$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/8bc43020-2195-365c-b314-6ccd7e35330b.roa File: 8bc43020-2195-365c-b314-6ccd7e35330b.roa (raw, json) Hash identifier: 63GHOEnL4kEjlxzn2dSMUklxJ0wrrC44UdsH8f8X1Xc= Subject key identifier: 0B:9F:E7:7C:99:56:51:00:F6:3B:3C:82:A8:02:65:98:B6:10:95:D0 Certificate issuer: /CN=1c17c1d1-7595-477e-aacb-f8ef42c4ba8e Certificate serial: 010D0C9F43285849955F1A356D94094F4C4257B0 Authority key identifier: AD:D6:FC:F8:D9:F0:31:D4:52:E0:A9:6D:8F:FB:B1:B3:60:7B:8F:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/8bc43020-2195-365c-b314-6ccd7e35330b.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 14618 IP address blocks: 209.188.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:1a:35:6d:94:09:4f:4c:42:57:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c17c1d1-7595-477e-aacb-f8ef42c4ba8e Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=9c06a6a1-83a9-4f90-b788-4e8e035845fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4c:97:a8:9d:c5:e0:d2:ba:7e:5e:68:e0:0d: 93:9b:1d:17:16:9a:0a:37:6d:7f:81:06:b1:34:4b: bd:b5:71:55:46:11:f5:2a:81:f1:d3:1a:41:fb:cc: 9d:d7:ba:e4:30:fa:79:a7:f5:e2:0b:a4:e3:7d:e5: b5:c5:6d:b6:f1:ec:d1:bc:ec:1e:43:df:44:54:40: 97:da:76:94:7e:59:3e:8c:20:3d:59:72:86:2c:b2: 6e:1f:7e:a1:26:c0:b8:03:23:ac:a8:19:78:55:f3: fe:b2:99:5a:6a:54:33:8b:91:cd:42:a7:96:06:47: 09:21:fa:51:ac:e0:e5:01:fe:ee:e6:ce:d5:4d:a9: e2:7a:3f:51:17:d8:c6:f1:15:b6:00:99:3e:8d:d5: 4d:fd:47:f8:cc:74:71:a1:e9:2f:c6:55:ec:93:a1: bb:a1:31:94:eb:8c:63:a8:6c:1e:ef:50:69:ec:b1: 78:4f:5a:f0:64:b8:6a:14:1e:6c:a0:ae:f9:e5:46: 1d:86:43:6f:1f:3e:63:46:9c:f6:a2:c0:7d:2c:70: 48:d2:3a:b9:63:2f:83:de:85:63:d4:ff:55:67:cf: f7:0c:22:78:b2:6c:00:d2:7d:bc:4d:ca:46:17:b8: 98:22:e2:9f:37:ec:b3:80:4d:0c:7e:3c:71:1c:fe: 51:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:9F:E7:7C:99:56:51:00:F6:3B:3C:82:A8:02:65:98:B6:10:95:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/8bc43020-2195-365c-b314-6ccd7e35330b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.crl X509v3 Authority Key Identifier: keyid:AD:D6:FC:F8:D9:F0:31:D4:52:E0:A9:6D:8F:FB:B1:B3:60:7B:8F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.cer sbgp-ipAddrBlock: critical IPv4: 209.188.