$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/caef0813-709f-3639-aad7-06f54ab67b07.roa File: caef0813-709f-3639-aad7-06f54ab67b07.roa (raw, json) Hash identifier: rQywdJbFvuNjkQxJZ8AcletSL+esp1i4kToBzodf+hY= Subject key identifier: 25:99:2D:E6:7B:BD:9B:37:DD:05:9D:52:A9:C6:69:5B:4E:99:C1:DF Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F43285848D6410F06AB1D60882BE28300 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/caef0813-709f-3639-aad7-06f54ab67b07.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 55246 IP address blocks: 209.237.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:0f:06:ab:1d:60:88:2b:e2:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=853b7744-c08a-4c47-8bf4-2cad51474221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3f:01:ad:68:95:28:5c:2d:29:81:15:15:4d: f1:9e:72:98:21:48:55:ee:92:8b:da:94:f0:4f:9e: 3a:ca:b4:0e:ce:8a:06:54:3f:b3:7c:ff:49:7b:67: 39:a4:67:01:f6:74:3b:55:a0:43:ff:57:bb:25:c9: 95:05:83:cd:38:b3:a5:3a:1a:db:e1:42:ea:77:e2: 4c:d7:ea:82:4a:c6:d0:f9:7f:e8:69:e7:63:d5:7f: 44:8c:89:a4:c7:7a:77:a0:11:1d:df:5e:b4:d7:1b: 57:94:36:ab:51:fd:ea:8b:66:00:8a:2f:ea:4d:46: 47:5c:65:99:66:40:05:fd:21:c8:24:f6:ba:85:31: ce:82:29:b5:da:c0:da:02:59:74:90:c1:5a:e5:30: 01:e4:ce:88:7d:fd:ad:e2:0e:19:ac:f7:28:e0:05: 8a:51:c3:46:ac:70:7a:d6:b0:8b:2d:84:ea:57:75: 5b:14:8a:d4:89:b6:3a:af:4a:e4:8e:04:3f:49:bd: 8a:7b:1a:4c:99:3f:ea:88:f8:cd:53:27:77:6c:f9: 9b:06:e3:b0:c8:46:f0:85:61:f9:6e:cf:b8:bc:9b: 0e:d0:fc:c1:66:86:a1:35:19:70:99:f5:b0:93:e1: d8:c6:ad:1f:30:e8:0d:ed:03:84:86:f3:6b:cf:26: c7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:99:2D:E6:7B:BD:9B:37:DD:05:9D:52:A9:C6:69:5B:4E:99:C1:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/caef0813-709f-3639-aad7-06f54ab67b07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:fb:10:ad:a3:ee:d5:c5:f3:2a:b4:0a:dc:89:e8:53:6e:50: c0:46:fe:d1:33:45:88:b3:1a:88:af:d5:a2:8a:ce:0d:52:33: d0:df:12:d5:aa:71:1c:5c:87:c9:5e:54:9b:80:d7:35:53:6e: 46:f1:8e:eb:9e:a6:89:aa:a4:c5:99:03:0e:ca:80:2a:73:f8: e7:52:fc:b5:ce:36:fa:64:e7:f3:5b:3b:3a:cb:b7:e5:c0:d9: 64:43:90:10:74:27:ed:4e:9f:d3:75:fe:56:0d:e7:60:83:f9: 5a:34:df:ea:8a:5f:b8:64:60:14:06:eb:a2:0a:36:81:b3:64: 5a:1a:6a:84:84:be:02:05:af:95:a6:c5:05:d4:2c:e1:9d:97: 3f:74:74:da:a0:b7:d9:81:1d:96:9d:1a:16:d2:80:f3:68:9f: 0e:cf:ea:a8:21:92:b4:6b:c9:d4:19:7f:86:0b:00:54:1d:16: 1f:34:bb:0b:88:1b:58:9a:11:e6:9c:cf:c6:38:66:2f:a2:a4: 47:b9:83:2a:52:6a:a6:e8:e6:d0:25:10:bf:cd:b9:81:0f:df: 0a:86:1e:85:23:80:72:99:eb:7f:ca:5a:17:0f:4f:e0:23:3c: 54:6b:c9:9d:71:4e:9f:87:80:30:3c:93:38:9f:da:f1:02:aa: cd:d7:0c:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQQ8Gqx1giCvigwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk ODUzYjc3NDQtYzA4YS00YzQ3LThiZjQtMmNhZDUxNDc0MjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD8BrWiVKFwtKYEVFU3xnnKYIUhV7pKL2pTw T546yrQOzooGVD+zfP9Je2c5pGcB9nQ7VaBD/1e7JcmVBYPNOLOlOhrb4ULqd+JM 1+qCSsbQ+X/oaedj1X9EjImkx3p3oBEd31601xtXlDarUf3qi2YAii/qTUZHXGWZ ZkAF/SHIJPa6hTHOgim12sDaAll0kMFa5TAB5M6Iff2t4g4ZrPco4AWKUcNGrHB6 1rCLLYTqV3VbFIrUibY6r0rkjgQ/Sb2KexpMmT/qiPjNUyd3bPmbBuOwyEbwhWH5 bs+4vJsO0PzBZoahNRlwmfWwk+HYxq0fMOgN7QOEhvNrzybHYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWZLeZ7vZs33QWdUqnGaVtOmcHfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvY2FlZjA4MTMtNzA5Zi0z NjM5LWFhZDctMDZmNTRhYjY3YjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHj7EK2j7tXF8yq0CtyJ6FNuUMBG/tEzRYizGoiv1aKKzg1SM9DfEtWq cRxch8leVJuA1zVTbkbxjuuepomqpMWZAw7KgCpz+OdS/LXONvpk5/NbOzrLt+XA 2WRDkBB0J+1On9N1/lYN52CD+Vo03+qKX7hkYBQG66IKNoGzZFoaaoSEvgIFr5Wm xQXULOGdlz90dNqgt9mBHZadGhbSgPNonw7P6qghkrRrydQZf4YLAFQdFh80uwuI G1iaEeacz8Y4Zi+ipEe5gypSaqbo5tAlEL/NuYEP3wqGHoUjgHKZ63/KWhcPT+Aj PFRryZ1xTp+HgDA8kzif2vECqs3XDN4= -----END CERTIFICATE-----Generated at Tue Apr 8 13:04:14 2025 by rpki-client