$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3b06082d-4609-38e4-a7d6-b3733dc76a0f.roa File: 3b06082d-4609-38e4-a7d6-b3733dc76a0f.roa (raw, json) Hash identifier: 0U94cVDPn1ag0WoDMvmiQK8VdhYBjE3Z2iotx5SBrMI= Subject key identifier: 09:D7:B8:7C:E6:EA:45:E4:4A:79:93:E2:4D:E1:E4:DB:42:7D:C7:A3 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F432858494B6413011CAF8AE732E4C200 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3b06082d-4609-38e4-a7d6-b3733dc76a0f.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 13414 IP address blocks: 209.237.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:13:01:1c:af:8a:e7:32:e4:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=e8fa3d94-b676-4be6-82d2-ff4bc2a6ffa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:83:ba:a2:c6:60:ec:ea:2d:3a:0c:b3:b7:bc: 46:fe:78:71:ca:ee:7d:24:26:97:95:d7:ff:83:87: 62:1b:2a:a3:46:69:dc:52:c8:40:a8:67:f6:bf:23: ca:10:56:ab:49:98:b4:4a:05:93:9e:c3:39:f4:44: 5c:bc:42:7e:1f:d8:09:d0:a8:b0:4d:a4:07:a5:5b: 96:32:40:5f:f9:92:38:10:9f:90:a4:38:83:9c:b8: c9:6a:f4:30:b2:a8:47:96:2e:5d:0e:14:43:5f:fd: d9:69:f3:2b:ec:1f:07:50:43:01:0e:d9:cb:e1:47: 50:ea:68:ff:66:cb:35:a5:eb:52:7a:3a:40:29:aa: 27:32:f4:d8:b7:d1:83:75:4c:01:3f:51:8b:e5:ef: e7:16:94:a2:4c:1e:14:52:ce:c1:83:49:38:77:f3: ba:89:e0:79:d8:d6:02:0e:59:c6:28:eb:d6:72:32: d2:df:8e:48:6f:b3:d4:63:68:9d:ff:b8:69:c8:55: da:70:d8:d6:f1:34:ea:23:8e:48:99:ed:ff:ef:b9: 62:e3:5d:0a:24:05:2d:14:53:ff:a7:83:68:49:d8: c8:c1:b5:03:02:d2:88:e2:3e:5f:b6:ae:dd:05:bc: 3b:ef:c3:a6:e3:ab:01:49:33:98:1c:08:b0:e9:ff: b0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D7:B8:7C:E6:EA:45:E4:4A:79:93:E2:4D:E1:E4:DB:42:7D:C7:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3b06082d-4609-38e4-a7d6-b3733dc76a0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:5d:89:02:87:64:23:3f:3a:fb:0b:31:0a:cf:24:b4:a7:7b: c6:fb:df:fa:8d:24:36:85:bd:28:60:cc:e0:e8:ca:46:03:8a: 13:c2:9e:2c:cd:6b:97:bf:1d:9a:17:2f:cb:5b:5d:e3:29:e9: ce:0a:8a:fa:6f:e3:4c:75:49:5f:35:81:89:fe:62:02:c0:f2: e3:07:c3:a3:97:df:76:4f:49:e5:6d:7a:60:32:c7:12:a3:ad: c5:22:c3:01:f9:1f:3b:1b:4c:b7:7d:5d:d2:72:27:e8:0d:e8: c8:18:e0:7d:38:b8:bc:cd:e5:3f:2c:c6:f4:52:88:ab:c9:c8: 73:a2:23:c8:ef:0f:8a:8f:bd:ca:a9:cb:93:42:6c:87:6d:09: c4:a8:0b:a0:17:6d:f9:8e:ad:01:38:3a:dc:9d:c8:83:17:c1: 1d:79:41:1a:67:cd:97:ad:ce:47:01:c4:47:ef:14:b5:e0:f5: e1:9a:b2:75:4e:d3:5e:13:98:68:83:78:b8:0d:f5:75:5f:b5: 40:26:3f:9b:0d:6d:14:4e:8b:da:d9:c8:50:74:95:d8:f0:7d: 9a:14:e3:b9:26:01:53:44:d3:de:20:2c:3d:00:01:a0:44:02: b6:86:f0:54:3e:25:1e:24:9b:11:bc:29:76:b9:0d:e8:05:61: 11:7c:b3:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBMBHK+K5zLkwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ZThmYTNkOTQtYjY3Ni00YmU2LTgyZDItZmY0YmMyYTZmZmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYO6osZg7OotOgyzt7xG/nhxyu59JCaXldf/ g4diGyqjRmncUshAqGf2vyPKEFarSZi0SgWTnsM59ERcvEJ+H9gJ0KiwTaQHpVuW MkBf+ZI4EJ+QpDiDnLjJavQwsqhHli5dDhRDX/3ZafMr7B8HUEMBDtnL4UdQ6mj/ Zss1petSejpAKaonMvTYt9GDdUwBP1GL5e/nFpSiTB4UUs7Bg0k4d/O6ieB52NYC DlnGKOvWcjLS345Ib7PUY2id/7hpyFXacNjW8TTqI45Ime3/77li410KJAUtFFP/ p4NoSdjIwbUDAtKI4j5ftq7dBbw778Om46sBSTOYHAiw6f+wAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnXuHzm6kXkSnmT4k3h5NtCfcejMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvM2IwNjA4MmQtNDYwOS0z OGU0LWE3ZDYtYjM3MzNkYzc2YTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9diQKHZCM/OvsLMQrPJLSne8b73/qNJDaFvShgzODoykYDihPCnizN a5e/HZoXL8tbXeMp6c4Kivpv40x1SV81gYn+YgLA8uMHw6OX33ZPSeVtemAyxxKj rcUiwwH5HzsbTLd9XdJyJ+gN6MgY4H04uLzN5T8sxvRSiKvJyHOiI8jvD4qPvcqp y5NCbIdtCcSoC6AXbfmOrQE4OtydyIMXwR15QRpnzZetzkcBxEfvFLXg9eGasnVO 014TmGiDeLgN9XVftUAmP5sNbRROi9rZyFB0ldjwfZoU47kmAVNE094gLD0AAaBE AraG8FQ+JR4kmxG8KXa5DegFYRF8sx4= -----END CERTIFICATE-----Generated at Sat Apr 5 05:19:47 2025 by rpki-client