$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/98cb527c-fba2-31d8-a87a-d8791809c167.roa File: 98cb527c-fba2-31d8-a87a-d8791809c167.roa (raw, json) Hash identifier: 3gnMpgbdKTbsrom1fl9YKHhS6owSZoK6p0Q4dQO6g/w= Subject key identifier: CB:42:38:B7:CD:9A:33:62:4B:EC:50:53:CE:2A:0B:01:F7:D0:99:9D Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F432858499D4BB1B340E612CA657F0700 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/98cb527c-fba2-31d8-a87a-d8791809c167.roa Signing time: Tue 22 Apr 2025 21:08:15 +0000 ROA not before: Tue 22 Apr 2025 21:08:15 +0000 ROA not after: Mon 21 Jul 2025 21:08:15 +0000 asID: 6079 IP address blocks: 209.236.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:4b:b1:b3:40:e6:12:ca:65:7f:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Apr 22 21:08:15 2025 GMT Not After : Jul 21 21:08:15 2025 GMT Subject: CN=73d7a771-5822-471d-bf21-40127fa025f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d3:e7:cc:be:04:f5:6e:a4:ed:5d:ae:26:ef: 98:5b:82:9b:eb:88:8f:9b:9a:d8:5a:8f:a2:15:89: 8f:7f:e0:72:b0:36:df:e6:b5:e8:27:56:b3:ce:ef: ae:9c:c8:12:1e:5c:48:0d:c8:d8:5d:0e:16:b0:3e: 61:4d:e8:a8:d1:11:9c:f4:d7:02:d3:20:08:71:e8: 9e:7c:e7:32:98:30:4c:97:a9:ce:e9:cd:65:34:7e: 0e:a6:ff:bd:d7:1b:f9:14:51:d2:52:5d:d4:01:1b: ad:37:14:8b:00:8d:2d:07:82:4c:b0:5e:34:cd:b1: 10:d4:39:75:0f:cb:b9:82:f3:68:60:3d:21:6c:89: 57:ed:79:d3:7e:78:da:a8:38:cc:c6:74:2d:04:b3: 58:e4:ce:51:ea:99:6d:ad:ac:91:bb:00:5e:c2:fc: ee:3b:d0:d9:ae:8c:c0:4f:01:1a:71:9b:43:57:d5: 32:f3:7b:9c:82:e3:19:8c:94:72:e6:35:16:19:2c: 10:9d:31:3b:34:90:eb:c4:7d:41:ac:2b:af:e9:39: 0c:6f:ea:53:0d:a8:0a:eb:62:85:d3:bb:bc:57:33: 4f:f9:c8:02:27:cd:ab:a4:45:df:64:28:8b:71:ec: 3d:8f:4c:05:64:5e:0c:49:04:3e:10:da:a7:14:56: a6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:42:38:B7:CD:9A:33:62:4B:EC:50:53:CE:2A:0B:01:F7:D0:99:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/98cb527c-fba2-31d8-a87a-d8791809c167.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:7b:b4:03:1e:96:37:14:d9:b4:0e:e1:46:ab:8e:c6:f4:29: c7:a4:f2:7c:a5:78:9c:58:2c:9e:7c:aa:b0:fc:d0:55:9f:a1: 08:af:db:cf:94:fc:f2:0b:16:8d:4f:e1:a9:56:d9:2b:3a:5c: 66:02:de:3a:94:c1:30:c7:6c:f0:38:5f:87:ac:bc:89:33:fd: 06:1d:bf:f0:04:44:6e:4f:ea:26:e6:54:a9:8b:5e:4b:3e:c0: 09:d6:81:c3:39:58:b5:6d:f6:e3:82:b1:4c:bd:f7:4a:b7:32: 51:bb:8a:10:3a:07:1d:63:03:ca:75:19:e5:a4:d1:40:a7:df: 67:2a:00:d2:cd:92:6f:10:38:9f:7b:d0:f7:9d:84:7d:e2:51: 78:4b:fc:ee:d4:eb:a3:2d:a9:c7:22:63:0f:19:07:fe:a5:0c: f4:56:61:84:40:73:bb:1d:e0:3f:25:4f:15:44:10:f3:c0:9c: 3e:7b:06:ae:d3:62:28:b3:45:27:1a:22:be:8a:84:4b:4a:0d: 6d:35:0a:9b:7a:28:ff:f3:33:f9:72:54:37:d6:dd:bb:63:8c: 54:8f:85:8f:f1:1b:8b:99:04:df:ff:1b:93:34:0a:4f:a0:9b: 14:8d:49:bb:94:79:b0:47:31:21:e5:d5:98:0e:36:d2:49:96: 9e:79:59:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdS7GzQOYSymV/BwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDQyMjIxMDgxNVoXDTI1MDcyMTIxMDgxNVowLzEtMCsGA1UEAxMk NzNkN2E3NzEtNTgyMi00NzFkLWJmMjEtNDAxMjdmYTAyNWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9PnzL4E9W6k7V2uJu+YW4Kb64iPm5rYWo+i FYmPf+BysDbf5rXoJ1azzu+unMgSHlxIDcjYXQ4WsD5hTeio0RGc9NcC0yAIceie fOcymDBMl6nO6c1lNH4Opv+91xv5FFHSUl3UARutNxSLAI0tB4JMsF40zbEQ1Dl1 D8u5gvNoYD0hbIlX7XnTfnjaqDjMxnQtBLNY5M5R6pltrayRuwBewvzuO9DZrozA TwEacZtDV9Uy83ucguMZjJRy5jUWGSwQnTE7NJDrxH1BrCuv6TkMb+pTDagK62KF 07u8VzNP+cgCJ82rpEXfZCiLcew9j0wFZF4MSQQ+ENqnFFamMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtCOLfNmjNiS+xQU84qCwH30JmdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvOThjYjUyN2MtZmJhMi0z MWQ4LWE4N2EtZDg3OTE4MDljMTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGx7tAMeljcU2bQO4Uarjsb0Kcek8nyleJxYLJ58qrD80FWfoQiv28+U /PILFo1P4alW2Ss6XGYC3jqUwTDHbPA4X4esvIkz/QYdv/AERG5P6ibmVKmLXks+ wAnWgcM5WLVt9uOCsUy990q3MlG7ihA6Bx1jA8p1GeWk0UCn32cqANLNkm8QOJ97 0PedhH3iUXhL/O7U66MtqcciYw8ZB/6lDPRWYYRAc7sd4D8lTxVEEPPAnD57Bq7T YiizRScaIr6KhEtKDW01Cpt6KP/zM/lyVDfW3btjjFSPhY/xG4uZBN//G5M0Ck+g mxSNSbuUebBHMSHl1ZgONtJJlp55WU0= -----END CERTIFICATE-----Generated at Sat Apr 26 19:57:03 2025 by rpki-client