$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/04220d33-aa94-3e2f-968e-e384d2bf91b3.roa File: 04220d33-aa94-3e2f-968e-e384d2bf91b3.roa (raw, json) Hash identifier: w0mSRp+GRXtnH9l61+lDwyDG3O7bSuX8s1uPStk97YY= Subject key identifier: A1:37:9A:FA:84:4F:A8:A7:7D:30:61:4F:F3:D3:18:E3:20:20:82:53 Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F432858494CC9417B44CEAB9928525380 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/04220d33-aa94-3e2f-968e-e384d2bf91b3.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 16509 IP address blocks: 208.71.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:41:7b:44:ce:ab:99:28:52:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=06deae18-5e5a-4bb9-b146-ab3d5836a8b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5a:d5:9b:6c:05:90:70:39:51:d8:98:98:27: 5c:d9:fe:37:9d:15:b1:6a:30:86:ac:74:60:44:7e: ed:81:9f:81:89:b4:23:af:b8:16:f4:32:3a:0c:b2: cf:2c:30:8e:09:a2:d2:e1:a7:12:8f:75:65:47:f4: 8e:d8:87:db:0c:7b:69:be:ee:e3:59:61:da:da:8a: 33:c6:48:4e:73:e5:3a:4c:c1:6f:79:0c:6a:bd:5b: f5:43:ac:21:b7:f2:40:25:bf:35:89:5d:93:e6:9c: 6b:ff:40:b5:1a:3e:82:4d:aa:08:30:6f:c5:47:03: 55:94:ba:90:90:2e:5e:43:b3:ea:67:cf:1a:b7:5e: c0:42:4c:9f:0f:c9:90:dc:6c:e0:5b:8b:14:c4:1d: f9:a8:08:67:e3:d6:6e:4c:30:b5:c6:ad:b2:5a:88: a5:d6:9e:ae:75:e8:c2:6b:dd:c8:63:c0:c1:ec:be: b2:49:c6:62:f4:d5:66:5a:1d:18:04:4b:f1:66:49: bd:e6:fd:70:3f:05:b7:04:e8:a4:d7:e5:40:9a:07: 2f:ba:98:9a:d1:60:01:a8:95:92:53:58:a2:e7:d2: 0b:7d:03:40:c6:38:ec:95:d2:a4:bb:8b:b2:c9:9f: d5:c5:e0:c9:9a:ba:ae:39:72:c4:6b:dc:3e:c2:1a: 39:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:37:9A:FA:84:4F:A8:A7:7D:30:61:4F:F3:D3:18:E3:20:20:82:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/04220d33-aa94-3e2f-968e-e384d2bf91b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:6d:fa:de:f7:28:26:2a:08:f8:d3:27:92:0d:45:9a:96:76: d1:1a:6d:d7:fd:c5:fd:f8:ce:4b:78:94:67:3b:13:c5:f3:47: 8c:73:43:12:b7:da:f7:2b:64:d6:83:73:37:22:63:b2:e3:7c: 50:92:6c:89:9d:32:e7:b9:7a:c6:6d:fc:19:e2:2c:59:4c:e0: 2a:54:d1:89:23:2d:9a:b3:6f:5f:52:a3:24:f1:e1:bb:79:a9: 41:c4:0c:56:de:96:43:a9:23:b5:88:e5:45:bf:65:4a:75:d1: 8e:1a:97:26:c7:6c:dd:54:81:3f:9a:af:56:f7:b8:7e:24:3d: ee:70:2a:be:36:7d:e5:aa:6b:93:ee:10:ab:ba:a7:84:a6:96: c0:e8:cc:6f:03:65:d9:7b:37:ae:4a:a4:66:27:2f:23:08:bc: a7:d9:37:de:42:a8:fd:2f:11:a7:4d:df:08:74:da:36:99:23: 0c:c5:46:b0:e3:bb:14:bf:0f:1d:79:98:05:ae:5f:5c:90:23: eb:73:5b:7c:a8:9b:f9:77:d5:fd:36:05:eb:a0:34:f8:4d:b3: 76:77:5f:43:1b:bc:c5:dc:05:db:00:5e:48:44:2c:1c:cf:06: da:4e:0f:9e:ef:7e:95:05:bf:01:e0:a4:a7:f6:8d:d1:a5:8d: 84:cc:d4:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUF7RM6rmShSU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk MDZkZWFlMTgtNWU1YS00YmI5LWIxNDYtYWIzZDU4MzZhOGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFrVm2wFkHA5UdiYmCdc2f43nRWxajCGrHRg RH7tgZ+BibQjr7gW9DI6DLLPLDCOCaLS4acSj3VlR/SO2IfbDHtpvu7jWWHa2ooz xkhOc+U6TMFveQxqvVv1Q6wht/JAJb81iV2T5pxr/0C1Gj6CTaoIMG/FRwNVlLqQ kC5eQ7PqZ88at17AQkyfD8mQ3GzgW4sUxB35qAhn49ZuTDC1xq2yWoil1p6udejC a93IY8DB7L6yScZi9NVmWh0YBEvxZkm95v1wPwW3BOik1+VAmgcvupia0WABqJWS U1ii59ILfQNAxjjsldKku4uyyZ/VxeDJmrquOXLEa9w+who51wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKE3mvqET6infTBhT/PTGOMgIIJTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvMDQyMjBkMzMtYWE5NC0z ZTJmLTk2OGUtZTM4NGQyYmY5MWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ef1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlt+t73KCYqCPjTJ5INRZqWdtEabdf9xf34zkt4lGc7E8XzR4xzQxK3 2vcrZNaDczciY7LjfFCSbImdMue5esZt/BniLFlM4CpU0YkjLZqzb19SoyTx4bt5 qUHEDFbelkOpI7WI5UW/ZUp10Y4alybHbN1UgT+ar1b3uH4kPe5wKr42feWqa5Pu EKu6p4SmlsDozG8DZdl7N65KpGYnLyMIvKfZN95CqP0vEadN3wh02jaZIwzFRrDj uxS/Dx15mAWuX1yQI+tzW3yom/l31f02BeugNPhNs3Z3X0MbvMXcBdsAXkhELBzP BtpOD57vfpUFvwHgpKf2jdGljYTM1P8= -----END CERTIFICATE-----Generated at Sat Apr 5 11:07:21 2025 by rpki-client