$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/02a7113f-414f-366e-ba5e-590e520c170c.roa File: 02a7113f-414f-366e-ba5e-590e520c170c.roa (raw, json) Hash identifier: FQ+NrQU0uN6QSlWtiEepvJ8UF+KJZ4K045xbzUHAEL8= Subject key identifier: 8E:B2:7D:D8:72:6E:00:EC:B0:66:1D:4C:C1:44:0D:88:18:70:2E:E6 Certificate issuer: /CN=829d195a-d541-4371-970d-5be56cd489a8 Certificate serial: 010D0C9F432858496FAF0BAAB6DB8BB694D7C9C0 Authority key identifier: C7:71:2A:18:24:84:EF:6E:8E:F0:83:87:1C:48:6E:34:B1:E9:98:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/02a7113f-414f-366e-ba5e-590e520c170c.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 46892 IP address blocks: 209.127.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:0b:aa:b6:db:8b:b6:94:d7:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=829d195a-d541-4371-970d-5be56cd489a8 Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=5b48f53b-83b4-4b76-8c85-d624df080a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d5:74:d1:53:5e:d3:5d:b4:fc:72:cc:c5:07: fa:0c:6b:d9:94:1c:ac:d1:34:4f:d3:86:ac:f2:36: 39:23:48:ee:bd:f5:40:07:b2:01:a8:b6:2b:99:ff: 56:12:f2:35:f7:a4:99:2b:68:73:83:26:59:a2:37: 5b:29:cc:ca:a7:3d:72:84:c2:a5:be:c4:91:12:1f: 8e:c7:a6:be:f9:86:a2:b4:0b:95:dd:65:86:bb:0e: a2:f7:2b:60:f0:fb:d6:ed:8a:8f:19:66:3c:dd:3b: 5f:b7:a3:74:6b:a6:38:c7:b1:1b:7a:5f:f7:e3:46: 5f:0b:8d:99:d7:15:2e:79:94:47:ed:b0:6b:b1:a9: 99:5a:da:3e:91:54:77:e0:23:36:70:fd:29:d2:ec: 62:df:07:c2:6a:c6:37:a3:be:5c:0b:28:60:bc:4d: c1:16:7d:72:a0:ef:97:f4:60:3c:64:66:0b:e3:b9: bd:11:fa:d4:5c:56:e5:af:af:f4:00:0b:8c:1d:79: ce:c8:7d:db:17:45:1d:4b:9e:fa:4d:14:3f:2a:cf: dd:40:b0:c1:00:70:3b:2f:2c:a5:6a:b3:b3:9e:0c: 80:c0:9f:aa:bd:51:6b:af:1f:c9:f7:b9:2e:bf:8a: 35:26:a0:74:30:10:eb:f4:a8:ee:1d:ca:9c:05:ed: fe:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B2:7D:D8:72:6E:00:EC:B0:66:1D:4C:C1:44:0D:88:18:70:2E:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/02a7113f-414f-366e-ba5e-590e520c170c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.crl X509v3 Authority Key Identifier: keyid:C7:71:2A:18:24:84:EF:6E:8E:F0:83:87:1C:48:6E:34:B1:E9:98:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer sbgp-ipAddrBlock: critical IPv4: 209.127.