$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/900974d7-8989-307f-a8dd-f27fbe573f09.roa File: 900974d7-8989-307f-a8dd-f27fbe573f09.roa (raw, json) Hash identifier: D28WxPx0DbSnGKOPeOxO/2tFB3XyiiAT7q1dstR9G2k= Subject key identifier: CA:9F:2E:C9:B6:D6:20:CB:F0:7C:99:E8:88:B2:CD:6B:0D:5B:44:CF Certificate issuer: /CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Certificate serial: 010D0C9F4328584944693361450F63A528CB6500 Authority key identifier: F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/900974d7-8989-307f-a8dd-f27fbe573f09.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 198949 IP address blocks: 206.209.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:33:61:45:0f:63:a5:28:cb:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=7115de67-abd3-42a6-9d23-16926711ef93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:14:4f:52:4f:d5:74:7d:c5:76:8a:a4:47:9c: 97:37:d5:d7:38:69:56:cf:9d:1a:b3:31:f5:99:33: b4:3b:99:e7:7e:8a:26:f5:04:9c:db:fd:83:d8:3c: d5:45:a4:a9:e2:45:33:70:1e:74:19:0d:01:09:de: e1:b3:57:95:f8:e6:46:6b:f5:f8:17:26:47:99:fe: 17:d5:2e:5b:78:11:b5:25:f1:da:60:be:47:8f:79: 02:1a:61:23:02:4f:fd:9d:1f:1e:69:94:da:ac:c1: b1:92:61:98:75:b4:52:26:5b:21:07:72:bf:84:2e: a1:43:2b:49:a7:d9:ec:f1:5b:7d:10:a2:4e:e5:a8: 83:2f:bd:d9:22:d0:04:ff:f0:36:cc:92:59:ce:23: bf:ac:87:77:e0:d6:81:45:d4:8f:5c:d7:a0:e2:e8: f8:3b:26:32:27:d9:70:77:63:b2:0f:63:eb:1b:0d: e1:97:76:15:ed:9d:5b:28:66:5a:2d:43:39:4a:99: 52:39:73:66:10:58:d2:2a:d6:21:85:80:dd:6b:04: 71:40:73:53:cf:fd:5d:d5:e7:98:90:0d:db:9a:22: d7:2d:aa:2d:10:aa:b3:77:9f:3a:29:9d:d0:9b:44: 94:70:a2:c1:39:bb:fb:1d:3a:d5:0f:5b:50:1d:ce: a0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9F:2E:C9:B6:D6:20:CB:F0:7C:99:E8:88:B2:CD:6B:0D:5B:44:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/900974d7-8989-307f-a8dd-f27fbe573f09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl X509v3 Authority Key Identifier: keyid:F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer sbgp-ipAddrBlock: critical IPv4: 206.209.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:7b:3d:44:d2:8f:44:2a:cb:0e:4c:0a:e9:47:75:90:9a:1d: 66:f1:80:b8:8a:0d:fb:c4:ec:cd:7f:50:bf:ae:cd:7b:e0:81: 60:aa:e0:ab:10:01:df:99:f8:05:f8:89:7f:a6:60:3e:53:a1: f2:aa:ad:3c:41:5e:19:b8:47:da:68:71:27:5d:5a:44:54:fc: 1b:73:7f:48:24:ad:55:c4:ad:63:0a:23:e4:91:2b:c3:89:9a: 17:97:99:b2:19:64:e9:8c:b2:a3:6b:47:91:46:18:63:fb:e1: 25:00:f7:95:1b:00:43:dc:1a:b5:81:1b:07:35:21:8d:85:d1: 4d:5e:6b:78:5a:06:b9:cb:78:cd:f3:25:7e:4c:c9:ae:07:88: f4:b6:d2:ef:e3:f2:85:a7:53:f2:6f:2d:17:bf:5b:11:7b:3b: 8c:f5:04:70:7c:35:e9:4e:e5:31:d7:a7:53:11:6c:11:4d:ca: 5a:79:c4:5c:4d:1e:ba:aa:ed:39:f9:8c:81:a6:56:36:cf:68: fd:2d:b3:bf:33:ed:2e:04:49:bc:3f:f8:da:4f:0c:2b:21:46: 7a:85:59:2a:b4:62:96:b7:0b:58:b8:54:34:ca:b5:08:d0:77: e4:03:81:95:1c:2e:c0:30:24:f4:3d:1a:13:a5:da:32:3c:5b: f7:80:fe:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaTNhRQ9jpSjLZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y5MDBlNGUtNWYwYS00YjE0LTk4YzAtNjY0N2JmZjVl NjRlMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk NzExNWRlNjctYWJkMy00MmE2LTlkMjMtMTY5MjY3MTFlZjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBRPUk/VdH3FdoqkR5yXN9XXOGlWz50aszH1 mTO0O5nnfoom9QSc2/2D2DzVRaSp4kUzcB50GQ0BCd7hs1eV+OZGa/X4FyZHmf4X 1S5beBG1JfHaYL5Hj3kCGmEjAk/9nR8eaZTarMGxkmGYdbRSJlshB3K/hC6hQytJ p9ns8Vt9EKJO5aiDL73ZItAE//A2zJJZziO/rId34NaBRdSPXNeg4uj4OyYyJ9lw d2OyD2PrGw3hl3YV7Z1bKGZaLUM5SplSOXNmEFjSKtYhhYDdawRxQHNTz/1d1eeY kA3bmiLXLaotEKqzd586KZ3Qm0SUcKLBObv7HTrVD1tQHc6gwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqfLsm21iDL8HyZ6IiyzWsNW0TPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Zjkw MGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3YmZmNWU2NGUvOTAwOTc0ZDctODk4OS0z MDdmLWE4ZGQtZjI3ZmJlNTczZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y5MDBlNGUtNWYwYS00YjE0LTk4 YzAtNjY0N2JmZjVlNjRlLzdmOTAwZTRlLTVmMGEtNGIxNC05OGMwLTY2NDdiZmY1 ZTY0ZS5jcmwwHwYDVR0jBBgwFoAU8+WK0rjvh9c+gIgy/nujowv1xKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjkwMGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3 YmZmNWU2NGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEztEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAh7PUTSj0Qqyw5MCulHdZCaHWbxgLiKDfvE7M1/UL+uzXvggWCq4KsQ Ad+Z+AX4iX+mYD5TofKqrTxBXhm4R9pocSddWkRU/Btzf0gkrVXErWMKI+SRK8OJ mheXmbIZZOmMsqNrR5FGGGP74SUA95UbAEPcGrWBGwc1IY2F0U1ea3haBrnLeM3z JX5Mya4HiPS20u/j8oWnU/JvLRe/WxF7O4z1BHB8NelO5THXp1MRbBFNylp5xFxN Hrqq7Tn5jIGmVjbPaP0ts78z7S4ESbw/+NpPDCshRnqFWSq0Ypa3C1i4VDTKtQjQ d+QDgZUcLsAwJPQ9GhOl2jI8W/eA/tw= -----END CERTIFICATE-----Generated at Sun Apr 13 01:34:03 2025 by rpki-client