$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/04220d33-aa94-3e2f-968e-e384d2bf91b3.roa File: 04220d33-aa94-3e2f-968e-e384d2bf91b3.roa (raw, json) Hash identifier: Gm01eJSNbnx6MfLyQydScC9zKcKo2SSWUShZvHXZeYM= Subject key identifier: 16:DC:31:11:7B:7E:26:C7:76:A6:34:A9:0C:EA:B4:EC:C0:23:D4:9F Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F432858486D904E8743DD73D73C944100 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/04220d33-aa94-3e2f-968e-e384d2bf91b3.roa Signing time: Sat 04 Jan 2025 02:00:39 +0000 ROA not before: Sat 04 Jan 2025 02:00:39 +0000 ROA not after: Fri 04 Apr 2025 01:00:39 +0000 asID: 16509 IP address blocks: 208.71.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6d:90:4e:87:43:dd:73:d7:3c:94:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Jan 4 02:00:39 2025 GMT Not After : Apr 4 01:00:39 2025 GMT Subject: CN=cc10a1c0-aecc-4c44-a200-bc235036954b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e8:2e:24:6e:2d:42:2c:02:25:6b:d8:fb:e7: ad:f2:c0:d6:69:8d:b1:e3:03:73:bd:53:ee:c9:76: e2:fc:d5:bc:15:31:47:c4:70:38:11:9f:bd:80:e3: 68:03:23:4c:f7:24:48:6a:28:fc:fe:ef:77:5f:5a: 51:a1:f7:ad:75:4f:bb:17:7a:9b:38:85:f5:cb:7b: 6d:02:ae:53:76:12:63:70:d1:2b:59:7b:b4:57:36: 48:9e:b2:94:40:1b:21:2e:0e:cb:e0:d5:80:df:6b: 13:68:51:a1:ab:81:0e:ab:2a:66:54:78:ad:c5:f4: ac:22:96:c9:33:d9:fb:ef:d7:64:90:0b:85:dc:65: d5:3e:e8:11:ca:21:a4:ee:21:df:b4:d2:1e:15:36: f2:4c:ae:1d:e4:45:dc:93:df:88:ce:e5:2c:6b:31: 02:5f:54:a2:2a:5c:0e:08:43:4e:9e:e5:ee:a0:35: c5:68:96:e7:0a:ed:ed:74:2d:33:66:61:d4:55:80: d4:a8:ff:60:f7:57:15:8b:17:62:f2:f2:ab:da:84: d4:f0:4f:ba:f1:fe:55:42:1a:9b:58:aa:11:a4:55: c7:91:0b:f9:ce:9a:bc:0b:3a:32:67:fe:2b:0b:c8: e4:ac:28:b6:60:31:14:2d:49:4b:64:1f:1f:3d:89: 26:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:DC:31:11:7B:7E:26:C7:76:A6:34:A9:0C:EA:B4:EC:C0:23:D4:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/04220d33-aa94-3e2f-968e-e384d2bf91b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:c8:00:80:3d:31:f1:6f:e7:25:9e:8e:64:cb:20:df:14:6f: 3e:0b:45:ce:d7:e8:e0:a1:82:df:b5:69:74:db:d5:d2:d4:be: b0:d0:98:97:72:b6:82:ad:f5:d0:07:7a:b6:cb:56:5f:c4:41: fd:72:13:83:be:70:17:88:83:8b:a0:27:83:95:ed:ee:f2:fb: e2:75:a8:8b:e6:9c:74:f9:aa:77:c5:27:b8:86:3f:dc:ff:b6: e8:6f:07:69:f4:5e:fa:a9:b2:a7:1a:5c:78:14:fc:79:2c:57: 17:8b:32:12:66:df:23:8f:93:0f:ad:7e:54:9c:e1:1a:59:4f: e2:ae:d1:8b:a3:91:a1:0d:37:04:ee:99:2e:67:32:8a:bb:55: bb:2e:fe:a6:be:ab:b3:72:bb:18:ce:c2:80:e6:88:f3:15:80: 62:c4:0e:c5:8b:10:8f:6d:10:91:29:b1:e1:6f:8c:3d:c6:0f: ee:14:9c:4a:82:27:b8:db:b9:c1:ef:19:54:3c:85:8e:9a:a0: 9b:fd:86:93:61:2e:9a:b6:83:56:19:fe:04:fe:45:ed:58:9c: da:0d:4c:fd:a8:15:02:ad:0b:22:77:b4:1d:c9:27:f3:90:9f: 28:08:38:66:23:f5:ad:72:51:b0:38:75:b6:aa:b9:52:25:66: 0a:5c:9e:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkE6HQ91z1zyUQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk Y2MxMGExYzAtYWVjYy00YzQ0LWEyMDAtYmMyMzUwMzY5NTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuguJG4tQiwCJWvY++et8sDWaY2x4wNzvVPu yXbi/NW8FTFHxHA4EZ+9gONoAyNM9yRIaij8/u93X1pRofetdU+7F3qbOIX1y3tt Aq5TdhJjcNErWXu0VzZInrKUQBshLg7L4NWA32sTaFGhq4EOqypmVHitxfSsIpbJ M9n779dkkAuF3GXVPugRyiGk7iHftNIeFTbyTK4d5EXck9+IzuUsazECX1SiKlwO CENOnuXuoDXFaJbnCu3tdC0zZmHUVYDUqP9g91cVixdi8vKr2oTU8E+68f5VQhqb WKoRpFXHkQv5zpq8CzoyZ/4rC8jkrCi2YDEULUlLZB8fPYkmoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbcMRF7fibHdqY0qQzqtOzAI9SfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvMDQyMjBkMzMtYWE5NC0z ZTJmLTk2OGUtZTM4NGQyYmY5MWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ef1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrIAIA9MfFv5yWejmTLIN8Ubz4LRc7X6OChgt+1aXTb1dLUvrDQmJdy toKt9dAHerbLVl/EQf1yE4O+cBeIg4ugJ4OV7e7y++J1qIvmnHT5qnfFJ7iGP9z/ tuhvB2n0XvqpsqcaXHgU/HksVxeLMhJm3yOPkw+tflSc4RpZT+Ku0YujkaENNwTu mS5nMoq7Vbsu/qa+q7NyuxjOwoDmiPMVgGLEDsWLEI9tEJEpseFvjD3GD+4UnEqC J7jbucHvGVQ8hY6aoJv9hpNhLpq2g1YZ/gT+Re1YnNoNTP2oFQKtCyJ3tB3JJ/OQ nygIOGYj9a1yUbA4dbaquVIlZgpcnqo= -----END CERTIFICATE-----Generated at Fri Mar 14 09:57:37 2025 by rpki-client