$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/f3ebe319-be5f-3778-a975-9213caf64420.roa File: f3ebe319-be5f-3778-a975-9213caf64420.roa (raw, json) Hash identifier: YMQoHXKLEmb+UBKuqnlpEc4hr/7pXs3ll1JAIpG24m8= Subject key identifier: 63:2D:B9:C6:69:52:3D:D8:2F:35:AA:D3:E4:B8:CB:24:A9:BB:64:EB Certificate issuer: /CN=e4233913-8c3d-4df4-bd7d-495f7afba2ac Certificate serial: 010D0C9F4328584973DEE5F50C5992FE18673F40 Authority key identifier: 23:E9:67:A1:5B:A9:96:F3:5E:F7:44:E1:D1:D6:08:7E:0E:EC:60:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/f3ebe319-be5f-3778-a975-9213caf64420.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 10930 IP address blocks: 209.251.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/e4233913-8c3d-4df4-bd7d-495f7afba2ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/e4233913-8c3d-4df4-bd7d-495f7afba2ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:e5:f5:0c:59:92:fe:18:67:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4233913-8c3d-4df4-bd7d-495f7afba2ac Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=655c2076-294b-4568-a745-5fe81049659a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6d:98:66:53:d2:74:ee:44:fd:b2:00:9c:68: 59:51:30:b4:7f:61:21:b0:ab:67:94:1a:2b:79:d8: 9b:a0:62:82:7f:c8:d7:c7:6a:01:ed:54:eb:93:24: 70:cc:9b:fb:0a:a1:2e:50:7c:42:a0:c4:65:55:ce: 10:44:0f:6c:da:fc:d8:2d:bd:ff:84:22:ac:ef:20: 69:a3:0a:2a:e1:7c:90:c6:83:5a:e4:93:89:33:55: 0c:81:84:ae:e5:bf:9c:7e:38:b9:e7:7a:d6:44:a3: 15:76:ed:74:3e:0c:1f:cc:5c:bf:9d:7d:7f:69:6d: 3f:04:55:96:53:6b:d0:a2:c9:29:bc:f8:a9:93:fd: 6b:b2:61:57:18:8e:da:f0:e8:a4:45:69:35:0d:ed: 94:ce:60:91:92:54:d1:51:bf:ed:89:4f:fd:9d:2d: 3e:7a:e5:6f:07:2a:c6:89:48:11:53:f9:72:93:60: 00:3a:1b:0b:62:77:fa:6c:bb:eb:2d:1c:f3:d8:62: f0:7a:21:63:fd:d7:2b:72:e8:23:fb:97:66:86:7e: 4f:08:71:5b:73:86:26:c8:fc:63:4e:fd:d6:73:ed: a2:d4:a4:5a:47:bf:bc:f9:17:9c:22:c4:e7:cf:e7: d9:48:15:56:46:bd:d1:44:90:9e:cb:aa:8c:7f:86: 18:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:2D:B9:C6:69:52:3D:D8:2F:35:AA:D3:E4:B8:CB:24:A9:BB:64:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/f3ebe319-be5f-3778-a975-9213caf64420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/e4233913-8c3d-4df4-bd7d-495f7afba2ac.crl X509v3 Authority Key Identifier: keyid:23:E9:67:A1:5B:A9:96:F3:5E:F7:44:E1:D1:D6:08:7E:0E:EC:60:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac.cer sbgp-ipAddrBlock: critical IPv4: 209.251.