$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/0be3f550-65f8-3310-89e1-826ed8f8771f.roa File: 0be3f550-65f8-3310-89e1-826ed8f8771f.roa (raw, json) Hash identifier: UOmcvfTj6Y6mS8QaJTvSIib5Ybj7u4RHjkj6yKvKIbE= Subject key identifier: 79:8A:41:1B:EE:BD:55:2F:55:1E:9A:26:2A:47:6C:BE:3D:9F:DA:3D Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Certificate serial: 010D0C9F43285848F65BC8B61B683E0D63DD1F80 Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/0be3f550-65f8-3310-89e1-826ed8f8771f.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 13213 IP address blocks: 209.236.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:c8:b6:1b:68:3e:0d:63:dd:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=b7ddd365-bdf3-4adf-98db-2dc8dd4c06ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b8:83:d0:dd:bf:e1:a2:6c:ed:88:d5:0c:51: 08:53:1a:74:e3:8e:21:d4:01:15:94:af:11:a5:fc: 59:a1:39:70:e0:eb:cb:3e:d7:3f:f7:dc:87:ba:a8: 97:7a:fe:00:e0:21:17:5f:82:67:61:19:6c:27:19: 69:76:55:c7:b8:13:c0:d1:65:38:5e:15:98:0a:db: cd:a5:4a:11:f5:38:36:26:c8:1b:64:91:34:48:64: 0d:15:b8:1d:96:cd:54:bd:b4:2a:91:58:8e:4c:c4: 87:2b:94:7e:6b:94:c2:b6:64:ad:9a:03:e6:64:0c: 94:85:60:4a:02:db:7c:88:f1:b7:a2:be:63:86:38: d0:eb:11:28:8e:51:c1:4a:b0:e8:ee:97:10:d2:71: d5:be:ed:00:9a:8b:8f:28:41:d2:55:d4:93:5e:c4: c2:16:12:a7:12:8f:71:89:bc:b1:21:0f:e2:2e:c7: 65:21:e3:41:f5:e6:4a:42:77:fe:cc:02:ed:f3:88: 85:fb:fa:ec:62:93:98:b2:94:0b:5e:73:8a:38:34: 64:30:e0:32:ed:ec:f1:e8:c6:62:81:c9:5f:0a:a2: b0:aa:2b:02:3d:b3:82:37:7a:61:52:39:b7:9e:aa: b7:e6:3f:d6:4a:e6:de:55:a7:14:69:7d:f6:86:54: 07:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8A:41:1B:EE:BD:55:2F:55:1E:9A:26:2A:47:6C:BE:3D:9F:DA:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/0be3f550-65f8-3310-89e1-826ed8f8771f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl X509v3 Authority Key Identifier: keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer sbgp-ipAddrBlock: critical IPv4: 209.236.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:8b:b9:a1:97:07:74:a0:ee:0a:23:3d:6d:8d:c7:f5:ed:f2: 32:46:77:61:a6:78:b5:38:8d:fb:e0:3e:d8:e8:b6:e5:48:65: 34:38:5c:33:f6:da:bb:17:92:c2:3b:bd:37:66:9e:4d:d9:d7: 3e:28:2c:fb:10:3e:be:09:94:5c:a9:24:8f:16:dc:ee:a9:9c: d0:68:02:11:71:81:e1:4b:09:fd:6e:96:9b:cf:62:c3:31:66: c9:97:d8:26:02:15:5b:35:e5:9c:5c:65:72:51:d3:81:88:95: f4:66:5a:d3:22:36:e3:42:a7:3e:e4:49:09:f4:f0:20:78:f9: d4:41:b0:fa:93:1e:5d:79:1f:e7:27:60:31:60:c3:a5:5d:dc: 77:96:37:5a:ab:0b:dd:7c:c4:87:3c:68:21:62:87:68:af:73: ec:d3:9f:e8:b9:7c:bf:9a:0b:e0:0b:29:75:19:a2:ed:76:90: 8d:f2:34:5e:73:5c:51:2f:88:1c:b5:a2:6b:a2:f1:7c:b0:bb: 17:1a:ab:09:c5:13:8e:51:60:6b:ea:8b:ea:32:15:83:74:ac: a3:8e:dc:e5:93:2c:dc:b4:e0:01:80:3a:f3:be:af:a3:22:31: 7d:95:79:61:9f:df:7d:57:a5:f0:43:bf:20:05:c1:cd:c2:ec: 45:c3:5c:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W8i2G2g+DWPdH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5 YWFlMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk YjdkZGQzNjUtYmRmMy00YWRmLTk4ZGItMmRjOGRkNGMwNmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7iD0N2/4aJs7YjVDFEIUxp0444h1AEVlK8R pfxZoTlw4OvLPtc/99yHuqiXev4A4CEXX4JnYRlsJxlpdlXHuBPA0WU4XhWYCtvN pUoR9Tg2JsgbZJE0SGQNFbgdls1UvbQqkViOTMSHK5R+a5TCtmStmgPmZAyUhWBK Att8iPG3or5jhjjQ6xEojlHBSrDo7pcQ0nHVvu0AmouPKEHSVdSTXsTCFhKnEo9x ibyxIQ/iLsdlIeNB9eZKQnf+zALt84iF+/rsYpOYspQLXnOKODRkMOAy7ezx6MZi gclfCqKwqisCPbOCN3phUjm3nqq35j/WSubeVacUaX32hlQHuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmKQRvuvVUvVR6aJipHbL49n9o9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Njdh OThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvMGJlM2Y1NTAtNjVmOC0z MzEwLTg5ZTEtODI2ZWQ4Zjg3NzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTY3YTk4YjAtMTAwZi00ZTY5LThh OWYtYmNlYWRiN2U5YWFlLzk2N2E5OGIwLTEwMGYtNGU2OS04YTlmLWJjZWFkYjdl OWFhZS5jcmwwHwYDVR0jBBgwFoAU11g4vsgJB/HhoBW3h78hrABJOTswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2Vh ZGI3ZTlhYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0exFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISLuaGXB3Sg7gojPW2Nx/Xt8jJGd2GmeLU4jfvgPtjotuVIZTQ4XDP2 2rsXksI7vTdmnk3Z1z4oLPsQPr4JlFypJI8W3O6pnNBoAhFxgeFLCf1ulpvPYsMx ZsmX2CYCFVs15ZxcZXJR04GIlfRmWtMiNuNCpz7kSQn08CB4+dRBsPqTHl15H+cn YDFgw6Vd3HeWN1qrC918xIc8aCFih2ivc+zTn+i5fL+aC+ALKXUZou12kI3yNF5z XFEviBy1omui8XywuxcaqwnFE45RYGvqi+oyFYN0rKOO3OWTLNy04AGAOvO+r6Mi MX2VeWGf331XpfBDvyAFwc3C7EXDXDA= -----END CERTIFICATE-----Generated at Sat Apr 5 07:38:56 2025 by rpki-client