$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7253bf54-50b6-3248-9cd9-f777bdd3845d.roa File: 7253bf54-50b6-3248-9cd9-f777bdd3845d.roa (raw, json) Hash identifier: 2xkncqZxJpKkHUHLU1M7EyIs102nyTZRQxplclP/AV4= Subject key identifier: AE:36:99:77:0D:7F:54:47:C2:E5:04:4F:0E:02:E4:DC:CC:BB:FB:86 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F432858489A3B47E9E685963FAC9D5600 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7253bf54-50b6-3248-9cd9-f777bdd3845d.roa Signing time: Mon 20 Jan 2025 02:00:40 +0000 ROA not before: Mon 20 Jan 2025 02:00:40 +0000 ROA not after: Sun 20 Apr 2025 01:00:40 +0000 asID: 13536 IP address blocks: 209.198.82.0/24 maxlen: 24 209.198.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9a:3b:47:e9:e6:85:96:3f:ac:9d:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jan 20 02:00:40 2025 GMT Not After : Apr 20 01:00:40 2025 GMT Subject: CN=15a7f1e7-cefa-4484-b0c9-695fc1616a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:68:d2:44:78:d3:72:13:51:8d:67:ca:df:05: 4e:85:b5:e2:1d:ba:e7:ab:04:a0:5f:88:35:61:91: be:db:5f:60:e5:8c:35:86:f5:f1:91:c1:94:db:88: df:e7:60:de:bd:15:29:1a:be:70:a1:f7:d6:67:33: 85:32:79:e4:9f:2e:2c:84:a0:95:6c:82:dd:db:64: a9:3a:6f:a6:e8:58:31:b7:6d:7a:d3:ca:bf:bc:4d: 76:e7:5e:00:df:c1:fe:d5:e7:64:34:f8:27:9c:70: 1e:fc:49:e2:74:13:86:21:42:87:60:1a:a3:09:4e: 56:f9:6d:27:3c:0d:f9:f4:ec:77:e9:42:55:37:28: 12:a9:db:50:f3:3e:05:52:f2:cf:03:4e:2f:40:7a: 76:49:e6:85:85:98:1e:75:df:7f:06:75:6f:19:6e: e1:b9:f6:c9:d6:6e:9c:88:75:32:b8:88:8f:8f:d1: 33:7f:db:57:23:0d:96:42:6b:e1:eb:e7:5b:00:c3: 54:bf:dc:be:50:bd:1d:cb:bc:a5:92:68:f0:15:f4: da:0f:58:34:91:23:c4:e0:c5:cf:15:b7:85:d4:0e: 32:10:e5:47:e3:9c:55:34:2b:b6:06:c0:90:d6:e0: 7f:15:b3:6c:d5:72:11:3d:66:bc:ea:35:b8:69:3b: 6a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:36:99:77:0D:7F:54:47:C2:E5:04:4F:0E:02:E4:DC:CC:BB:FB:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7253bf54-50b6-3248-9cd9-f777bdd3845d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 209.198.82.0/24 209.198.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:95:94:58:b0:e0:ca:5e:26:ec:32:f7:ca:31:38:1d:29:b8: 9f:bc:ce:70:ab:9d:7d:04:5b:dc:fd:a4:15:42:ed:e7:a2:94: 9d:3e:0b:28:2c:be:bb:aa:05:4d:5a:ad:d1:fd:b4:e0:8e:3f: a3:6e:be:64:5a:1e:8e:e3:7e:82:2d:bf:a7:76:30:1e:28:fa: cc:b8:86:69:73:fd:a7:a5:55:0b:2d:dd:54:ee:9c:f1:7f:ae: 9a:1f:d5:05:0a:92:8b:a0:62:ff:57:8b:ed:4b:5d:56:ed:83: 71:30:73:f2:48:4f:2f:61:5f:5d:74:c4:54:81:1c:da:7f:e8: 94:1b:c4:e8:60:64:41:d2:cd:60:f3:f6:6e:b6:01:2f:74:96: a6:29:d6:b7:c2:83:7d:26:30:93:bc:5b:86:28:53:6a:5c:51: 9c:bb:8c:9b:43:1d:78:6d:3e:4a:ed:55:b4:d2:11:a6:20:56: 9f:94:93:ff:1c:d9:44:84:54:8d:93:f1:44:d3:bf:5b:d5:90: a1:6e:77:af:43:85:91:87:97:cb:21:70:5c:80:32:cf:51:6a: 88:ab:4c:5a:0a:a3:ff:d8:dc:c3:73:c1:c8:65:4b:5a:fb:5c: 18:62:c4:e7:f6:8c:46:ee:21:de:52:b9:b9:fd:28:b0:af:3f: c0:8e:82:31 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEiaO0fp5oWWP6ydVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk MTVhN2YxZTctY2VmYS00NDg0LWIwYzktNjk1ZmMxNjE2YTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42jSRHjTchNRjWfK3wVOhbXiHbrnqwSgX4g1 YZG+219g5Yw1hvXxkcGU24jf52DevRUpGr5woffWZzOFMnnkny4shKCVbILd22Sp Om+m6Fgxt21608q/vE12514A38H+1edkNPgnnHAe/EnidBOGIUKHYBqjCU5W+W0n PA359Ox36UJVNygSqdtQ8z4FUvLPA04vQHp2SeaFhZgedd9/BnVvGW7hufbJ1m6c iHUyuIiPj9Ezf9tXIw2WQmvh6+dbAMNUv9y+UL0dy7ylkmjwFfTaD1g0kSPE4MXP FbeF1A4yEOVH45xVNCu2BsCQ1uB/FbNs1XIRPWa86jW4aTtqnQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFK42mXcNf1RHwuUETw4C5NzMu/uGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNzI1M2JmNTQtNTBiNi0z MjQ4LTljZDktZjc3N2JkZDM4NDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0cZSAwQA 0cZdMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALuVlFiw4MpeJuwy98oxOB0puJ+8znCrnX0EW9z9pBVC7eei lJ0+CygsvruqBU1ardH9tOCOP6NuvmRaHo7jfoItv6d2MB4o+sy4hmlz/aelVQst 3VTunPF/rpof1QUKkougYv9Xi+1LXVbtg3Ewc/JITy9hX110xFSBHNp/6JQbxOhg ZEHSzWDz9m62AS90lqYp1rfCg30mMJO8W4YoU2pcUZy7jJtDHXhtPkrtVbTSEaYg Vp+Uk/8c2USEVI2T8UTTv1vVkKFud69DhZGHl8shcFyAMs9RaoirTFoKo//Y3MNz wchlS1r7XBhixOf2jEbuId5Subn9KLCvP8COgjE= -----END CERTIFICATE-----Generated at Tue Apr 8 18:25:55 2025 by rpki-client