$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f18517cc-6da9-30ab-8184-12b511ccaa4c.roa File: f18517cc-6da9-30ab-8184-12b511ccaa4c.roa (raw, json) Hash identifier: vTpq+5y5fspBBTOp/AmGz5mTGF3mCkapjow48A5wprk= Subject key identifier: F7:30:62:91:27:A1:A6:96:3B:B8:3E:8B:38:AB:55:9E:73:04:5C:0F Certificate issuer: /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49 Certificate serial: 010D0C9F43285849002156265F025980AF849650 Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f18517cc-6da9-30ab-8184-12b511ccaa4c.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 30698 IP address blocks: 209.221.240.0/21 maxlen: 24 209.221.248.0/22 maxlen: 24 209.221.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:56:26:5f:02:59:80:af:84:96:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=38e4ecdc-088c-47bd-98c1-c21990063918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:24:68:39:4c:62:6f:76:92:8d:a0:00:af:0a: 05:63:03:8f:e5:99:6c:8f:59:6c:5d:6b:2c:8f:33: ac:b8:50:60:0a:fe:a3:67:33:28:b4:b8:44:3f:43: 46:47:d0:41:96:96:f9:e4:aa:e6:45:ca:2d:12:32: 80:de:a4:30:e1:79:6f:8c:e0:38:68:92:06:26:25: f8:3e:e5:99:5f:37:f1:ca:46:89:ae:0f:80:2f:fa: fa:ac:81:a9:d6:29:e5:13:f6:25:d8:55:ae:85:92: b9:66:e7:4b:8c:f2:ac:f4:87:38:49:06:a3:f8:d3: 1c:b0:39:6d:8d:7d:7d:09:29:ae:eb:13:fb:02:a4: 24:5f:1a:5d:1b:7f:04:e5:7a:7e:2b:a1:5a:da:ad: ae:59:2c:1f:59:69:c3:66:90:c5:42:ff:63:4d:7d: dd:47:f5:52:ad:7b:da:fa:c4:dd:74:8c:2e:63:28: ac:85:28:2a:d1:8c:32:5d:fe:c1:32:1b:72:72:f6: 84:8f:04:e0:9a:b3:aa:0e:3d:99:aa:1d:83:2a:99: 9f:33:34:1c:44:a6:1f:bf:08:7d:31:e8:f7:cd:e0: f4:54:74:fd:67:f7:0b:7b:52:19:58:18:1d:48:4e: 7a:fe:61:52:58:15:05:b2:ae:d8:1a:23:08:b8:86: 64:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:30:62:91:27:A1:A6:96:3B:B8:3E:8B:38:AB:55:9E:73:04:5C:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f18517cc-6da9-30ab-8184-12b511ccaa4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl X509v3 Authority Key Identifier: keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer sbgp-ipAddrBlock: critical IPv4: 209.221.240.0-209.221.253.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:a8:d2:22:74:d0:a4:fe:08:21:ec:3d:eb:cf:38:92:ae:3f: c4:5e:c5:ae:18:0f:0a:d4:03:c3:4f:09:cf:94:5e:5f:64:78: e3:71:8e:5c:e7:3f:ad:07:21:46:c6:eb:7b:20:b7:19:8b:c8: 2e:10:ba:66:c2:49:9e:15:70:fd:91:8a:c5:81:95:7d:4a:e7: d0:e1:62:0e:fd:fb:a4:81:ea:ed:61:bc:7d:ae:18:83:8f:b4: 05:de:6b:4a:f5:41:f1:6e:00:33:5f:2e:62:68:e0:ad:b5:f6: 53:2f:c6:79:d0:82:de:98:05:1a:1d:d9:6c:18:9b:3c:e7:32: e1:b1:cd:ef:04:11:28:bf:3a:2c:49:a7:87:4b:a0:6f:c6:cc: f3:67:6c:71:cc:8e:54:9a:54:a1:51:7f:24:18:2e:c8:25:1e: 23:56:76:64:d8:cb:14:c2:1b:ec:9d:3d:ff:31:a6:f2:f0:10: 3d:ef:89:c0:13:8c:9e:5f:85:c6:3d:a3:97:21:5b:f4:87:5d: 88:9e:75:38:1d:24:3a:ae:5d:cb:4f:18:18:a2:0b:db:7b:eb: 38:fe:11:a1:43:6a:f8:43:32:4c:9f:e1:ec:0b:15:88:d0:7d: 64:fd:57:7a:57:39:90:04:f2:7c:62:26:1a:cd:1a:ae:75:90: 15:21:2a:ca -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEkAIVYmXwJZgK+EllAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ1NDkxZmUtM2MxMS00ZWEzLThlYTgtN2U0MDNhNmVl YjQ5MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk MzhlNGVjZGMtMDg4Yy00N2JkLTk4YzEtYzIxOTkwMDYzOTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCRoOUxib3aSjaAArwoFYwOP5Zlsj1lsXWss jzOsuFBgCv6jZzMotLhEP0NGR9BBlpb55KrmRcotEjKA3qQw4XlvjOA4aJIGJiX4 PuWZXzfxykaJrg+AL/r6rIGp1inlE/Yl2FWuhZK5ZudLjPKs9Ic4SQaj+NMcsDlt jX19CSmu6xP7AqQkXxpdG38E5Xp+K6Fa2q2uWSwfWWnDZpDFQv9jTX3dR/VSrXva +sTddIwuYyishSgq0YwyXf7BMhtycvaEjwTgmrOqDj2Zqh2DKpmfMzQcRKYfvwh9 Mej3zeD0VHT9Z/cLe1IZWBgdSE56/mFSWBUFsq7YGiMIuIZkOwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFPcwYpEnoaaWO7g+izirVZ5zBFwPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0 OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQwM2E2ZWViNDkvZjE4NTE3Y2MtNmRhOS0z MGFiLTgxODQtMTJiNTExY2NhYTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ1NDkxZmUtM2MxMS00ZWEzLThl YTgtN2U0MDNhNmVlYjQ5L2ZkNTQ5MWZlLTNjMTEtNGVhMy04ZWE4LTdlNDAzYTZl ZWI0OS5jcmwwHwYDVR0jBBgwFoAUW/p9bVG8ca1+tu35CIL3rF9SK3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQw M2E2ZWViNDkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBATR3fAD BAHR3fwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAnajSInTQpP4IIew96884kq4/xF7FrhgPCtQDw08Jz5Re X2R443GOXOc/rQchRsbreyC3GYvILhC6ZsJJnhVw/ZGKxYGVfUrn0OFiDv37pIHq 7WG8fa4Yg4+0Bd5rSvVB8W4AM18uYmjgrbX2Uy/GedCC3pgFGh3ZbBibPOcy4bHN 7wQRKL86LEmnh0ugb8bM82dsccyOVJpUoVF/JBguyCUeI1Z2ZNjLFMIb7J09/zGm 8vAQPe+JwBOMnl+Fxj2jlyFb9IddiJ51OB0kOq5dy08YGKIL23vrOP4RoUNq+EMy TJ/h7AsViNB9ZP1Xelc5kATyfGImGs0arnWQFSEqyg== -----END CERTIFICATE-----Generated at Fri Mar 14 10:18:01 2025 by rpki-client