$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d6ba5cdb-d70f-340b-9e5e-3433be9e6958.roa File: d6ba5cdb-d70f-340b-9e5e-3433be9e6958.roa (raw, json) Hash identifier: In92q48spll9WNXSLEiNB7WCGVTtXu9wjx4GfPBD3KE= Subject key identifier: 71:03:99:60:2D:67:22:56:91:12:E4:28:AB:27:16:7E:00:8D:7E:80 Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F432858492134667AD55BB179A2CBCE80 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d6ba5cdb-d70f-340b-9e5e-3433be9e6958.roa Signing time: Sun 09 Mar 2025 10:21:05 +0000 ROA not before: Sun 09 Mar 2025 10:21:05 +0000 ROA not after: Sat 07 Jun 2025 10:21:05 +0000 asID: 30336 IP address blocks: 209.226.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:34:66:7a:d5:5b:b1:79:a2:cb:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Mar 9 10:21:05 2025 GMT Not After : Jun 7 10:21:05 2025 GMT Subject: CN=6c9699f8-dc64-4165-8d5f-4ac7fc8f8a5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:56:fd:63:de:a5:6a:c5:7c:44:1a:08:28:7e: 20:d4:54:d9:9c:9e:7c:1f:8e:e4:c1:d1:ca:c9:09: 25:52:4d:03:00:1e:3e:24:b9:ca:a5:1b:17:17:a3: fc:88:90:99:3f:70:13:83:4d:55:02:2a:6e:53:2b: bc:5a:69:60:b4:bb:6d:36:5e:4d:f5:02:ba:ec:e9: 1b:af:ba:f2:ad:18:ba:0f:37:74:63:55:46:3c:55: 08:dd:5e:fd:61:83:43:07:7b:06:18:71:37:54:90: 07:fb:25:49:bb:ce:75:79:6f:75:c3:e7:9e:d4:d2: 47:f3:4c:20:8c:1b:c1:8d:04:78:b0:05:04:53:cf: 31:02:b3:d2:da:5b:e6:e8:87:da:3c:90:ef:d3:06: 6a:82:10:61:05:9c:22:23:85:d2:af:f4:e8:b1:f8: f0:c0:c1:e4:8e:ca:de:b3:a3:a3:ee:c2:83:8d:2d: e2:02:a5:7c:b4:1a:38:0b:a9:c3:fa:b7:f3:33:ca: b9:0f:95:a8:1f:1d:21:ab:26:54:d4:49:4e:b7:1e: 06:39:5e:e9:6b:e3:90:a0:af:81:a2:51:7b:9f:8f: 2c:6a:b2:0c:2c:b3:ad:38:eb:51:e1:8f:bf:27:91: 21:30:d4:69:c7:66:52:76:07:a8:1f:fd:44:1b:72: 41:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:03:99:60:2D:67:22:56:91:12:E4:28:AB:27:16:7E:00:8D:7E:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d6ba5cdb-d70f-340b-9e5e-3433be9e6958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 209.226.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:dc:f0:d0:85:20:1c:d1:bf:d3:67:87:aa:3d:8e:2b:4f:ec: 1a:9d:e3:f0:eb:fc:e5:11:cb:04:1d:f0:5a:0d:2f:a1:dc:36: 62:2a:ce:7b:16:f0:65:c4:d2:40:92:47:b6:f8:7c:c0:f2:4c: 45:18:cc:0f:25:0f:0e:9d:e9:c9:28:fc:47:f1:69:c0:0c:f4: 07:49:55:11:4d:f6:d8:dc:71:c0:3d:03:1a:ed:6e:2b:e1:17: d0:5b:57:ce:77:33:a3:00:8a:8e:18:d4:56:40:c0:ff:e0:12: c2:97:7d:22:44:fc:8a:90:e2:84:7c:7c:78:eb:09:a6:9c:9e: ee:c2:2f:11:a4:a6:46:d1:02:54:9d:84:56:5e:64:83:9a:6d: 81:42:e2:64:a9:9d:38:8e:bd:75:dc:c8:66:3e:34:48:21:b3: bc:a4:2f:56:47:b4:81:10:e0:de:4b:a5:f3:8d:8d:f2:e6:4b: 95:62:dc:da:82:4a:99:4a:fd:d4:07:08:14:a4:2f:50:04:61: 6e:e6:a9:36:01:11:c5:ae:33:0e:e7:06:eb:e1:f8:b2:1f:12: 79:0c:b6:82:cc:6f:df:e3:15:77:bd:f7:fd:ec:27:f1:09:5d: f5:82:88:46:49:7d:75:cd:12:cf:54:f3:52:eb:71:ef:d0:b6: 6f:5d:96:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNGZ61VuxeaLLzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI1MDMwOTEwMjEwNVoXDTI1MDYwNzEwMjEwNVowLzEtMCsGA1UEAxMk NmM5Njk5ZjgtZGM2NC00MTY1LThkNWYtNGFjN2ZjOGY4YTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lb9Y96lasV8RBoIKH4g1FTZnJ58H47kwdHK yQklUk0DAB4+JLnKpRsXF6P8iJCZP3ATg01VAipuUyu8WmlgtLttNl5N9QK67Okb r7ryrRi6Dzd0Y1VGPFUI3V79YYNDB3sGGHE3VJAH+yVJu851eW91w+ee1NJH80wg jBvBjQR4sAUEU88xArPS2lvm6IfaPJDv0wZqghBhBZwiI4XSr/TosfjwwMHkjsre s6Oj7sKDjS3iAqV8tBo4C6nD+rfzM8q5D5WoHx0hqyZU1ElOtx4GOV7pa+OQoK+B olF7n48sarIMLLOtOOtR4Y+/J5EhMNRpx2ZSdgeoH/1EG3JBNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEDmWAtZyJWkRLkKKsnFn4AjX6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZDZiYTVjZGItZDcwZi0z NDBiLTllNWUtMzQzM2JlOWU2OTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0eKqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPc8NCFIBzRv9Nnh6o9jitP7Bqd4/Dr/OURywQd8FoNL6HcNmIqznsW 8GXE0kCSR7b4fMDyTEUYzA8lDw6d6cko/EfxacAM9AdJVRFN9tjcccA9Axrtbivh F9BbV853M6MAio4Y1FZAwP/gEsKXfSJE/IqQ4oR8fHjrCaacnu7CLxGkpkbRAlSd hFZeZIOabYFC4mSpnTiOvXXcyGY+NEghs7ykL1ZHtIEQ4N5LpfONjfLmS5Vi3NqC SplK/dQHCBSkL1AEYW7mqTYBEcWuMw7nBuvh+LIfEnkMtoLMb9/jFXe99/3sJ/EJ XfWCiEZJfXXNEs9U81Lrce/Qtm9dlgQ= -----END CERTIFICATE-----Generated at Mon Apr 7 16:49:16 2025 by rpki-client