$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/48351c25-8c04-3be2-9d0c-45dc5703d206.roa File: 48351c25-8c04-3be2-9d0c-45dc5703d206.roa (raw, json) Hash identifier: z/H6V4SmUEZ3uscyFKU9mJhX6rOHnjrpRIIzAM6iFis= Subject key identifier: 77:B8:F8:3D:4B:5C:17:A7:F4:BA:BD:C9:91:14:4F:DC:57:5B:26:2C Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F432858494CC93FFBFCD63E6A410D41C0 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/48351c25-8c04-3be2-9d0c-45dc5703d206.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 13414 IP address blocks: 209.237.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:3f:fb:fc:d6:3e:6a:41:0d:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=88cf279b-a1ec-4a70-a63f-9a21056e538a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9e:d4:89:18:3f:30:35:c0:9b:9e:93:ca:2a: e9:e0:00:f0:90:6f:bf:77:ca:2b:63:25:90:e9:6d: c8:cb:ce:69:bd:7c:25:11:a0:8a:76:03:04:42:cd: de:d7:f7:7e:02:cd:bf:9e:15:c0:1b:ca:0b:36:07: 1c:89:a3:ce:51:6c:34:88:a6:cf:0f:fa:1e:36:e5: 36:72:da:53:52:49:24:8f:ed:67:d2:df:51:35:94: 14:ea:fc:ea:66:38:42:95:2f:ac:40:d7:b1:89:31: 86:07:4d:97:c1:84:00:79:32:cc:11:1c:9e:19:1c: 2e:4b:91:72:e0:8d:7b:45:11:6b:d8:78:bd:a8:f2: 61:36:bb:a2:1d:cc:61:90:ce:a1:e3:14:3d:6d:0e: e8:dc:60:7a:88:28:c2:85:25:a7:c4:7e:fb:08:69: 6d:39:99:b5:77:86:d8:88:2a:e2:58:42:ba:2a:31: bb:7c:5a:91:8c:95:38:f5:10:08:b2:23:fc:f5:5c: 57:77:e4:8b:d6:19:88:8e:4e:55:cc:c4:af:56:5f: ca:81:7e:66:04:63:b1:02:43:91:d4:f5:07:31:0d: b7:2b:f9:7a:b6:c7:0d:dc:36:3c:ba:a6:e4:31:6b: 68:7b:ba:2c:da:8f:65:7c:08:d3:73:30:dc:78:dc: 2c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B8:F8:3D:4B:5C:17:A7:F4:BA:BD:C9:91:14:4F:DC:57:5B:26:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/48351c25-8c04-3be2-9d0c-45dc5703d206.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:79:6f:e3:77:a5:20:19:09:67:bc:0e:80:77:af:f8:2b:27: 43:d8:93:42:f2:64:ce:bb:7c:36:e9:52:82:ac:5e:c0:0b:83: 13:b4:f8:54:73:a1:51:3b:68:26:c1:cc:67:a7:d1:42:b3:8d: 04:dc:d5:ad:ec:2a:c7:85:41:dc:df:86:f5:a0:17:46:de:7f: 56:fb:9a:4e:b1:56:d2:72:3c:32:19:47:82:c1:d6:98:03:c0: df:47:dd:41:f7:ef:6b:59:de:30:6b:e8:6e:37:13:95:1c:bf: 53:6f:4a:5f:74:9f:a1:25:33:43:02:68:b8:f3:c9:76:24:73: 52:a8:d0:ff:53:11:5f:03:2d:85:4b:4d:ac:ac:b7:a1:0c:6b: 43:91:2f:39:84:b2:6f:6e:ed:41:7e:14:0a:68:d7:22:84:6c: 3c:96:73:bf:0d:5b:76:27:e8:38:26:dd:21:8a:e4:36:a7:ef: 2f:1a:72:cd:d0:fa:ed:80:8c:79:e3:99:87:65:ab:79:d1:1c: a8:23:71:15:4d:43:06:6f:ee:7b:3d:bc:52:94:59:1f:c2:6b: 09:9c:9f:bd:44:4e:65:64:c1:b3:a1:69:4b:ab:8e:b3:47:b3: 4a:65:ca:ab:88:42:21:34:ab:20:b7:1f:e5:89:12:38:11:48: dc:ba:5e:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyT/7/NY+akENQcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk ODhjZjI3OWItYTFlYy00YTcwLWE2M2YtOWEyMTA1NmU1MzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ7UiRg/MDXAm56Tyirp4ADwkG+/d8orYyWQ 6W3Iy85pvXwlEaCKdgMEQs3e1/d+As2/nhXAG8oLNgcciaPOUWw0iKbPD/oeNuU2 ctpTUkkkj+1n0t9RNZQU6vzqZjhClS+sQNexiTGGB02XwYQAeTLMERyeGRwuS5Fy 4I17RRFr2Hi9qPJhNruiHcxhkM6h4xQ9bQ7o3GB6iCjChSWnxH77CGltOZm1d4bY iCriWEK6KjG7fFqRjJU49RAIsiP89VxXd+SL1hmIjk5VzMSvVl/KgX5mBGOxAkOR 1PUHMQ23K/l6tscN3DY8uqbkMWtoe7os2o9lfAjTczDceNwslQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHe4+D1LXBen9Lq9yZEUT9xXWyYsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvNDgzNTFjMjUtOGMwNC0z YmUyLTlkMGMtNDVkYzU3MDNkMjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEd5b+N3pSAZCWe8DoB3r/grJ0PYk0LyZM67fDbpUoKsXsALgxO0+FRz oVE7aCbBzGen0UKzjQTc1a3sKseFQdzfhvWgF0bef1b7mk6xVtJyPDIZR4LB1pgD wN9H3UH372tZ3jBr6G43E5Ucv1NvSl90n6ElM0MCaLjzyXYkc1Ko0P9TEV8DLYVL Tayst6EMa0ORLzmEsm9u7UF+FApo1yKEbDyWc78NW3Yn6Dgm3SGK5Dan7y8acs3Q +u2AjHnjmYdlq3nRHKgjcRVNQwZv7ns9vFKUWR/Cawmcn71ETmVkwbOhaUurjrNH s0plyquIQiE0qyC3H+WJEjgRSNy6Xt8= -----END CERTIFICATE-----Generated at Sat Apr 5 05:22:17 2025 by rpki-client