$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0fe2b901-899b-3fba-8300-f5c271ee0919.roa File: 0fe2b901-899b-3fba-8300-f5c271ee0919.roa (raw, json) Hash identifier: A/1Jc0qXMclyl3ojofOo9WgMr0gmPgydJBZn4dxrOSo= Subject key identifier: 42:3A:87:E5:5A:28:99:41:B4:2B:59:D7:F7:F4:09:C3:0C:C1:B2:0C Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490881609D1493A17246FA2800 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0fe2b901-899b-3fba-8300-f5c271ee0919.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 20454 IP address blocks: 209.188.0.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:60:9d:14:93:a1:72:46:fa:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=4c359448-4469-43b2-b63c-94146ce1feae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:dd:cb:ac:42:b2:d0:31:76:32:0c:8b:3e:5f: 2f:be:e3:51:4f:cf:18:04:4a:2f:d6:1d:be:df:55: 62:c5:df:12:e1:36:07:19:02:b0:e7:ee:76:d7:5b: 3c:a7:e6:f9:63:5b:84:50:de:5a:dd:62:15:67:58: 5e:bb:22:54:cc:0e:3d:18:de:db:4e:85:6b:5b:3b: 53:e9:26:cf:a2:63:f0:ee:60:42:42:11:54:04:df: a4:03:f8:84:71:2e:53:7b:9c:9b:02:7f:a3:c9:2b: e6:d7:3c:e3:2b:b5:59:ef:1a:fc:81:c0:8b:16:33: b1:bb:4f:fb:ee:34:69:56:f0:32:5f:b6:9c:56:7c: 5e:a7:39:02:26:de:86:ed:32:6d:a6:61:60:42:08: 7c:32:f5:7c:b5:a9:6b:b0:49:95:29:4a:28:2a:9a: cb:c7:61:e4:46:b0:97:0b:59:06:1d:5b:4e:b4:04: 9c:30:72:cd:df:ba:ea:89:f5:f1:ae:11:58:c0:65: 40:cd:e8:c5:e2:dd:9e:6a:f6:0f:38:14:a9:31:c7: 8e:06:3b:d3:e0:10:91:fa:da:20:26:aa:c9:19:bb: d2:11:77:7e:26:7e:ff:19:f6:7c:83:1c:aa:d8:0b: 62:61:84:cf:74:70:2d:83:a9:b0:f2:ff:bb:37:31: 7b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3A:87:E5:5A:28:99:41:B4:2B:59:D7:F7:F4:09:C3:0C:C1:B2:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0fe2b901-899b-3fba-8300-f5c271ee0919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 209.188.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:af:db:95:ff:ab:06:96:7c:8e:ea:fd:ba:ef:c0:25:6b:92: f4:49:76:19:92:77:28:83:dc:de:7f:83:3a:e7:56:77:b6:4e: 43:37:70:76:fd:72:24:c8:56:18:94:80:77:f9:60:a3:6f:c7: 03:11:d3:18:e1:da:dc:8e:41:74:e7:7c:02:93:3d:e1:84:46: 0a:23:42:07:b1:97:15:4c:7e:10:88:81:5b:bb:9b:41:98:24: 59:af:e6:9a:03:1d:72:8f:84:79:a6:56:d6:72:fa:f8:97:e5: 35:ca:d2:c0:fb:39:04:ca:6b:ac:5b:c5:a1:87:bf:06:43:98: 75:3a:e4:17:11:03:ec:a5:cf:50:ec:62:dd:9a:4c:2e:c0:9c: ab:32:49:58:9b:f2:c7:4d:f6:ef:a0:cc:c7:5c:b3:18:5a:86: 78:0c:42:2a:b0:be:cc:cb:d6:49:12:48:a2:ce:04:ad:a8:ce: 22:b0:2e:3f:38:78:cc:3d:a6:6b:31:42:f3:08:e6:32:3b:16: a3:2e:c5:d3:a1:43:a3:9a:be:5f:45:fe:82:e2:1f:ff:8a:71: 20:5e:ab:57:d7:92:09:54:6b:55:80:9c:89:4b:4e:de:8a:57: 2d:46:92:e1:a2:29:9c:56:43:19:92:93:c3:c9:c8:c2:70:6d: 8b:0e:55:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgWCdFJOhckb6KAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NGMzNTk0NDgtNDQ2OS00M2IyLWI2M2MtOTQxNDZjZTFmZWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN3LrEKy0DF2MgyLPl8vvuNRT88YBEov1h2+ 31Vixd8S4TYHGQKw5+5211s8p+b5Y1uEUN5a3WIVZ1heuyJUzA49GN7bToVrWztT 6SbPomPw7mBCQhFUBN+kA/iEcS5Te5ybAn+jySvm1zzjK7VZ7xr8gcCLFjOxu0/7 7jRpVvAyX7acVnxepzkCJt6G7TJtpmFgQgh8MvV8talrsEmVKUooKprLx2HkRrCX C1kGHVtOtAScMHLN37rqifXxrhFYwGVAzejF4t2eavYPOBSpMceOBjvT4BCR+tog JqrJGbvSEXd+Jn7/GfZ8gxyq2AtiYYTPdHAtg6mw8v+7NzF7hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEI6h+VaKJlBtCtZ1/f0CcMMwbIMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMGZlMmI5MDEtODk5Yi0z ZmJhLTgzMDAtZjVjMjcxZWUwOTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0bwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWv25X/qwaWfI7q/brvwCVrkvRJdhmSdyiD3N5/gzrnVne2TkM3cHb9 ciTIVhiUgHf5YKNvxwMR0xjh2tyOQXTnfAKTPeGERgojQgexlxVMfhCIgVu7m0GY JFmv5poDHXKPhHmmVtZy+viX5TXK0sD7OQTKa6xbxaGHvwZDmHU65BcRA+ylz1Ds Yt2aTC7AnKsySVib8sdN9u+gzMdcsxhahngMQiqwvszL1kkSSKLOBK2oziKwLj84 eMw9pmsxQvMI5jI7FqMuxdOhQ6Oavl9F/oLiH/+KcSBeq1fXkglUa1WAnIlLTt6K Vy1GkuGiKZxWQxmSk8PJyMJwbYsOVV4= -----END CERTIFICATE-----Generated at Sat Apr 5 07:28:59 2025 by rpki-client