$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/de5b00f2-cadd-3f54-97b7-032b7ca57259.roa File: de5b00f2-cadd-3f54-97b7-032b7ca57259.roa (raw, json) Hash identifier: sRHM98Z6ikHJ2JnEqZ/W/DD7rSuAAwlEJJHyLa2kfPw= Subject key identifier: CA:5B:62:2A:9F:35:71:11:C9:E2:0F:0C:1E:47:09:D5:B3:AB:A6:64 Certificate issuer: /CN=237e8029-86f4-41b0-ab75-535531b02fb3 Certificate serial: 010D0C9F432858499829D1CD59130DC99EAA8C00 Authority key identifier: F8:32:2A:B4:B0:35:C2:D6:A3:D4:EC:A3:B3:76:1C:14:AE:AB:6B:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/de5b00f2-cadd-3f54-97b7-032b7ca57259.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 30713 IP address blocks: 209.221.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/237e8029-86f4-41b0-ab75-535531b02fb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/237e8029-86f4-41b0-ab75-535531b02fb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d1:cd:59:13:0d:c9:9e:aa:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237e8029-86f4-41b0-ab75-535531b02fb3 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=27f0ce62-5fd7-4890-9918-af1bb8db265f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6f:9f:45:75:be:c7:d6:fe:5b:69:9e:ed:a8: c9:85:1b:8a:7f:c0:80:8a:66:4d:cd:18:df:ec:ab: f6:b3:da:bc:40:81:0a:34:28:2e:8e:a0:0e:0c:50: 04:fe:08:21:10:06:0d:a5:d9:db:7d:d2:50:d1:df: 0b:05:5d:be:6b:44:ee:d8:f7:65:31:9c:49:00:49: ce:88:0a:0c:63:e2:3b:ee:fc:5d:f5:21:3b:81:5b: 8c:9b:bf:b4:a6:1b:0d:54:ff:4f:8a:7f:ac:45:98: f6:03:8a:02:64:93:56:c9:b0:27:67:32:3e:80:99: f6:c6:f5:ca:70:c2:69:ff:f4:4e:0e:4a:44:4a:17: 5b:05:c5:5a:9d:d6:15:f5:82:1d:10:23:bd:3e:f1: ae:6a:2d:be:77:83:a4:d6:5f:7d:3e:0a:02:24:b3: 63:42:09:6d:42:c7:74:39:25:6e:8c:9b:65:c5:78: c1:0f:33:5a:c3:ee:7a:72:1e:d3:7c:87:9c:72:bc: 53:15:2c:0a:e8:1b:b4:b5:64:db:d3:53:49:a1:81: f8:28:e6:85:6d:c5:30:23:6c:18:89:ed:41:a0:07: a8:ba:4a:95:b6:cc:bd:47:c6:be:47:c7:db:6a:f2: f9:cf:56:58:33:c8:4f:83:75:8b:8e:bf:47:ce:e0: 2b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:5B:62:2A:9F:35:71:11:C9:E2:0F:0C:1E:47:09:D5:B3:AB:A6:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/de5b00f2-cadd-3f54-97b7-032b7ca57259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/237e8029-86f4-41b0-ab75-535531b02fb3.crl X509v3 Authority Key Identifier: keyid:F8:32:2A:B4:B0:35:C2:D6:A3:D4:EC:A3:B3:76:1C:14:AE:AB:6B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3.cer sbgp-ipAddrBlock: critical IPv4: 209.221.