$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/541632ed-4124-362f-8edd-c6a63bea2883.roa File: 541632ed-4124-362f-8edd-c6a63bea2883.roa (raw, json) Hash identifier: lU7PPfByVMegFjO1q4Liou5eSC6EYIgLWjb6fAAyHKk= Subject key identifier: 2A:9B:09:E0:C1:E8:AE:3E:41:71:6B:34:45:85:BB:5E:2C:91:E7:EF Certificate issuer: /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Certificate serial: 010D0C9F4328584965E970611379157D8A881280 Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/541632ed-4124-362f-8edd-c6a63bea2883.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 46841 IP address blocks: 209.222.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:70:61:13:79:15:7d:8a:88:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=2c017a63-17f0-4c12-bdc5-b8cb420f2e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:01:a1:4d:68:de:6a:96:b5:0a:8e:07:d9:22: c2:d4:f7:3b:6e:f2:34:ae:00:53:65:02:8d:34:d4: bd:0f:17:36:09:64:f1:07:f6:42:97:e2:11:0f:a5: ca:6b:25:3b:13:7d:5f:04:b7:f9:3e:6a:da:ce:9d: cd:50:a9:1b:34:d7:8e:10:a0:7d:10:d9:71:7e:bb: b2:7e:58:5d:c6:dd:88:46:ad:72:4e:38:6a:67:ae: 41:eb:72:f3:a3:ee:c6:c1:51:41:c2:59:fa:7d:4a: c5:54:15:5a:9f:64:20:da:53:80:74:19:01:02:4c: b2:df:99:ea:4a:ea:f8:a3:8d:a3:ab:64:8d:60:e8: f9:24:23:be:93:c0:e8:cd:93:1d:03:9f:91:da:89: 73:22:3a:95:8a:15:6f:8b:d7:df:9b:d1:95:46:e2: 1f:c0:00:32:b8:5f:47:bd:db:f5:bc:15:b6:f4:2f: cc:93:57:de:38:20:78:8f:f2:90:61:64:4c:93:b4: 7b:b2:e8:c7:7b:fd:35:ee:67:0e:ef:8f:6f:06:9f: 6e:c8:bb:69:a9:30:88:da:ea:37:68:98:78:fb:cd: db:4b:b1:7f:0a:f2:5f:00:ce:11:94:d4:32:c3:63: 14:94:a0:07:90:db:30:c6:05:bf:33:bf:30:bb:8d: 3a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9B:09:E0:C1:E8:AE:3E:41:71:6B:34:45:85:BB:5E:2C:91:E7:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/541632ed-4124-362f-8edd-c6a63bea2883.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl X509v3 Authority Key Identifier: keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer sbgp-ipAddrBlock: critical IPv4: 209.222.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:6e:50:31:e7:5b:2c:c6:68:d3:07:ac:54:66:0c:a1:17:51: 6e:50:47:51:52:b1:d8:9f:4a:70:72:8f:53:45:6e:2d:9b:41: 2b:fa:07:4a:d1:27:6a:68:54:cb:90:e7:67:5f:da:3a:f1:0b: 37:54:cc:8c:30:be:93:47:82:92:16:27:2b:ab:ad:2a:9d:d1: 21:16:f8:9c:4c:46:65:f3:66:53:5f:e9:a2:30:60:61:97:5b: 07:17:52:d6:86:db:c8:da:ff:da:18:25:b9:92:d4:71:69:0e: cc:82:64:9a:09:82:4f:a5:91:72:74:e7:c1:53:f8:7d:ef:7e: 16:9b:d5:50:48:37:24:e5:e9:4f:03:a8:6d:3b:5c:22:a0:9b: cd:ed:03:69:b4:9b:2a:b2:b7:95:91:55:b9:bd:8c:64:e1:94: 29:d9:64:d2:49:4c:c3:12:bf:22:b4:1d:59:b1:b7:76:fe:44: 63:ae:24:32:45:d4:77:14:b7:ec:95:aa:a8:f6:a9:54:a2:09: 93:64:1c:39:1e:d9:85:e7:1c:b5:96:ea:75:ce:79:20:25:6a: d1:13:78:11:ca:2c:4f:e4:09:c9:8a:f5:15:67:0f:a2:d4:5c: 01:14:05:be:38:df:9f:4e:a7:10:cf:2e:ad:b2:0e:fb:b8:c9: 6a:26:6b:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEll6XBhE3kVfYqIEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFhYzgzYjUtNGNmZC00YjM4LWIxYmItNDUwMDBlZWJh NmFlMB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk MmMwMTdhNjMtMTdmMC00YzEyLWJkYzUtYjhjYjQyMGYyZTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAGhTWjeapa1Co4H2SLC1Pc7bvI0rgBTZQKN NNS9Dxc2CWTxB/ZCl+IRD6XKayU7E31fBLf5Pmrazp3NUKkbNNeOEKB9ENlxfruy flhdxt2IRq1yTjhqZ65B63Lzo+7GwVFBwln6fUrFVBVan2Qg2lOAdBkBAkyy35nq Sur4o42jq2SNYOj5JCO+k8DozZMdA5+R2olzIjqVihVvi9ffm9GVRuIfwAAyuF9H vdv1vBW29C/Mk1feOCB4j/KQYWRMk7R7sujHe/017mcO749vBp9uyLtpqTCI2uo3 aJh4+83bS7F/CvJfAM4RlNQyw2MUlKAHkNswxgW/M78wu406ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqbCeDB6K4+QXFrNEWFu14skefvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFj ODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAwMGVlYmE2YWUvNTQxNjMyZWQtNDEyNC0z NjJmLThlZGQtYzZhNjNiZWEyODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjFhYzgzYjUtNGNmZC00YjM4LWIx YmItNDUwMDBlZWJhNmFlL2YxYWM4M2I1LTRjZmQtNGIzOC1iMWJiLTQ1MDAwZWVi YTZhZS5jcmwwHwYDVR0jBBgwFoAUCrA0V1FPrMSLEXsWcz7MjvXGb0YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFjODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAw MGVlYmE2YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0d7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxuUDHnWyzGaNMHrFRmDKEXUW5QR1FSsdifSnByj1NFbi2bQSv6B0rR J2poVMuQ52df2jrxCzdUzIwwvpNHgpIWJyurrSqd0SEW+JxMRmXzZlNf6aIwYGGX WwcXUtaG28ja/9oYJbmS1HFpDsyCZJoJgk+lkXJ058FT+H3vfhab1VBINyTl6U8D qG07XCKgm83tA2m0myqyt5WRVbm9jGThlCnZZNJJTMMSvyK0HVmxt3b+RGOuJDJF 1HcUt+yVqqj2qVSiCZNkHDke2YXnHLWW6nXOeSAlatETeBHKLE/kCcmK9RVnD6LU XAEUBb44359OpxDPLq2yDvu4yWomawA= -----END CERTIFICATE-----Generated at Fri Apr 11 23:30:53 2025 by rpki-client