$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fad779f-5c84-39ec-8c6b-279839a11bac.roa File: 4fad779f-5c84-39ec-8c6b-279839a11bac.roa (raw, json) Hash identifier: Qb8r3Y+3kwucNOFZm3KYlxFzR1y8+MP3rU4zR0T05fg= Subject key identifier: 64:36:E8:CC:BC:E8:7E:73:55:5C:18:16:08:04:39:9F:D4:F7:53:9F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858493C0934ACDF14642E99FEF800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fad779f-5c84-39ec-8c6b-279839a11bac.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 7342 IP address blocks: 209.131.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:34:ac:df:14:64:2e:99:fe:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=009d3a96-7233-4b2d-95a7-c8974a7a7fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1b:09:27:63:ad:42:84:8f:a1:b2:1b:43:88: c8:05:ec:d5:ab:47:fe:cc:bc:56:e1:90:1e:7c:e6: ad:a3:68:0e:f2:8e:0b:f7:56:b9:c2:0a:2f:26:c0: f5:36:90:ea:e5:96:3e:cd:b7:90:45:60:4c:50:c0: 77:48:b5:42:ac:2a:a0:60:64:c6:e0:d9:d8:a2:55: 03:34:33:52:82:2d:50:1c:61:29:93:2c:ff:55:a3: cb:a4:bd:d0:41:97:24:78:d4:15:0d:c3:eb:55:0a: 36:26:7d:b2:01:6b:25:cd:9c:22:24:19:29:34:ca: 18:21:a7:b9:59:ac:a7:a5:6c:09:78:cf:81:94:de: ec:31:b2:18:e7:44:2a:df:98:66:71:63:03:37:91: 43:70:ad:fb:83:82:ed:ce:c3:79:76:8c:05:b9:b6: fe:3e:4c:9a:e0:9e:64:77:df:b6:65:42:fc:56:62: 91:1d:78:54:13:20:3b:d1:55:ee:41:01:9a:5f:f6: 8a:07:a1:98:f7:02:77:15:54:0d:a3:14:fa:99:8d: 76:39:d8:17:25:df:ac:56:ed:02:5d:2b:33:2c:42: 1d:66:ac:8b:3a:f1:d8:87:ce:2e:12:ac:12:e0:6d: c3:ec:8b:2d:07:50:87:6f:42:ce:a4:84:79:1f:e3: 33:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:36:E8:CC:BC:E8:7E:73:55:5C:18:16:08:04:39:9F:D4:F7:53:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fad779f-5c84-39ec-8c6b-279839a11bac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:11:68:e4:5a:57:46:7a:fa:38:68:ba:00:5b:54:5a:f3:cb: bd:78:b3:a1:5e:47:c2:b4:ee:8b:16:b2:a0:be:94:32:be:ed: 00:0c:23:ac:6c:6c:0c:a4:92:6e:19:90:05:b3:70:32:a2:43: 65:c1:82:1b:cd:c1:0c:77:6d:b5:24:01:2d:6d:1c:28:5a:d5: 1c:b2:e7:0e:7c:b0:9e:46:85:fc:eb:18:f0:15:22:3c:df:f3: 68:c6:f6:b5:14:60:94:04:20:a2:88:b5:5f:94:ba:d0:e3:00: 96:12:e9:3a:f7:2e:f1:7a:2b:b2:90:a2:9d:d4:87:63:ac:74: 89:62:78:30:75:95:d2:6e:a2:9b:12:37:8f:68:df:dd:39:65: cf:1d:e1:84:b9:17:2c:7d:d2:9f:85:a8:18:b8:61:82:0b:43: 24:d9:4b:f7:a2:70:89:09:19:21:96:eb:15:8d:4f:35:a2:b8: c4:5a:3f:bd:ee:33:91:bb:98:23:c2:dc:36:e6:ee:6e:35:6a: b1:34:bf:77:a4:e2:b7:ca:a7:27:60:4d:c3:56:2d:54:a9:d2: 31:b8:7f:99:6a:71:5c:7c:52:9b:78:46:f1:67:66:b6:61:36: 5a:ce:15:3c:7a:a0:62:dc:53:ae:63:72:69:9e:01:26:d5:d1: 8f:92:09:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CTSs3xRkLpn++AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk MDA5ZDNhOTYtNzIzMy00YjJkLTk1YTctYzg5NzRhN2E3ZmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBsJJ2OtQoSPobIbQ4jIBezVq0f+zLxW4ZAe fOato2gO8o4L91a5wgovJsD1NpDq5ZY+zbeQRWBMUMB3SLVCrCqgYGTG4NnYolUD NDNSgi1QHGEpkyz/VaPLpL3QQZckeNQVDcPrVQo2Jn2yAWslzZwiJBkpNMoYIae5 WaynpWwJeM+BlN7sMbIY50Qq35hmcWMDN5FDcK37g4LtzsN5dowFubb+Pkya4J5k d9+2ZUL8VmKRHXhUEyA70VXuQQGaX/aKB6GY9wJ3FVQNoxT6mY12OdgXJd+sVu0C XSszLEIdZqyLOvHYh84uEqwS4G3D7IstB1CHb0LOpIR5H+MzfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQ26My86H5zVVwYFggEOZ/U91OfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGZhZDc3OWYtNWM4NC0z OWVjLThjNmItMjc5ODM5YTExYmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwRaORaV0Z6+jhougBbVFrzy714s6FeR8K07osWsqC+lDK+7QAMI6xs bAykkm4ZkAWzcDKiQ2XBghvNwQx3bbUkAS1tHCha1Ryy5w58sJ5GhfzrGPAVIjzf 82jG9rUUYJQEIKKItV+UutDjAJYS6Tr3LvF6K7KQop3Uh2OsdIlieDB1ldJuopsS N49o3905Zc8d4YS5Fyx90p+FqBi4YYILQyTZS/eicIkJGSGW6xWNTzWiuMRaP73u M5G7mCPC3Dbm7m41arE0v3ek4rfKpydgTcNWLVSp0jG4f5lqcVx8Upt4RvFnZrZh NlrOFTx6oGLcU65jcmmeASbV0Y+SCRg= -----END CERTIFICATE-----Generated at Wed Apr 9 01:16:50 2025 by rpki-client