$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d903b056-4c7c-3152-8cd6-9f46941388c8.roa File: d903b056-4c7c-3152-8cd6-9f46941388c8.roa (raw, json) Hash identifier: Dmlndsr6Uv2FogugApU2jKTjg9UIowSE88RjTmSxLCY= Subject key identifier: 2E:33:1D:60:26:11:8A:A9:8A:65:FC:86:2B:E5:F1:3F:3D:29:DB:60 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F432858499D510205329570192BCC1B80 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d903b056-4c7c-3152-8cd6-9f46941388c8.roa Signing time: Tue 22 Apr 2025 21:18:57 +0000 ROA not before: Tue 22 Apr 2025 21:18:57 +0000 ROA not after: Mon 21 Jul 2025 21:18:57 +0000 asID: 6079 IP address blocks: 209.236.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:51:02:05:32:95:70:19:2b:cc:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Apr 22 21:18:57 2025 GMT Not After : Jul 21 21:18:57 2025 GMT Subject: CN=2ae29e1f-4ae7-4fd7-a8a3-196c4f2c9280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2f:17:6e:57:02:ab:fa:e1:dc:9b:76:fa:25: a3:67:c1:4d:f0:e7:fc:65:b0:f7:af:6e:0a:7c:a6: c4:d8:42:8a:b9:d4:a3:f2:87:7e:9f:30:fe:95:39: 00:83:81:cb:19:46:b5:d1:d6:9d:4a:f7:ac:03:5d: 3f:bd:fc:21:00:f4:66:f6:d3:58:04:61:11:f6:3b: 61:5d:6f:7a:8a:b3:01:3c:a9:ee:f2:4d:73:67:22: 70:9b:1c:c9:e7:c1:b2:ef:a7:9e:15:a1:db:c7:17: 72:f7:b0:3f:3c:60:f2:7b:0b:50:c1:09:1f:c5:3e: 3e:45:da:1e:77:be:de:2d:d0:65:37:f8:20:8e:f6: c0:4a:47:ac:68:c3:ed:9d:6a:e9:b1:4d:fb:78:ce: a7:0b:98:e6:0a:50:54:e2:0a:44:c1:83:1f:87:49: 80:a1:97:af:cd:d9:00:14:c2:db:36:6c:e5:f1:8f: 59:59:99:6a:3f:b1:71:66:24:45:01:57:c0:75:8b: 47:ab:0d:fa:d4:bf:9d:e8:aa:09:f0:ee:f3:60:1e: 0b:76:f2:d2:e0:a3:54:06:7a:f2:46:5a:88:69:7d: f7:43:02:de:c4:04:1e:7f:54:5d:e3:12:72:1c:34: ac:d2:37:1b:f3:3e:16:45:0f:3c:f0:bd:30:5e:59: 68:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:33:1D:60:26:11:8A:A9:8A:65:FC:86:2B:E5:F1:3F:3D:29:DB:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d903b056-4c7c-3152-8cd6-9f46941388c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:d9:c8:3d:a6:3e:1c:ff:1c:b7:f0:f2:23:55:21:f3:c5:3a: 24:c7:55:69:e8:cf:fa:23:a4:5f:39:70:5f:51:fc:96:35:cb: c1:62:b8:69:b2:6e:93:f5:67:14:1e:73:35:1e:23:54:9c:11: 1c:e1:8a:bd:aa:ac:2f:d4:ed:c5:01:3a:2a:54:74:7a:f4:8d: b4:b4:3f:0e:00:7d:32:2b:ca:ee:d1:ba:6e:0a:ac:10:f3:41: ce:af:06:5e:8d:03:51:0b:0b:de:7c:32:fd:38:0b:07:1c:d5: a4:60:92:30:62:99:76:86:e8:6c:74:90:f5:02:86:96:64:f6: 3f:27:82:29:7c:ed:b8:14:ec:a7:0b:e4:a9:0c:7d:9c:5a:39: 01:09:42:8a:83:54:6b:79:a8:a0:60:39:e7:cb:0d:c3:c5:21: 4d:b2:c8:16:94:ac:7b:c2:01:a0:ff:89:26:c3:3b:1a:d7:55: 87:b2:2b:55:1c:c3:ca:07:5c:a6:18:9c:c6:71:e8:29:4f:23: 9f:90:9e:0d:99:e3:55:31:1f:30:e9:2e:00:8e:33:e7:97:2a: df:ec:d3:bf:3d:3f:ac:b0:79:a4:91:d2:10:0f:ee:3a:a7:b5: ef:83:c3:23:12:f9:ac:9a:0d:3f:71:0b:99:ab:6c:a9:54:7c: e7:a9:81:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdUQIFMpVwGSvMG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDQyMjIxMTg1N1oXDTI1MDcyMTIxMTg1N1owLzEtMCsGA1UEAxMk MmFlMjllMWYtNGFlNy00ZmQ3LWE4YTMtMTk2YzRmMmM5MjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi8XblcCq/rh3Jt2+iWjZ8FN8Of8ZbD3r24K fKbE2EKKudSj8od+nzD+lTkAg4HLGUa10dadSvesA10/vfwhAPRm9tNYBGER9jth XW96irMBPKnu8k1zZyJwmxzJ58Gy76eeFaHbxxdy97A/PGDyewtQwQkfxT4+Rdoe d77eLdBlN/ggjvbASkesaMPtnWrpsU37eM6nC5jmClBU4gpEwYMfh0mAoZevzdkA FMLbNmzl8Y9ZWZlqP7FxZiRFAVfAdYtHqw361L+d6KoJ8O7zYB4LdvLS4KNUBnry RlqIaX33QwLexAQef1Rd4xJyHDSs0jcb8z4WRQ888L0wXlloHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4zHWAmEYqpimX8hivl8T89KdtgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvZDkwM2IwNTYtNGM3Yy0z MTUyLThjZDYtOWY0Njk0MTM4OGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbZyD2mPhz/HLfw8iNVIfPFOiTHVWnoz/ojpF85cF9R/JY1y8FiuGmy bpP1ZxQeczUeI1ScERzhir2qrC/U7cUBOipUdHr0jbS0Pw4AfTIryu7Rum4KrBDz Qc6vBl6NA1ELC958Mv04Cwcc1aRgkjBimXaG6Gx0kPUChpZk9j8ngil87bgU7KcL 5KkMfZxaOQEJQoqDVGt5qKBgOefLDcPFIU2yyBaUrHvCAaD/iSbDOxrXVYeyK1Uc w8oHXKYYnMZx6ClPI5+Qng2Z41UxHzDpLgCOM+eXKt/s0789P6yweaSR0hAP7jqn te+DwyMS+ayaDT9xC5mrbKlUfOepgX4= -----END CERTIFICATE-----Generated at Sat Apr 26 19:56:27 2025 by rpki-client