$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/d0d76c1b-a3f1-3424-9ad8-1adff2cd9caf.roa File: d0d76c1b-a3f1-3424-9ad8-1adff2cd9caf.roa (raw, json) Hash identifier: 1saxS5igaK20pHQckC9gnREXJs69KGb1F3GE5dq/+WE= Subject key identifier: BA:8F:2B:B6:CC:EF:95:58:00:6E:9C:A0:B0:DC:8D:A3:F6:0A:E9:66 Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Certificate serial: 010D0C9F432858493243E067289D168454DEAB00 Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/d0d76c1b-a3f1-3424-9ad8-1adff2cd9caf.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 13213 IP address blocks: 209.236.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:e0:67:28:9d:16:84:54:de:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=6aac4c7e-a126-4038-92d2-3a41242bb59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9d:dd:c5:cf:bf:c0:b4:0f:53:aa:e5:c8:a8: 11:fd:f2:13:b8:16:07:ae:02:59:2d:29:79:b6:ef: f7:65:b5:18:f6:78:bc:c1:e8:20:de:cb:4e:29:c4: 23:7f:f5:ad:7f:73:34:97:6e:4b:7e:ba:6f:4f:72: ce:fb:8b:df:17:6d:cf:86:11:b6:92:51:06:4c:d7: dc:e3:48:8e:3f:03:56:ff:c1:5e:1d:e3:8f:63:6e: 1f:2a:5d:6e:75:b4:73:63:8c:2f:89:9a:01:87:c4: 30:67:02:95:61:c9:6a:14:e9:2d:fc:97:c4:ea:ef: f8:ea:59:06:3b:73:86:0b:69:c1:6d:46:69:3b:86: 69:97:31:59:a3:85:0a:2a:eb:25:6f:11:76:ae:3b: 6e:9c:ed:2d:84:23:be:36:06:2b:64:e0:23:8a:bd: 27:9e:39:7e:ed:c2:16:27:ba:8f:32:d8:6f:19:62: e7:00:c9:4f:4a:9b:23:92:2c:46:1c:a0:d8:a7:a3: 21:d7:b3:fe:70:25:41:3e:9e:3e:df:9b:e5:d5:59: 72:67:11:04:f6:90:65:ff:19:f0:8c:2c:f5:d7:2d: 66:83:01:e0:04:91:d4:18:31:ef:e3:bf:4a:55:b4: cd:ec:65:63:e8:ed:b3:62:7c:df:48:00:64:b7:1c: d4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8F:2B:B6:CC:EF:95:58:00:6E:9C:A0:B0:DC:8D:A3:F6:0A:E9:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/d0d76c1b-a3f1-3424-9ad8-1adff2cd9caf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl X509v3 Authority Key Identifier: keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer sbgp-ipAddrBlock: critical IPv4: 209.236.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:07:97:2b:80:6f:07:e4:85:8a:58:5b:3b:3f:23:78:d9:0c: 9a:9c:45:ea:8d:0e:f4:04:84:38:0b:cd:76:0d:7b:f7:ca:29: bd:3c:98:36:43:f1:e4:d3:06:bf:dd:91:c0:f0:28:de:7f:76: 0e:ca:44:7d:55:01:2f:f5:a6:52:13:07:3b:c9:fb:e8:12:38: 2a:0d:a5:fa:d5:d8:9f:2e:4a:37:0c:33:67:fb:73:5c:6c:24: 20:7e:06:b3:b1:a7:26:30:d2:bc:b2:d7:c9:be:90:87:9a:9c: d5:24:dc:5c:c1:2e:ec:62:63:e0:de:00:37:3a:14:3a:36:85: 1f:a7:c4:20:1c:f1:14:f1:65:c2:18:96:62:33:b2:39:4e:10: 31:4a:8c:11:6e:e2:42:15:ce:c6:35:cf:9e:f7:d0:7c:38:e8: 4a:96:cb:eb:a2:de:08:62:06:7a:ba:3b:2d:dd:2e:96:2d:22: 29:e7:3a:ba:8c:74:8c:79:7b:60:2f:02:a1:34:a9:48:de:9f: b2:a0:fc:44:e5:92:2e:86:c0:30:6d:11:6e:5c:90:d5:f5:fd: e7:77:a4:75:73:82:ce:af:df:c5:6c:69:57:95:af:aa:d3:76: 47:67:43:8f:ee:4b:86:fb:9d:5b:ef:db:d6:08:a2:55:c5:16: 87:99:39:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ+BnKJ0WhFTeqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5 YWFlMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk NmFhYzRjN2UtYTEyNi00MDM4LTkyZDItM2E0MTI0MmJiNTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp3dxc+/wLQPU6rlyKgR/fITuBYHrgJZLSl5 tu/3ZbUY9ni8wegg3stOKcQjf/Wtf3M0l25LfrpvT3LO+4vfF23PhhG2klEGTNfc 40iOPwNW/8FeHeOPY24fKl1udbRzY4wviZoBh8QwZwKVYclqFOkt/JfE6u/46lkG O3OGC2nBbUZpO4ZplzFZo4UKKuslbxF2rjtunO0thCO+NgYrZOAjir0nnjl+7cIW J7qPMthvGWLnAMlPSpsjkixGHKDYp6Mh17P+cCVBPp4+35vl1VlyZxEE9pBl/xnw jCz11y1mgwHgBJHUGDHv479KVbTN7GVj6O2zYnzfSABktxzUlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqPK7bM75VYAG6coLDcjaP2CulmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Njdh OThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvZDBkNzZjMWItYTNmMS0z NDI0LTlhZDgtMWFkZmYyY2Q5Y2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTY3YTk4YjAtMTAwZi00ZTY5LThh OWYtYmNlYWRiN2U5YWFlLzk2N2E5OGIwLTEwMGYtNGU2OS04YTlmLWJjZWFkYjdl OWFhZS5jcmwwHwYDVR0jBBgwFoAU11g4vsgJB/HhoBW3h78hrABJOTswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2Vh ZGI3ZTlhYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0exIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEHlyuAbwfkhYpYWzs/I3jZDJqcReqNDvQEhDgLzXYNe/fKKb08mDZD 8eTTBr/dkcDwKN5/dg7KRH1VAS/1plITBzvJ++gSOCoNpfrV2J8uSjcMM2f7c1xs JCB+BrOxpyYw0ryy18m+kIeanNUk3FzBLuxiY+DeADc6FDo2hR+nxCAc8RTxZcIY lmIzsjlOEDFKjBFu4kIVzsY1z5730Hw46EqWy+ui3ghiBnq6Oy3dLpYtIinnOrqM dIx5e2AvAqE0qUjen7Kg/ETlki6GwDBtEW5ckNX1/ed3pHVzgs6v38VsaVeVr6rT dkdnQ4/uS4b7nVvv29YIolXFFoeZOa4= -----END CERTIFICATE-----Generated at Sun Apr 27 21:03:20 2025 by rpki-client