$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/e409102b-1574-3eb9-9d70-f7404931cfa6.roa File: e409102b-1574-3eb9-9d70-f7404931cfa6.roa (raw, json) Hash identifier: 6R3SD/toa689WidBSI5gkloZshgA02LJqkeXqUF64gU= Subject key identifier: C8:B2:C2:A1:DA:02:AF:CF:99:29:94:15:4B:40:07:CB:16:0D:0D:AB Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Certificate serial: 010D0C9F4328584930DE6E8E08FBDE0D6FB652C0 Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/e409102b-1574-3eb9-9d70-f7404931cfa6.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 13213 IP address blocks: 209.236.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:6e:8e:08:fb:de:0d:6f:b6:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=8fec2286-c5d8-43e7-84cc-2ba0358f0d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:77:f2:1d:4c:9b:e8:34:1c:bb:ac:4e:74:16: 4b:6a:fd:68:af:fe:98:7d:5c:1e:25:eb:6c:c6:cf: 88:c8:1b:77:b5:7c:a2:42:66:4b:18:23:b2:52:0f: 05:5b:b8:49:12:e7:e0:08:e3:b8:f7:7a:7d:5b:51: 25:69:8e:f4:fc:23:98:1c:a3:16:ba:df:15:b2:46: c0:de:70:1c:ab:3d:77:6e:db:aa:ce:bf:ab:3a:d7: 24:e5:5d:bf:8d:3e:66:fd:9d:06:c3:5f:cc:42:79: 60:22:10:83:5d:fb:0e:b0:4a:d4:ed:76:56:31:0a: 65:72:f9:b1:b9:03:0a:fc:85:a1:fd:0a:ee:43:45: 9f:5b:25:bc:23:bf:de:b9:d7:c3:6f:79:98:a4:cb: 4e:60:88:31:14:a9:a4:5d:bf:de:87:e4:39:e8:55: fc:dc:4a:35:30:b3:ee:42:10:83:7b:f8:c9:59:13: d0:ac:67:29:a0:ae:79:59:cd:1d:ca:8d:ff:02:0d: 7b:cf:63:ec:42:44:bf:fb:e0:27:c9:1f:ce:c6:f7: 53:41:dc:1f:71:bf:6b:d1:49:de:a1:7b:5b:51:d8: 9c:60:2c:2e:11:de:52:21:b8:f1:f9:e8:15:c0:a7: de:74:b9:e9:69:cb:16:81:82:3c:21:40:e7:e3:a8: 30:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B2:C2:A1:DA:02:AF:CF:99:29:94:15:4B:40:07:CB:16:0D:0D:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/e409102b-1574-3eb9-9d70-f7404931cfa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl X509v3 Authority Key Identifier: keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer sbgp-ipAddrBlock: critical IPv4: 209.236.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:f2:6a:b3:25:df:33:11:12:6a:77:78:03:4b:2e:b4:ac:51: ee:68:95:3d:5d:0f:69:4f:c6:6a:f5:8e:36:40:dd:38:a3:54: be:86:ec:63:2f:20:13:f7:7b:73:08:e8:4e:a6:76:de:64:20: be:ca:64:0a:65:77:8b:ba:0f:ce:dc:35:db:e8:fc:e3:49:ab: 7c:6f:a0:e0:2a:1d:76:d7:68:c9:ae:87:b0:a6:8a:2c:5d:19: 84:bb:68:e6:8d:e2:43:65:e6:b8:27:2e:ed:e8:7d:f0:29:fc: 26:7c:e7:43:07:ca:1f:cb:1e:c8:dc:37:80:fd:bb:bf:15:d0: fd:e7:bc:a9:23:8f:34:95:b8:c5:10:3e:02:b7:13:52:86:77: f2:2d:4e:8a:3c:b7:9b:47:f9:e7:64:e5:e2:c7:5d:79:6b:25: b0:c9:db:29:c0:d2:d4:f3:c8:fc:31:ea:51:9a:c9:7f:82:b1: 04:08:12:31:ab:41:28:18:7f:6e:16:a3:dc:47:7e:18:05:bb: da:6a:8a:d0:cb:22:48:11:f2:e3:51:9d:5a:ff:e0:f9:f8:ff: 79:67:60:5e:07:23:28:13:0f:d8:31:22:99:fd:bb:6a:c9:bc: fd:51:9e:ef:35:86:f0:df:fa:ef:33:bd:0d:ad:78:ba:93:bc: d4:3a:b8:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3m6OCPveDW+2UsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5 YWFlMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk OGZlYzIyODYtYzVkOC00M2U3LTg0Y2MtMmJhMDM1OGYwZDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXfyHUyb6DQcu6xOdBZLav1or/6YfVweJets xs+IyBt3tXyiQmZLGCOyUg8FW7hJEufgCOO493p9W1ElaY70/COYHKMWut8VskbA 3nAcqz13btuqzr+rOtck5V2/jT5m/Z0Gw1/MQnlgIhCDXfsOsErU7XZWMQplcvmx uQMK/IWh/QruQ0WfWyW8I7/eudfDb3mYpMtOYIgxFKmkXb/eh+Q56FX83Eo1MLPu QhCDe/jJWRPQrGcpoK55Wc0dyo3/Ag17z2PsQkS/++AnyR/OxvdTQdwfcb9r0Une oXtbUdicYCwuEd5SIbjx+egVwKfedLnpacsWgYI8IUDn46gwswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiywqHaAq/PmSmUFUtAB8sWDQ2rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Njdh OThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvZTQwOTEwMmItMTU3NC0z ZWI5LTlkNzAtZjc0MDQ5MzFjZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTY3YTk4YjAtMTAwZi00ZTY5LThh OWYtYmNlYWRiN2U5YWFlLzk2N2E5OGIwLTEwMGYtNGU2OS04YTlmLWJjZWFkYjdl OWFhZS5jcmwwHwYDVR0jBBgwFoAU11g4vsgJB/HhoBW3h78hrABJOTswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2Vh ZGI3ZTlhYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0exGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXyarMl3zMREmp3eANLLrSsUe5olT1dD2lPxmr1jjZA3TijVL6G7GMv IBP3e3MI6E6mdt5kIL7KZApld4u6D87cNdvo/ONJq3xvoOAqHXbXaMmuh7Cmiixd GYS7aOaN4kNl5rgnLu3offAp/CZ850MHyh/LHsjcN4D9u78V0P3nvKkjjzSVuMUQ PgK3E1KGd/ItToo8t5tH+edk5eLHXXlrJbDJ2ynA0tTzyPwx6lGayX+CsQQIEjGr QSgYf24Wo9xHfhgFu9pqitDLIkgR8uNRnVr/4Pn4/3lnYF4HIygTD9gxIpn9u2rJ vP1Rnu81hvDf+u8zvQ2teLqTvNQ6uKQ= -----END CERTIFICATE-----Generated at Sat Apr 5 04:36:29 2025 by rpki-client