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:59:7c:cc:89:60:47:28:d7:a5:6e:1c:30:d6:88:42:b5:07: 02:22:4e:a1:54:9d:c1:b4:21:77:ad:3d:27:53:9a:2b:cc:0c: c9:07:fd:e3:48:64:c5:db:94:0d:15:e5:f7:c9:2f:e2:98:8e: 7d:3e:67:b8:a5:f5:6d:71:a1:46:e3:83:3b:1d:f0:fc:83:17: f6:5c:11:42:f6:a0:16:35:a0:28:09:0d:ec:0b:7c:8f:b7:e5: aa:05:34:77:5b:f6:26:00:c8:68:ab:26:73:b9:20:5d:9e:d5: eb:40:98:c4:a1:8c:67:43:12:0b:09:2f:fb:47:66:8d:a3:c8: 5f:fd:5e:21:54:10:66:df:b6:f1:12:f6:d6:e0:6a:dd:b9:ee: f2:55:96:e4:e2:41:f2:5c:95:a3:8e:70:a6:8d:96:35:ec:ac: 2c:00:a1:48:c7:9c:66:cf:e9:30:f3:d5:02:da:05:18:ad:80: 23:99:cf:78:3b:be:ed:76:ee:18:d7:a1:fc:63:ee:9a:a6:50: 26:aa:24:0b:2b:1d:a6:18:48:bc:ef:cf:ac:b5:49:be:83:cc: 42:8b:10:e9:16:70:56:5c:c4:fc:fa:be:61:57:82:8e:06:8c: a2:af:f1:07:a9:b1:d0:f3:8f:c6:f3:8b:d0:8e:6a:28:11:ad: c9:18:91:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3uX1DFmS/hhnP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQyMzM5MTMtOGMzZC00ZGY0LWJkN2QtNDk1ZjdhZmJh MmFjMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk NjU1YzIwNzYtMjk0Yi00NTY4LWE3NDUtNWZlODEwNDk2NTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm2YZlPSdO5E/bIAnGhZUTC0f2EhsKtnlBor ediboGKCf8jXx2oB7VTrkyRwzJv7CqEuUHxCoMRlVc4QRA9s2vzYLb3/hCKs7yBp owoq4XyQxoNa5JOJM1UMgYSu5b+cfji553rWRKMVdu10PgwfzFy/nX1/aW0/BFWW U2vQoskpvPipk/1rsmFXGI7a8OikRWk1De2UzmCRklTRUb/tiU/9nS0+euVvByrG iUgRU/lyk2AAOhsLYnf6bLvrLRzz2GLweiFj/dcrcugj+5dmhn5PCHFbc4YmyPxj Tv3Wc+2i1KRaR7+8+RecIsTnz+fZSBVWRr3RRJCey6qMf4YYeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMtucZpUj3YLzWq0+S4yySpu2TrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lNDIz MzkxMy04YzNkLTRkZjQtYmQ3ZC00OTVmN2FmYmEyYWMvZjNlYmUzMTktYmU1Zi0z Nzc4LWE5NzUtOTIxM2NhZjY0NDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTQyMzM5MTMtOGMzZC00ZGY0LWJk N2QtNDk1ZjdhZmJhMmFjL2U0MjMzOTEzLThjM2QtNGRmNC1iZDdkLTQ5NWY3YWZi YTJhYy5jcmwwHwYDVR0jBBgwFoAUI+lnoVuplvNe90Th0dYIfg7sYKswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lNDIzMzkxMy04YzNkLTRkZjQtYmQ3ZC00OTVm N2FmYmEyYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0fvhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNZfMyJYEco16VuHDDWiEK1BwIiTqFUncG0IXetPSdTmivMDMkH/eNI ZMXblA0V5ffJL+KYjn0+Z7il9W1xoUbjgzsd8PyDF/ZcEUL2oBY1oCgJDewLfI+3 5aoFNHdb9iYAyGirJnO5IF2e1etAmMShjGdDEgsJL/tHZo2jyF/9XiFUEGbftvES 9tbgat257vJVluTiQfJclaOOcKaNljXsrCwAoUjHnGbP6TDz1QLaBRitgCOZz3g7 vu127hjXofxj7pqmUCaqJAsrHaYYSLzvz6y1Sb6DzEKLEOkWcFZcxPz6vmFXgo4G jKKv8QepsdDzj8bzi9COaigRrckYkV0= -----END CERTIFICATE-----Generated at Sat Apr 12 15:31:16 2025 by rpki-client