$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/960c15d2-96c4-3bd3-8c2d-5ffb7f5347fe.roa File: 960c15d2-96c4-3bd3-8c2d-5ffb7f5347fe.roa (raw, json) Hash identifier: TOFkkaBUc7DE+Sxv7BAUAmW/97S08dQVBh0rqtF7koM= Subject key identifier: FC:88:E2:7A:3B:B2:08:D5:7A:5E:70:62:96:D3:56:73:4B:B4:61:37 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F432858499CFED3BC57B4F1735DC40E00 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/960c15d2-96c4-3bd3-8c2d-5ffb7f5347fe.roa Signing time: Tue 22 Apr 2025 18:33:22 +0000 ROA not before: Tue 22 Apr 2025 18:33:22 +0000 ROA not after: Mon 21 Jul 2025 18:33:22 +0000 asID: 11404 IP address blocks: 209.236.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:fe:d3:bc:57:b4:f1:73:5d:c4:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Apr 22 18:33:22 2025 GMT Not After : Jul 21 18:33:22 2025 GMT Subject: CN=5eb23753-5ecb-4fba-a12c-c17183348224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b2:a2:88:d4:20:cb:4a:c9:52:27:53:22:5c: 22:de:f7:c5:20:4b:2f:84:ec:d5:53:69:d8:93:bd: 1d:7f:a8:61:87:2a:53:e8:a3:df:00:9e:66:c4:8e: 14:1e:11:8a:c7:36:a2:ea:23:6f:ea:3d:c7:ef:00: 6c:98:77:f5:74:f0:73:44:73:bb:a1:aa:4a:05:bc: b5:50:b3:ed:ca:1e:bb:dd:49:0b:27:95:71:ff:ee: 7e:98:41:d6:b5:34:bc:3f:3b:4d:c7:b4:b5:e3:f0: d5:ae:b6:d9:b1:96:a3:a7:00:78:f1:2d:57:15:91: f3:cc:b3:45:1e:25:c5:78:56:97:ff:7e:25:d6:2f: a4:22:7b:16:64:8e:6c:86:e2:09:c0:a0:77:86:53: ac:d5:82:53:e0:f8:0a:30:f4:3c:19:35:a8:7f:5d: 21:5d:d3:6e:44:ae:c9:f6:4d:e6:22:ff:d3:74:84: ee:1c:63:5f:ad:51:4c:63:50:8a:02:f0:95:d0:df: c1:aa:3c:c3:4f:5e:5c:e8:ee:b0:ee:3c:fe:c4:39: 52:46:9a:56:f3:84:cb:4f:bb:e6:91:ba:a4:80:47: bb:51:e9:31:61:af:ef:8d:03:98:a3:9b:96:88:35: 09:f7:4d:9e:72:63:b0:93:37:3d:45:5f:5f:5e:9b: fa:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:88:E2:7A:3B:B2:08:D5:7A:5E:70:62:96:D3:56:73:4B:B4:61:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/960c15d2-96c4-3bd3-8c2d-5ffb7f5347fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:dc:fb:1e:85:bc:c4:01:64:e5:23:4d:34:5b:e6:da:59:f0: cd:68:1f:b6:0c:24:2e:34:df:53:8d:c5:cb:5b:ba:d4:5f:05: 82:35:fd:4c:b3:c3:5f:4e:29:79:0a:c1:3d:1e:01:ed:03:b3: 5c:32:d3:2d:9a:5a:32:36:62:a3:07:0f:dc:bc:da:cd:35:e9: 00:a3:23:c5:c1:8a:0d:b2:98:0d:64:1f:8f:b2:73:5b:88:a3: 1e:f6:3f:af:f5:e1:0b:62:69:fd:7f:2b:65:35:10:a8:c1:06: b8:65:b4:41:41:2e:41:fe:de:fe:cf:69:83:04:15:0f:ed:6d: 58:6d:43:d0:0f:8a:5d:fa:72:22:c6:27:70:36:ef:ba:e4:ed: 1e:05:25:c6:f7:61:cf:bb:6f:64:db:b9:de:ec:84:8f:15:d4: 49:56:2b:97:fd:1a:d5:6d:f5:96:39:35:54:d9:fa:02:91:4e: a1:d7:37:d9:de:85:17:10:fe:60:a7:1a:2b:07:bc:7f:a7:28: 35:db:0f:8f:5f:48:9f:6e:a6:c0:f9:18:73:82:ed:25:bb:7f: ed:3d:dc:a7:27:a5:26:f0:ec:db:b6:55:81:40:9f:9e:32:13: 70:5f:08:35:d1:94:74:41:13:57:f9:41:76:0e:b9:05:83:eb: 5e:88:b5:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmc/tO8V7Txc13EDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDQyMjE4MzMyMloXDTI1MDcyMTE4MzMyMlowLzEtMCsGA1UEAxMk NWViMjM3NTMtNWVjYi00ZmJhLWExMmMtYzE3MTgzMzQ4MjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbKiiNQgy0rJUidTIlwi3vfFIEsvhOzVU2nY k70df6hhhypT6KPfAJ5mxI4UHhGKxzai6iNv6j3H7wBsmHf1dPBzRHO7oapKBby1 ULPtyh673UkLJ5Vx/+5+mEHWtTS8PztNx7S14/DVrrbZsZajpwB48S1XFZHzzLNF HiXFeFaX/34l1i+kInsWZI5shuIJwKB3hlOs1YJT4PgKMPQ8GTWof10hXdNuRK7J 9k3mIv/TdITuHGNfrVFMY1CKAvCV0N/BqjzDT15c6O6w7jz+xDlSRppW84TLT7vm kbqkgEe7UekxYa/vjQOYo5uWiDUJ902ecmOwkzc9RV9fXpv6qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyI4no7sgjVel5wYpbTVnNLtGE3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvOTYwYzE1ZDItOTZjNC0z YmQzLThjMmQtNWZmYjdmNTM0N2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzc+x6FvMQBZOUjTTRb5tpZ8M1oH7YMJC4031ONxctbutRfBYI1/Uyz w19OKXkKwT0eAe0Ds1wy0y2aWjI2YqMHD9y82s016QCjI8XBig2ymA1kH4+yc1uI ox72P6/14Qtiaf1/K2U1EKjBBrhltEFBLkH+3v7PaYMEFQ/tbVhtQ9APil36ciLG J3A277rk7R4FJcb3Yc+7b2Tbud7shI8V1ElWK5f9GtVt9ZY5NVTZ+gKRTqHXN9ne hRcQ/mCnGisHvH+nKDXbD49fSJ9upsD5GHOC7SW7f+093KcnpSbw7Nu2VYFAn54y E3BfCDXRlHRBE1f5QXYOuQWD616ItQ4= -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:51 2025 by rpki-client