$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/79bc0b77-dc72-3e9c-976e-1bbefdc1f8c2.roa File: 79bc0b77-dc72-3e9c-976e-1bbefdc1f8c2.roa (raw, json) Hash identifier: nQ32A9gKsHAedKXRMHRDuHdQrGPRFwzaP+bp6M90lL0= Subject key identifier: 7F:81:87:88:83:0F:2F:E7:03:B8:50:21:23:7C:39:DC:EA:C8:55:46 Certificate issuer: /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Certificate serial: 010D0C9F4328584A0F9351E6A9E8D25E0609D9C0 Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/79bc0b77-dc72-3e9c-976e-1bbefdc1f8c2.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 7922 IP address blocks: 209.250.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0f:93:51:e6:a9:e8:d2:5e:06:09:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=3b50d34c-bce8-4eee-8825-08e4a81caeab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:52:0e:76:27:c4:0e:69:01:ad:92:8e:4a:f2: c6:d9:70:0e:c8:a9:15:60:e9:da:c0:ff:1e:55:c8: 04:0e:ec:1b:84:79:88:34:af:08:1c:1d:e8:ee:bf: d0:4a:3d:88:f1:56:50:67:20:42:88:5f:10:3e:8c: 4f:c5:c8:49:79:a3:25:95:0a:0a:6c:c0:9a:0f:13: 8e:1c:12:54:73:49:e0:7b:0a:a7:9f:a9:bf:90:60: f1:bf:59:70:a0:5f:b6:3b:8e:4d:0c:36:1a:62:e5: f2:90:13:9d:b2:8c:f2:5d:f6:91:1c:ff:55:67:2f: 1b:c0:2b:70:14:43:c6:b3:f8:d9:a3:75:31:66:c6: dd:40:0f:e6:cf:9c:b7:48:06:9f:65:4d:8b:c7:c5: 48:28:83:e2:ec:b8:ac:42:6e:e4:e4:c2:c3:67:97: ed:78:d9:a0:dc:9f:2d:f6:e4:1e:4c:b9:20:ee:40: 21:c5:4a:28:40:1b:a7:30:bf:48:35:c2:ae:11:6f: 28:58:5f:e6:29:70:4c:7a:cc:0b:90:16:5f:c0:3d: ae:e7:77:f1:58:54:b4:03:60:3e:ec:29:02:76:5d: c8:07:3e:59:25:e1:09:41:86:61:b0:6e:b3:3c:21: 7c:fb:02:e3:04:61:5b:56:ff:32:dc:5e:92:95:a9: bf:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:81:87:88:83:0F:2F:E7:03:B8:50:21:23:7C:39:DC:EA:C8:55:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/79bc0b77-dc72-3e9c-976e-1bbefdc1f8c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl X509v3 Authority Key Identifier: keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer sbgp-ipAddrBlock: critical IPv4: 209.250.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:48:48:73:76:99:a0:7e:0a:04:2b:90:a3:ee:5b:9a:2c:d1: b1:41:ff:0f:4f:af:e7:5c:9c:29:50:d1:47:2b:51:59:6f:cc: 65:bb:32:01:a2:b2:f5:23:85:b1:7d:d8:d5:fc:6f:7b:b8:56: 5d:d5:bf:3f:9f:c3:ab:59:54:80:1e:b4:f3:94:83:01:bf:56: af:52:48:f0:28:e8:4e:8d:a9:77:8e:24:d9:d2:64:ce:0a:9a: 3f:04:b3:53:e4:53:b4:31:28:05:ef:59:92:32:5e:c7:f7:24: 6d:5a:37:d1:9d:46:97:97:7f:5e:1c:0f:10:63:42:2d:9d:b8: 71:52:57:df:93:ab:3a:2a:cf:80:10:62:b6:2b:a2:76:c3:26: b5:7d:71:a5:97:14:ac:7a:ad:b9:c7:35:89:9c:ee:c0:2a:6d: 92:5f:80:d2:fb:5b:56:e0:55:7b:27:22:d7:31:ad:b3:19:08: c1:3e:f3:7c:73:69:b1:d6:a5:6e:30:9c:46:bd:29:b9:bb:6d: 92:7b:b8:d2:af:d1:17:55:3b:48:55:d8:ef:c1:c9:e8:7f:ca: c6:0a:b7:50:4c:c6:9a:6d:8a:5b:86:a9:f7:b9:1b:4e:fd:ff: 16:6e:2d:2e:8c:37:3f:5b:9e:dd:bc:f7:d4:88:f1:f3:c4:62: 64:c9:f5:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoPk1HmqejSXgYJ2cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2YjZjNjUtMTFiYi00MDVlLWEzNGEtYjcxNmZjZGM3 ZGQ0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk M2I1MGQzNGMtYmNlOC00ZWVlLTg4MjUtMDhlNGE4MWNhZWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolIOdifEDmkBrZKOSvLG2XAOyKkVYOnawP8e VcgEDuwbhHmINK8IHB3o7r/QSj2I8VZQZyBCiF8QPoxPxchJeaMllQoKbMCaDxOO HBJUc0ngewqnn6m/kGDxv1lwoF+2O45NDDYaYuXykBOdsozyXfaRHP9VZy8bwCtw FEPGs/jZo3UxZsbdQA/mz5y3SAafZU2Lx8VIKIPi7LisQm7k5MLDZ5fteNmg3J8t 9uQeTLkg7kAhxUooQBunML9INcKuEW8oWF/mKXBMeswLkBZfwD2u53fxWFS0A2A+ 7CkCdl3IBz5ZJeEJQYZhsG6zPCF8+wLjBGFbVv8y3F6Slam/AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+Bh4iDDy/nA7hQISN8OdzqyFVGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZi NmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2ZmNkYzdkZDQvNzliYzBiNzctZGM3Mi0z ZTljLTk3NmUtMWJiZWZkYzFmOGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjk2YjZjNjUtMTFiYi00MDVlLWEz NGEtYjcxNmZjZGM3ZGQ0L2Y5NmI2YzY1LTExYmItNDA1ZS1hMzRhLWI3MTZmY2Rj N2RkNC5jcmwwHwYDVR0jBBgwFoAUXA5zSiCBvLBmexmGdhkHGO6ne+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZiNmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2 ZmNkYzdkZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0foLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRISHN2maB+CgQrkKPuW5os0bFB/w9Pr+dcnClQ0UcrUVlvzGW7MgGi svUjhbF92NX8b3u4Vl3Vvz+fw6tZVIAetPOUgwG/Vq9SSPAo6E6NqXeOJNnSZM4K mj8Es1PkU7QxKAXvWZIyXsf3JG1aN9GdRpeXf14cDxBjQi2duHFSV9+Tqzoqz4AQ YrYronbDJrV9caWXFKx6rbnHNYmc7sAqbZJfgNL7W1bgVXsnItcxrbMZCME+83xz abHWpW4wnEa9Kbm7bZJ7uNKv0RdVO0hV2O/Byeh/ysYKt1BMxpptiluGqfe5G079 /xZuLS6MNz9bnt2899SI8fPEYmTJ9TU= -----END CERTIFICATE-----Generated at Thu Jun 5 18:27:37 2025 by rpki-client