$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/0c0b966f-cc08-36fa-8094-773d54a45b9d.roa File: 0c0b966f-cc08-36fa-8094-773d54a45b9d.roa (raw, json) Hash identifier: wbsN5LFtC6OeWA6X+atA/RXvjHaeI/PByJWlxdXVvDM= Subject key identifier: 54:7F:96:05:88:34:25:24:5B:5F:E5:D7:36:0D:D4:B7:23:E8:63:6F Certificate issuer: /CN=6827a74b-021f-4aa4-a558-67d2d6c22fe9 Certificate serial: 010D0C9F432858491D717996F77E4F09F33B4DC0 Authority key identifier: C1:DB:0E:88:F2:C5:17:32:F0:52:F7:C0:4E:43:82:BA:B4:44:56:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/0c0b966f-cc08-36fa-8094-773d54a45b9d.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 396982 IP address blocks: 209.209.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/6827a74b-021f-4aa4-a558-67d2d6c22fe9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/6827a74b-021f-4aa4-a558-67d2d6c22fe9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:79:96:f7:7e:4f:09:f3:3b:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6827a74b-021f-4aa4-a558-67d2d6c22fe9 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=80309db6-621e-4240-8686-cebf94d19086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:62:97:25:ef:c3:7e:34:11:f6:17:ca:06:bd: 7a:c7:b3:74:18:2d:8c:e8:b9:83:29:2c:45:0c:47: ca:19:77:e8:42:d6:a6:a3:cc:04:45:2f:9d:88:1b: 1e:e8:28:b1:cc:ab:d5:37:e8:a8:a5:4a:cb:52:d2: a8:05:cf:32:92:79:31:96:87:2d:61:b3:ed:fa:5b: 86:90:38:ac:11:47:ba:c6:31:0c:cf:dc:9e:ce:52: d3:a3:a6:9e:af:ff:9b:d2:57:0b:eb:65:89:8d:74: d3:3f:9c:f3:ba:36:3b:3a:83:96:fe:67:3a:07:e2: b0:c4:70:27:db:bf:13:df:79:17:42:df:17:2e:fc: 46:83:f2:5d:8d:66:ae:ea:db:2f:e4:02:93:9a:e9: 87:20:0d:6e:8f:d5:ba:01:f6:39:31:89:79:c4:b5: d9:42:7b:74:a2:87:5d:cf:03:53:70:63:d9:0a:08: cc:76:d8:c6:1b:83:12:9d:c8:10:3f:2a:01:40:f4: bc:df:44:04:90:24:c3:15:cd:b3:1e:f1:35:e2:aa: 7f:f6:70:42:de:b4:0d:58:bb:ef:06:8d:c2:3e:d6: da:62:6a:82:88:67:51:87:2d:2a:fa:d7:ae:5c:9e: 9e:fd:ce:e4:74:a2:b4:03:6d:fa:f2:84:20:e0:e5: 51:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:7F:96:05:88:34:25:24:5B:5F:E5:D7:36:0D:D4:B7:23:E8:63:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/0c0b966f-cc08-36fa-8094-773d54a45b9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/6827a74b-021f-4aa4-a558-67d2d6c22fe9.crl X509v3 Authority Key Identifier: keyid:C1:DB:0E:88:F2:C5:17:32:F0:52:F7:C0:4E:43:82:BA:B4:44:56:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9.cer sbgp-ipAddrBlock: critical IPv4: 209.209.