$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/6f477233-abe1-3ee6-ba8a-3e08779866d7.roa File: 6f477233-abe1-3ee6-ba8a-3e08779866d7.roa (raw, json) Hash identifier: Zg9pu1F+ZBReAP2Zfye9pJ/IFWzopAh8FXeFZWi5X2g= Subject key identifier: B9:47:9F:22:27:14:02:3E:7C:64:5A:00:5A:01:C8:E0:DB:3B:F4:C9 Certificate issuer: /CN=e3370a8c-7e39-490d-985a-a478ce54459f Certificate serial: 010D0C9F432858491AA6D14AB7364FFDB21E0480 Authority key identifier: E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/6f477233-abe1-3ee6-ba8a-3e08779866d7.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 4393 IP address blocks: 204.52.234.0/23 maxlen: 24 209.251.198.0/24 maxlen: 24 209.251.200.0/24 maxlen: 24 209.251.208.0/23 maxlen: 23 209.251.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:d1:4a:b7:36:4f:fd:b2:1e:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3370a8c-7e39-490d-985a-a478ce54459f Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=149aa671-ef98-4ed4-ac18-9bd5dae2619f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ac:3a:53:9d:59:24:77:d0:16:60:e0:a6:1f: 99:c4:5f:73:8d:1f:68:e4:2c:6e:23:51:2f:14:88: 3a:f1:80:ad:d8:6b:2b:16:c0:53:a0:52:1f:15:a7: 3b:ee:63:80:27:13:fc:e1:dd:02:79:b6:6c:08:a6: d4:16:4b:4a:b5:8c:d9:c3:43:b1:61:ac:f0:64:28: 31:1f:fd:be:78:cd:70:1b:d7:33:90:94:9b:9f:02: ec:f5:8f:69:fd:b7:db:73:e9:f1:6e:b0:07:1c:a2: 28:7e:86:ad:f2:63:7e:93:28:01:a6:e7:79:c6:ad: 60:6a:ce:28:54:c7:cf:66:b6:32:e6:d7:49:ff:29: d5:64:59:47:6c:88:58:97:40:71:79:71:fc:3b:12: 0f:e7:d7:21:0f:9b:cb:a5:08:47:9b:00:62:74:58: d2:cc:e8:0b:52:37:25:74:50:9c:c6:66:0e:41:55: ce:e1:34:bf:37:8c:fd:1d:bc:46:45:89:d6:07:a8: 2f:51:24:6a:53:ed:61:ee:af:87:9f:53:92:d5:26: 34:25:dc:27:e4:7d:a9:e0:1e:70:85:67:01:30:86: b7:2c:da:a8:ae:bd:49:1c:c0:d0:67:c1:6c:90:3f: e2:7f:5f:89:de:b9:c9:4a:93:c5:db:10:92:0b:43: 25:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:47:9F:22:27:14:02:3E:7C:64:5A:00:5A:01:C8:E0:DB:3B:F4:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/6f477233-abe1-3ee6-ba8a-3e08779866d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.crl X509v3 Authority Key Identifier: keyid:E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer sbgp-ipAddrBlock: critical IPv4: 204.52.234.0/23 209.251.198.0/24 209.251.200.0/24 209.251.