$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/af85533c-8398-322a-b767-04b2d9900d33.roa File: af85533c-8398-322a-b767-04b2d9900d33.roa (raw, json) Hash identifier: rB52wAErVKmfRetv17TFiVmZiy19SUTZPRXQpd/Org8= Subject key identifier: 71:46:8E:D4:AB:38:DD:0C:96:BD:F0:2C:53:63:AF:9F:29:E1:C2:9E Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F432858493243E6D9DA08549C61704800 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/af85533c-8398-322a-b767-04b2d9900d33.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 6079 IP address blocks: 209.150.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:e6:d9:da:08:54:9c:61:70:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=10de786e-d3e0-424c-8def-11a4f59544d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3a:3f:ff:06:3f:18:d6:fb:ab:7f:96:f5:30: 38:6d:54:e5:08:40:79:73:5e:00:5a:d2:11:ff:a0: 0c:4f:17:8b:f2:19:85:3f:92:a3:80:0a:a6:2f:61: b9:26:6f:06:23:95:9e:ac:16:1d:96:53:74:6b:11: 55:f1:c6:f9:66:54:1a:7a:4d:ab:08:0a:71:48:d1: 34:63:b1:21:af:e4:d8:87:5b:c8:a4:40:fa:8b:9c: b8:f9:90:15:4e:b2:0b:be:c3:15:c7:92:f5:89:cd: ef:87:d9:b5:9e:b9:f0:4e:8c:fc:02:a2:42:7a:59: f0:3e:01:5f:85:3e:3a:90:bf:df:98:c4:18:74:07: 9c:b0:b0:15:75:75:a0:4c:79:28:3a:d2:81:ba:44: 3d:76:cf:3b:72:04:2d:72:28:74:9d:d6:cb:9e:b9: be:b8:63:6a:f5:e6:e9:0d:b1:d6:08:ee:03:66:b1: 22:36:19:bc:dc:ee:e7:00:33:6b:a4:36:14:ac:db: e9:a5:cf:93:d0:8f:c2:43:2b:54:ba:b0:e6:8e:04: 82:fa:7a:96:7a:64:f6:7e:86:1a:56:a1:84:1d:ab: e0:6c:8f:45:7e:5b:dc:55:4b:dc:5e:ba:bc:84:5b: d1:2a:70:a7:92:15:67:f9:7f:5e:dd:c1:cf:7d:23: 4b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:46:8E:D4:AB:38:DD:0C:96:BD:F0:2C:53:63:AF:9F:29:E1:C2:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/af85533c-8398-322a-b767-04b2d9900d33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 209.150.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:cd:18:9b:e1:42:1a:c1:c2:64:0b:33:05:64:ee:dc:b3:c2: cc:41:a8:3f:0e:34:ac:84:37:d4:fa:dd:21:32:de:6a:83:42: 08:9e:65:34:02:f8:e3:ff:97:eb:9d:42:15:b7:4b:e7:8b:6c: f9:9d:ac:67:16:42:e0:e4:73:5a:28:a1:9a:39:f8:36:0b:6e: 11:ab:f7:e6:c2:39:3c:96:68:85:d4:9a:3c:70:bb:e3:24:d7: 03:19:51:eb:4d:a1:4b:9e:c9:e8:91:b0:2c:e4:0f:e6:ac:f0: d4:40:29:46:83:4a:1c:65:96:13:af:ff:e4:c0:97:19:f9:fb: 2d:f9:f6:48:76:35:f2:c2:24:06:07:97:f3:ed:98:fd:43:89: 4d:ac:f6:eb:5e:30:9e:4e:21:98:1d:fa:00:34:2a:e4:a5:73: 4f:0b:9a:bb:7e:a8:14:98:21:10:f3:f8:ab:31:56:5e:73:c0: 59:96:c0:f8:81:87:c0:ce:95:26:65:1f:99:84:8b:1d:91:4d: 83:24:95:2d:23:32:66:8d:2f:21:5c:85:18:44:0e:0a:41:28: d2:14:47:c1:71:b8:7f:9c:25:db:8b:dd:f5:e2:f1:f1:fc:4d: 86:4e:3e:7b:06:83:d5:74:84:ae:3a:bf:03:49:9e:d6:8b:a2: 6c:f6:2f:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ+bZ2ghUnGFwSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk MTBkZTc4NmUtZDNlMC00MjRjLThkZWYtMTFhNGY1OTU0NGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzo//wY/GNb7q3+W9TA4bVTlCEB5c14AWtIR /6AMTxeL8hmFP5KjgAqmL2G5Jm8GI5WerBYdllN0axFV8cb5ZlQaek2rCApxSNE0 Y7Ehr+TYh1vIpED6i5y4+ZAVTrILvsMVx5L1ic3vh9m1nrnwToz8AqJCelnwPgFf hT46kL/fmMQYdAecsLAVdXWgTHkoOtKBukQ9ds87cgQtcih0ndbLnrm+uGNq9ebp DbHWCO4DZrEiNhm83O7nADNrpDYUrNvppc+T0I/CQytUurDmjgSC+nqWemT2foYa VqGEHavgbI9FflvcVUvcXrq8hFvRKnCnkhVn+X9e3cHPfSNLZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFGjtSrON0Mlr3wLFNjr58p4cKeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvYWY4NTUzM2MtODM5OC0z MjJhLWI3NjctMDRiMmQ5OTAwZDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0ZYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTNGJvhQhrBwmQLMwVk7tyzwsxBqD8ONKyEN9T63SEy3mqDQgieZTQC +OP/l+udQhW3S+eLbPmdrGcWQuDkc1oooZo5+DYLbhGr9+bCOTyWaIXUmjxwu+Mk 1wMZUetNoUueyeiRsCzkD+as8NRAKUaDShxllhOv/+TAlxn5+y359kh2NfLCJAYH l/PtmP1DiU2s9uteMJ5OIZgd+gA0KuSlc08Lmrt+qBSYIRDz+KsxVl5zwFmWwPiB h8DOlSZlH5mEix2RTYMklS0jMmaNLyFchRhEDgpBKNIUR8FxuH+cJduL3fXi8fH8 TYZOPnsGg9V0hK46vwNJntaLomz2L6Q= -----END CERTIFICATE-----Generated at Sat Apr 26 19:55:33 2025 by rpki-client