$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/10347e71-7fe6-3944-aafa-f5029b5f87c1.roa File: 10347e71-7fe6-3944-aafa-f5029b5f87c1.roa (raw, json) Hash identifier: s1vACnU2iYaSJTGg09lGraHr5wIibPtAVgvJhe/tPTQ= Subject key identifier: FF:DF:F2:A9:DE:01:0F:40:FD:69:99:7D:DE:AD:83:3F:90:7E:2A:AF Certificate issuer: /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Certificate serial: 010D0C9F4328584A0F93B4DCB395E45494217F00 Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/10347e71-7fe6-3944-aafa-f5029b5f87c1.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 398465 IP address blocks: 209.250.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0f:93:b4:dc:b3:95:e4:54:94:21:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=ae7ce59a-f53b-445f-a81e-b7780f18f3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:80:84:79:31:9d:2b:02:89:8f:9e:fc:d3:16: 27:a1:e0:0c:c5:0b:29:07:bd:9e:29:29:19:62:e5: 54:cb:25:4d:98:8d:e9:4b:5b:30:bf:81:f0:c0:c7: 62:8a:37:ab:9b:11:51:76:6a:56:e5:2b:fa:9f:57: 61:fa:fa:b3:70:7e:ab:91:ed:50:55:ed:3b:00:f2: 39:60:98:84:8b:68:df:6c:f8:b0:e7:c3:74:f0:89: 65:6c:53:80:23:f0:c8:f6:d2:2a:71:92:de:7f:d3: c1:96:54:70:02:9e:9d:b2:9f:04:bf:ae:53:87:b9: ea:cc:e5:82:bb:61:16:af:14:91:ef:30:84:de:2d: c1:7f:97:6b:cf:07:49:a5:cc:23:b5:c2:02:28:5a: 27:23:b4:aa:fa:9d:47:bb:c0:ca:88:c7:0a:d9:d6: f8:10:60:32:d0:9d:87:b7:e6:df:1b:35:e5:30:55: 4b:48:a8:d3:cb:17:06:41:1f:33:c7:37:f7:99:09: 82:8b:f3:a5:4a:57:45:b6:9f:4b:67:d2:84:ed:1a: 70:58:76:a5:38:df:8a:8b:56:65:c8:e9:7f:fa:fa: 2e:96:6e:10:62:41:73:aa:a8:c4:57:d4:2b:a1:7a: 31:6e:94:43:8a:64:eb:73:8c:68:0e:b6:42:93:1a: a0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DF:F2:A9:DE:01:0F:40:FD:69:99:7D:DE:AD:83:3F:90:7E:2A:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/10347e71-7fe6-3944-aafa-f5029b5f87c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl X509v3 Authority Key Identifier: keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer sbgp-ipAddrBlock: critical IPv4: 209.250.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:6a:bc:f1:b1:24:a0:79:a2:dd:1f:c5:53:10:0e:c2:7b:97: 22:9b:b8:d3:7a:df:25:a7:2a:e4:55:2c:78:a1:7b:d9:d3:b0: 2c:ad:fd:31:fb:c0:96:29:26:a1:04:b8:da:e9:c3:e5:22:31: 7d:12:3c:c7:af:61:b7:11:d1:bc:5b:c6:0e:97:3f:aa:a9:73: c7:1d:ba:b8:76:25:02:f1:ed:d8:df:5d:a6:54:45:92:11:ef: 97:bb:13:1a:1e:1a:97:5d:67:53:71:01:ec:b8:1e:0a:b1:8c: d6:60:2a:0e:6b:32:35:f4:9e:69:30:31:36:d7:99:6e:66:9a: db:71:f1:59:6f:f8:95:37:1b:12:d3:29:e1:20:10:4f:ec:74: 85:ba:62:63:a5:db:fa:6b:d3:61:49:ac:86:52:0f:db:8a:70: 9f:60:e5:2b:09:23:f0:09:c4:d1:9c:05:06:ae:70:9e:8a:00: 5d:e0:e8:57:6f:aa:c2:77:a6:23:2f:da:59:f8:b1:6b:0c:a9: 04:f4:bf:16:b6:16:dd:a1:b6:93:79:83:7e:d0:5f:47:f2:5c: e5:c1:08:79:5f:0d:21:61:d5:a8:4c:04:d2:cb:8b:9b:fe:5c: 76:93:d0:48:30:eb:4b:e7:9a:bf:be:b7:87:91:99:aa:38:6f: 86:5e:9a:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoPk7Tcs5XkVJQhfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2YjZjNjUtMTFiYi00MDVlLWEzNGEtYjcxNmZjZGM3 ZGQ0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk YWU3Y2U1OWEtZjUzYi00NDVmLWE4MWUtYjc3ODBmMThmM2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYCEeTGdKwKJj5780xYnoeAMxQspB72eKSkZ YuVUyyVNmI3pS1swv4HwwMdiijermxFRdmpW5Sv6n1dh+vqzcH6rke1QVe07API5 YJiEi2jfbPiw58N08IllbFOAI/DI9tIqcZLef9PBllRwAp6dsp8Ev65Th7nqzOWC u2EWrxSR7zCE3i3Bf5drzwdJpcwjtcICKFonI7Sq+p1Hu8DKiMcK2db4EGAy0J2H t+bfGzXlMFVLSKjTyxcGQR8zxzf3mQmCi/OlSldFtp9LZ9KE7RpwWHalON+Ki1Zl yOl/+voulm4QYkFzqqjEV9QroXoxbpRDimTrc4xoDrZCkxqgjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/f8qneAQ9A/WmZfd6tgz+QfiqvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZi NmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2ZmNkYzdkZDQvMTAzNDdlNzEtN2ZlNi0z OTQ0LWFhZmEtZjUwMjliNWY4N2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjk2YjZjNjUtMTFiYi00MDVlLWEz NGEtYjcxNmZjZGM3ZGQ0L2Y5NmI2YzY1LTExYmItNDA1ZS1hMzRhLWI3MTZmY2Rj N2RkNC5jcmwwHwYDVR0jBBgwFoAUXA5zSiCBvLBmexmGdhkHGO6ne+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZiNmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2 ZmNkYzdkZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0foLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBqvPGxJKB5ot0fxVMQDsJ7lyKbuNN63yWnKuRVLHihe9nTsCyt/TH7 wJYpJqEEuNrpw+UiMX0SPMevYbcR0bxbxg6XP6qpc8cdurh2JQLx7djfXaZURZIR 75e7ExoeGpddZ1NxAey4HgqxjNZgKg5rMjX0nmkwMTbXmW5mmttx8Vlv+JU3GxLT KeEgEE/sdIW6YmOl2/pr02FJrIZSD9uKcJ9g5SsJI/AJxNGcBQaucJ6KAF3g6Fdv qsJ3piMv2ln4sWsMqQT0vxa2Ft2htpN5g37QX0fyXOXBCHlfDSFh1ahMBNLLi5v+ XHaT0Egw60vnmr++t4eRmao4b4Zemvo= -----END CERTIFICATE-----Generated at Thu Jun 5 18:41:12 2025 by rpki-client