$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa File: 9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa (raw, json) Hash identifier: O/S8c3mdQqMEh/5D6PxfkQa68o/TW4BTcGGV/v7CYSc= Subject key identifier: 00:33:D5:44:3B:FA:BB:2B:16:1C:5D:9E:56:25:FC:B2:DD:A7:D9:53 Certificate issuer: /CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec Certificate serial: 010D0C9F432858495EEEDBE26E3B6BF067FC9000 Authority key identifier: 31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 16509 IP address blocks: 209.127.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:db:e2:6e:3b:6b:f0:67:fc:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=91e9b756-f3cc-4af6-9865-55c98e4dca53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:17:48:91:43:b5:4e:81:f4:4a:fd:74:bf:fc: 8b:a0:e8:06:da:3c:bb:cb:0f:17:b5:5f:d1:9e:74: 6d:bd:71:3f:c7:bd:63:22:98:ce:85:71:e0:33:9f: a2:94:e0:cb:14:02:bf:e8:7b:c9:f6:cf:fd:d8:73: 21:5b:14:84:2f:1c:36:c8:79:c0:ef:93:21:ba:6a: 60:ac:5d:7a:33:46:5e:87:8a:c1:ad:d2:c4:4a:72: 22:c0:62:d5:e0:e0:7a:4e:eb:9f:00:18:6a:84:f9: a9:2f:7a:8f:74:d7:a2:87:a9:b2:50:0c:1d:46:cf: bd:cc:81:fb:75:e1:97:c8:5e:78:8c:5c:71:37:ad: df:64:26:a5:41:f7:fe:56:14:04:aa:b0:a0:74:95: 40:f8:ba:c9:0f:54:5b:b6:e6:5c:28:dd:1f:dd:a5: 16:f3:06:cd:97:04:9b:ca:44:6d:dc:a6:c3:10:63: a1:ec:43:76:a4:21:f2:4d:be:40:83:37:52:eb:e1: 71:2b:51:21:ff:8e:6e:b9:25:8f:81:ed:e1:76:3b: b5:a0:55:98:8f:d1:8c:fa:ce:db:df:82:3d:a5:0a: 83:22:89:23:16:fd:70:23:a9:7a:be:0c:4a:ee:dc: 82:d5:ab:bc:20:c9:67:ee:6b:1a:27:3e:46:f3:da: cd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:33:D5:44:3B:FA:BB:2B:16:1C:5D:9E:56:25:FC:B2:DD:A7:D9:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.crl X509v3 Authority Key Identifier: keyid:31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer sbgp-ipAddrBlock: critical IPv4: 209.127.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e5:0b:ab:49:c7:7f:25:58:17:e0:37:54:e8:72:66:4b:58: d5:66:aa:bc:e9:32:72:0b:94:4d:04:08:ba:9d:b7:bd:ed:a7: 9a:e4:a0:7a:43:27:74:2c:03:6f:4d:17:8d:26:de:9e:0c:bb: 57:01:10:41:75:f4:80:cf:f6:a6:e3:46:90:aa:d0:93:25:40: d0:d0:62:ad:67:4a:5c:41:13:eb:56:b5:1e:6e:d6:30:f2:74: ae:47:d6:7b:c8:b7:8d:8f:4e:34:ee:47:64:44:e4:08:59:0c: 5c:28:69:7b:81:e1:f5:84:bc:96:26:c2:40:13:e8:a4:72:1c: 0f:c0:68:c4:be:0b:27:4d:42:7a:71:14:76:99:2d:24:01:79: 5e:0c:44:56:b0:37:21:93:85:0d:4b:c5:2a:bf:30:c5:bc:e5: 5b:b1:a9:72:5a:08:0d:5d:3b:11:f8:dd:0a:2b:db:1e:13:05: 8e:98:e2:a1:a6:49:4d:73:b7:dd:13:e4:1b:3e:7c:9f:b8:29: 51:9b:f1:ba:9d:04:70:63:30:40:57:9e:d4:90:8d:52:b7:0b: d1:17:a4:3b:d1:e0:42:67:2c:ac:8f:1b:5b:97:86:ee:37:52: 58:53:8d:34:c8:a7:37:68:25:67:47:4f:17:7e:13:04:27:98: e9:b3:85:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7tvibjtr8Gf8kAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY4ZWMyNWQtOTMyYS00ZGQ0LThmODMtZjFkYTA0OTA2 OGVjMB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk OTFlOWI3NTYtZjNjYy00YWY2LTk4NjUtNTVjOThlNGRjYTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBdIkUO1ToH0Sv10v/yLoOgG2jy7yw8XtV/R nnRtvXE/x71jIpjOhXHgM5+ilODLFAK/6HvJ9s/92HMhWxSELxw2yHnA75Mhumpg rF16M0Zeh4rBrdLESnIiwGLV4OB6TuufABhqhPmpL3qPdNeih6myUAwdRs+9zIH7 deGXyF54jFxxN63fZCalQff+VhQEqrCgdJVA+LrJD1RbtuZcKN0f3aUW8wbNlwSb ykRt3KbDEGOh7EN2pCHyTb5AgzdS6+FxK1Eh/45uuSWPge3hdju1oFWYj9GM+s7b 34I9pQqDIokjFv1wI6l6vgxK7tyC1au8IMln7msaJz5G89rNqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAz1UQ7+rsrFhxdnlYl/LLdp9lTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80Zjhl YzI1ZC05MzJhLTRkZDQtOGY4My1mMWRhMDQ5MDY4ZWMvOWMxYWNkNmEtMDdjMC0z NzZlLTg3ZTItYjFhMjk5MmUyYzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGY4ZWMyNWQtOTMyYS00ZGQ0LThm ODMtZjFkYTA0OTA2OGVjLzRmOGVjMjVkLTkzMmEtNGRkNC04ZjgzLWYxZGEwNDkw NjhlYy5jcmwwHwYDVR0jBBgwFoAUMcXgnadCF+8nR36OpSmNPzPy5U0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZjhlYzI1ZC05MzJhLTRkZDQtOGY4My1mMWRh MDQ5MDY4ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X/pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITlC6tJx38lWBfgN1TocmZLWNVmqrzpMnILlE0ECLqdt73tp5rkoHpD J3QsA29NF40m3p4Mu1cBEEF19IDP9qbjRpCq0JMlQNDQYq1nSlxBE+tWtR5u1jDy dK5H1nvIt42PTjTuR2RE5AhZDFwoaXuB4fWEvJYmwkAT6KRyHA/AaMS+CydNQnpx FHaZLSQBeV4MRFawNyGThQ1LxSq/MMW85VuxqXJaCA1dOxH43Qor2x4TBY6Y4qGm SU1zt90T5Bs+fJ+4KVGb8bqdBHBjMEBXntSQjVK3C9EXpDvR4EJnLKyPG1uXhu43 UlhTjTTIpzdoJWdHTxd+EwQnmOmzhYk= -----END CERTIFICATE-----Generated at Sat Apr 5 11:19:38 2025 by rpki-client