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:96:b7:87:ed:ec:9d:bf:22:ab:23:79:0f:65:ba:a1:2e:1a: cf:be:d7:68:aa:0a:43:39:2c:16:db:34:5b:e3:88:dd:54:87: f1:b1:07:5a:db:fe:cb:3c:02:2d:18:ca:c3:e1:80:a1:88:2b: 3a:55:3a:f7:81:26:9b:f2:0d:dc:b1:6e:df:46:db:a9:07:39: 8e:78:a3:3f:25:69:09:69:ba:39:6c:3a:25:4f:c9:d2:74:2c: a8:a4:0c:1f:d5:97:72:99:ce:0f:b2:01:f8:90:49:9c:e4:02: 98:f6:d3:13:96:a2:2c:a4:aa:f9:93:ea:7a:22:ec:5e:e5:1f: 77:d4:d0:a5:27:95:e9:48:69:7a:0a:40:4d:40:01:7c:ba:b7: bc:e1:30:4c:2f:c2:e3:29:89:7a:65:91:da:88:b2:89:ef:28: 22:b8:d3:ed:29:de:6e:72:14:41:e3:1b:20:5e:91:53:96:3d: cb:2d:3d:5f:06:a6:10:cf:a3:69:c5:03:bc:ff:93:c7:fb:5b: b9:c9:11:f4:7b:05:3e:2d:cc:8e:4d:95:f1:12:10:2e:d8:08: b8:53:81:01:72:4e:01:b3:30:04:c2:66:06:62:90:ec:4e:80: 46:f2:48:05:82:24:3a:b7:69:99:da:72:53:37:0d:05:66:05: 6b:a3:23:95 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEkaptFKtzZP/bIeBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMzNzBhOGMtN2UzOS00OTBkLTk4NWEtYTQ3OGNlNTQ0 NTlmMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk MTQ5YWE2NzEtZWY5OC00ZWQ0LWFjMTgtOWJkNWRhZTI2MTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaw6U51ZJHfQFmDgph+ZxF9zjR9o5CxuI1Ev FIg68YCt2GsrFsBToFIfFac77mOAJxP84d0CebZsCKbUFktKtYzZw0OxYazwZCgx H/2+eM1wG9czkJSbnwLs9Y9p/bfbc+nxbrAHHKIofoat8mN+kygBpud5xq1gas4o VMfPZrYy5tdJ/ynVZFlHbIhYl0BxeXH8OxIP59chD5vLpQhHmwBidFjSzOgLUjcl dFCcxmYOQVXO4TS/N4z9HbxGRYnWB6gvUSRqU+1h7q+Hn1OS1SY0Jdwn5H2p4B5w hWcBMIa3LNqorr1JHMDQZ8FskD/if1+J3rnJSpPF2xCSC0MlQQIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFLlHnyInFAI+fGRaAFoByODbO/TJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lMzM3 MGE4Yy03ZTM5LTQ5MGQtOTg1YS1hNDc4Y2U1NDQ1OWYvNmY0NzcyMzMtYWJlMS0z ZWU2LWJhOGEtM2UwODc3OTg2NmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTMzNzBhOGMtN2UzOS00OTBkLTk4 NWEtYTQ3OGNlNTQ0NTlmL2UzMzcwYThjLTdlMzktNDkwZC05ODVhLWE0NzhjZTU0 NDU5Zi5jcmwwHwYDVR0jBBgwFoAU4uoLRS/p/vRebN8XfsgDYlxFUiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lMzM3MGE4Yy03ZTM5LTQ5MGQtOTg1YS1hNDc4 Y2U1NDQ1OWYuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBzDTqAwQA 0fvGAwQA0fvIAwQC0fvQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFyWt4ft7J2/IqsjeQ9luqEuGs++12iq CkM5LBbbNFvjiN1Uh/GxB1rb/ss8Ai0YysPhgKGIKzpVOveBJpvyDdyxbt9G26kH OY54oz8laQlpujlsOiVPydJ0LKikDB/Vl3KZzg+yAfiQSZzkApj20xOWoiykqvmT 6noi7F7lH3fU0KUnlelIaXoKQE1AAXy6t7zhMEwvwuMpiXplkdqIsonvKCK40+0p 3m5yFEHjGyBekVOWPcstPV8GphDPo2nFA7z/k8f7W7nJEfR7BT4tzI5NlfESEC7Y CLhTgQFyTgGzMATCZgZikOxOgEbySAWCJDq3aZnaclM3DQVmBWujI5U= -----END CERTIFICATE-----Generated at Mon Apr 7 09:22:51 2025 by rpki-client