$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/d1c97a1a-4e55-364a-b407-9f6e1a9bc993.roa File: d1c97a1a-4e55-364a-b407-9f6e1a9bc993.roa (raw, json) Hash identifier: z1Dpd2OTIXlgp4FEVRo0rA1HR76mIN6jI/bFvd/LP1k= Subject key identifier: AE:17:C8:E9:28:9E:54:95:E8:80:5B:8E:CC:C6:30:2D:80:DE:F5:D0 Certificate issuer: /CN=11f590b6-eb6e-4969-824b-0df247220283 Certificate serial: 010D0C9F43285848FBF128B19726A8561758D500 Authority key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/d1c97a1a-4e55-364a-b407-9f6e1a9bc993.roa Signing time: Mon 24 Feb 2025 02:00:38 +0000 ROA not before: Mon 24 Feb 2025 02:00:38 +0000 ROA not after: Sun 25 May 2025 01:00:38 +0000 asID: 395301 IP address blocks: 209.251.28.0/24 maxlen: 24 209.251.29.0/24 maxlen: 24 209.251.30.0/24 maxlen: 24 209.251.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fb:f1:28:b1:97:26:a8:56:17:58:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11f590b6-eb6e-4969-824b-0df247220283 Validity Not Before: Feb 24 02:00:38 2025 GMT Not After : May 25 01:00:38 2025 GMT Subject: CN=d1ee8ee0-bf9f-4013-9582-1a7d9d06dca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0f:b0:12:c3:29:a5:fc:31:99:cb:31:87:f7: f8:6c:15:aa:5d:c7:1a:6f:0b:88:f0:c6:1b:e3:8c: 79:52:5c:fa:ce:44:59:a9:38:05:cd:d1:ec:0a:7f: 63:56:1d:ed:67:6d:f3:95:38:e9:73:05:33:76:98: 20:da:e8:c7:58:54:28:f7:1d:c6:53:09:9e:ba:52: 94:a4:23:af:1c:8b:e8:f4:2b:68:97:27:78:5f:58: 0e:60:28:0b:97:3d:6d:32:0e:94:33:74:54:85:cd: 63:c3:8f:f5:26:ab:ec:a8:3c:c0:18:44:10:55:c0: 3b:b3:df:8a:85:35:34:6b:fe:0e:da:13:c7:cc:10: 13:b7:aa:bf:af:e8:42:48:10:e8:c7:82:ed:70:e9: e4:b0:5a:14:fe:ca:d5:e1:60:26:ab:dc:f4:77:f5: 93:6e:db:17:14:a6:02:87:0e:87:c9:2a:2c:8a:5a: f6:a7:20:1b:a5:f4:64:07:3d:64:1d:65:f5:2d:2c: 6d:a6:b8:87:45:95:56:dc:18:b6:66:82:38:ce:f4: 6b:c0:74:c2:e1:e3:9b:b2:cf:8b:f5:17:2b:29:88: e8:57:31:9f:01:68:a2:2e:28:5d:15:e3:cc:45:e8: ad:3a:9d:0d:16:a6:c3:c9:33:9f:cb:ec:10:65:02: 05:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:17:C8:E9:28:9E:54:95:E8:80:5B:8E:CC:C6:30:2D:80:DE:F5:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/d1c97a1a-4e55-364a-b407-9f6e1a9bc993.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl X509v3 Authority Key Identifier: keyid:82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer sbgp-ipAddrBlock: critical IPv4: 209.251.