$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/1839d6ea-ba2f-3f03-89da-d50dd4ef08e1.roa File: 1839d6ea-ba2f-3f03-89da-d50dd4ef08e1.roa (raw, json) Hash identifier: bE5JR1zaHnorPPcPQxGcUjwYXjYFUQd7w2SbVgk0fKM= Subject key identifier: 16:8C:40:22:45:DD:70:4D:D5:FE:BD:18:D1:92:96:FA:FD:88:82:F4 Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F432858491AA6C516902F63FFE6D82080 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/1839d6ea-ba2f-3f03-89da-d50dd4ef08e1.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 208.71.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:c5:16:90:2f:63:ff:e6:d8:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=45d6f485-ab76-44b6-a3cb-09de08b47abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f3:be:53:14:77:08:1f:0c:16:bd:fc:25:e1: b7:c5:7c:e4:0b:30:2f:68:92:1c:6c:ee:76:40:19: 95:e2:6a:ad:2b:af:1c:9d:3d:f7:f5:30:83:fc:7d: dd:13:92:fb:56:bb:81:09:48:c3:ce:6e:5f:fc:e9: 3f:2d:e7:7a:8c:60:5b:e7:de:ed:64:27:d9:7a:3a: a2:e7:e8:ed:9f:68:3d:cb:e9:4a:47:b7:8e:3e:96: ab:66:c1:3f:0e:28:af:af:ff:bb:d9:5d:8a:a7:ae: 21:20:81:92:eb:9a:43:1f:f3:de:35:25:13:a2:95: 78:b4:f4:e2:52:f6:fc:91:c6:95:b9:d4:3f:80:56: 8a:d1:74:5a:73:cf:c1:47:a4:25:78:c6:d9:db:a6: 47:5c:d4:46:0d:e2:ef:ca:52:b0:c3:b5:71:75:d2: 9b:16:53:09:a1:ac:d4:33:b6:e5:ca:26:8b:83:58: 83:1b:35:aa:dc:1e:23:86:f3:44:93:0f:ce:50:f5: b0:2e:90:1f:e8:8f:64:10:7f:ff:34:ee:22:30:aa: 15:14:dd:07:fb:e7:44:c3:8b:c6:7c:58:53:c9:ac: 86:93:3e:91:62:78:a0:29:3c:91:5d:c1:4d:9e:c7: 71:e1:3f:3e:38:57:9a:39:66:fa:4c:8a:5c:35:ee: 52:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8C:40:22:45:DD:70:4D:D5:FE:BD:18:D1:92:96:FA:FD:88:82:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/1839d6ea-ba2f-3f03-89da-d50dd4ef08e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:60:5a:e7:a2:1c:07:48:1c:8a:78:8d:15:fa:6e:e3:11:dc: 41:49:8d:a7:ad:20:5d:81:b5:2f:e5:87:07:b6:74:b0:48:79: 58:d5:9d:f7:50:46:61:a7:13:b1:6f:86:b8:c9:4b:1d:da:dd: 42:cf:93:f4:25:99:30:dd:9c:49:79:28:9b:ba:bf:31:66:45: f6:09:65:0f:a4:a0:35:ad:4a:80:8d:fa:7e:f0:04:52:65:e9: e2:d5:2f:bd:f4:e9:93:64:92:4d:b1:06:fe:de:cc:cd:66:50: 1a:77:52:d2:e5:c2:57:32:37:ba:93:da:f8:81:a0:a1:b5:a4: 86:26:cd:af:cc:51:25:dd:45:d1:67:94:9c:ce:9d:9e:bf:6d: 30:cb:50:e6:79:de:b3:1b:f0:36:91:25:92:c9:e6:5c:15:46: a1:32:1e:b6:f5:ce:9b:29:3d:93:bf:16:14:37:fe:66:62:b1: a1:ea:5c:2f:c8:b2:86:bd:1b:6a:42:16:31:58:17:f7:be:4d: 59:a9:a4:cd:ae:75:6b:2e:fa:85:c2:58:45:73:0c:e5:56:a2: 05:11:b3:10:aa:dc:97:37:b4:07:22:57:3b:6f:67:e8:d9:3c: c2:86:56:a5:c4:72:40:95:1e:cc:70:52:00:e9:4d:18:a9:30: e3:0b:74:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkapsUWkC9j/+bYIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk NDVkNmY0ODUtYWI3Ni00NGI2LWEzY2ItMDlkZTA4YjQ3YWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofO+UxR3CB8MFr38JeG3xXzkCzAvaJIcbO52 QBmV4mqtK68cnT339TCD/H3dE5L7VruBCUjDzm5f/Ok/Led6jGBb597tZCfZejqi 5+jtn2g9y+lKR7eOPparZsE/Diivr/+72V2Kp64hIIGS65pDH/PeNSUTopV4tPTi Uvb8kcaVudQ/gFaK0XRac8/BR6QleMbZ26ZHXNRGDeLvylKww7VxddKbFlMJoazU M7blyiaLg1iDGzWq3B4jhvNEkw/OUPWwLpAf6I9kEH//NO4iMKoVFN0H++dEw4vG fFhTyayGkz6RYnigKTyRXcFNnsdx4T8+OFeaOWb6TIpcNe5SZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaMQCJF3XBN1f69GNGSlvr9iIL0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvMTgzOWQ2ZWEtYmEyZi0z ZjAzLTg5ZGEtZDUwZGQ0ZWYwOGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ef0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhgWueiHAdIHIp4jRX6buMR3EFJjaetIF2BtS/lhwe2dLBIeVjVnfdQ RmGnE7FvhrjJSx3a3ULPk/QlmTDdnEl5KJu6vzFmRfYJZQ+koDWtSoCN+n7wBFJl 6eLVL7306ZNkkk2xBv7ezM1mUBp3UtLlwlcyN7qT2viBoKG1pIYmza/MUSXdRdFn lJzOnZ6/bTDLUOZ53rMb8DaRJZLJ5lwVRqEyHrb1zpspPZO/FhQ3/mZisaHqXC/I soa9G2pCFjFYF/e+TVmppM2udWsu+oXCWEVzDOVWogURsxCq3Jc3tAciVztvZ+jZ PMKGVqXEckCVHsxwUgDpTRipMOMLdOs= -----END CERTIFICATE-----Generated at Fri Mar 14 11:17:49 2025 by rpki-client