$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/d9010bb7-b127-300d-8f26-9f8325848a6d.roa File: d9010bb7-b127-300d-8f26-9f8325848a6d.roa (raw, json) Hash identifier: vetZBucyK9RalEKAXhFrUlHfhDR5wzUISZRNTIrsNvg= Subject key identifier: 66:23:46:0E:EB:6D:06:2A:D8:9E:D1:B9:CF:E6:C9:18:89:8F:F7:62 Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F43285848D21143BD1732F13A62849640 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/d9010bb7-b127-300d-8f26-9f8325848a6d.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 16509 IP address blocks: 208.71.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:43:bd:17:32:f1:3a:62:84:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=c4fe8bf0-33d8-48a0-ae14-c310c8b2364f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4a:ac:13:55:b0:49:2b:ca:ab:06:2f:bd:99: 36:1d:14:a4:7e:8a:81:ff:0e:9d:cc:9a:db:2c:75: 9e:dd:14:2d:be:23:81:70:ca:21:24:af:b5:42:87: 20:56:4a:03:a4:92:a9:8c:93:1c:01:f3:9f:8c:19: 0f:cb:cb:b3:3c:00:f6:84:cd:39:24:bf:97:a4:2f: 0e:09:40:75:5f:4c:c5:09:cd:41:ee:57:50:b1:a1: a1:16:fd:f7:66:42:5a:28:a6:d4:92:f1:fb:78:64: aa:ba:43:65:e9:a8:0c:27:10:0c:4c:a7:e7:16:f1: b5:24:14:34:5a:50:ed:c3:9a:97:a3:54:ea:e4:dd: 74:37:25:37:20:33:ab:c7:f3:e5:55:83:51:15:2a: 4a:ed:30:a7:33:d9:4c:70:4c:a2:b1:69:0c:46:95: 54:2d:4e:8e:5e:fb:22:96:63:f4:c0:17:10:2a:04: e7:a6:cc:37:4e:80:41:b4:ae:88:f3:c6:55:16:3d: e8:cf:26:56:87:45:77:c3:65:82:25:a8:6b:bd:e4: 31:99:3f:7d:3f:31:8b:d0:30:78:d7:a6:c8:5d:7e: 96:66:3f:31:70:ae:57:1e:7f:e7:7c:dc:e8:4a:73: 7b:62:0e:9c:5b:5e:67:23:6b:98:f5:23:68:b2:4d: 1c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:23:46:0E:EB:6D:06:2A:D8:9E:D1:B9:CF:E6:C9:18:89:8F:F7:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/d9010bb7-b127-300d-8f26-9f8325848a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:0c:1a:84:5a:e7:b4:b8:1d:51:ad:7e:70:42:3a:40:51:dc: 7e:1b:6a:7d:78:d1:9f:f8:02:b9:40:de:e0:2e:56:67:e1:a0: f5:34:1c:bb:9c:19:bd:53:89:f5:26:5d:f9:79:09:ea:f5:be: 1f:9a:0b:04:e7:03:08:fb:70:c8:48:dd:75:67:e8:ed:3a:90: fc:d7:76:50:19:6e:4e:32:5d:d8:96:9f:e1:30:d9:d1:62:9c: 2d:aa:2a:24:7a:01:6b:61:f6:2a:f2:cb:4f:95:c7:d2:e7:2a: 35:00:3a:5e:a7:c3:1c:72:bd:2d:f3:21:9a:dc:c8:3d:d8:36: e2:56:86:e2:36:39:82:76:bb:65:48:c8:4b:ab:84:be:38:a3: 0b:b3:a9:01:a5:ad:60:b4:5d:a4:55:67:2c:93:9e:4c:d5:87: 40:4e:4e:fe:6c:72:82:8b:6c:69:11:fb:63:eb:66:90:95:46: cf:65:09:b4:cd:89:ba:d3:9b:37:0d:36:24:b4:3c:f5:49:a0: 9d:86:4c:07:08:6c:94:51:ce:8c:47:9d:11:45:3e:3c:38:0c: fc:42:7c:7d:f1:66:5f:b3:ec:56:a8:86:2c:bd:02:a4:62:be: 9a:be:14:6b:d9:2e:bf:7f:a6:cc:b9:ba:44:45:af:51:81:81: fa:17:54:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEUO9FzLxOmKElkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YzRmZThiZjAtMzNkOC00OGEwLWFlMTQtYzMxMGM4YjIzNjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkqsE1WwSSvKqwYvvZk2HRSkfoqB/w6dzJrb LHWe3RQtviOBcMohJK+1QocgVkoDpJKpjJMcAfOfjBkPy8uzPAD2hM05JL+XpC8O CUB1X0zFCc1B7ldQsaGhFv33ZkJaKKbUkvH7eGSqukNl6agMJxAMTKfnFvG1JBQ0 WlDtw5qXo1Tq5N10NyU3IDOrx/PlVYNRFSpK7TCnM9lMcEyisWkMRpVULU6OXvsi lmP0wBcQKgTnpsw3ToBBtK6I88ZVFj3ozyZWh0V3w2WCJahrveQxmT99PzGL0DB4 16bIXX6WZj8xcK5XHn/nfNzoSnN7Yg6cW15nI2uY9SNosk0cWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYjRg7rbQYq2J7Ruc/myRiJj/diMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvZDkwMTBiYjctYjEyNy0z MDBkLThmMjYtOWY4MzI1ODQ4YTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EfyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsMGoRa57S4HVGtfnBCOkBR3H4ban140Z/4ArlA3uAuVmfhoPU0HLuc Gb1TifUmXfl5Cer1vh+aCwTnAwj7cMhI3XVn6O06kPzXdlAZbk4yXdiWn+Ew2dFi nC2qKiR6AWth9iryy0+Vx9LnKjUAOl6nwxxyvS3zIZrcyD3YNuJWhuI2OYJ2u2VI yEurhL44owuzqQGlrWC0XaRVZyyTnkzVh0BOTv5scoKLbGkR+2PrZpCVRs9lCbTN ibrTmzcNNiS0PPVJoJ2GTAcIbJRRzoxHnRFFPjw4DPxCfH3xZl+z7Faohiy9AqRi vpq+FGvZLr9/psy5ukRFr1GBgfoXVAA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:29 2025 by rpki-client