$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/83bed6be-982c-32d3-85e7-7d30a77ee70d.roa File: 83bed6be-982c-32d3-85e7-7d30a77ee70d.roa (raw, json) Hash identifier: jYmktpd7v9Gr1liLTE6MMxP98UdtJiYFuFG5vfByIE4= Subject key identifier: 5D:D3:30:2F:32:DE:18:5E:DD:E8:CD:A6:C3:58:8C:35:77:AC:94:65 Certificate issuer: /CN=9bc88207-e7c7-453e-a4ab-77b72152c33a Certificate serial: 010D0C9F43285849350EA85BD1A39998A3B2BEE8 Authority key identifier: 49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/83bed6be-982c-32d3-85e7-7d30a77ee70d.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 22379 IP address blocks: 209.127.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:a8:5b:d1:a3:99:98:a3:b2:be:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bc88207-e7c7-453e-a4ab-77b72152c33a Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=b60fa4eb-bb52-41e7-97f0-4530524b6b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e1:07:c7:b7:af:b7:c3:25:7a:71:39:5d:83: 1a:2e:9a:bd:eb:61:fc:85:80:f2:9f:5e:17:af:1e: 00:e2:00:22:a0:c9:e9:3b:3a:df:8a:a6:04:6b:8c: 66:78:e8:55:c2:e4:f6:a8:d6:5d:66:99:03:1d:ea: c0:30:78:a6:b7:c3:cb:65:b5:cb:b8:f2:1a:39:a2: 40:53:7b:31:00:ad:07:71:09:44:21:0a:7f:88:26: db:a1:46:aa:6f:a8:e4:7f:57:32:7a:14:a4:84:23: 7c:2d:45:2a:08:9f:26:de:4a:0e:9f:b0:ea:73:17: 76:cc:9c:7b:30:e3:d6:09:5c:64:c8:62:a0:03:89: 49:42:ca:f1:c2:67:ca:f2:b4:92:f9:f2:b3:e0:d1: fb:dc:53:45:27:36:50:b2:de:8a:36:0c:ee:67:91: 5d:3f:a4:4b:47:46:f3:86:e5:17:2d:0a:0c:a7:f5: e5:2f:80:64:c6:29:a6:6d:07:d4:7d:45:34:b0:15: 8e:e0:b0:16:d4:91:bf:5f:64:4e:89:a6:70:3d:3a: 4b:6e:28:cd:23:33:84:6e:58:6f:3c:4e:c2:4c:a9: d7:5e:61:d1:9a:25:53:72:cd:74:8f:95:93:c6:a0: 9a:40:a9:4a:8b:38:31:10:d8:93:4a:44:6c:99:b4: ea:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D3:30:2F:32:DE:18:5E:DD:E8:CD:A6:C3:58:8C:35:77:AC:94:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/83bed6be-982c-32d3-85e7-7d30a77ee70d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl X509v3 Authority Key Identifier: keyid:49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer sbgp-ipAddrBlock: critical IPv4: 209.127.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:2d:43:71:96:ea:c5:28:0c:f0:bc:be:c4:d1:a1:4a:2e:06: 51:99:20:e8:90:69:f3:5f:c7:97:77:88:27:fb:a3:b4:38:44: 34:49:60:84:82:f7:fe:d1:e7:2e:3c:39:12:f0:b4:67:37:a2: dc:f6:d0:dd:6a:5b:fe:6f:68:ff:0f:16:e7:66:45:b8:7b:08: 58:1b:bb:a0:88:e5:d8:f8:9a:3f:7b:a7:41:35:32:8a:d7:21: 8f:2d:e2:8a:20:f2:e0:02:ac:de:29:40:84:1f:02:09:19:88: 2e:fb:2b:e6:f2:80:0a:ed:3d:b2:bf:e0:1e:69:09:c7:67:d7: 7d:13:ab:0a:47:8b:4b:7b:10:34:be:98:87:67:8e:8c:e7:db: 05:2e:b1:69:fd:5e:e7:12:c1:d0:c8:21:2e:ec:b0:26:c2:48: c4:c5:ff:9f:fd:e0:50:10:e1:b7:f6:c3:62:f0:3e:c9:1d:c8: 18:f5:0e:b2:f1:98:68:bf:b0:9b:b3:0f:07:29:7a:60:dd:7e: 2d:13:14:8d:1f:79:84:88:94:12:98:73:27:c2:a6:c5:2f:50: 37:05:60:9c:ea:eb:dc:d1:c2:12:93:a3:55:11:d8:71:b2:f3: 65:b6:bd:96:e7:f8:d2:a6:e5:1e:65:c6:22:3c:b5:c2:e9:b0: e9:87:2a:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Dqhb0aOZmKOyvugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJjODgyMDctZTdjNy00NTNlLWE0YWItNzdiNzIxNTJj MzNhMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YjYwZmE0ZWItYmI1Mi00MWU3LTk3ZjAtNDUzMDUyNGI2YjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseEHx7evt8MlenE5XYMaLpq962H8hYDyn14X rx4A4gAioMnpOzrfiqYEa4xmeOhVwuT2qNZdZpkDHerAMHimt8PLZbXLuPIaOaJA U3sxAK0HcQlEIQp/iCbboUaqb6jkf1cyehSkhCN8LUUqCJ8m3koOn7Dqcxd2zJx7 MOPWCVxkyGKgA4lJQsrxwmfK8rSS+fKz4NH73FNFJzZQst6KNgzuZ5FdP6RLR0bz huUXLQoMp/XlL4BkximmbQfUfUU0sBWO4LAW1JG/X2ROiaZwPTpLbijNIzOEblhv PE7CTKnXXmHRmiVTcs10j5WTxqCaQKlKizgxENiTSkRsmbTqswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3TMC8y3hhe3ejNpsNYjDV3rJRlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YmM4 ODIwNy1lN2M3LTQ1M2UtYTRhYi03N2I3MjE1MmMzM2EvODNiZWQ2YmUtOTgyYy0z MmQzLTg1ZTctN2QzMGE3N2VlNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWJjODgyMDctZTdjNy00NTNlLWE0 YWItNzdiNzIxNTJjMzNhLzliYzg4MjA3LWU3YzctNDUzZS1hNGFiLTc3YjcyMTUy YzMzYS5jcmwwHwYDVR0jBBgwFoAUSTAeHE2iWcjFZa+Ue8VgdNKWIv8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85YmM4ODIwNy1lN2M3LTQ1M2UtYTRhYi03N2I3 MjE1MmMzM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0X/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALUtQ3GW6sUoDPC8vsTRoUouBlGZIOiQafNfx5d3iCf7o7Q4RDRJYISC 9/7R5y48ORLwtGc3otz20N1qW/5vaP8PFudmRbh7CFgbu6CI5dj4mj97p0E1MorX IY8t4oog8uACrN4pQIQfAgkZiC77K+bygArtPbK/4B5pCcdn130TqwpHi0t7EDS+ mIdnjozn2wUusWn9XucSwdDIIS7ssCbCSMTF/5/94FAQ4bf2w2LwPskdyBj1DrLx mGi/sJuzDwcpemDdfi0TFI0feYSIlBKYcyfCpsUvUDcFYJzq69zRwhKTo1UR2HGy 82W2vZbn+NKm5R5lxiI8tcLpsOmHKpw= -----END CERTIFICATE-----Generated at Fri Apr 11 21:34:13 2025 by rpki-client