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:f4:04:66:ce:58:18:b6:56:88:f9:41:f8:d7:48:f0:1b:66: c8:79:27:8a:c9:aa:a6:c1:b8:dc:60:84:06:ab:40:e3:43:e8: 8a:40:70:19:29:12:67:9a:30:33:13:63:61:90:01:19:fb:6a: 51:4a:7a:9a:c8:88:b8:34:db:ae:48:47:3c:77:e4:a2:3d:b2: e6:04:b1:23:3e:f7:ea:0e:d2:50:6e:f2:11:fd:50:9c:4e:74: ff:c2:f7:5a:76:d3:9b:32:b6:6b:4c:61:6b:24:1e:ef:6a:01: f1:9b:5d:e9:6f:77:dd:61:ca:d8:14:77:1a:8c:71:5c:d3:54: 1b:c2:b0:8b:28:d1:64:ab:ad:f4:6f:c1:77:47:e1:10:2a:8d: 1a:49:e5:40:b8:10:6a:6d:39:01:94:10:ce:ca:e2:4d:81:2c: 94:14:02:2e:36:fc:4b:dd:76:15:4f:00:b2:47:11:1e:73:aa: 9c:e6:a1:ee:52:a5:0b:64:c7:51:77:33:ce:27:e5:71:28:51: 1d:c5:86:07:51:c4:8b:d1:37:63:51:e3:40:ad:34:06:b5:66: 3f:a5:9f:12:11:85:3d:47:4a:69:8e:e5:6f:9b:ff:d0:d8:a9: 34:a8:44:79:8d:9d:a8:9d:57:1d:6d:75:12:5f:1d:1d:8e:60: 16:f1:86:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdHNWRMNyZ6qjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjM3ZTgwMjktODZmNC00MWIwLWFiNzUtNTM1NTMxYjAy ZmIzMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk MjdmMGNlNjItNWZkNy00ODkwLTk5MTgtYWYxYmI4ZGIyNjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW+fRXW+x9b+W2me7ajJhRuKf8CAimZNzRjf 7Kv2s9q8QIEKNCgujqAODFAE/gghEAYNpdnbfdJQ0d8LBV2+a0Tu2PdlMZxJAEnO iAoMY+I77vxd9SE7gVuMm7+0phsNVP9Pin+sRZj2A4oCZJNWybAnZzI+gJn2xvXK cMJp//RODkpEShdbBcVandYV9YIdECO9PvGuai2+d4Ok1l99PgoCJLNjQgltQsd0 OSVujJtlxXjBDzNaw+56ch7TfIeccrxTFSwK6Bu0tWTb01NJoYH4KOaFbcUwI2wY ie1BoAeoukqVtsy9R8a+R8fbavL5z1ZYM8hPg3WLjr9HzuArSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpbYiqfNXERyeIPDB5HCdWzq6ZkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMzdl ODAyOS04NmY0LTQxYjAtYWI3NS01MzU1MzFiMDJmYjMvZGU1YjAwZjItY2FkZC0z ZjU0LTk3YjctMDMyYjdjYTU3MjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjM3ZTgwMjktODZmNC00MWIwLWFi NzUtNTM1NTMxYjAyZmIzLzIzN2U4MDI5LTg2ZjQtNDFiMC1hYjc1LTUzNTUzMWIw MmZiMy5jcmwwHwYDVR0jBBgwFoAU+DIqtLA1wtaj1Oyjs3YcFK6ra3MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMzdlODAyOS04NmY0LTQxYjAtYWI3NS01MzU1 MzFiMDJmYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0d1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABn0BGbOWBi2Voj5QfjXSPAbZsh5J4rJqqbBuNxghAarQOND6IpAcBkp EmeaMDMTY2GQARn7alFKeprIiLg0265IRzx35KI9suYEsSM+9+oO0lBu8hH9UJxO dP/C91p205sytmtMYWskHu9qAfGbXelvd91hytgUdxqMcVzTVBvCsIso0WSrrfRv wXdH4RAqjRpJ5UC4EGptOQGUEM7K4k2BLJQUAi42/EvddhVPALJHER5zqpzmoe5S pQtkx1F3M84n5XEoUR3FhgdRxIvRN2NR40CtNAa1Zj+lnxIRhT1HSmmO5W+b/9DY qTSoRHmNnaidVx1tdRJfHR2OYBbxhtU= -----END CERTIFICATE-----Generated at Tue Apr 29 07:06:51 2025 by rpki-client