$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/9acf47ba-8197-3598-98fe-d7544b7c6e6d.roa File: 9acf47ba-8197-3598-98fe-d7544b7c6e6d.roa (raw, json) Hash identifier: YIl83n6w1XpLEddzHKLqj5WufEOK9jpTMVi4i6qjFy4= Subject key identifier: 97:C5:83:D3:62:01:91:AA:1D:89:B8:55:05:79:4B:77:E7:8B:02:BD Certificate issuer: /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Certificate serial: 010D0C9F432858496A19A907F84EF65295909340 Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/9acf47ba-8197-3598-98fe-d7544b7c6e6d.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 25697 IP address blocks: 209.151.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:a9:07:f8:4e:f6:52:95:90:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=2e5d4173-308c-49b2-a59f-cc766c1ba468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ac:b1:0f:a7:c2:d3:52:9a:7b:e6:17:d1:36: 1f:7a:72:27:7b:ab:42:fc:08:e9:02:87:64:b4:72: 6e:11:64:71:04:0e:30:5a:38:88:af:62:bc:79:c9: 4c:54:c1:43:8a:4f:b4:9f:5b:9f:58:bc:43:28:8e: f3:36:32:55:66:87:0f:28:82:f0:17:8b:84:53:13: fd:43:7a:f4:01:85:d3:2a:97:67:ed:24:48:12:a2: 43:a3:e4:d6:e6:54:17:cf:cf:5e:78:62:cc:8b:23: 60:c7:55:b6:c5:e2:d9:1e:f5:56:bc:1f:ae:a9:68: cd:68:aa:66:3a:46:b5:19:46:b5:87:92:82:46:78: 46:a0:bc:e4:ea:51:b5:ba:5c:64:07:9d:23:bd:50: 3e:da:60:85:5c:34:f3:67:4e:89:d9:77:1f:64:51: dd:86:f4:a9:38:f2:55:19:83:b6:f9:49:48:87:c1: e6:8a:15:90:bb:d4:90:87:b2:d3:ac:34:08:06:cc: 02:bb:1a:82:bc:a4:79:f5:44:6d:ca:0e:c5:ec:68: 50:d1:b8:4a:af:d1:ca:58:37:36:d3:76:d3:dc:1a: b1:e1:8b:c5:40:91:2f:3c:0b:63:9c:0b:87:b8:48: cd:b6:8d:3a:5e:fe:6e:0d:1e:d3:aa:b6:12:70:60: e8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C5:83:D3:62:01:91:AA:1D:89:B8:55:05:79:4B:77:E7:8B:02:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/9acf47ba-8197-3598-98fe-d7544b7c6e6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl X509v3 Authority Key Identifier: keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer sbgp-ipAddrBlock: critical IPv4: 209.151.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:ca:74:95:34:bd:64:95:46:a3:ec:88:36:c4:60:f4:91:ac: 94:05:3b:3d:12:63:1d:1c:4f:f2:1d:39:16:bf:a3:d3:da:75: ba:86:9c:0c:18:6a:b6:20:93:d6:68:59:14:9a:cc:79:3c:ba: a1:3c:d8:2d:4c:86:e4:83:e5:76:0e:02:58:da:a4:f5:6a:3f: c8:73:b1:1c:8e:a1:a9:2e:a8:f2:ef:43:c8:45:c2:95:54:74: 25:de:ec:66:ce:b5:a8:21:83:15:5c:46:0e:89:0e:eb:ea:43: 9a:99:e9:a8:c2:9f:d1:0c:82:1f:70:02:ed:4b:ad:39:54:ad: ff:61:c6:0d:02:a5:e0:8f:7c:5f:80:8d:de:d8:e0:e9:69:ea: 76:e3:68:d3:e3:90:d7:82:68:14:bd:78:40:6a:0b:50:4e:bd: 88:8e:bd:7b:00:8b:86:2d:b1:73:60:01:25:f7:29:60:64:36: 12:ff:95:03:1a:e2:32:9f:db:69:06:c1:e7:92:a6:a7:4a:d3: b8:3b:4a:a1:c5:bc:3b:0c:be:b8:b8:3e:d9:ca:c0:60:14:d3: 50:ed:64:74:33:c8:8f:54:2f:71:e8:bc:98:1d:af:5f:0c:8f: 18:fc:2c:77:63:f9:1b:94:9e:40:09:11:7d:9d:d9:b6:70:8c: a3:10:21:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGakH+E72UpWQk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVlYmFkYmItYjYzYy00ZTk1LThlNzYtZmQyMmNjODYx MzExMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk MmU1ZDQxNzMtMzA4Yy00OWIyLWE1OWYtY2M3NjZjMWJhNDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqyxD6fC01Kae+YX0TYfenIne6tC/AjpAodk tHJuEWRxBA4wWjiIr2K8eclMVMFDik+0n1ufWLxDKI7zNjJVZocPKILwF4uEUxP9 Q3r0AYXTKpdn7SRIEqJDo+TW5lQXz89eeGLMiyNgx1W2xeLZHvVWvB+uqWjNaKpm Oka1GUa1h5KCRnhGoLzk6lG1ulxkB50jvVA+2mCFXDTzZ06J2XcfZFHdhvSpOPJV GYO2+UlIh8HmihWQu9SQh7LTrDQIBswCuxqCvKR59URtyg7F7GhQ0bhKr9HKWDc2 03bT3Bqx4YvFQJEvPAtjnAuHuEjNto06Xv5uDR7TqrYScGDoMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfFg9NiAZGqHYm4VQV5S3fniwK9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNWVi YWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIyY2M4NjEzMTEvOWFjZjQ3YmEtODE5Ny0z NTk4LTk4ZmUtZDc1NDRiN2M2ZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDVlYmFkYmItYjYzYy00ZTk1LThl NzYtZmQyMmNjODYxMzExL2Q1ZWJhZGJiLWI2M2MtNGU5NS04ZTc2LWZkMjJjYzg2 MTMxMS5jcmwwHwYDVR0jBBgwFoAUCl3nOppYysWd9gW84/IezCP415QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNWViYWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIy Y2M4NjEzMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ZeUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDKdJU0vWSVRqPsiDbEYPSRrJQFOz0SYx0cT/IdORa/o9PadbqGnAwY arYgk9ZoWRSazHk8uqE82C1MhuSD5XYOAljapPVqP8hzsRyOoakuqPLvQ8hFwpVU dCXe7GbOtaghgxVcRg6JDuvqQ5qZ6ajCn9EMgh9wAu1LrTlUrf9hxg0CpeCPfF+A jd7Y4Olp6nbjaNPjkNeCaBS9eEBqC1BOvYiOvXsAi4YtsXNgASX3KWBkNhL/lQMa 4jKf22kGweeSpqdK07g7SqHFvDsMvri4PtnKwGAU01DtZHQzyI9UL3HovJgdr18M jxj8LHdj+RuUnkAJEX2d2bZwjKMQIUc= -----END CERTIFICATE-----Generated at Fri Apr 11 21:18:46 2025 by rpki-client