$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/7d358525-81a2-39e6-a6da-366bb0e4ba5d.roa File: 7d358525-81a2-39e6-a6da-366bb0e4ba5d.roa (raw, json) Hash identifier: uITYlKM3tb0+8yVrXyDCQXDqtmn2RKjIxoBs+zDLq3k= Subject key identifier: FC:D8:65:3A:56:CC:87:EF:3E:98:12:A1:6F:24:B8:48:8A:D9:68:A0 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F43285849849EFAE74A6A1CB1F038C400 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/7d358525-81a2-39e6-a6da-366bb0e4ba5d.roa Signing time: Mon 14 Apr 2025 01:00:43 +0000 ROA not before: Mon 14 Apr 2025 01:00:43 +0000 ROA not after: Sun 13 Jul 2025 01:00:43 +0000 asID: 11233 IP address blocks: 209.237.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:84:9e:fa:e7:4a:6a:1c:b1:f0:38:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Apr 14 01:00:43 2025 GMT Not After : Jul 13 01:00:43 2025 GMT Subject: CN=7817d02a-ebfd-48bd-821d-4f982008db3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6b:46:c6:ac:29:5e:02:d6:1b:d5:f1:f0:7a: ab:46:44:38:ab:96:94:8f:73:13:d7:ba:b4:78:15: c8:fb:c6:42:52:5b:dd:0a:ff:af:fe:c7:d1:a6:8a: 10:34:7a:8e:bb:c3:4b:4b:5d:17:66:b2:a4:54:40: 0c:f1:b6:1d:88:aa:d4:f2:2b:2e:12:ff:d7:ce:b0: ee:28:94:7b:4e:17:79:4f:94:ec:1c:24:77:37:5f: 35:87:e1:a3:a8:43:fb:16:5a:5e:5a:76:66:5f:b6: 57:53:5f:25:43:15:b8:d7:dc:df:a1:96:6c:38:df: 84:ca:9b:da:33:01:cc:37:d2:d8:76:41:63:a2:6e: 33:04:d6:3d:2f:c3:e9:82:54:9d:e6:56:26:b3:4f: 2c:3b:8d:82:77:ca:97:5e:b3:99:39:bd:5d:e4:66: 85:b4:ef:41:05:b5:86:a0:1c:f6:66:8d:af:9d:26: dc:7f:23:e9:8a:34:36:b8:f9:19:bd:81:3e:90:10: 69:e7:bb:e7:b0:a1:ae:ee:06:52:ff:c7:0f:e9:ca: c4:df:e2:d7:66:fa:68:f6:60:45:c7:21:c3:d0:97: 36:39:af:a2:c0:b5:76:36:db:cd:c4:df:21:5e:5a: 53:05:d8:2e:e5:f1:6f:45:70:2f:b2:ec:ae:cb:24: d0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D8:65:3A:56:CC:87:EF:3E:98:12:A1:6F:24:B8:48:8A:D9:68:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/7d358525-81a2-39e6-a6da-366bb0e4ba5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:c7:a7:b4:ae:e7:e4:8f:2b:bd:86:30:7c:94:12:5d:90:b1: d5:2c:31:49:a5:56:95:99:db:c4:fc:3c:e0:fb:bb:e6:e3:02: a3:97:f0:65:a1:6e:28:40:86:20:ab:d5:b2:c4:70:db:f0:21: df:fc:54:48:f5:fd:c8:68:ee:b6:a8:6b:e5:9d:88:7a:0f:07: 0b:97:fc:f1:7a:f6:51:85:47:a4:26:f5:9c:77:cd:e7:41:fa: 0b:2b:4b:a4:c1:b3:94:1d:75:58:e9:5d:60:17:3c:cc:3c:d6: 97:dd:b2:cd:32:76:26:64:2a:7a:0b:ec:77:6b:12:05:44:32: 47:8e:bb:4f:9b:00:17:07:66:9d:06:c0:86:3e:33:47:bd:c3: d3:9d:4b:e6:8b:30:6b:68:c2:e2:a8:ec:50:6d:bb:ce:c9:f2: 28:52:24:06:76:ea:63:02:9b:a6:70:4f:25:fc:7e:19:2e:38: 88:ca:00:b4:df:a1:16:d2:27:8b:8d:ee:b8:5a:d7:24:99:b7: de:56:a9:c4:f7:73:84:74:f2:98:35:e1:c5:b9:5b:b7:37:c8: f7:c2:63:02:11:1d:e3:2e:00:49:67:f6:38:00:83:2b:02:5f: dd:5f:06:88:d0:4b:c0:cc:a6:2a:35:4b:70:bf:27:3a:d6:28: bd:a8:b8:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmEnvrnSmocsfA4xAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDQxNDAxMDA0M1oXDTI1MDcxMzAxMDA0M1owLzEtMCsGA1UEAxMk NzgxN2QwMmEtZWJmZC00OGJkLTgyMWQtNGY5ODIwMDhkYjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2tGxqwpXgLWG9Xx8HqrRkQ4q5aUj3MT17q0 eBXI+8ZCUlvdCv+v/sfRpooQNHqOu8NLS10XZrKkVEAM8bYdiKrU8isuEv/XzrDu KJR7Thd5T5TsHCR3N181h+GjqEP7FlpeWnZmX7ZXU18lQxW419zfoZZsON+Eypva MwHMN9LYdkFjom4zBNY9L8PpglSd5lYms08sO42Cd8qXXrOZOb1d5GaFtO9BBbWG oBz2Zo2vnSbcfyPpijQ2uPkZvYE+kBBp57vnsKGu7gZS/8cP6crE3+LXZvpo9mBF xyHD0Jc2Oa+iwLV2NtvNxN8hXlpTBdgu5fFvRXAvsuyuyyTQHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzYZTpWzIfvPpgSoW8kuEiK2WigMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvN2QzNTg1MjUtODFhMi0z OWU2LWE2ZGEtMzY2YmIwZTRiYTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInHp7Su5+SPK72GMHyUEl2QsdUsMUmlVpWZ28T8POD7u+bjAqOX8GWh bihAhiCr1bLEcNvwId/8VEj1/cho7raoa+WdiHoPBwuX/PF69lGFR6Qm9Zx3zedB +gsrS6TBs5QddVjpXWAXPMw81pfdss0ydiZkKnoL7HdrEgVEMkeOu0+bABcHZp0G wIY+M0e9w9OdS+aLMGtowuKo7FBtu87J8ihSJAZ26mMCm6ZwTyX8fhkuOIjKALTf oRbSJ4uN7rha1ySZt95WqcT3c4R08pg14cW5W7c3yPfCYwIRHeMuAEln9jgAgysC X91fBojQS8DMpio1S3C/JzrWKL2ouOE= -----END CERTIFICATE-----Generated at Sat Apr 19 12:07:22 2025 by rpki-client