$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/6174f686-7c8c-3662-b054-37ba7d6352ee.roa File: 6174f686-7c8c-3662-b054-37ba7d6352ee.roa (raw, json) Hash identifier: 1iyLImy5u15tBibNtE5pz8iJ29cFsAA03jaYPsNtuEk= Subject key identifier: 91:A6:4A:D4:49:59:51:37:B2:FA:51:A5:F3:BC:10:23:38:F7:40:BE Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584937D93D7234900E34D0C1C980 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/6174f686-7c8c-3662-b054-37ba7d6352ee.roa Signing time: Mon 17 Mar 2025 13:00:52 +0000 ROA not before: Mon 17 Mar 2025 13:00:52 +0000 ROA not after: Sun 15 Jun 2025 13:00:52 +0000 asID: 62651 IP address blocks: 209.234.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:37:d9:3d:72:34:90:0e:34:d0:c1:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Mar 17 13:00:52 2025 GMT Not After : Jun 15 13:00:52 2025 GMT Subject: CN=8827def3-c534-46f2-ba70-e7d9ee8ef19b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3e:2c:59:67:bd:2a:76:2d:ac:25:d2:22:06: 04:69:1e:7e:3d:a2:8a:02:24:35:4d:e6:b3:95:4b: 69:11:ae:b7:0a:71:40:8d:31:04:55:63:eb:99:e4: 4a:23:c4:b7:69:32:e8:49:d3:24:29:7f:b4:01:f8: 53:8a:32:81:53:e2:41:f7:6b:d3:dc:33:5f:12:5e: 11:8d:e8:2e:e8:db:46:5f:3a:4f:e0:f4:45:f0:5c: 58:7e:a2:87:ef:a0:da:7f:bc:d2:c6:b9:fe:5c:31: d5:a5:ff:a2:3e:9b:b8:15:fb:df:78:ac:2c:73:5e: e6:da:a2:77:b1:67:37:eb:4d:22:d3:a3:81:cd:58: 16:55:4d:f8:12:27:4f:19:48:20:31:c0:df:08:56: 96:11:d6:f6:cb:2a:16:d3:a9:81:00:90:cb:7c:46: d9:19:1a:77:5b:b3:65:97:e8:c6:76:10:a8:79:29: 09:48:8e:7b:84:48:24:e3:b1:03:e7:21:16:ef:0e: 0c:24:0d:1e:7a:09:38:6e:c0:85:62:09:a3:c9:36: 08:3e:fb:43:96:dc:da:8a:01:84:c2:03:82:5f:5f: b9:c0:0e:08:3d:b5:24:29:cc:e4:8f:6f:55:51:11: b0:f5:81:ca:2c:ac:07:c3:67:a2:22:af:9d:da:82: d8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A6:4A:D4:49:59:51:37:B2:FA:51:A5:F3:BC:10:23:38:F7:40:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/6174f686-7c8c-3662-b054-37ba7d6352ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.234.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a9:08:88:00:b7:63:56:2a:ac:4e:47:39:a6:a6:c4:ff:04: 02:f5:83:2f:a7:b1:26:87:a3:22:4b:c5:65:d5:cb:7f:5d:70: 36:7b:6b:36:f6:2e:a9:8b:61:70:05:80:19:f9:76:aa:9d:60: db:71:03:2e:88:a7:05:10:d5:22:fb:4e:77:c4:ee:1b:19:56: 69:df:31:17:4f:aa:5b:99:32:be:5e:34:13:5e:49:17:16:9f: ed:12:3a:a3:86:85:a1:d8:67:f7:88:e5:41:1f:21:3e:41:fc: a8:2a:f6:b2:e5:27:5e:85:4e:5f:e7:e9:0f:96:0d:e9:9a:12: 07:8d:5f:fc:86:a4:6c:3b:88:a0:c3:0b:c4:6e:9a:c2:9c:40: 58:51:85:d6:22:77:48:ed:e1:8c:d8:5a:06:1c:04:11:07:17: c2:e8:78:9e:cd:30:be:d9:36:58:03:27:3d:4c:6b:46:f4:7f: 1b:38:92:0f:ab:ba:e9:04:fe:f3:81:37:e9:6a:05:57:79:08: 3e:72:e8:58:0e:34:ba:0d:7a:1c:b1:bb:1f:0d:b6:f0:31:09: a4:b1:43:37:04:06:37:0b:fc:0e:42:7b:4a:38:c9:fc:e2:9b: 4a:5d:50:1c:ff:0f:ab:90:50:c7:39:89:71:1f:88:3b:94:4a: 01:c1:c7:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32T1yNJAONNDByYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk ODgyN2RlZjMtYzUzNC00NmYyLWJhNzAtZTdkOWVlOGVmMTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD4sWWe9KnYtrCXSIgYEaR5+PaKKAiQ1Teaz lUtpEa63CnFAjTEEVWPrmeRKI8S3aTLoSdMkKX+0AfhTijKBU+JB92vT3DNfEl4R jegu6NtGXzpP4PRF8FxYfqKH76Daf7zSxrn+XDHVpf+iPpu4FfvfeKwsc17m2qJ3 sWc3600i06OBzVgWVU34EidPGUggMcDfCFaWEdb2yyoW06mBAJDLfEbZGRp3W7Nl l+jGdhCoeSkJSI57hEgk47ED5yEW7w4MJA0eegk4bsCFYgmjyTYIPvtDltzaigGE wgOCX1+5wA4IPbUkKczkj29VURGw9YHKLKwHw2eiIq+d2oLYPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGmStRJWVE3svpRpfO8ECM490C+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvNjE3NGY2ODYtN2M4Yy0z NjYyLWIwNTQtMzdiYTdkNjM1MmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0er4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABipCIgAt2NWKqxORzmmpsT/BAL1gy+nsSaHoyJLxWXVy39dcDZ7azb2 LqmLYXAFgBn5dqqdYNtxAy6IpwUQ1SL7TnfE7hsZVmnfMRdPqluZMr5eNBNeSRcW n+0SOqOGhaHYZ/eI5UEfIT5B/Kgq9rLlJ16FTl/n6Q+WDemaEgeNX/yGpGw7iKDD C8RumsKcQFhRhdYid0jt4YzYWgYcBBEHF8LoeJ7NML7ZNlgDJz1Ma0b0fxs4kg+r uukE/vOBN+lqBVd5CD5y6FgONLoNehyxux8NtvAxCaSxQzcEBjcL/A5Ce0o4yfzi m0pdUBz/D6uQUMc5iXEfiDuUSgHBx5s= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:28 2025 by rpki-client