$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/2ce9ccc8-a99e-351c-aad5-d86ec715d8e7.roa File: 2ce9ccc8-a99e-351c-aad5-d86ec715d8e7.roa (raw, json) Hash identifier: MF8mQryrrOy9aioFvydLMeaLEJeir9KBYgeIUuBPOrA= Subject key identifier: 71:93:03:05:89:1D:85:5A:93:51:F3:E1:E6:81:45:A6:6F:E7:DD:A1 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584935AA2828994CB93D21311440 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/2ce9ccc8-a99e-351c-aad5-d86ec715d8e7.roa Signing time: Sun 16 Mar 2025 18:14:31 +0000 ROA not before: Sun 16 Mar 2025 18:14:31 +0000 ROA not after: Sat 14 Jun 2025 18:14:31 +0000 asID: 16276 IP address blocks: 209.51.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:aa:28:28:99:4c:b9:3d:21:31:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Mar 16 18:14:31 2025 GMT Not After : Jun 14 18:14:31 2025 GMT Subject: CN=db54ebbe-5a85-4b73-9d17-8b13de01b525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:53:7e:e6:a5:81:f4:90:2d:fb:ed:48:de:40: eb:44:ef:0e:01:41:03:e4:f1:3d:b7:08:80:59:eb: 8e:8c:a4:90:f0:2f:d0:d9:a8:c4:f3:00:36:d9:aa: 57:78:2e:91:64:1a:68:5f:3d:f1:08:31:c9:f3:06: d4:87:a3:ea:97:4e:cd:11:50:5a:c2:4f:e3:ba:54: 34:c0:dd:15:68:3a:4d:65:90:63:54:e8:b3:9a:30: 74:06:22:2d:79:c7:52:7d:90:7b:81:64:b6:8e:d1: 67:cf:48:b1:7e:09:db:0f:50:b8:0a:b4:c9:d9:22: e6:67:50:3f:0e:48:7c:19:4d:c4:6d:b8:f2:ca:e8: 0f:ca:b1:b9:77:70:4c:c9:89:90:bd:89:3e:6c:48: b1:48:11:65:8b:ad:63:9b:0b:69:59:dd:43:0b:d0: f1:c9:01:76:1c:a2:cd:16:7d:ca:b1:7d:21:ea:8b: 2a:21:6c:56:f7:f2:6d:78:70:a8:52:b2:62:7b:0a: 80:af:ce:36:a6:a8:ae:6f:39:a2:1f:89:fa:db:2d: c2:6b:ef:31:dc:5a:86:d5:c5:13:65:f5:22:fb:bf: 04:4c:01:d3:bc:c3:20:d2:5c:48:48:df:13:02:9a: 7b:cc:d5:12:a5:d7:0d:94:8c:80:88:dc:0f:b8:c7: 2a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:93:03:05:89:1D:85:5A:93:51:F3:E1:E6:81:45:A6:6F:E7:DD:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/2ce9ccc8-a99e-351c-aad5-d86ec715d8e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 209.51.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:93:0f:9d:74:1a:a5:e3:d0:50:ea:dc:d9:5a:36:5b:ef:75: cc:a6:c7:a0:9c:ad:67:58:de:2b:c8:0d:52:4a:ef:6d:55:81: bf:c3:20:ad:41:d1:0b:a3:f7:86:69:c3:af:33:ff:a9:cd:9e: 21:29:5a:23:a4:7e:c0:a1:92:f0:cf:84:e1:69:7f:17:63:2e: 71:54:ae:de:40:db:95:32:66:85:46:34:84:27:04:30:06:15: ff:59:96:d3:98:ac:b6:43:87:5f:bd:9d:15:52:59:38:b2:c3: 55:47:5a:11:9a:c8:59:91:cd:5b:4e:4b:fb:37:18:28:58:5e: 97:40:66:eb:3c:4e:8d:bb:d8:8a:7f:59:c0:eb:2a:96:e0:78: 5a:64:d7:2c:3f:7b:6a:03:89:87:21:33:cb:0a:2d:b9:0f:bc: 69:a1:a4:45:b2:c5:83:6f:9c:a6:78:12:e8:17:76:6b:ff:7c: 72:a4:b8:07:fc:db:5d:12:04:7e:11:0c:82:53:e9:48:e5:7a: 04:9e:cc:49:6c:ed:5e:59:73:74:0b:ba:a3:bf:a6:f2:8f:3d: 05:18:ee:d0:02:1e:d9:b4:ff:5a:bc:b3:00:05:62:86:1d:b3: ee:d4:2b:bd:39:12:6b:db:ee:cb:4d:a2:99:38:ce:6d:49:b9: 33:c1:af:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1qigomUy5PSExFEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDMxNjE4MTQzMVoXDTI1MDYxNDE4MTQzMVowLzEtMCsGA1UEAxMk ZGI1NGViYmUtNWE4NS00YjczLTlkMTctOGIxM2RlMDFiNTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVN+5qWB9JAt++1I3kDrRO8OAUED5PE9twiA WeuOjKSQ8C/Q2ajE8wA22apXeC6RZBpoXz3xCDHJ8wbUh6Pql07NEVBawk/julQ0 wN0VaDpNZZBjVOizmjB0BiItecdSfZB7gWS2jtFnz0ixfgnbD1C4CrTJ2SLmZ1A/ Dkh8GU3EbbjyyugPyrG5d3BMyYmQvYk+bEixSBFli61jmwtpWd1DC9DxyQF2HKLN Fn3KsX0h6osqIWxW9/JteHCoUrJiewqAr842pqiubzmiH4n62y3Ca+8x3FqG1cUT ZfUi+78ETAHTvMMg0lxISN8TApp7zNUSpdcNlIyAiNwPuMcq3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGTAwWJHYVak1Hz4eaBRaZv592hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvMmNlOWNjYzgtYTk5ZS0z NTFjLWFhZDUtZDg2ZWM3MTVkOGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+TD510GqXj0FDq3NlaNlvvdcymx6CcrWdY3ivIDVJK721Vgb/DIK1B 0Quj94Zpw68z/6nNniEpWiOkfsChkvDPhOFpfxdjLnFUrt5A25UyZoVGNIQnBDAG Ff9ZltOYrLZDh1+9nRVSWTiyw1VHWhGayFmRzVtOS/s3GChYXpdAZus8To272Ip/ WcDrKpbgeFpk1yw/e2oDiYchM8sKLbkPvGmhpEWyxYNvnKZ4EugXdmv/fHKkuAf8 210SBH4RDIJT6UjlegSezEls7V5Zc3QLuqO/pvKPPQUY7tACHtm0/1q8swAFYoYd s+7UK705Emvb7stNopk4zm1JuTPBr1U= -----END CERTIFICATE-----Generated at Sat Apr 5 15:30:32 2025 by rpki-client