$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa File: d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa (raw, json) Hash identifier: 4wTxPdpiix++MPnZsDy4750HGqc85dCboaip8XFy9vc= Subject key identifier: 0A:B5:D6:58:0F:F1:D2:44:06:CB:A3:7F:08:46:AD:50:F4:AC:75:6D Certificate issuer: /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Certificate serial: 010D0C9F432858494B6405DA20FE1A483EEB8400 Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 23470 IP address blocks: 209.222.100.0/24 maxlen: 24 209.222.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:05:da:20:fe:1a:48:3e:eb:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=70436b8c-98f5-493a-983b-fb90fd83ad69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:74:48:eb:1f:98:6d:bb:9c:42:f7:8f:93:5e: 02:4d:b3:71:38:d1:92:22:fb:82:71:a0:66:bd:bb: 33:f3:47:99:9e:4d:0f:0a:a1:54:71:66:72:3d:9b: 58:16:d9:95:0f:63:69:02:a8:8c:dd:43:63:8f:38: fd:90:11:bf:bd:52:e4:91:7b:51:3d:df:f5:2c:37: 06:c3:7a:9b:e0:7e:47:24:01:01:d8:e5:cc:d7:31: 70:39:e5:71:3c:6f:e9:10:c4:93:ed:53:5b:a6:40: 07:37:e5:cf:87:d8:27:a5:1a:e1:d9:60:c1:b8:c0: 0b:8c:6d:93:64:34:5a:63:d4:1f:d0:64:60:5b:0e: 73:ef:c2:c2:cb:a0:9f:50:28:47:c5:bb:e1:12:23: 0a:62:21:45:77:8b:4e:04:aa:dd:84:d5:2c:d2:c7: 33:38:a0:54:b0:f6:e0:e3:c9:bc:69:bd:dd:ba:7f: 20:8b:86:68:26:72:f8:1e:7d:61:69:24:1e:2f:8f: 89:f8:e4:40:6b:1a:98:0e:ac:f6:b3:0c:97:ea:f8: c0:cd:da:23:1f:fc:59:55:69:49:69:d6:b4:2f:43: d7:43:be:ec:9b:33:c6:1c:a6:41:7b:3e:21:be:e9: bd:a1:e5:c8:91:38:d5:71:43:f8:81:48:5b:63:7a: 66:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B5:D6:58:0F:F1:D2:44:06:CB:A3:7F:08:46:AD:50:F4:AC:75:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl X509v3 Authority Key Identifier: keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer sbgp-ipAddrBlock: critical IPv4: 209.222.100.0/24 209.222.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:33:5a:9d:0e:16:86:4a:73:6c:49:e5:5f:b3:65:db:5e:b7: 92:1c:03:6e:00:16:57:04:82:27:a4:d7:b8:57:df:54:6e:44: cf:03:6f:55:0b:82:09:71:72:e9:33:d0:27:dd:04:07:1d:29: 97:7a:ea:df:4b:f0:92:6c:52:4d:9d:1b:0d:8f:17:b6:c4:4e: 08:03:35:68:81:f2:f4:8a:03:d6:4b:03:a3:ae:a1:19:e8:0c: 83:e2:d6:29:31:ae:30:6f:5d:ee:e3:e5:f6:0b:23:d1:2b:27: a1:eb:3a:3a:62:45:c6:a4:1c:ea:71:bb:8e:3c:d2:b9:8e:9e: 21:fa:41:fa:d9:aa:19:b3:93:ea:11:be:35:2e:74:bd:a7:63: 35:b7:a9:db:f3:6f:b7:24:4a:fb:f6:fe:08:55:a2:6b:33:48: 82:9f:71:7a:a3:ee:ce:0f:53:87:5d:ef:db:8d:c8:d6:3d:ff: 8c:ce:c8:c6:d1:0f:a0:d6:4f:55:9d:1f:6a:d2:92:c5:cc:e3: 72:c2:2f:4a:45:58:98:1d:3e:f6:70:62:29:4a:49:4a:dc:46: 99:e6:91:71:e3:16:88:4f:15:31:a6:21:ce:84:d5:08:b9:e3: 76:98:ce:e1:e5:2c:67:e2:ad:47:33:33:9a:ce:63:ce:b3:15: 73:88:86:65 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElLZAXaIP4aSD7rhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2OWIzMjEtNjliYy00MWM0LWE2ZTEtMzQ5MWRiZmMy NTQ0MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk NzA0MzZiOGMtOThmNS00OTNhLTk4M2ItZmI5MGZkODNhZDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3RI6x+YbbucQvePk14CTbNxONGSIvuCcaBm vbsz80eZnk0PCqFUcWZyPZtYFtmVD2NpAqiM3UNjjzj9kBG/vVLkkXtRPd/1LDcG w3qb4H5HJAEB2OXM1zFwOeVxPG/pEMST7VNbpkAHN+XPh9gnpRrh2WDBuMALjG2T ZDRaY9Qf0GRgWw5z78LCy6CfUChHxbvhEiMKYiFFd4tOBKrdhNUs0sczOKBUsPbg 48m8ab3dun8gi4ZoJnL4Hn1haSQeL4+J+ORAaxqYDqz2swyX6vjAzdojH/xZVWlJ ada0L0PXQ77smzPGHKZBez4hvum9oeXIkTjVcUP4gUhbY3pmswIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAq11lgP8dJEBsujfwhGrVD0rHVtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5 YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkxZGJmYzI1NDQvZDFmMTZmMjEtMjEyMy0z NWUwLTllODctOTkxNGYwYjRkNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWM2OWIzMjEtNjliYy00MWM0LWE2 ZTEtMzQ5MWRiZmMyNTQ0LzljNjliMzIxLTY5YmMtNDFjNC1hNmUxLTM0OTFkYmZj MjU0NC5jcmwwHwYDVR0jBBgwFoAUHjmb1lU0mBF67zRaH+8vJwq9KawwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkx ZGJmYzI1NDQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0d5kAwQA 0d5mMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAF4zWp0OFoZKc2xJ5V+zZdtet5IcA24AFlcEgiek17hX31Ru RM8Db1ULgglxcukz0CfdBAcdKZd66t9L8JJsUk2dGw2PF7bETggDNWiB8vSKA9ZL A6OuoRnoDIPi1ikxrjBvXe7j5fYLI9ErJ6HrOjpiRcakHOpxu4480rmOniH6QfrZ qhmzk+oRvjUudL2nYzW3qdvzb7ckSvv2/ghVomszSIKfcXqj7s4PU4dd79uNyNY9 /4zOyMbRD6DWT1WdH2rSksXM43LCL0pFWJgdPvZwYilKSUrcRpnmkXHjFohPFTGm Ic6E1Qi543aYzuHlLGfirUczM5rOY86zFXOIhmU= -----END CERTIFICATE-----Generated at Sat Apr 12 04:54:10 2025 by rpki-client