$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/5c80a08c-e49d-33f4-b617-5ada5f2af850.roa File: 5c80a08c-e49d-33f4-b617-5ada5f2af850.roa (raw, json) Hash identifier: zwoa5k1jwL9inVGmJ3XydztwcZryDqsY68DPqhv07Fc= Subject key identifier: E1:1F:D0:65:6B:80:F3:42:B1:40:29:00:DB:35:24:6A:1B:01:A3:EC Certificate issuer: /CN=e3370a8c-7e39-490d-985a-a478ce54459f Certificate serial: 010D0C9F432858494303EE4040AAF203E7173480 Authority key identifier: E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/5c80a08c-e49d-33f4-b617-5ada5f2af850.roa Signing time: Fri 21 Mar 2025 13:00:50 +0000 ROA not before: Fri 21 Mar 2025 13:00:50 +0000 ROA not after: Thu 19 Jun 2025 13:00:50 +0000 asID: 4393 IP address blocks: 209.251.198.0/23 maxlen: 23 209.251.200.0/21 maxlen: 21 209.251.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:03:ee:40:40:aa:f2:03:e7:17:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3370a8c-7e39-490d-985a-a478ce54459f Validity Not Before: Mar 21 13:00:50 2025 GMT Not After : Jun 19 13:00:50 2025 GMT Subject: CN=5e8a20ed-6981-4757-aefd-99c8dae5c4f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ad:08:14:eb:4f:3b:fe:b1:a5:d5:fe:e2:95: 35:00:2e:70:df:8e:1a:22:16:58:e9:ca:4a:01:bc: e1:dc:26:86:f8:df:50:67:ab:28:53:eb:fc:b4:12: f1:ee:e0:c6:fb:af:7a:69:2e:e3:54:9c:8a:f9:0e: 1f:fd:40:46:0a:6c:aa:f6:e4:20:d4:64:54:44:bb: 2e:d6:02:e1:6b:62:2f:85:4c:f2:7b:2a:b6:66:30: 96:93:d9:3f:70:1f:94:ba:a4:57:de:9f:60:fa:79: 6b:75:48:f7:95:1a:66:ad:53:c5:d8:00:99:43:8d: b8:1a:a1:33:f3:fc:d6:36:72:39:a2:01:07:98:df: 1c:5f:11:1d:e2:57:4d:08:dc:1e:31:3a:ac:11:c2: e1:11:61:f8:e8:4d:24:2d:4a:b0:95:60:67:b8:58: a7:a1:19:e4:62:2f:d6:ab:ce:7e:52:07:d0:3f:01: 7b:61:4c:63:f3:40:56:22:70:c7:5c:39:b2:4a:47: 4b:6d:b2:4c:86:72:0d:57:8c:8e:90:aa:1d:b7:d1: 69:94:ea:2b:90:23:75:22:d8:be:0e:39:9d:85:ca: 0a:04:9f:cf:46:25:2f:bd:da:c8:4e:c9:bb:6b:0c: c3:37:82:08:c6:3c:29:ec:70:d2:cc:06:de:2f:f9: fa:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1F:D0:65:6B:80:F3:42:B1:40:29:00:DB:35:24:6A:1B:01:A3:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/5c80a08c-e49d-33f4-b617-5ada5f2af850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.crl X509v3 Authority Key Identifier: keyid:E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer sbgp-ipAddrBlock: critical IPv4: 209.251.198.0-209.251.223.