$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/888b4e53-c390-3724-b441-2f69dabf74f6.roa File: 888b4e53-c390-3724-b441-2f69dabf74f6.roa (raw, json) Hash identifier: iWRM424YrzlQ6P6A0Z61aLmADb0Ha0/5EJKNGYr0G2U= Subject key identifier: D9:A1:7A:1F:98:E9:A9:B5:C5:40:15:B2:32:5F:49:CB:A1:B6:90:4D Certificate issuer: /CN=05ec8359-4ede-4036-8702-23e5dd37a9ba Certificate serial: 010D0C9F432858494352E4C0EAA03453ADD7E140 Authority key identifier: 36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/888b4e53-c390-3724-b441-2f69dabf74f6.roa Signing time: Fri 21 Mar 2025 15:40:00 +0000 ROA not before: Fri 21 Mar 2025 15:40:00 +0000 ROA not after: Thu 19 Jun 2025 15:40:00 +0000 asID: 21859 IP address blocks: 209.97.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:52:e4:c0:ea:a0:34:53:ad:d7:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05ec8359-4ede-4036-8702-23e5dd37a9ba Validity Not Before: Mar 21 15:40:00 2025 GMT Not After : Jun 19 15:40:00 2025 GMT Subject: CN=d4f2fbf2-079f-4205-bca4-2083a75a8790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:b3:cb:db:c6:2c:17:64:73:3d:88:ae:7a:4b: 40:d1:29:ad:65:ef:a0:47:a3:9f:76:5f:8d:42:4c: 5a:16:63:aa:80:bb:c6:93:c6:47:01:11:ed:ca:8e: 9f:de:00:25:0c:c4:f0:1b:7d:a6:6f:f8:21:99:19: 1d:09:bb:d2:4b:c4:45:86:4a:17:11:16:f0:39:cd: b7:9a:f1:c9:77:e9:c1:55:84:f4:0f:84:dd:74:d2: 72:5a:76:28:47:4a:37:d7:37:11:41:4e:86:14:12: 6c:a3:66:64:aa:74:43:59:6b:68:e5:37:79:dc:74: 8b:5b:a7:a8:62:f8:a9:b4:4c:f9:79:19:ec:a4:e6: cd:cf:c6:1d:40:14:d9:1f:fb:0d:86:36:3b:86:ca: e4:ad:55:25:7e:21:e1:a5:88:21:ca:41:4d:2c:c0: 59:cf:21:b1:2f:8b:0e:f0:b9:bd:8c:e3:a2:a0:95: c2:1c:8d:41:ee:5b:e5:de:35:f5:f9:8d:6f:71:65: 95:88:2c:aa:ab:97:42:4f:ac:73:3e:72:27:65:2c: 22:3e:18:1b:96:ce:c8:51:22:75:4e:f3:e8:de:9f: d2:1e:74:8f:4e:ec:79:70:04:31:4b:56:6c:73:de: 7b:e8:42:69:4a:d6:19:d0:f5:e0:a8:4e:f0:8f:a6: c5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A1:7A:1F:98:E9:A9:B5:C5:40:15:B2:32:5F:49:CB:A1:B6:90:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/888b4e53-c390-3724-b441-2f69dabf74f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl X509v3 Authority Key Identifier: keyid:36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer sbgp-ipAddrBlock: critical IPv4: 209.97.