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:f9:2e:2e:e3:4b:4f:01:ba:ed:a6:c6:32:17:0d:96:73:56: 79:dc:20:71:f4:0e:d7:75:c8:77:fd:25:f7:93:3f:a3:20:aa: 65:92:e8:78:20:2c:0a:b7:c1:b6:7b:8b:0b:41:d6:61:8d:82: 17:52:17:2f:c0:35:80:90:07:1e:e0:11:84:99:ca:d0:ff:7b: cc:c4:4c:2a:44:04:42:f5:90:0b:63:77:65:d4:e5:34:0b:85: 70:3e:a0:a7:e5:05:9b:f0:49:fa:2e:47:a5:aa:52:b7:99:ee: 38:6a:1b:84:2a:73:9b:2b:b0:22:8b:c5:5c:81:1b:3d:90:41: 10:dd:34:ec:bc:99:bc:0b:51:e6:03:c4:89:0c:65:71:47:d3: cb:e8:3b:74:99:b0:53:5f:f2:eb:a8:e8:f4:82:d4:2b:bb:c6: 78:da:d8:fc:4a:78:8e:e9:62:5a:e1:07:ec:dc:4d:7c:b9:1f: 0e:a9:7e:de:1d:27:b4:13:22:83:cd:ec:37:a4:b4:7e:d0:49: 0e:b1:51:cb:4f:62:2e:42:81:78:7a:4e:c4:0c:c5:99:a3:44: aa:ae:d8:8c:18:bf:a2:8c:3f:4f:2f:07:4b:aa:10:47:09:09: ca:89:0e:a5:5a:9e:30:9a:e7:e5:ce:94:4b:b3:d8:8e:60:b0: 04:bd:9a:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXxo1bZQJT0xCV7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMxN2MxZDEtNzU5NS00NzdlLWFhY2ItZjhlZjQyYzRi YThlMB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk OWMwNmE2YTEtODNhOS00ZjkwLWI3ODgtNGU4ZTAzNTg0NWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0yXqJ3F4NK6fl5o4A2Tmx0XFpoKN21/gQax NEu9tXFVRhH1KoHx0xpB+8yd17rkMPp5p/XiC6TjfeW1xW228ezRvOweQ99EVECX 2naUflk+jCA9WXKGLLJuH36hJsC4AyOsqBl4VfP+splaalQzi5HNQqeWBkcJIfpR rODlAf7u5s7VTaniej9RF9jG8RW2AJk+jdVN/Uf4zHRxoekvxlXsk6G7oTGU64xj qGwe71Bp7LF4T1rwZLhqFB5soK755UYdhkNvHz5jRpz2osB9LHBI0jq5Yy+D3oVj 1P9VZ8/3DCJ4smwA0n28TcpGF7iYIuKfN+yzgE0MfjxxHP5R2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuf53yZVlEA9js8gqgCZZi2EJXQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYzE3 YzFkMS03NTk1LTQ3N2UtYWFjYi1mOGVmNDJjNGJhOGUvOGJjNDMwMjAtMjE5NS0z NjVjLWIzMTQtNmNjZDdlMzUzMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWMxN2MxZDEtNzU5NS00NzdlLWFh Y2ItZjhlZjQyYzRiYThlLzFjMTdjMWQxLTc1OTUtNDc3ZS1hYWNiLWY4ZWY0MmM0 YmE4ZS5jcmwwHwYDVR0jBBgwFoAUrdb8+NnwMdRS4Kltj/uxs2B7j14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYzE3YzFkMS03NTk1LTQ3N2UtYWFjYi1mOGVm NDJjNGJhOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bxlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIb5Li7jS08Buu2mxjIXDZZzVnncIHH0Dtd1yHf9JfeTP6MgqmWS6Hgg LAq3wbZ7iwtB1mGNghdSFy/ANYCQBx7gEYSZytD/e8zETCpEBEL1kAtjd2XU5TQL hXA+oKflBZvwSfouR6WqUreZ7jhqG4Qqc5srsCKLxVyBGz2QQRDdNOy8mbwLUeYD xIkMZXFH08voO3SZsFNf8uuo6PSC1Cu7xnja2PxKeI7pYlrhB+zcTXy5Hw6pft4d J7QTIoPN7DektH7QSQ6xUctPYi5CgXh6TsQMxZmjRKqu2IwYv6KMP08vB0uqEEcJ CcqJDqVanjCa5+XOlEuz2I5gsAS9mjg= -----END CERTIFICATE-----Generated at Sat Apr 26 13:26:43 2025 by rpki-client