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:db:de:93:eb:78:5f:b8:89:1a:95:04:43:e9:f5:0e:cc:67: 14:2d:44:db:8f:49:5a:17:60:3a:ff:71:3e:e4:7c:3e:b9:16: 09:87:00:df:67:ad:13:49:35:2a:89:5e:02:3d:63:28:0b:d0: 89:59:f8:5e:9c:fe:5c:e4:f6:bf:0c:a1:cf:6c:34:81:a6:3e: 67:85:23:3e:14:30:c6:8a:09:68:fc:4d:ef:f7:86:08:3a:68: 49:97:f9:e7:8b:7f:43:59:a5:4a:f3:e1:bb:bc:70:be:2d:01: c3:f4:ab:67:7a:3c:7b:43:8b:90:dd:5c:a3:71:73:8a:78:07: 3c:46:c4:0b:d7:ad:13:57:82:e3:25:bd:d6:ee:f5:88:24:b1: ac:a1:a3:4a:91:d0:a8:74:23:ca:7b:80:1e:98:fb:e8:c4:bb: 01:97:1c:b1:d7:f1:8c:c2:ce:2e:81:56:d5:7e:e7:55:41:a3: 5e:9f:0f:cb:84:0c:54:53:2a:e9:f2:d3:f1:66:90:43:e2:3c: 33:61:e0:f7:ca:58:35:6d:b7:07:95:b5:b4:50:61:96:ed:91: 79:c9:a0:6a:0f:cd:0c:c5:c3:2d:09:23:82:16:77:b8:79:4f: 77:d6:15:6b:58:b8:3f:7c:07:a5:7a:b4:f2:6b:3e:ce:5c:7e: 2c:95:9b:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcXmW935PCfM7TcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjgyN2E3NGItMDIxZi00YWE0LWE1NTgtNjdkMmQ2YzIy ZmU5MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk ODAzMDlkYjYtNjIxZS00MjQwLTg2ODYtY2ViZjk0ZDE5MDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2KXJe/DfjQR9hfKBr16x7N0GC2M6LmDKSxF DEfKGXfoQtamo8wERS+diBse6CixzKvVN+iopUrLUtKoBc8yknkxloctYbPt+luG kDisEUe6xjEMz9yezlLTo6aer/+b0lcL62WJjXTTP5zzujY7OoOW/mc6B+KwxHAn 278T33kXQt8XLvxGg/JdjWau6tsv5AKTmumHIA1uj9W6AfY5MYl5xLXZQnt0oodd zwNTcGPZCgjMdtjGG4MSncgQPyoBQPS830QEkCTDFc2zHvE14qp/9nBC3rQNWLvv Bo3CPtbaYmqCiGdRhy0q+teuXJ6e/c7kdKK0A2368oQg4OVRSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFR/lgWINCUkW1/l1zYN1Lcj6GNvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82ODI3 YTc0Yi0wMjFmLTRhYTQtYTU1OC02N2QyZDZjMjJmZTkvMGMwYjk2NmYtY2MwOC0z NmZhLTgwOTQtNzczZDU0YTQ1YjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjgyN2E3NGItMDIxZi00YWE0LWE1 NTgtNjdkMmQ2YzIyZmU5LzY4MjdhNzRiLTAyMWYtNGFhNC1hNTU4LTY3ZDJkNmMy MmZlOS5jcmwwHwYDVR0jBBgwFoAUwdsOiPLFFzLwUvfATkOCurREVpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82ODI3YTc0Yi0wMjFmLTRhYTQtYTU1OC02N2Qy ZDZjMjJmZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dF9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALnb3pPreF+4iRqVBEPp9Q7MZxQtRNuPSVoXYDr/cT7kfD65FgmHAN9n rRNJNSqJXgI9YygL0IlZ+F6c/lzk9r8Moc9sNIGmPmeFIz4UMMaKCWj8Te/3hgg6 aEmX+eeLf0NZpUrz4bu8cL4tAcP0q2d6PHtDi5DdXKNxc4p4BzxGxAvXrRNXguMl vdbu9Ygksayho0qR0Kh0I8p7gB6Y++jEuwGXHLHX8YzCzi6BVtV+51VBo16fD8uE DFRTKuny0/FmkEPiPDNh4PfKWDVttweVtbRQYZbtkXnJoGoPzQzFwy0JI4IWd7h5 T3fWFWtYuD98B6V6tPJrPs5cfiyVmyo= -----END CERTIFICATE-----Generated at Fri Apr 4 18:07:20 2025 by rpki-client