$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/a8c511f3-e3d8-3058-9991-60a89d2dd1fe.roa File: a8c511f3-e3d8-3058-9991-60a89d2dd1fe.roa (raw, json) Hash identifier: W9ZY3i5wxXSBtWHhtMe/nfbUdFnuXnGC/+jaK0VFdDw= Subject key identifier: 83:75:CC:E7:50:8B:F3:F0:4D:73:34:16:21:DE:69:AC:3F:B0:D9:2E Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F432858499D005A39EE6EEA4F5C38A760 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/a8c511f3-e3d8-3058-9991-60a89d2dd1fe.roa Signing time: Tue 22 Apr 2025 18:36:27 +0000 ROA not before: Tue 22 Apr 2025 18:36:27 +0000 ROA not after: Mon 21 Jul 2025 18:36:27 +0000 asID: 11404 IP address blocks: 209.236.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:00:5a:39:ee:6e:ea:4f:5c:38:a7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Apr 22 18:36:27 2025 GMT Not After : Jul 21 18:36:27 2025 GMT Subject: CN=c406820a-037f-4939-9e8b-7955394549ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:70:f5:f0:28:2e:03:de:06:50:c8:d4:d6:87: ac:ea:86:b2:3c:75:12:c1:cb:9f:ae:4c:f2:e4:dd: c3:05:b4:39:3c:0e:7f:49:55:b7:70:ed:92:2b:fa: b3:fc:2e:d1:02:f9:43:4e:e7:6f:1e:81:f3:ee:a5: 6e:66:a8:06:1c:f3:8c:f3:40:3d:38:7f:fb:35:b4: 2f:0b:c9:1e:d1:0e:62:83:fd:b6:78:d6:09:67:5c: 0b:d7:7a:46:2c:af:3a:1b:45:0d:bc:24:14:6b:a7: 5b:5e:9e:79:bd:7b:29:c7:46:8e:85:a2:06:c6:45: e2:c0:26:b1:f9:00:45:b3:52:b8:68:d9:f2:df:a5: cc:6c:74:de:38:8d:44:a1:35:ff:d6:de:db:fb:47: e0:71:6a:9e:cb:e7:29:b3:d1:f0:9c:93:26:33:e6: d8:06:1a:1f:ac:98:0b:fd:78:9c:01:23:63:0a:be: 46:9b:a5:ce:c2:4c:df:56:26:cc:75:ff:52:21:21: 65:6a:c9:f3:9f:3f:35:05:36:8f:0b:f6:14:63:b6: 88:b6:23:86:49:99:ab:4d:81:bd:ff:a2:6c:73:d9: 07:1c:c3:26:70:4f:ef:76:3d:53:e3:36:fa:ab:fb: 8e:91:87:34:df:17:0b:43:ad:b3:eb:b6:68:95:63: 2a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:75:CC:E7:50:8B:F3:F0:4D:73:34:16:21:DE:69:AC:3F:B0:D9:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/a8c511f3-e3d8-3058-9991-60a89d2dd1fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:d0:b5:5a:ca:f4:33:c3:7d:81:72:a4:32:95:3a:a1:73:9c: 39:be:42:6b:b5:03:8c:69:f6:34:fd:a8:b8:78:8b:09:60:61: c8:52:28:03:b3:e5:9f:dd:4b:15:60:55:92:2c:83:d9:34:da: 0f:64:6d:43:6f:c6:e4:e5:b3:a4:34:10:4a:7b:73:6d:ef:ac: 46:4d:f3:01:c7:bc:89:c3:4c:e7:de:0c:98:ac:4d:18:91:38: 11:28:78:fe:cd:01:91:3e:4d:91:1b:ab:07:01:9b:62:26:c2: 2a:ee:04:82:95:9c:e3:39:40:f5:32:51:35:b0:e9:4c:7f:b9: 4d:c9:39:ff:86:20:c7:49:cc:dd:36:12:cb:7f:0e:6c:6c:53: 80:62:21:27:6a:32:2a:a7:9d:ed:8d:07:e7:e7:92:ed:ee:90: 0e:df:49:bd:88:98:fd:e8:d4:52:52:e0:f1:e6:80:9c:db:8d: 76:45:0d:71:d9:de:60:09:56:d1:c0:65:f5:4b:96:16:70:97: 4e:94:40:0a:74:f7:63:69:cb:c8:00:96:36:fc:ab:0a:fe:07: 13:19:43:55:ce:9a:3e:f2:03:11:e4:0e:e1:be:b2:8a:a6:5e: 9d:4e:23:be:a0:b5:2e:cc:76:9c:1f:7d:42:fc:d7:18:74:11: 20:37:ae:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdAFo57m7qT1w4p2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDQyMjE4MzYyN1oXDTI1MDcyMTE4MzYyN1owLzEtMCsGA1UEAxMk YzQwNjgyMGEtMDM3Zi00OTM5LTllOGItNzk1NTM5NDU0OWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HD18CguA94GUMjU1oes6oayPHUSwcufrkzy 5N3DBbQ5PA5/SVW3cO2SK/qz/C7RAvlDTudvHoHz7qVuZqgGHPOM80A9OH/7NbQv C8ke0Q5ig/22eNYJZ1wL13pGLK86G0UNvCQUa6dbXp55vXspx0aOhaIGxkXiwCax +QBFs1K4aNny36XMbHTeOI1EoTX/1t7b+0fgcWqey+cps9HwnJMmM+bYBhofrJgL /XicASNjCr5Gm6XOwkzfVibMdf9SISFlasnznz81BTaPC/YUY7aItiOGSZmrTYG9 /6Jsc9kHHMMmcE/vdj1T4zb6q/uOkYc03xcLQ62z67ZolWMqSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIN1zOdQi/PwTXM0FiHeaaw/sNkuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvYThjNTExZjMtZTNkOC0z MDU4LTk5OTEtNjBhODlkMmRkMWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbQtVrK9DPDfYFypDKVOqFznDm+Qmu1A4xp9jT9qLh4iwlgYchSKAOz 5Z/dSxVgVZIsg9k02g9kbUNvxuTls6Q0EEp7c23vrEZN8wHHvInDTOfeDJisTRiR OBEoeP7NAZE+TZEbqwcBm2ImwiruBIKVnOM5QPUyUTWw6Ux/uU3JOf+GIMdJzN02 Est/DmxsU4BiISdqMiqnne2NB+fnku3ukA7fSb2ImP3o1FJS4PHmgJzbjXZFDXHZ 3mAJVtHAZfVLlhZwl06UQAp092Npy8gAljb8qwr+BxMZQ1XOmj7yAxHkDuG+soqm Xp1OI76gtS7MdpwffUL81xh0ESA3rjg= -----END CERTIFICATE-----Generated at Sun Apr 27 01:02:56 2025 by rpki-client