$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/43a5601d-1585-3131-be68-bff003a98cc5.roa File: 43a5601d-1585-3131-be68-bff003a98cc5.roa (raw, json) Hash identifier: dlh6xY01pUbVl275iLmFgiuElbuYcnglJ7m226Y7Mdc= Subject key identifier: A0:22:0E:D1:C0:AB:D6:70:5F:19:E3:34:F4:74:39:6B:FA:97:5B:90 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F432858494B64119B55007F98BD05ED00 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/43a5601d-1585-3131-be68-bff003a98cc5.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 13414 IP address blocks: 209.237.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:11:9b:55:00:7f:98:bd:05:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=80740f3a-7da9-4c86-9e70-ff7dc7170bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a2:99:22:e7:dd:41:50:34:bd:51:68:4d:d5: 92:b5:9c:27:a7:c9:c9:ae:95:eb:e5:e6:e3:aa:3f: 8f:42:7e:1e:a9:37:d7:2e:22:b1:40:ce:43:e1:3f: 3f:33:f0:3e:91:7f:c0:2d:95:20:bf:23:c3:3a:fe: 47:dd:4e:b5:a3:c2:18:c8:3d:e6:b2:b3:c6:b9:b1: ef:bb:39:16:72:b1:ea:5e:a4:d3:0f:03:59:b8:60: d2:4c:eb:27:db:b9:88:43:92:5e:84:6e:38:ff:e4: 49:5c:a4:15:da:f8:73:23:d8:b2:c0:8f:d1:1f:80: 5b:8a:c3:ca:14:1e:b8:7e:cc:a6:27:2e:9c:95:96: 87:18:47:7e:df:c7:5f:2c:a0:3d:b3:e4:56:86:d7: 10:78:21:cc:cd:3e:01:e6:66:2a:47:bf:e3:8c:c3: e3:e2:cc:9f:f5:0e:f2:c8:1d:5d:0f:a5:6b:dd:9e: 16:d3:bd:11:0e:e3:ec:18:f7:c7:6c:3c:77:85:df: f5:3f:4b:42:49:70:2c:07:4a:cb:e3:76:2b:5b:ea: 81:70:0f:9d:12:9d:27:55:2f:3b:b4:d1:c6:a6:42: 66:01:b2:65:5c:0f:9d:0d:6e:e9:36:dd:57:ce:4c: f8:c5:66:52:a4:63:a5:6f:11:38:e6:19:52:80:f5: ba:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:22:0E:D1:C0:AB:D6:70:5F:19:E3:34:F4:74:39:6B:FA:97:5B:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/43a5601d-1585-3131-be68-bff003a98cc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:a3:1f:a6:30:97:9f:0a:51:cc:4b:da:e4:0e:8a:fa:39:96: 39:45:73:90:59:f6:a6:17:b8:f3:10:17:09:85:5a:df:b5:3b: 44:ed:e2:bc:1d:08:54:26:ab:73:ec:4e:ac:e6:d3:99:df:d9: 44:a0:95:39:a7:85:3a:ce:09:42:22:b5:39:91:ee:01:da:f1: ba:a7:98:74:0c:8c:60:e7:6b:f2:a0:5d:ad:35:46:b5:e6:cd: f2:b4:8d:aa:2e:81:7e:c5:b7:8b:f3:f9:4c:1a:74:2b:14:4e: d1:bd:22:6b:d5:2b:c6:19:f4:82:6d:46:4a:7f:5f:a2:86:fb: 81:80:08:8d:e7:07:59:f5:9c:12:ab:31:2b:6e:4a:ee:61:35: 10:a8:26:3e:42:d3:3e:0b:6f:21:08:18:b5:f2:ff:09:63:95: 80:19:e4:42:dc:14:24:01:26:4a:3f:01:21:5b:25:2f:ef:93: 56:1a:c0:e6:56:2a:5b:ac:c4:a2:77:3d:82:f2:a0:1a:eb:b2: 95:89:ef:3a:88:ba:c5:00:ea:ea:12:d7:9b:63:5d:73:fc:e5: 53:10:75:2b:06:99:61:88:99:35:ce:52:8c:28:bd:45:31:7e: 14:cb:81:77:8d:3f:ca:74:4a:92:34:83:53:6f:65:ce:e0:f9: af:5c:56:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBGbVQB/mL0F7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ODA3NDBmM2EtN2RhOS00Yzg2LTllNzAtZmY3ZGM3MTcwYmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKKZIufdQVA0vVFoTdWStZwnp8nJrpXr5ebj qj+PQn4eqTfXLiKxQM5D4T8/M/A+kX/ALZUgvyPDOv5H3U61o8IYyD3msrPGubHv uzkWcrHqXqTTDwNZuGDSTOsn27mIQ5JehG44/+RJXKQV2vhzI9iywI/RH4BbisPK FB64fsymJy6clZaHGEd+38dfLKA9s+RWhtcQeCHMzT4B5mYqR7/jjMPj4syf9Q7y yB1dD6Vr3Z4W070RDuPsGPfHbDx3hd/1P0tCSXAsB0rL43YrW+qBcA+dEp0nVS87 tNHGpkJmAbJlXA+dDW7pNt1Xzkz4xWZSpGOlbxE45hlSgPW6aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAiDtHAq9ZwXxnjNPR0OWv6l1uQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvNDNhNTYwMWQtMTU4NS0z MTMxLWJlNjgtYmZmMDAzYTk4Y2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6jH6Ywl58KUcxL2uQOivo5ljlFc5BZ9qYXuPMQFwmFWt+1O0Tt4rwd CFQmq3PsTqzm05nf2USglTmnhTrOCUIitTmR7gHa8bqnmHQMjGDna/KgXa01RrXm zfK0jaougX7Ft4vz+UwadCsUTtG9ImvVK8YZ9IJtRkp/X6KG+4GACI3nB1n1nBKr MStuSu5hNRCoJj5C0z4LbyEIGLXy/wljlYAZ5ELcFCQBJko/ASFbJS/vk1YawOZW KlusxKJ3PYLyoBrrspWJ7zqIusUA6uoS15tjXXP85VMQdSsGmWGImTXOUowovUUx fhTLgXeNP8p0SpI0g1NvZc7g+a9cVgA= -----END CERTIFICATE-----Generated at Sat Apr 5 05:45:41 2025 by rpki-client