$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/8c3395c2-9a5f-3f88-a2fb-3702c8f75c9f.roa File: 8c3395c2-9a5f-3f88-a2fb-3702c8f75c9f.roa (raw, json) Hash identifier: nzhhn+AVRHszf7gif0vs48kv0xXI8NPfOfGMERVzYKg= Subject key identifier: 02:D0:2B:97:73:9B:75:1D:E9:29:07:27:CD:9C:47:AE:B1:65:80:82 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F43285848DA70F5E628AC1358F3EA4600 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/8c3395c2-9a5f-3f88-a2fb-3702c8f75c9f.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 397422 IP address blocks: 209.237.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:70:f5:e6:28:ac:13:58:f3:ea:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=fa96a98e-2b20-404f-94e7-b5c00c85c5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:83:fc:76:7f:a6:cf:67:35:ca:9e:9e:48:81: 9a:09:39:98:11:f6:89:1e:b6:69:23:83:81:84:9d: 68:38:f4:ae:14:54:fa:2b:fb:d1:8c:3d:87:bb:fe: 1a:86:64:18:5c:e7:57:a6:b5:56:30:94:59:1a:1c: 1d:48:4c:cd:d7:ba:31:43:c8:f5:90:60:0c:a7:dd: 9c:0e:ac:c9:b7:09:02:b8:04:65:20:92:b1:db:01: 4a:e7:e1:17:f1:e6:b7:79:e0:bb:c4:29:d2:57:f7: c1:f1:2e:01:6a:82:e9:fa:34:5b:46:17:12:4f:47: 2f:ca:de:15:7f:2d:fd:74:42:0a:04:8d:d2:e7:cc: f2:33:42:47:b8:0b:45:1c:f2:d5:11:bb:3c:a9:cf: f5:f8:9a:2a:97:0f:3a:35:dc:e8:ce:cf:e9:f6:7c: 84:1c:4a:f2:28:f6:ae:61:cf:dc:86:3c:5c:02:81: 98:e0:66:78:f8:a4:12:70:9e:9c:a8:9b:ec:11:66: 6e:f5:e1:d1:93:54:ba:f2:69:dd:66:c1:7c:6c:53: 29:b7:3f:ca:5f:70:7f:a3:75:ba:ce:e5:53:b9:56: 3f:cb:ed:b8:15:5f:38:94:a5:d7:9d:58:06:21:4f: d8:bf:dd:11:25:c0:96:53:8f:04:d3:30:2c:0d:5e: 90:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D0:2B:97:73:9B:75:1D:E9:29:07:27:CD:9C:47:AE:B1:65:80:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/8c3395c2-9a5f-3f88-a2fb-3702c8f75c9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:76:42:07:1d:b7:a6:1c:1f:fe:d9:e4:85:5b:ba:f6:32:46: ce:fb:b7:91:16:06:6b:17:58:cb:d3:bb:d2:a1:61:15:2b:6d: fa:6d:a2:50:2f:f5:d8:13:4c:4d:2a:a9:86:c1:58:41:9e:b5: 1d:82:32:34:80:8e:f2:0f:4a:45:44:db:b6:91:4e:3a:01:32: 02:21:a9:97:e5:bf:89:b7:d5:94:bc:b8:ea:55:c5:54:af:ce: 4c:07:5d:57:a9:cc:4a:e7:b6:18:87:c0:00:bc:55:85:bc:61: 7c:9e:f5:ca:81:05:ea:5b:a2:1a:ca:77:07:9b:be:aa:e6:af: 65:55:7a:7f:72:74:e7:86:d2:ba:00:86:ca:d6:cf:1d:cd:5f: 2e:50:95:3a:bc:4f:98:e9:8d:c7:bb:0b:1a:18:69:c4:88:f2: 76:48:a3:a6:88:6d:f0:2c:25:49:4e:bb:7c:b0:42:b1:e9:ba: 79:2f:88:15:d5:8f:f6:22:dd:fd:6f:b8:c3:bd:c7:f1:89:56: 43:8f:d8:49:44:76:5f:1f:7e:c8:22:4f:38:46:13:02:92:96: e2:e4:83:39:ef:aa:0a:a9:e6:ec:92:b7:75:4b:34:71:ed:d5: 76:dd:48:0d:fe:b1:ac:f3:60:0b:f5:fd:e8:1b:83:e8:84:d1: 2d:62:4c:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacPXmKKwTWPPqRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk ZmE5NmE5OGUtMmIyMC00MDRmLTk0ZTctYjVjMDBjODVjNWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYP8dn+mz2c1yp6eSIGaCTmYEfaJHrZpI4OB hJ1oOPSuFFT6K/vRjD2Hu/4ahmQYXOdXprVWMJRZGhwdSEzN17oxQ8j1kGAMp92c DqzJtwkCuARlIJKx2wFK5+EX8ea3eeC7xCnSV/fB8S4BaoLp+jRbRhcST0cvyt4V fy39dEIKBI3S58zyM0JHuAtFHPLVEbs8qc/1+Joqlw86Ndzozs/p9nyEHEryKPau Yc/chjxcAoGY4GZ4+KQScJ6cqJvsEWZu9eHRk1S68mndZsF8bFMptz/KX3B/o3W6 zuVTuVY/y+24FV84lKXXnVgGIU/Yv90RJcCWU48E0zAsDV6Q/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALQK5dzm3Ud6SkHJ82cR66xZYCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvOGMzMzk1YzItOWE1Zi0z Zjg4LWEyZmItMzcwMmM4Zjc1YzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEl2Qgcdt6YcH/7Z5IVbuvYyRs77t5EWBmsXWMvTu9KhYRUrbfptolAv 9dgTTE0qqYbBWEGetR2CMjSAjvIPSkVE27aRTjoBMgIhqZflv4m31ZS8uOpVxVSv zkwHXVepzErnthiHwAC8VYW8YXye9cqBBepbohrKdwebvqrmr2VVen9ydOeG0roA hsrWzx3NXy5QlTq8T5jpjce7CxoYacSI8nZIo6aIbfAsJUlOu3ywQrHpunkviBXV j/Yi3f1vuMO9x/GJVkOP2ElEdl8ffsgiTzhGEwKSluLkgznvqgqp5uySt3VLNHHt 1XbdSA3+sazzYAv1/egbg+iE0S1iTDc= -----END CERTIFICATE-----Generated at Tue Apr 8 13:09:47 2025 by rpki-client