$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/40a0ce35-8c2e-3f43-a4c3-8ec6d4afde39.roa File: 40a0ce35-8c2e-3f43-a4c3-8ec6d4afde39.roa (raw, json) Hash identifier: 9HVKZRwylCVeyrjZp0g+BULl2jJJv12/Ap4MRg8Wfh8= Subject key identifier: CD:C0:E9:73:14:A6:CA:78:5E:94:88:32:C4:22:0F:CC:4D:39:B2:2F Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849088160783749E837FD5DC000 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/40a0ce35-8c2e-3f43-a4c3-8ec6d4afde39.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 22612 IP address blocks: 209.188.7.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:60:78:37:49:e8:37:fd:5d:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=b59d3b99-be1c-4cc5-9bbe-b2e11d95bffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3b:21:e2:a8:f6:23:a3:3a:02:ea:bd:72:cd: df:02:64:8d:64:45:08:df:8d:65:13:4b:f7:97:78: 0b:9e:8c:54:f8:36:94:06:aa:a4:6d:4c:33:53:2d: e7:20:fb:41:11:30:28:fa:26:68:cd:d1:a6:35:4d: 40:b2:3f:75:6c:b6:36:ab:86:24:41:d1:dd:6d:bf: 5e:7a:8e:a9:be:90:65:be:bb:71:2f:7e:e6:7a:f9: af:f8:18:e0:69:c3:9e:65:3d:f4:ea:bd:e6:e7:ab: 9d:13:c9:b3:bc:49:19:65:07:83:7e:bd:e9:5c:0b: d3:51:53:7a:e4:bd:ea:79:4d:c5:72:c5:24:ab:65: 3f:53:8c:3f:c9:82:34:44:ec:2d:20:69:ad:5e:05: 1d:8f:43:0b:9a:ac:f6:a7:75:a3:68:8d:58:68:1d: de:e5:63:b0:87:d7:83:46:05:f3:b8:af:f2:58:aa: 10:48:52:a7:a1:b9:2a:d7:75:0a:fe:c7:03:4e:4a: 73:dc:5a:25:bb:23:3e:c8:a1:b2:3f:4e:0b:53:92: 93:d9:64:54:92:98:19:c6:68:7b:92:d8:13:f7:bd: 42:8b:b7:80:34:fa:e8:d6:58:21:bf:7d:2b:83:2b: 91:08:a2:99:60:74:85:76:4e:5d:d2:24:35:a9:a6: 92:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C0:E9:73:14:A6:CA:78:5E:94:88:32:C4:22:0F:CC:4D:39:B2:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/40a0ce35-8c2e-3f43-a4c3-8ec6d4afde39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 209.188.7.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:5e:33:4d:d0:ef:50:73:23:99:3c:e8:6d:29:0e:89:aa:26: 06:63:40:66:44:42:24:e9:0d:75:03:dc:15:9e:db:dc:3d:09: da:72:ee:a4:29:db:11:aa:40:96:07:d1:bc:2e:bf:bf:47:1f: 03:5d:7d:ec:da:c2:71:3e:dd:94:42:68:29:fc:24:0c:e9:17: 8b:6e:72:d7:7c:f1:25:bb:8d:8d:5d:46:52:35:cb:e7:4b:6f: 6c:09:19:05:d3:e9:02:0e:e1:39:79:64:c8:f2:9b:18:6f:b9: 10:0e:68:76:29:0b:79:41:0a:f3:0c:37:4d:67:01:f4:bf:60: 9c:8d:ed:fd:bf:02:37:ff:73:52:e2:8a:cb:b7:6e:76:e3:95: 9f:2e:e7:3b:d0:1e:18:a1:35:ad:3d:95:49:f9:24:79:d8:71: 22:53:ce:a8:22:b0:62:d7:c5:a7:47:38:89:34:e7:ea:73:e1: 32:ac:eb:18:f8:0d:ac:91:2c:e6:94:31:50:25:d3:b5:6a:35: ce:80:b7:ff:82:2e:3a:aa:b2:7a:aa:cf:89:7e:5f:cf:4a:68: c9:f0:93:52:ec:67:72:60:20:31:cd:61:bb:ba:7e:47:a7:84: 32:0d:b3:65:4e:74:ad:10:7b:e5:f5:bd:9a:57:9f:ef:a3:f7: bf:0d:4f:f3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkIgWB4N0noN/1dwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk YjU5ZDNiOTktYmUxYy00Y2M1LTliYmUtYjJlMTFkOTViZmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDsh4qj2I6M6Auq9cs3fAmSNZEUI341lE0v3 l3gLnoxU+DaUBqqkbUwzUy3nIPtBETAo+iZozdGmNU1Asj91bLY2q4YkQdHdbb9e eo6pvpBlvrtxL37mevmv+BjgacOeZT306r3m56udE8mzvEkZZQeDfr3pXAvTUVN6 5L3qeU3FcsUkq2U/U4w/yYI0ROwtIGmtXgUdj0MLmqz2p3WjaI1YaB3e5WOwh9eD RgXzuK/yWKoQSFKnobkq13UK/scDTkpz3FoluyM+yKGyP04LU5KT2WRUkpgZxmh7 ktgT971Ci7eANPro1lghv30rgyuRCKKZYHSFdk5d0iQ1qaaSGQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM3A6XMUpsp4XpSIMsQiD8xNObIvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNDBhMGNlMzUtOGMyZS0z ZjQzLWE0YzMtOGVjNmQ0YWZkZTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUH0bwHgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAjXjNN0O9QcyOZPOhtKQ6JqiYGY0BmREIk6Q11A9wVntvcPQnacu6k KdsRqkCWB9G8Lr+/Rx8DXX3s2sJxPt2UQmgp/CQM6ReLbnLXfPElu42NXUZSNcvn S29sCRkF0+kCDuE5eWTI8psYb7kQDmh2KQt5QQrzDDdNZwH0v2Ccje39vwI3/3NS 4orLt25245WfLuc70B4YoTWtPZVJ+SR52HEiU86oIrBi18WnRziJNOfqc+EyrOsY +A2skSzmlDFQJdO1ajXOgLf/gi46qrJ6qs+Jfl/PSmjJ8JNS7GdyYCAxzWG7un5H p4QyDbNlTnStEHvl9b2aV5/vo/e/DU/z -----END CERTIFICATE-----Generated at Wed Apr 9 07:54:07 2025 by rpki-client