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:f9:34:b2:53:3d:89:05:69:f5:85:ba:e2:06:38:f5:ca:a9: 15:ba:82:07:ce:d7:3c:b1:9b:78:fc:df:a3:11:3c:3e:39:30: 1b:2a:85:fe:33:75:0c:93:33:cb:49:be:28:80:09:f4:ae:65: 87:b1:fa:29:3f:a3:d5:40:d0:a6:52:89:e7:73:e8:bf:4a:12: b3:b6:eb:1b:a4:49:94:11:84:e4:76:e6:96:f3:c5:f0:cd:7e: 73:fa:bb:0f:2b:f8:b4:11:54:ef:55:ee:3a:46:77:08:30:74: 94:fe:52:ab:b1:df:86:7b:9b:82:bb:4a:08:25:06:5c:e2:4c: 54:5f:f8:c7:c4:46:c1:11:19:4e:c9:a9:9d:16:2e:4d:e8:0c: 7c:16:64:27:8a:40:dd:97:f5:ca:86:81:f7:18:eb:f3:82:7a: 53:c0:ba:d7:26:99:43:f1:39:be:1b:3d:0e:80:0a:ec:e8:71: eb:79:6a:b4:58:34:20:a0:67:3a:cc:37:bd:f9:76:7c:7a:2c: 1d:01:a0:89:b0:ca:0b:6b:35:7d:8f:b5:37:db:9d:7e:38:66: 4c:f0:0d:93:be:35:ec:47:c7:4f:fd:d7:40:f2:a6:d3:a4:ad: e7:27:f7:0b:9b:a1:7f:2e:5d:f2:d1:3c:c9:55:f0:c0:80:7f: 88:f9:be:9a -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWElDA+5AQKryA+cXNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMzNzBhOGMtN2UzOS00OTBkLTk4NWEtYTQ3OGNlNTQ0 NTlmMB4XDTI1MDMyMTEzMDA1MFoXDTI1MDYxOTEzMDA1MFowLzEtMCsGA1UEAxMk NWU4YTIwZWQtNjk4MS00NzU3LWFlZmQtOTljOGRhZTVjNGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAka0IFOtPO/6xpdX+4pU1AC5w344aIhZY6cpK Abzh3CaG+N9QZ6soU+v8tBLx7uDG+696aS7jVJyK+Q4f/UBGCmyq9uQg1GRURLsu 1gLha2IvhUzyeyq2ZjCWk9k/cB+UuqRX3p9g+nlrdUj3lRpmrVPF2ACZQ424GqEz 8/zWNnI5ogEHmN8cXxEd4ldNCNweMTqsEcLhEWH46E0kLUqwlWBnuFinoRnkYi/W q85+UgfQPwF7YUxj80BWInDHXDmySkdLbbJMhnINV4yOkKodt9FplOorkCN1Iti+ DjmdhcoKBJ/PRiUvvdrITsm7awzDN4IIxjwp7HDSzAbeL/n69QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFOEf0GVrgPNCsUApANs1JGobAaPsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lMzM3 MGE4Yy03ZTM5LTQ5MGQtOTg1YS1hNDc4Y2U1NDQ1OWYvNWM4MGEwOGMtZTQ5ZC0z M2Y0LWI2MTctNWFkYTVmMmFmODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTMzNzBhOGMtN2UzOS00OTBkLTk4 NWEtYTQ3OGNlNTQ0NTlmL2UzMzcwYThjLTdlMzktNDkwZC05ODVhLWE0NzhjZTU0 NDU5Zi5jcmwwHwYDVR0jBBgwFoAU4uoLRS/p/vRebN8XfsgDYlxFUiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lMzM3MGE4Yy03ZTM5LTQ5MGQtOTg1YS1hNDc4 Y2U1NDQ1OWYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHR+8YD BAXR+8AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAOfk0slM9iQVp9YW64gY49cqpFbqCB87XPLGbePzfoxE8 PjkwGyqF/jN1DJMzy0m+KIAJ9K5lh7H6KT+j1UDQplKJ53Pov0oSs7brG6RJlBGE 5HbmlvPF8M1+c/q7Dyv4tBFU71XuOkZ3CDB0lP5Sq7HfhnubgrtKCCUGXOJMVF/4 x8RGwREZTsmpnRYuTegMfBZkJ4pA3Zf1yoaB9xjr84J6U8C61yaZQ/E5vhs9DoAK 7Ohx63lqtFg0IKBnOsw3vfl2fHosHQGgibDKC2s1fY+1N9udfjhmTPANk7417EfH T/3XQPKm06St5yf3C5uhfy5d8tE8yVXwwIB/iPm+mg== -----END CERTIFICATE-----Generated at Mon Apr 7 09:25:43 2025 by rpki-client