$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/35e13aed-2cf4-360c-a349-f1543d28e72a.roa File: 35e13aed-2cf4-360c-a349-f1543d28e72a.roa (raw, json) Hash identifier: O5HM3asQlliSP1Xwh3Kz7gycoOCmy3U3FJuhcb/Easo= Subject key identifier: F0:F0:1F:21:F9:93:C9:81:CE:C2:F4:C5:C3:9B:76:0D:F4:FA:A8:CE Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285848A1360771A6C9279216E53A80 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/35e13aed-2cf4-360c-a349-f1543d28e72a.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 134963 IP address blocks: 209.9.216.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:07:71:a6:c9:27:92:16:e5:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=dcaecaf4-1609-4db4-ae4b-d2685c5b475a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2f:82:85:82:c1:49:cc:44:e5:79:69:30:6d: ac:33:6e:13:92:78:08:a3:2c:57:59:88:6c:2c:f5: f2:a5:22:c8:77:08:a8:bf:8b:04:44:8c:bf:c8:b5: 90:3a:68:2c:d1:93:27:9c:3b:b4:bf:22:d9:1a:d7: 1b:b8:3c:22:4e:38:70:d4:98:fd:47:cf:4c:53:87: ad:22:f5:0c:a4:e2:28:27:38:59:a9:5e:32:e6:85: c9:3c:a9:d9:f2:8d:f2:cf:1e:0f:8e:a3:d2:86:7e: 9b:ee:ed:f4:bc:e0:18:b4:12:5c:ae:c3:be:7e:17: f5:a6:a6:8b:7a:c2:07:0b:73:4a:a6:f8:a3:ee:00: e0:3d:00:f0:39:ab:ae:16:76:3b:47:30:6e:97:41: ee:92:2b:78:37:f1:92:c9:4b:1c:74:1d:45:ac:20: b3:d3:a3:f0:e6:2c:47:09:c1:9a:32:9d:d5:68:9a: 22:c7:a2:e2:b6:85:5f:70:0f:70:82:79:5c:2d:48: ef:a8:53:19:4c:a5:b4:6f:45:58:67:c8:7e:26:eb: d2:48:3c:9e:c4:01:6a:2f:c6:bc:7d:78:d6:32:80: 44:91:99:cf:2e:1f:09:20:a1:b8:ba:10:94:ce:d8: 41:3c:e6:53:4d:8b:6c:9e:43:52:69:62:63:2d:44: ee:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F0:1F:21:F9:93:C9:81:CE:C2:F4:C5:C3:9B:76:0D:F4:FA:A8:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/35e13aed-2cf4-360c-a349-f1543d28e72a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.9.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:f6:b0:0c:03:c6:de:95:b7:83:7e:32:b2:4b:02:78:0d:c5: 26:e4:4e:ee:67:af:f5:b4:48:ae:e0:53:bf:64:35:03:1c:e0: 84:08:dd:b4:14:2f:06:37:57:b3:5b:19:85:0c:12:04:22:19: 07:eb:94:c8:eb:f0:a7:fe:96:0a:08:3f:de:12:d8:a2:6c:16: d7:87:05:62:a2:5a:e5:71:cd:dc:43:e0:6b:e9:1f:13:c3:be: 13:2f:fa:76:c3:75:59:c4:fb:91:f0:1e:03:8b:71:0c:29:ce: 0e:79:18:3a:eb:c4:e5:91:d0:14:df:66:bb:fd:ec:0a:7c:7b: cc:26:ec:87:d7:a8:f8:29:e4:c1:2d:91:84:00:69:df:24:76: 12:3d:19:57:c9:96:fa:6e:58:46:98:36:84:6e:d6:75:92:55: af:e7:58:30:b3:88:d9:ec:9c:0f:4e:65:ae:9d:ff:b2:bb:54: eb:37:68:f6:7f:79:f8:e3:4d:48:5b:7b:27:5d:2e:61:a9:2c: 92:9e:23:9c:c9:77:4f:fc:45:be:6f:13:fb:1c:4a:5f:e6:65: 94:fd:16:e1:86:06:8e:f7:60:7a:13:28:a9:63:0d:90:e7:66: 49:96:e5:78:f9:71:bd:4f:b2:3a:e1:7d:f6:cd:2f:f2:e4:4e: 08:7a:13:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNgdxpsknkhblOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk ZGNhZWNhZjQtMTYwOS00ZGI0LWFlNGItZDI2ODVjNWI0NzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS+ChYLBScxE5XlpMG2sM24TkngIoyxXWYhs LPXypSLIdwiov4sERIy/yLWQOmgs0ZMnnDu0vyLZGtcbuDwiTjhw1Jj9R89MU4et IvUMpOIoJzhZqV4y5oXJPKnZ8o3yzx4PjqPShn6b7u30vOAYtBJcrsO+fhf1pqaL esIHC3NKpvij7gDgPQDwOauuFnY7RzBul0Hukit4N/GSyUscdB1FrCCz06Pw5ixH CcGaMp3VaJoix6LitoVfcA9wgnlcLUjvqFMZTKW0b0VYZ8h+JuvSSDyexAFqL8a8 fXjWMoBEkZnPLh8JIKG4uhCUzthBPOZTTYtsnkNSaWJjLUTukwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDwHyH5k8mBzsL0xcObdg30+qjOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvMzVlMTNhZWQtMmNmNC0z NjBjLWEzNDktZjE1NDNkMjhlNzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0QnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIT2sAwDxt6Vt4N+MrJLAngNxSbkTu5nr/W0SK7gU79kNQMc4IQI3bQU LwY3V7NbGYUMEgQiGQfrlMjr8Kf+lgoIP94S2KJsFteHBWKiWuVxzdxD4GvpHxPD vhMv+nbDdVnE+5HwHgOLcQwpzg55GDrrxOWR0BTfZrv97Ap8e8wm7IfXqPgp5MEt kYQAad8kdhI9GVfJlvpuWEaYNoRu1nWSVa/nWDCziNnsnA9OZa6d/7K7VOs3aPZ/ efjjTUhbeyddLmGpLJKeI5zJd0/8Rb5vE/scSl/mZZT9FuGGBo73YHoTKKljDZDn ZkmW5Xj5cb1PsjrhffbNL/LkTgh6E3g= -----END CERTIFICATE-----Generated at Sat Apr 5 12:08:56 2025 by rpki-client