$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/6ef91c64-5a2a-31c1-8050-b72ae2dcd793.roa File: 6ef91c64-5a2a-31c1-8050-b72ae2dcd793.roa (raw, json) Hash identifier: VObU1TXUHclxLLMDy+Bgy8Dc/ZKj5H142B3m+7cKJds= Subject key identifier: D8:06:BE:8D:FC:A1:D1:86:DF:9D:56:2A:89:CD:AC:5C:C1:B5:1E:5D Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F432858492CAE868601050FC3827D1F00 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/6ef91c64-5a2a-31c1-8050-b72ae2dcd793.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 21949 IP address blocks: 209.195.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:86:86:01:05:0f:c3:82:7d:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=f2b2d3fd-4b76-4d97-883d-ddba478817b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:14:f4:39:d5:e4:eb:ad:12:17:95:a1:13:ad: 7f:14:46:1e:02:98:40:fc:74:f5:52:b0:62:6a:b0: 16:e5:ef:72:dc:68:1a:d0:5d:4e:c1:85:69:3e:c6: 95:ec:7f:b9:9b:55:02:51:2f:45:19:66:83:89:1f: d8:e3:48:e2:7f:d9:a4:0e:35:bc:ec:77:cb:15:33: 44:72:1f:71:12:47:83:16:09:24:bb:ac:22:14:22: df:05:ce:7f:1a:b0:a9:03:45:b0:b2:0a:c7:ea:88: 6e:64:18:42:aa:4e:3d:a1:80:06:73:45:5b:79:a8: e1:fa:10:aa:64:87:d5:79:80:27:6e:f5:0f:ee:c1: 36:4a:35:e5:2d:05:9c:9b:aa:6e:ae:0c:8c:c5:54: d0:e8:92:f3:55:df:e1:d0:3e:05:c9:72:1e:d8:fb: 56:d6:97:7a:c8:84:32:e2:bb:82:40:c5:1b:ff:f2: c4:a1:4d:3a:24:67:67:75:f1:7c:5e:e0:b1:de:f3: 6c:64:2f:a5:f5:04:ec:35:92:02:c0:2d:25:03:e1: d1:d8:64:cc:fe:dd:da:24:f9:f3:be:c5:bc:af:ba: 26:82:9f:df:94:16:b5:ae:c7:73:1a:d6:82:c4:fc: 8d:ec:7a:18:ab:8d:5c:03:b0:69:dd:46:75:70:f8: be:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:06:BE:8D:FC:A1:D1:86:DF:9D:56:2A:89:CD:AC:5C:C1:B5:1E:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/6ef91c64-5a2a-31c1-8050-b72ae2dcd793.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 209.195.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:d4:7c:62:0b:aa:f5:94:23:0b:1a:bf:15:80:0c:e7:a3:86: fa:2a:2c:c2:c2:12:9b:ce:bd:40:ee:7a:9f:c0:62:f2:77:2e: bf:70:69:81:5a:e8:de:7d:5c:4d:11:0a:5a:9d:e7:46:b2:bd: 2b:26:d1:3e:59:a6:7d:d8:85:79:79:11:7e:58:9a:1b:97:3c: 37:ea:00:da:30:9f:d2:68:5a:10:1e:47:6f:34:b6:d8:45:04: 67:bf:33:9c:56:e8:dd:48:e5:82:31:1a:01:f2:cc:48:79:68: 82:85:27:dc:71:6a:aa:45:0c:e2:fe:be:e3:2b:34:02:d9:3e: 15:86:5f:9f:c8:d0:9f:e7:24:63:12:e6:7c:e2:63:fa:70:03: 4a:38:e2:40:01:2a:59:61:a8:b8:55:8c:1b:82:6a:f0:6c:96: 4e:64:93:20:bf:3f:bd:64:0a:6e:80:d5:6c:91:05:48:13:03: ae:62:9d:9a:f5:a7:99:d1:54:4f:97:9f:55:ce:5f:9a:76:e8: 62:af:e6:86:b4:06:1d:b5:7d:20:2b:39:8d:da:a2:86:07:25: b0:75:0d:4b:2e:20:91:89:42:17:a0:e8:da:40:5c:0d:de:9f: 9a:df:5a:2e:9d:9a:06:81:4a:a8:20:11:60:5e:97:43:70:a7: d3:c4:94:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksroaGAQUPw4J9HwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZjJiMmQzZmQtNGI3Ni00ZDk3LTg4M2QtZGRiYTQ3ODgxN2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxT0OdXk660SF5WhE61/FEYeAphA/HT1UrBi arAW5e9y3Gga0F1OwYVpPsaV7H+5m1UCUS9FGWaDiR/Y40jif9mkDjW87HfLFTNE ch9xEkeDFgkku6wiFCLfBc5/GrCpA0WwsgrH6ohuZBhCqk49oYAGc0Vbeajh+hCq ZIfVeYAnbvUP7sE2SjXlLQWcm6purgyMxVTQ6JLzVd/h0D4FyXIe2PtW1pd6yIQy 4ruCQMUb//LEoU06JGdndfF8XuCx3vNsZC+l9QTsNZICwC0lA+HR2GTM/t3aJPnz vsW8r7omgp/flBa1rsdzGtaCxPyN7HoYq41cA7Bp3UZ1cPi+GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgGvo38odGG351WKonNrFzBtR5dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvNmVmOTFjNjQtNWEyYS0z MWMxLTgwNTAtYjcyYWUyZGNkNzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0cP4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPUfGILqvWUIwsavxWADOejhvoqLMLCEpvOvUDuep/AYvJ3Lr9waYFa 6N59XE0RClqd50ayvSsm0T5Zpn3YhXl5EX5YmhuXPDfqANown9JoWhAeR280tthF BGe/M5xW6N1I5YIxGgHyzEh5aIKFJ9xxaqpFDOL+vuMrNALZPhWGX5/I0J/nJGMS 5nziY/pwA0o44kABKllhqLhVjBuCavBslk5kkyC/P71kCm6A1WyRBUgTA65inZr1 p5nRVE+Xn1XOX5p26GKv5oa0Bh21fSArOY3aooYHJbB1DUsuIJGJQheg6NpAXA3e n5rfWi6dmgaBSqggEWBel0Nwp9PElFc= -----END CERTIFICATE-----Generated at Tue Apr 8 10:09:38 2025 by rpki-client