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:3c:be:af:0b:bb:32:4f:2a:9e:06:38:6e:12:83:3c:b9:f3: a3:a8:cc:a0:44:82:2b:2e:ab:8f:80:b5:cb:c5:19:3e:a9:38: 98:ca:9c:7f:5a:fa:5d:42:59:41:b9:46:43:6d:e2:69:e9:cb: e1:63:76:55:38:a8:51:5e:64:82:ac:cc:2b:19:cc:6b:9e:60: 67:57:4d:39:15:b2:fe:f2:09:4e:b2:72:50:58:a5:d8:6e:55: fb:c0:19:60:3b:cf:f6:bb:37:41:76:ad:a8:b3:95:53:ea:d6: af:df:32:93:55:8e:bb:c7:0b:8a:6f:9c:63:cb:a4:e6:0f:bf: b3:ad:79:55:15:0f:c7:58:f0:3c:a5:f7:b3:bc:3b:8c:39:fc: 2c:8a:c7:63:e1:ca:72:09:fe:25:cc:85:aa:7c:c0:80:3f:7b: bd:f4:40:59:cb:8d:c4:e3:41:40:ef:a0:ae:3d:d0:68:34:f9: 07:a7:43:2a:87:ae:22:e6:0a:46:3a:52:ba:45:2a:e0:38:6c: b5:63:9e:ad:c6:f7:d0:06:54:05:6d:b9:d6:75:d6:f9:1b:4f: dc:da:ef:79:9d:89:51:d6:05:35:25:47:e8:ba:4b:12:7a:60: a4:48:2e:ac:f9:b8:de:0f:93:2d:f5:d0:59:52:7a:62:25:ba: c9:99:95:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElDUuTA6qA0U63X4UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDVlYzgzNTktNGVkZS00MDM2LTg3MDItMjNlNWRkMzdh OWJhMB4XDTI1MDMyMTE1NDAwMFoXDTI1MDYxOTE1NDAwMFowLzEtMCsGA1UEAxMk ZDRmMmZiZjItMDc5Zi00MjA1LWJjYTQtMjA4M2E3NWE4NzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+LPL28YsF2RzPYiuektA0SmtZe+gR6Ofdl+N QkxaFmOqgLvGk8ZHARHtyo6f3gAlDMTwG32mb/ghmRkdCbvSS8RFhkoXERbwOc23 mvHJd+nBVYT0D4TddNJyWnYoR0o31zcRQU6GFBJso2ZkqnRDWWto5Td53HSLW6eo YviptEz5eRnspObNz8YdQBTZH/sNhjY7hsrkrVUlfiHhpYghykFNLMBZzyGxL4sO 8Lm9jOOioJXCHI1B7lvl3jX1+Y1vcWWViCyqq5dCT6xzPnInZSwiPhgbls7IUSJ1 TvPo3p/SHnSPTux5cAQxS1Zsc9576EJpStYZ0PXgqE7wj6bFzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmheh+Y6am1xUAVsjJfScuhtpBNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wNWVj ODM1OS00ZWRlLTQwMzYtODcwMi0yM2U1ZGQzN2E5YmEvODg4YjRlNTMtYzM5MC0z NzI0LWI0NDEtMmY2OWRhYmY3NGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDVlYzgzNTktNGVkZS00MDM2LTg3 MDItMjNlNWRkMzdhOWJhLzA1ZWM4MzU5LTRlZGUtNDAzNi04NzAyLTIzZTVkZDM3 YTliYS5jcmwwHwYDVR0jBBgwFoAUNgroAyQrusZ1eDIsFKW5XRFaAJAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wNWVjODM1OS00ZWRlLTQwMzYtODcwMi0yM2U1 ZGQzN2E5YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WHaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE08vq8LuzJPKp4GOG4Sgzy586OozKBEgisuq4+AtcvFGT6pOJjKnH9a +l1CWUG5RkNt4mnpy+FjdlU4qFFeZIKszCsZzGueYGdXTTkVsv7yCU6yclBYpdhu VfvAGWA7z/a7N0F2raizlVPq1q/fMpNVjrvHC4pvnGPLpOYPv7OteVUVD8dY8Dyl 97O8O4w5/CyKx2PhynIJ/iXMhap8wIA/e730QFnLjcTjQUDvoK490Gg0+QenQyqH riLmCkY6UrpFKuA4bLVjnq3G99AGVAVtudZ11vkbT9za73mdiVHWBTUlR+i6SxJ6 YKRILqz5uN4Pky310FlSemIlusmZlfM= -----END CERTIFICATE-----Generated at Fri Apr 11 23:33:04 2025 by rpki-client