$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d8882e92-c1ec-3e3b-8ebc-6c5deabece37.roa File: d8882e92-c1ec-3e3b-8ebc-6c5deabece37.roa (raw, json) Hash identifier: H2UauarFfZK1hMMj91if/M1YU4vWlbQextsquYL3VrI= Subject key identifier: 85:4F:9C:FE:FF:19:CE:77:D2:2D:06:EF:AB:17:23:6E:38:31:71:26 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F432858499D4FDE4CD0D212431CB82180 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d8882e92-c1ec-3e3b-8ebc-6c5deabece37.roa Signing time: Tue 22 Apr 2025 21:16:40 +0000 ROA not before: Tue 22 Apr 2025 21:16:40 +0000 ROA not after: Mon 21 Jul 2025 21:16:40 +0000 asID: 6079 IP address blocks: 209.236.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:4f:de:4c:d0:d2:12:43:1c:b8:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Apr 22 21:16:40 2025 GMT Not After : Jul 21 21:16:40 2025 GMT Subject: CN=b66c5c77-6a26-4306-8bca-4992c000882a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:55:0e:aa:08:43:d3:63:c4:5e:99:91:03:e9: 40:58:62:3f:a6:83:87:a9:f7:c5:2c:3c:18:28:bb: cd:a9:2f:8f:a4:b2:72:05:46:60:31:58:b4:e4:02: 69:11:c0:68:99:35:5b:56:e9:8e:b6:f4:35:d0:ea: c7:7f:ee:e3:62:2f:46:6f:b6:1f:2f:a8:34:e7:10: 26:47:14:5d:9c:c6:4c:e5:e4:0a:af:75:7a:d3:54: 5d:6b:3a:be:c6:2c:5e:0a:f2:2b:34:b0:0c:84:c1: d7:98:30:58:ee:c3:58:f5:4a:54:a6:91:5a:b6:90: f9:c2:23:e2:6e:bc:92:0d:35:e3:54:3e:76:6e:8a: 43:b6:58:6c:cf:38:2d:de:8b:94:4c:55:23:39:d6: 09:a3:56:9f:9f:1c:d9:7b:ca:ee:a4:81:61:db:2e: 03:56:83:00:5d:09:74:77:23:8b:0e:85:e8:11:ea: 50:b9:c5:38:6e:b7:77:bb:35:2d:87:e5:f1:c5:9d: 8d:32:68:a3:f1:df:0d:59:91:4c:ff:b7:31:bb:80: cc:4f:f5:4b:1b:ff:aa:77:44:4e:1c:6a:69:85:76: 2f:ca:b4:00:08:04:55:03:95:53:e1:25:50:5c:2c: f1:de:6e:11:3e:43:81:52:5a:5f:49:bd:a2:09:a1: c5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4F:9C:FE:FF:19:CE:77:D2:2D:06:EF:AB:17:23:6E:38:31:71:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d8882e92-c1ec-3e3b-8ebc-6c5deabece37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:c9:40:e1:4b:48:6d:83:0a:c3:2f:df:dc:f6:9a:25:40:46: 44:89:53:52:b0:5b:99:29:c7:b4:1b:14:0c:c6:c9:33:f7:e1: 4c:a5:29:29:2e:86:f4:14:e5:5f:52:63:50:9c:14:16:1e:51: ae:7d:19:68:69:cb:09:2e:5b:be:72:76:53:9f:a0:e9:c7:02: c6:55:fe:a6:ec:cc:cd:e8:2e:7e:a9:1b:49:a0:af:70:f6:d1: 33:fa:f1:12:9b:61:5b:8a:04:64:55:a5:47:87:24:a5:46:b6: 32:a7:1a:58:cd:f1:d1:96:cd:a2:c8:1d:3f:84:e6:f2:b2:8b: f1:ae:af:3e:15:35:b9:27:aa:ee:ad:f4:6a:7b:20:09:5b:ec: 17:3b:6d:b2:5b:9b:ed:c6:ab:27:15:3a:40:04:fa:70:61:97: f5:e9:7d:de:26:09:16:c8:e0:fa:ee:aa:eb:80:6c:f9:e9:16: 71:1d:ff:65:94:10:29:08:67:3f:da:0f:ed:4d:f8:81:bc:a3: 10:49:cc:80:6e:6a:a1:92:59:7e:0b:09:5c:75:e4:c7:93:56: 13:ae:2f:52:57:2e:ea:7a:cc:b5:e9:92:02:d7:c3:7e:d7:ab: 0f:d5:d5:aa:b6:45:9f:60:82:62:4a:aa:b2:ce:d1:a8:1f:63: 7b:65:8e:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdT95M0NISQxy4IYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDQyMjIxMTY0MFoXDTI1MDcyMTIxMTY0MFowLzEtMCsGA1UEAxMk YjY2YzVjNzctNmEyNi00MzA2LThiY2EtNDk5MmMwMDA4ODJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFUOqghD02PEXpmRA+lAWGI/poOHqffFLDwY KLvNqS+PpLJyBUZgMVi05AJpEcBomTVbVumOtvQ10OrHf+7jYi9Gb7YfL6g05xAm RxRdnMZM5eQKr3V601Rdazq+xixeCvIrNLAMhMHXmDBY7sNY9UpUppFatpD5wiPi brySDTXjVD52bopDtlhszzgt3ouUTFUjOdYJo1afnxzZe8rupIFh2y4DVoMAXQl0 dyOLDoXoEepQucU4brd3uzUth+XxxZ2NMmij8d8NWZFM/7cxu4DMT/VLG/+qd0RO HGpphXYvyrQACARVA5VT4SVQXCzx3m4RPkOBUlpfSb2iCaHFTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVPnP7/Gc530i0G76sXI244MXEmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvZDg4ODJlOTItYzFlYy0z ZTNiLThlYmMtNmM1ZGVhYmVjZTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ezyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHJQOFLSG2DCsMv39z2miVARkSJU1KwW5kpx7QbFAzGyTP34UylKSku hvQU5V9SY1CcFBYeUa59GWhpywkuW75ydlOfoOnHAsZV/qbszM3oLn6pG0mgr3D2 0TP68RKbYVuKBGRVpUeHJKVGtjKnGljN8dGWzaLIHT+E5vKyi/Gurz4VNbknqu6t 9Gp7IAlb7Bc7bbJbm+3GqycVOkAE+nBhl/Xpfd4mCRbI4PruquuAbPnpFnEd/2WU ECkIZz/aD+1N+IG8oxBJzIBuaqGSWX4LCVx15MeTVhOuL1JXLup6zLXpkgLXw37X qw/V1aq2RZ9ggmJKqrLO0agfY3tljgQ= -----END CERTIFICATE-----Generated at Sun Apr 27 05:40:38 2025 by rpki-client