$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3951ed00-661c-3e90-9e90-d58bff96cdd4.roa File: 3951ed00-661c-3e90-9e90-d58bff96cdd4.roa (raw, json) Hash identifier: mY7zTssFbolVI9oBmGisSOQACY+rXCId5lDiPCeZS+g= Subject key identifier: 18:FB:C7:72:3B:04:33:F3:70:3D:80:96:C4:B2:E6:68:F2:45:96:DD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848EF61506F8177D2447E63DC40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3951ed00-661c-3e90-9e90-d58bff96cdd4.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 7342 IP address blocks: 209.131.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:50:6f:81:77:d2:44:7e:63:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=20904e8d-57e8-45f4-89c9-37be8adfcb95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0b:35:6a:6a:53:7b:4f:3b:52:16:38:f7:27: e2:ba:4d:78:24:a6:3f:24:89:1c:f2:d3:93:04:c1: d0:b5:41:40:db:d6:bc:b8:8f:f1:6f:2e:a4:08:68: 8d:b2:67:f8:7f:58:e6:db:95:58:e0:ad:a4:10:d0: 5a:81:1d:b0:96:eb:08:f4:f1:c5:2b:b9:d7:9a:d4: 46:db:fe:78:ff:d1:95:65:5b:30:03:3c:48:ea:1a: 2a:6c:10:75:9d:6b:31:6f:9d:32:b3:97:04:e3:22: 06:67:b5:63:64:c3:e4:9c:c5:d5:b3:58:e5:da:00: 14:27:38:bf:d1:82:7e:45:20:3f:95:b8:aa:44:23: 76:0b:fb:58:57:89:af:10:be:67:67:ff:e6:ee:74: 24:7a:4c:a4:ed:20:7e:40:9e:e0:b2:f2:60:e4:51: d3:cb:20:35:c9:69:51:3d:f6:85:e2:8c:20:68:e1: d0:da:4b:ff:ec:0a:2e:70:8e:54:29:c1:e1:0e:5a: 86:f7:5f:3d:d2:4c:a9:fa:eb:1f:e5:0d:b7:2e:9f: 21:0c:55:08:58:be:de:7a:64:81:a8:88:09:f3:dc: 14:92:44:b7:c2:1f:63:6e:08:37:4f:bb:bf:cb:4e: be:98:b8:c9:29:c0:17:ae:4d:93:a4:5a:b6:ff:bf: f5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:FB:C7:72:3B:04:33:F3:70:3D:80:96:C4:B2:E6:68:F2:45:96:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3951ed00-661c-3e90-9e90-d58bff96cdd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:56:1e:1f:4f:8e:cd:8f:9a:57:04:db:79:0c:99:51:ab:5e: d3:b2:9d:0c:a4:71:9b:4b:33:16:9b:a1:0f:49:15:99:ef:62: 5a:1b:e2:04:f9:21:6e:a5:e1:85:59:ce:67:bc:bf:be:6b:9c: b6:3c:35:0b:8c:0b:af:fb:90:23:92:e0:d8:2e:d8:c0:c2:16: 1a:85:36:d8:c3:70:22:dc:8d:9c:ae:e7:37:a1:94:cd:a9:2c: 36:88:fe:62:34:57:c1:da:73:a1:4a:c0:a2:3d:84:8b:fc:83: 75:5b:17:c9:f8:5b:22:1c:ae:b9:3f:76:c5:90:33:74:4a:c5: 04:1c:e3:a7:ca:08:09:45:c9:7d:77:38:7c:29:1f:e5:3b:35: 48:51:da:58:fa:80:02:a2:ff:83:6a:1d:09:73:16:e4:cf:16: 4d:95:04:1c:f2:f9:07:5c:32:93:0a:bb:57:44:33:d2:f5:2c: 24:72:0c:91:60:e6:80:a8:14:8f:bc:d8:6c:e2:dc:05:8f:d5: 71:50:b7:fb:7a:b8:c3:27:99:58:95:d0:ef:2d:f3:88:ff:72: eb:d9:79:d5:23:f0:8f:65:b3:24:2a:b5:af:97:ed:61:5c:57: 78:d6:cf:a9:67:05:93:50:8e:b3:48:f1:98:6e:cb:41:0e:7d: 81:9f:9b:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYVBvgXfSRH5j3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk MjA5MDRlOGQtNTdlOC00NWY0LTg5YzktMzdiZThhZGZjYjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAs1ampTe087UhY49yfiuk14JKY/JIkc8tOT BMHQtUFA29a8uI/xby6kCGiNsmf4f1jm25VY4K2kENBagR2wlusI9PHFK7nXmtRG 2/54/9GVZVswAzxI6hoqbBB1nWsxb50ys5cE4yIGZ7VjZMPknMXVs1jl2gAUJzi/ 0YJ+RSA/lbiqRCN2C/tYV4mvEL5nZ//m7nQkekyk7SB+QJ7gsvJg5FHTyyA1yWlR PfaF4owgaOHQ2kv/7AoucI5UKcHhDlqG91890kyp+usf5Q23Lp8hDFUIWL7eemSB qIgJ89wUkkS3wh9jbgg3T7u/y06+mLjJKcAXrk2TpFq2/7/1dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBj7x3I7BDPzcD2AlsSy5mjyRZbdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzk1MWVkMDAtNjYxYy0z ZTkwLTllOTAtZDU4YmZmOTZjZGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVWHh9Pjs2PmlcE23kMmVGrXtOynQykcZtLMxaboQ9JFZnvYlob4gT5 IW6l4YVZzme8v75rnLY8NQuMC6/7kCOS4Ngu2MDCFhqFNtjDcCLcjZyu5zehlM2p LDaI/mI0V8Hac6FKwKI9hIv8g3VbF8n4WyIcrrk/dsWQM3RKxQQc46fKCAlFyX13 OHwpH+U7NUhR2lj6gAKi/4NqHQlzFuTPFk2VBBzy+QdcMpMKu1dEM9L1LCRyDJFg 5oCoFI+82Gzi3AWP1XFQt/t6uMMnmViV0O8t84j/cuvZedUj8I9lsyQqta+X7WFc V3jWz6lnBZNQjrNI8Zhuy0EOfYGfm0o= -----END CERTIFICATE-----Generated at Wed Apr 9 01:13:40 2025 by rpki-client