$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/eb65dedb-cd27-3616-b956-0f11da7cf19e.roa File: eb65dedb-cd27-3616-b956-0f11da7cf19e.roa (raw, json) Hash identifier: mXdB+jFa+GdyykS3frMRXFZKws07ZweoP79J42USqcc= Subject key identifier: E3:D8:55:5C:AA:B1:A2:EC:47:A7:CE:A7:FD:54:25:27:09:54:03:2C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246E2E9E384AE3C11A1AC40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/eb65dedb-cd27-3616-b956-0f11da7cf19e.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397225 IP address blocks: 209.173.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:e2:e9:e3:84:ae:3c:11:a1:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=4e5e57cf-86d5-4381-b58d-0989599fd1ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:81:b0:f9:04:44:9d:95:fe:87:34:91:52:77: ba:cd:3b:c7:44:41:d2:52:2d:54:f8:14:b2:a6:39: 32:1d:79:c1:ec:fc:45:44:ee:63:50:e5:f6:a6:9b: 21:d6:0b:41:df:3a:99:33:92:46:bb:a8:fa:cf:9a: 7c:16:41:93:70:aa:93:a0:87:bc:4f:b9:5f:ea:fa: 45:11:a5:59:71:ff:54:57:4b:4b:7d:66:ca:a4:b6: 71:a0:db:64:cf:c9:48:05:92:88:b5:dd:cc:2a:79: 0a:ba:68:83:3e:85:2f:23:77:64:64:8e:20:7c:91: 9f:52:03:ec:f5:a9:be:64:a1:fa:42:17:26:77:8b: 04:39:9b:30:d2:e2:76:78:ed:f0:1a:77:44:41:a2: e2:66:26:d5:a5:d7:b2:65:c5:d8:08:f7:8d:8f:e8: 4d:f7:1c:76:2f:e3:53:82:27:d5:e1:50:c0:17:00: fb:52:6b:97:a7:4a:7b:29:01:fc:15:8a:e9:31:80: 01:da:ae:66:0c:0d:6f:cd:32:b0:20:2e:61:a0:78: 3f:00:a2:c4:6f:cc:73:a1:49:56:9a:ba:e0:2a:e5: a1:91:79:7c:23:d3:61:87:ca:ea:d4:8c:9a:a6:54: bb:9a:9b:75:fd:97:d9:79:9a:bb:66:09:73:ac:e2: d0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D8:55:5C:AA:B1:A2:EC:47:A7:CE:A7:FD:54:25:27:09:54:03:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/eb65dedb-cd27-3616-b956-0f11da7cf19e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 209.173.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:48:32:e9:6a:b0:27:5e:3e:44:e9:41:85:4f:b2:20:ab:a8: 68:aa:14:23:9d:5b:59:1d:02:d2:59:c3:3e:12:52:1e:23:38: bc:a5:d3:42:58:c5:7c:69:33:9e:05:d5:32:5a:d1:21:d0:ac: ce:ad:45:e8:64:fd:c0:da:5d:1b:e6:7c:48:47:6a:71:99:cc: 61:3e:24:3b:22:b8:52:13:f1:2f:9f:e9:0d:9f:36:9c:0b:79: 7d:b7:a8:c6:df:46:7f:58:ab:be:70:8b:c9:50:b5:80:2f:fa: d4:bd:51:f4:72:8a:9b:68:f8:3c:c3:91:3b:3b:ed:08:f2:fd: 83:cd:c2:6a:75:d5:92:69:a3:76:1a:ee:a8:84:7e:c8:12:23: 53:e2:d0:39:b6:c8:55:e5:e3:c2:09:6b:57:8c:c7:9e:27:36: a3:b2:3a:90:6b:2a:60:0c:26:94:c5:ca:3c:40:6c:48:cf:61: 1a:f2:dc:80:41:ac:b3:60:c4:d3:3b:ad:3e:8a:3c:46:26:45: cd:72:1f:ee:72:89:30:33:13:a7:ae:80:d0:0d:81:8a:2b:b9: d6:58:ae:9e:dc:9d:55:cc:58:55:62:cc:61:06:cc:dc:7b:46: 19:38:2a:1a:d4:d4:a1:a2:01:d4:b3:b5:17:6a:ed:b8:74:86: f5:01:95:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRuLp44SuPBGhrEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NGU1ZTU3Y2YtODZkNS00MzgxLWI1OGQtMDk4OTU5OWZkMWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04Gw+QREnZX+hzSRUne6zTvHREHSUi1U+BSy pjkyHXnB7PxFRO5jUOX2ppsh1gtB3zqZM5JGu6j6z5p8FkGTcKqToIe8T7lf6vpF EaVZcf9UV0tLfWbKpLZxoNtkz8lIBZKItd3MKnkKumiDPoUvI3dkZI4gfJGfUgPs 9am+ZKH6Qhcmd4sEOZsw0uJ2eO3wGndEQaLiZibVpdeyZcXYCPeNj+hN9xx2L+NT gifV4VDAFwD7UmuXp0p7KQH8FYrpMYAB2q5mDA1vzTKwIC5hoHg/AKLEb8xzoUlW mrrgKuWhkXl8I9Nhh8rq1IyaplS7mpt1/ZfZeZq7ZglzrOLQuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPYVVyqsaLsR6fOp/1UJScJVAMsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZWI2NWRlZGItY2QyNy0z NjE2LWI5NTYtMGYxMWRhN2NmMTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a06MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtIMulqsCdePkTpQYVPsiCrqGiqFCOdW1kdAtJZwz4SUh4jOLyl00JY xXxpM54F1TJa0SHQrM6tRehk/cDaXRvmfEhHanGZzGE+JDsiuFIT8S+f6Q2fNpwL eX23qMbfRn9Yq75wi8lQtYAv+tS9UfRyipto+DzDkTs77Qjy/YPNwmp11ZJpo3Ya 7qiEfsgSI1Pi0Dm2yFXl48IJa1eMx54nNqOyOpBrKmAMJpTFyjxAbEjPYRry3IBB rLNgxNM7rT6KPEYmRc1yH+5yiTAzE6eugNANgYorudZYrp7cnVXMWFVizGEGzNx7 Rhk4KhrU1KGiAdSztRdq7bh0hvUBlSo= -----END CERTIFICATE-----Generated at Sun Apr 6 02:04:29 2025 by rpki-client