$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/a76e2a99-afef-387e-82e9-daf0c2b55c50.roa File: a76e2a99-afef-387e-82e9-daf0c2b55c50.roa (raw, json) Hash identifier: CpS9SVv2eLOL6x7tENFd3phckzqSf46ldcHjhq+9Yts= Subject key identifier: 9E:6B:79:E0:3C:44:EB:72:EF:AE:47:6F:0C:EC:C9:36:C8:9F:A6:6B Certificate issuer: /CN=83978879-0e89-498f-901b-884a1988c27f Certificate serial: 010D0C9F43285849218401D5847993B74D00F850 Authority key identifier: F2:13:49:BC:1E:A5:6F:94:E9:9E:63:33:CC:53:1C:C5:F7:00:B9:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/a76e2a99-afef-387e-82e9-daf0c2b55c50.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 21615 IP address blocks: 209.33.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:01:d5:84:79:93:b7:4d:00:f8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83978879-0e89-498f-901b-884a1988c27f Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=545c9546-7577-4983-a95c-53af9c390800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:82:67:b5:21:db:43:ea:fd:84:39:32:c8:0c: b6:84:0b:a8:bd:21:64:ce:46:bd:b9:f1:89:8a:34: c5:fe:71:ec:9a:9c:17:73:8b:3d:26:49:38:c0:55: 64:15:75:7c:2c:21:a8:53:44:b2:9a:78:5f:5f:63: 54:47:21:c2:bc:03:8d:7e:d5:1e:d2:c8:44:6e:45: 70:29:de:ae:0f:55:bf:16:c0:d5:15:5a:2c:09:0c: 84:94:43:da:9e:d9:a8:fe:56:38:0b:80:37:d6:71: 28:0d:64:ed:69:a7:85:38:02:00:7a:f3:c5:a2:b6: 94:29:4a:73:50:c7:71:0e:68:e9:ad:1c:8a:39:fb: e2:bf:a3:44:23:f5:ae:50:fc:b5:ef:03:b1:b7:f6: 59:30:74:86:78:56:8d:76:1f:0c:15:1b:73:cf:f2: 76:a8:68:87:04:7e:72:8e:40:ec:3c:c6:ff:50:46: de:f4:39:8e:62:19:b5:9e:1d:2d:ca:ed:26:a9:e3: 46:dd:0f:52:6f:b1:56:c3:76:56:3d:0c:3a:76:96: 36:24:2e:af:ff:78:79:ea:dd:d9:ef:6f:01:26:ab: ea:fd:45:75:e7:20:f7:ef:be:50:20:5a:bc:a1:98: d8:98:1c:b9:fc:a0:84:7d:6f:84:f0:61:f0:a7:43: a0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6B:79:E0:3C:44:EB:72:EF:AE:47:6F:0C:EC:C9:36:C8:9F:A6:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/a76e2a99-afef-387e-82e9-daf0c2b55c50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.crl X509v3 Authority Key Identifier: keyid:F2:13:49:BC:1E:A5:6F:94:E9:9E:63:33:CC:53:1C:C5:F7:00:B9:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer sbgp-ipAddrBlock: critical IPv4: 209.33.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:27:ae:7a:64:bb:9e:8e:f7:05:44:74:ef:b5:e6:9f:e9:be: 8f:b1:f4:4e:d2:d1:4f:a5:f7:cb:ef:bb:73:57:f8:76:51:6e: 43:47:a0:16:a8:b0:79:ce:cc:cf:b1:84:df:6f:a4:27:c5:45: bf:69:ab:15:9c:af:10:02:9d:db:11:1b:1b:be:cc:e5:eb:f2: f0:d2:0e:c8:21:ec:4a:76:d5:08:37:3c:cb:77:5c:7c:01:e1: 99:06:9a:e8:43:4a:05:e4:3f:5f:60:7d:07:12:6e:d8:41:bc: 2d:c8:87:e1:f0:bf:e0:57:12:84:f2:48:d8:28:22:db:26:eb: f5:e7:46:a1:40:b1:fe:be:0d:68:93:67:f1:f5:8e:15:92:83: c3:71:3d:f7:9a:58:48:da:df:38:d8:d9:5a:b0:c2:d2:bc:23: 37:bf:e2:93:d7:9c:35:7a:c3:83:a3:47:3f:87:4b:de:6c:58: 16:dd:b4:75:71:ab:4d:36:dc:57:31:52:d3:3a:59:56:84:30: ab:5c:5a:34:74:a5:da:72:df:5f:f2:4a:77:1c:db:ec:de:b7: b0:3b:03:2d:e3:4c:f3:33:04:77:5e:bf:b7:85:0f:d2:40:24: 75:3b:fb:ea:d1:bb:b8:ee:68:62:b9:97:f2:af:1c:03:f7:d7: 73:ed:a0:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhAHVhHmTt00A+FAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODM5Nzg4NzktMGU4OS00OThmLTkwMWItODg0YTE5ODhj MjdmMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NTQ1Yzk1NDYtNzU3Ny00OTgzLWE5NWMtNTNhZjljMzkwODAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIJntSHbQ+r9hDkyyAy2hAuovSFkzka9ufGJ ijTF/nHsmpwXc4s9Jkk4wFVkFXV8LCGoU0SymnhfX2NURyHCvAONftUe0shEbkVw Kd6uD1W/FsDVFVosCQyElEPantmo/lY4C4A31nEoDWTtaaeFOAIAevPForaUKUpz UMdxDmjprRyKOfviv6NEI/WuUPy17wOxt/ZZMHSGeFaNdh8MFRtzz/J2qGiHBH5y jkDsPMb/UEbe9DmOYhm1nh0tyu0mqeNG3Q9Sb7FWw3ZWPQw6dpY2JC6v/3h56t3Z 728BJqvq/UV15yD3775QIFq8oZjYmBy5/KCEfW+E8GHwp0OgCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5reeA8ROty765HbwzsyTbIn6ZrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84Mzk3 ODg3OS0wZTg5LTQ5OGYtOTAxYi04ODRhMTk4OGMyN2YvYTc2ZTJhOTktYWZlZi0z ODdlLTgyZTktZGFmMGMyYjU1YzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODM5Nzg4NzktMGU4OS00OThmLTkw MWItODg0YTE5ODhjMjdmLzgzOTc4ODc5LTBlODktNDk4Zi05MDFiLTg4NGExOTg4 YzI3Zi5jcmwwHwYDVR0jBBgwFoAU8hNJvB6lb5TpnmMzzFMcxfcAueIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84Mzk3ODg3OS0wZTg5LTQ5OGYtOTAxYi04ODRh MTk4OGMyN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SFBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4nrnpku56O9wVEdO+15p/pvo+x9E7S0U+l98vvu3NX+HZRbkNHoBao sHnOzM+xhN9vpCfFRb9pqxWcrxACndsRGxu+zOXr8vDSDsgh7Ep21Qg3PMt3XHwB 4ZkGmuhDSgXkP19gfQcSbthBvC3Ih+Hwv+BXEoTySNgoItsm6/XnRqFAsf6+DWiT Z/H1jhWSg8NxPfeaWEja3zjY2VqwwtK8Ize/4pPXnDV6w4OjRz+HS95sWBbdtHVx q0023FcxUtM6WVaEMKtcWjR0pdpy31/ySncc2+zet7A7Ay3jTPMzBHdev7eFD9JA JHU7++rRu7juaGK5l/KvHAP313PtoD8= -----END CERTIFICATE-----Generated at Fri Apr 11 21:33:31 2025 by rpki-client