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:fe:8e:86:0a:dc:12:3e:85:fd:84:94:ac:1e:e3:bc:af:31: 5e:26:5e:03:d7:22:04:da:57:3f:46:94:62:e3:f5:14:ac:00: 88:d0:fc:45:3c:17:f1:bb:eb:f7:a5:96:3b:b2:93:31:a1:7e: ef:54:f6:21:93:6e:f2:43:99:64:83:a2:f3:7a:92:f8:52:40: 4d:17:91:38:9c:52:e4:b8:2e:48:5a:c8:02:d9:7b:64:1f:0d: 9d:9e:4e:07:94:eb:34:08:93:50:cc:fa:fb:e3:f8:02:8d:fb: 83:c4:c8:ff:58:30:ec:94:30:10:48:10:bb:02:aa:23:fc:28: 21:c1:27:17:62:f6:cf:75:a4:cb:72:e6:d7:28:62:96:73:57: 7e:80:01:da:f9:1d:b8:a4:5c:3b:ba:57:e8:bd:ac:c6:4d:6f: 42:85:64:1f:51:21:61:22:9a:0f:1a:1a:08:ad:59:91:14:7a: d2:6a:ca:e2:eb:af:f3:29:31:fb:76:09:6c:ad:5b:f1:3b:3b: b7:24:46:3f:05:a2:e7:2c:1d:92:04:9d:37:4f:12:aa:a5:26: ea:ac:99:e4:6f:9f:d2:49:f1:8e:0d:ac:06:c5:9e:08:ee:4b: 6f:2c:d5:ff:1e:c6:33:4b:8e:c5:e2:0a:f6:bc:2d:29:2a:6e: 27:ac:02:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj78SixlyaoVhdY1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFmNTkwYjYtZWI2ZS00OTY5LTgyNGItMGRmMjQ3MjIw MjgzMB4XDTI1MDIyNDAyMDAzOFoXDTI1MDUyNTAxMDAzOFowLzEtMCsGA1UEAxMk ZDFlZThlZTAtYmY5Zi00MDEzLTk1ODItMWE3ZDlkMDZkY2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzw+wEsMppfwxmcsxh/f4bBWqXccabwuI8MYb 44x5Ulz6zkRZqTgFzdHsCn9jVh3tZ23zlTjpcwUzdpgg2ujHWFQo9x3GUwmeulKU pCOvHIvo9Ctolyd4X1gOYCgLlz1tMg6UM3RUhc1jw4/1JqvsqDzAGEQQVcA7s9+K hTU0a/4O2hPHzBATt6q/r+hCSBDox4LtcOnksFoU/srV4WAmq9z0d/WTbtsXFKYC hw6HySosilr2pyAbpfRkBz1kHWX1LSxtpriHRZVW3Bi2ZoI4zvRrwHTC4eObss+L 9RcrKYjoVzGfAWiiLihdFePMReitOp0NFqbDyTOfy+wQZQIFhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4XyOkonlSV6IBbjszGMC2A3vXQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1 OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYyNDcyMjAyODMvZDFjOTdhMWEtNGU1NS0z NjRhLWI0MDctOWY2ZTFhOWJjOTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTFmNTkwYjYtZWI2ZS00OTY5LTgy NGItMGRmMjQ3MjIwMjgzLzExZjU5MGI2LWViNmUtNDk2OS04MjRiLTBkZjI0NzIy MDI4My5jcmwwHwYDVR0jBBgwFoAUguMk2L7Ghd1PatUmk2y+CkgxGFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYy NDcyMjAyODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0fscMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAET+joYK3BI+hf2ElKwe47yvMV4mXgPXIgTaVz9GlGLj9RSsAIjQ/EU8 F/G76/elljuykzGhfu9U9iGTbvJDmWSDovN6kvhSQE0XkTicUuS4LkhayALZe2Qf DZ2eTgeU6zQIk1DM+vvj+AKN+4PEyP9YMOyUMBBIELsCqiP8KCHBJxdi9s91pMty 5tcoYpZzV36AAdr5HbikXDu6V+i9rMZNb0KFZB9RIWEimg8aGgitWZEUetJqyuLr r/MpMft2CWytW/E7O7ckRj8FoucsHZIEnTdPEqqlJuqsmeRvn9JJ8Y4NrAbFngju S28s1f8exjNLjsXiCva8LSkqbiesAlk= -----END CERTIFICATE-----Generated at Wed Apr 30 09:03:54 2025 by rpki-client