd:6a:ee:a1:3f:5a:90:07:44: 86:68:dc:15:21:8a:dd:fb:d6:9d:18:9e:ed:0d:8d:d5:ac:86: c1:2f:c6:a3:9b:34:5a:2d:36:02:b7:2f:ba:94:4e:a8:8e:2c: fb:82:46:74:7f:61:87:35:a7:5d:35:cb:7a:c7:1f:4f:24:aa: 2a:b9:a7:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmEnvy2yBkGWy+yQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDQxNDAxMDA0M1oXDTI1MDcxMzAxMDA0M1owLzEtMCsGA1UEAxMk ZjlmZmFkYjQtOWMyMC00Njc2LWExZjUtNTExNGI5ZjMzNTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQcv+T0KQi2NKNptaf4ctfvQDRX2GyrzzNpn o3tcT8Hvcd+l/O5+b1Z4Bew/yqRxpGWTwq3V4/mF80PXjuitC0kCKSkUSSmDmcC5 L/E5tDHKJ53HqNEGptP8/RWOaGg15UpdexOBZOyq6IVIIUzR7kplR0yLZDwPgiHL QEB8kmxfvX86InMx94SjbNTcNA7RIcs2fBHhM8xSsUGSOFGmEkg0EuMAhQljw6Wc 8H/+rXtSkMai049eFMUWqojJGuzx9N7eqrZaIvSUfeXK1BYK7zFD6/eBgL7P886Z 5OvPaSoCqgjQtHyEyw8aPuakzrohkzrbqjxfcylYOThNRFfM+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTsXvzNBxJwENyWw6dE568CqT2zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvZGI4ZjE5OWEtNjJjOC0z NmQzLWE0MWQtNjQzOTBjZDg2MTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG068fpynzey6dnMygh07Bu8OxPv6k31qcMLtW7L+rds9w718KinLk3k F/nvrOmGsbrCTRwQ8mLeclbc+fwNHAU4GDDlgVYuSLMIsdm2rYlfF6VyyKC2heC/ eLJ9RDNsGtz3wBMnS0CLg3F+FNQvRhAogGI9Q5+Yk+/w6DuBcoMY+oJ+kO3kFiUg wZb9ymhFh8kteD0OMHpZ36M51oNOVBpOgcHvPIMFiOMmK6faNASDifvJH+OqzfDH dPDP9L1q7qE/WpAHRIZo3BUhit371p0Ynu0NjdWshsEvxqObNFotNgK3L7qUTqiO LPuCRnR/YYc1p101y3rHH08kqiq5p/Q= -----END CERTIFICATE-----Generated at Tue Apr 29 22:15:49 2025 by rpki-client