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:f6:08:2a:ac:fc:24:47:df:83:55:bc:6a:3f:ed:eb:f1:a6: ee:1c:64:31:ec:f5:2f:04:9b:a9:13:91:78:b4:71:b4:14:4c: 56:c4:9a:89:5f:b3:06:2f:7a:f2:ca:36:3c:95:de:60:35:82: a2:00:37:a1:7c:58:e9:d5:3b:1b:8d:83:ee:e8:4d:5b:8a:b0: f0:6c:e6:e2:87:4a:e6:a9:89:14:00:21:76:05:fe:21:a1:7f: 8b:7f:89:e2:c9:94:d7:e1:52:c8:a5:cf:83:a7:b2:22:9e:19: f3:6a:ef:86:ae:31:0a:89:b7:5f:86:9f:63:bf:7b:1a:95:0e: c2:83:6b:40:0f:77:02:d0:d9:50:53:6f:05:1c:b8:2d:4b:7f: d0:57:e2:70:f8:c8:47:d4:ff:90:d0:ef:19:42:d2:9b:20:df: 3c:d8:29:4c:51:cc:4c:6e:f7:1b:4f:6e:78:36:5f:11:5f:01: d3:a9:cd:cf:19:f4:26:54:d9:da:c1:db:43:82:36:34:b5:e1: 26:bf:39:13:03:c5:86:4d:74:28:40:90:99:ea:b9:50:88:7a: ba:ef:40:fe:b2:e9:c2:2a:01:c5:7c:2c:3d:67:a8:ec:ad:53: ec:73:15:60:7d:1e:2a:bf:a2:80:bf:bf:b4:ad:f8:3a:55:5b: 4f:64:0b:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrwuqttuLtpTXycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI5ZDE5NWEtZDU0MS00MzcxLTk3MGQtNWJlNTZjZDQ4 OWE4MB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk NWI0OGY1M2ItODNiNC00Yjc2LThjODUtZDYyNGRmMDgwYTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9V00VNe0120/HLMxQf6DGvZlBys0TRP04as 8jY5I0juvfVAB7IBqLYrmf9WEvI196SZK2hzgyZZojdbKczKpz1yhMKlvsSREh+O x6a++YaitAuV3WWGuw6i9ytg8PvW7YqPGWY83Ttft6N0a6Y4x7Ebel/340ZfC42Z 1xUueZRH7bBrsamZWto+kVR34CM2cP0p0uxi3wfCasY3o75cCyhgvE3BFn1yoO+X 9GA8ZGYL47m9EfrUXFblr6/0AAuMHXnOyH3bF0UdS576TRQ/Ks/dQLDBAHA7Lyyl arOzngyAwJ+qvVFrrx/J97kuv4o1JqB0MBDr9KjuHcqcBe3+TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6yfdhybgDssGYdTMFEDYgYcC7mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84Mjlk MTk1YS1kNTQxLTQzNzEtOTcwZC01YmU1NmNkNDg5YTgvMDJhNzExM2YtNDE0Zi0z NjZlLWJhNWUtNTkwZTUyMGMxNzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODI5ZDE5NWEtZDU0MS00MzcxLTk3 MGQtNWJlNTZjZDQ4OWE4LzgyOWQxOTVhLWQ1NDEtNDM3MS05NzBkLTViZTU2Y2Q0 ODlhOC5jcmwwHwYDVR0jBBgwFoAUx3EqGCSE726O8IOHHEhuNLHpmBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MjlkMTk1YS1kNTQxLTQzNzEtOTcwZC01YmU1 NmNkNDg5YTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0X/4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEz2CCqs/CRH34NVvGo/7evxpu4cZDHs9S8Em6kTkXi0cbQUTFbEmolf swYvevLKNjyV3mA1gqIAN6F8WOnVOxuNg+7oTVuKsPBs5uKHSuapiRQAIXYF/iGh f4t/ieLJlNfhUsilz4OnsiKeGfNq74auMQqJt1+Gn2O/exqVDsKDa0APdwLQ2VBT bwUcuC1Lf9BX4nD4yEfU/5DQ7xlC0psg3zzYKUxRzExu9xtPbng2XxFfAdOpzc8Z 9CZU2drB20OCNjS14Sa/ORMDxYZNdChAkJnquVCIerrvQP6y6cIqAcV8LD1nqOyt U+xzFWB9Hiq/ooC/v7St+DpVW09kC4o= -----END CERTIFICATE-----Generated at Tue Apr 15 05:17:54 2025 by rpki-client