$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f1bd1c18-533d-3c3f-b7a8-db2ef1ef1f4d.roa File: f1bd1c18-533d-3c3f-b7a8-db2ef1ef1f4d.roa (raw, json) Hash identifier: soJXiw9brU6rT7YAhhinvptTIMRZqmAbs7W//daZSZQ= Subject key identifier: B1:50:09:8F:7F:D3:29:22:B3:CC:82:19:6B:14:CC:18:4A:83:7A:EC Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F432858494CC93CB18F16137FCF0680A0 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f1bd1c18-533d-3c3f-b7a8-db2ef1ef1f4d.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 13414 IP address blocks: 209.237.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:3c:b1:8f:16:13:7f:cf:06:80:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=fcf8f9ca-bed5-408e-af3f-edcc942c989e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:12:50:bc:42:b1:eb:48:c8:0d:54:5e:09:34: 08:a1:51:bb:fd:c0:ac:b6:09:6c:f6:e5:98:bc:21: f9:61:d8:f6:18:e1:c5:ec:9a:b2:49:21:ef:28:c2: 83:79:58:b3:9e:e7:04:1d:2f:e9:44:42:88:47:18: 21:da:a9:12:d3:46:46:a3:2c:19:a9:7f:33:eb:bd: 1a:d3:d1:b7:35:f0:f5:2b:aa:d4:b6:34:6c:87:76: 22:1d:44:6c:e6:87:21:36:e5:3b:ee:53:d0:18:0f: e3:04:60:63:d8:a6:05:1b:1f:bd:25:ac:43:8e:6f: 67:db:e8:cd:df:71:6e:46:fb:3c:38:32:a7:72:87: b8:72:96:e6:7b:16:c0:6f:78:52:5e:a4:ff:1a:77: e5:57:d2:b9:3c:37:dd:37:7b:77:53:62:6a:78:f0: 74:22:c8:ce:97:24:37:89:d5:b2:ae:f4:33:ba:01: 2d:4d:ab:8a:71:e9:16:ca:0f:03:01:05:b6:61:ef: bd:8c:5e:a2:7f:71:f5:4f:64:fe:b5:8c:46:64:15: 2f:ed:90:ac:04:44:84:85:d9:c2:0a:7a:2a:f2:3a: 65:8d:b4:bd:5f:3c:3b:c4:34:20:97:89:e0:44:0e: d8:1b:4c:9e:23:1a:a6:eb:10:6a:7c:44:9e:f9:bc: ef:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:50:09:8F:7F:D3:29:22:B3:CC:82:19:6B:14:CC:18:4A:83:7A:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f1bd1c18-533d-3c3f-b7a8-db2ef1ef1f4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:11:56:f2:60:d6:fa:af:fd:24:00:23:1a:01:0a:b9:9b:af: 9a:c0:40:05:5c:90:66:07:5e:0b:fc:46:51:2c:f8:62:1b:83: 98:e9:ec:81:ac:bc:b8:20:77:3c:9b:fb:e9:d4:2d:c6:8a:c2: 73:32:ed:27:c6:63:1d:43:03:42:1d:44:c6:6e:6e:b7:1b:16: 5f:05:6f:f4:ea:57:4d:7a:26:ba:5f:67:6d:7a:d2:05:74:65: f9:4e:bf:f9:8c:09:93:79:2f:bc:16:4a:e7:21:48:5c:a2:f4: db:75:76:3f:80:18:94:b3:d9:2e:74:c5:17:f3:5f:77:80:d1: 94:92:5b:8b:b9:e0:57:23:03:f9:b4:1a:1c:87:ce:2b:28:b7: 45:33:de:f6:b7:74:9d:fd:a9:d5:87:39:98:90:78:da:ac:37: 07:21:ea:73:2a:ba:e7:52:91:26:cf:f1:58:c8:ad:da:a4:b7: 91:12:65:b8:1c:c8:13:e2:f1:10:40:e7:6d:8e:44:17:ba:23: 5f:ba:46:5d:ef:16:5e:8d:59:a4:d8:4c:24:31:14:a4:84:0b: e6:17:d8:29:f8:f4:92:5b:98:18:8e:a0:dc:6d:c8:ca:40:f2: d6:78:01:49:3d:ea:e9:1f:7f:34:a5:09:a0:58:d4:0f:24:52: 8f:7c:89:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyTyxjxYTf88GgKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk ZmNmOGY5Y2EtYmVkNS00MDhlLWFmM2YtZWRjYzk0MmM5ODllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghJQvEKx60jIDVReCTQIoVG7/cCstgls9uWY vCH5Ydj2GOHF7JqySSHvKMKDeViznucEHS/pREKIRxgh2qkS00ZGoywZqX8z670a 09G3NfD1K6rUtjRsh3YiHURs5ochNuU77lPQGA/jBGBj2KYFGx+9JaxDjm9n2+jN 33FuRvs8ODKncoe4cpbmexbAb3hSXqT/GnflV9K5PDfdN3t3U2JqePB0IsjOlyQ3 idWyrvQzugEtTauKcekWyg8DAQW2Ye+9jF6if3H1T2T+tYxGZBUv7ZCsBESEhdnC Cnoq8jpljbS9Xzw7xDQgl4ngRA7YG0yeIxqm6xBqfESe+bzvvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFQCY9/0ykis8yCGWsUzBhKg3rsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZjFiZDFjMTgtNTMzZC0z YzNmLWI3YTgtZGIyZWYxZWYxZjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwRVvJg1vqv/SQAIxoBCrmbr5rAQAVckGYHXgv8RlEs+GIbg5jp7IGs vLggdzyb++nULcaKwnMy7SfGYx1DA0IdRMZubrcbFl8Fb/TqV016JrpfZ2160gV0 ZflOv/mMCZN5L7wWSuchSFyi9Nt1dj+AGJSz2S50xRfzX3eA0ZSSW4u54FcjA/m0 GhyHzisot0Uz3va3dJ39qdWHOZiQeNqsNwch6nMquudSkSbP8VjIrdqkt5ESZbgc yBPi8RBA522ORBe6I1+6Rl3vFl6NWaTYTCQxFKSEC+YX2Cn49JJbmBiOoNxtyMpA 8tZ4AUk96ukffzSlCaBY1A8kUo98iYo= -----END CERTIFICATE-----Generated at Sat Apr 5 05:15:05 2025 by rpki-client