$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/929941d8-be63-3be5-89d7-62a997289367.roa File: 929941d8-be63-3be5-89d7-62a997289367.roa (raw, json) Hash identifier: b4MXYc0OuuRVIInxJE7H0Pv/+/4vv/ypSjcPmzUI/5c= Subject key identifier: 51:E6:16:AC:38:65:65:A0:45:33:9B:9C:62:E2:CF:ED:2A:9D:E2:73 Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F43285848D21143CDEC2FF8D24A2F9300 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/929941d8-be63-3be5-89d7-62a997289367.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 14618 IP address blocks: 208.71.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:43:cd:ec:2f:f8:d2:4a:2f:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=852f0cf8-5d6a-439c-b1de-bf7402588006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5b:90:52:74:95:fe:81:78:c3:53:3a:f1:49: 82:d7:3a:5e:4e:2f:ac:75:e4:e7:60:ad:c1:74:ac: 25:a4:1e:1e:b4:82:ee:5d:08:7b:ea:dd:a9:7d:06: 13:a9:2e:52:e5:1c:41:71:46:42:b4:14:d1:7a:04: c2:2c:f7:11:9f:62:a6:ab:c9:92:e7:ee:75:4b:27: 3b:7a:f4:4a:83:65:e9:c0:77:a5:83:20:de:50:ff: 3b:95:57:0a:19:fc:2c:31:fc:10:27:c7:19:38:fb: 3e:dc:91:e9:52:2d:62:25:e2:fa:a7:dc:71:e1:98: 22:96:98:1b:1e:d7:9b:5b:90:e7:77:11:71:23:c8: 4d:21:1b:be:e9:2f:fe:06:88:7e:db:e2:2c:56:c6: 76:98:87:2f:e8:35:53:a9:42:aa:03:5c:fd:3d:3e: 89:33:c2:31:bc:c7:dc:f1:57:ad:a1:05:e6:b4:61: e5:77:a2:89:ec:cd:b0:d7:d3:8c:0e:11:4e:8f:c3: 5c:0d:9e:6d:88:14:eb:4f:c9:29:b8:2a:f6:5c:41: e9:82:ab:67:f0:ed:b1:6f:7d:37:db:7a:35:5b:e6: 39:28:41:08:1d:8f:a9:6d:34:99:c1:08:ee:41:2c: 84:18:db:05:0e:49:eb:18:6c:1e:e3:bb:04:62:64: 15:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E6:16:AC:38:65:65:A0:45:33:9B:9C:62:E2:CF:ED:2A:9D:E2:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/929941d8-be63-3be5-89d7-62a997289367.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:b4:82:67:ef:7f:a2:b4:c0:9b:18:8e:c8:96:9a:88:f9:11: 0d:28:e9:43:b1:fd:84:90:3c:30:d9:d2:44:ad:08:10:63:46: ff:71:91:c0:8e:db:5e:f1:62:4e:00:64:d7:a0:aa:55:84:8b: c7:ac:7c:ba:53:46:65:66:f0:53:fe:9a:67:0d:01:86:90:59: c9:84:e1:d3:84:30:a3:0d:01:cb:7c:47:5e:65:38:0f:74:ac: 5d:4e:ac:eb:95:66:e1:51:c6:ac:77:d6:27:3a:e8:a3:d6:62: de:7c:c7:16:28:72:83:49:12:94:59:42:4b:b3:b9:ab:8e:c5: f5:bc:5a:fe:a8:96:55:fd:b8:ec:ba:58:bb:0b:9b:31:52:d2: 11:a2:b5:5b:8a:05:3e:f2:6d:e2:1c:9e:64:c5:ec:3a:ca:59: 04:48:cc:34:d9:03:75:42:20:0f:83:e6:cc:38:52:fc:86:09: 61:72:ab:ba:ea:49:6d:6c:41:8f:17:3f:17:c8:37:d7:be:bd: 27:af:5c:e6:d9:b3:fa:2f:5c:70:29:b8:43:eb:8f:f5:22:9f: 58:4b:77:b4:5c:5f:d9:4c:8c:aa:4e:9d:80:6f:65:17:0d:3c: f2:50:89:7a:21:6c:d1:4a:ad:bf:17:91:f5:09:28:b3:6f:2d: 65:a6:e1:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEUPN7C/40kovkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ODUyZjBjZjgtNWQ2YS00MzljLWIxZGUtYmY3NDAyNTg4MDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8VuQUnSV/oF4w1M68UmC1zpeTi+sdeTnYK3B dKwlpB4etILuXQh76t2pfQYTqS5S5RxBcUZCtBTRegTCLPcRn2Kmq8mS5+51Syc7 evRKg2XpwHelgyDeUP87lVcKGfwsMfwQJ8cZOPs+3JHpUi1iJeL6p9xx4Zgilpgb HtebW5DndxFxI8hNIRu+6S/+Boh+2+IsVsZ2mIcv6DVTqUKqA1z9PT6JM8IxvMfc 8VetoQXmtGHld6KJ7M2w19OMDhFOj8NcDZ5tiBTrT8kpuCr2XEHpgqtn8O2xb303 23o1W+Y5KEEIHY+pbTSZwQjuQSyEGNsFDknrGGwe47sEYmQVmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHmFqw4ZWWgRTObnGLiz+0qneJzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvOTI5OTQxZDgtYmU2My0z YmU1LTg5ZDctNjJhOTk3Mjg5MzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EfyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEm0gmfvf6K0wJsYjsiWmoj5EQ0o6UOx/YSQPDDZ0kStCBBjRv9xkcCO 217xYk4AZNegqlWEi8esfLpTRmVm8FP+mmcNAYaQWcmE4dOEMKMNAct8R15lOA90 rF1OrOuVZuFRxqx31ic66KPWYt58xxYocoNJEpRZQkuzuauOxfW8Wv6ollX9uOy6 WLsLmzFS0hGitVuKBT7ybeIcnmTF7DrKWQRIzDTZA3VCIA+D5sw4UvyGCWFyq7rq SW1sQY8XPxfIN9e+vSevXObZs/ovXHApuEPrj/Uin1hLd7RcX9lMjKpOnYBvZRcN PPJQiXohbNFKrb8XkfUJKLNvLWWm4cw= -----END CERTIFICATE-----Generated at Fri Apr 4 23:50:19 2025 by rpki-client