$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/db2c72f7-3286-32e2-a5b4-b8c822069d0d.roa File: db2c72f7-3286-32e2-a5b4-b8c822069d0d.roa (raw, json) Hash identifier: gOL5io4aMqKgG9gHOLZqLL7bxZGe7gn2DP38FAOuwBA= Subject key identifier: 6A:EF:4E:68:1F:08:8B:52:50:F6:FA:1F:BA:6E:78:8A:47:F5:88:E0 Certificate issuer: /CN=58fcef31-bc61-4217-a648-2d5bb00c93a9 Certificate serial: 010D0C9F43285848E16BE5F76BC2828F261BE780 Authority key identifier: 54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/db2c72f7-3286-32e2-a5b4-b8c822069d0d.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 19281 IP address blocks: 9.9.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:e5:f7:6b:c2:82:8f:26:1b:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58fcef31-bc61-4217-a648-2d5bb00c93a9 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=7d8d7228-00cb-496c-b10c-2edf8fb9a8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3b:55:d3:55:26:58:8b:42:4a:5d:0d:27:2d: c9:35:a7:3b:c5:9f:b7:17:6b:6d:f5:fb:56:ea:79: 1b:21:a3:d2:0a:12:35:cb:a7:5d:bc:97:75:f0:98: 66:4e:f6:1b:70:b3:7c:fd:0b:af:e9:d1:17:aa:8c: 6d:32:88:a0:e4:33:a8:b2:4b:b7:fb:74:e0:9a:97: d6:e2:d2:9c:a4:e6:b0:01:59:af:15:c4:bd:b7:90: a2:3c:d5:59:aa:2c:5e:51:7b:55:b8:aa:9e:0c:53: a4:43:aa:78:e7:58:52:ed:4e:83:6f:b1:35:85:b9: 4b:6e:48:9a:27:b0:d8:22:81:36:6f:75:5e:51:79: 42:67:be:65:db:ed:c6:ba:fc:82:15:b5:7f:b5:d1: cc:2b:77:ff:c6:6c:2e:71:2e:da:b7:2f:09:c7:59: 4b:75:d7:5d:97:e0:67:a5:ce:40:13:aa:2f:38:a0: ee:c1:0c:42:97:09:53:c4:90:e0:c0:54:2e:61:bc: 5f:47:e2:a1:d3:e8:fd:41:6b:22:81:ba:3f:a7:a4: ed:54:76:02:0a:f2:19:0a:a1:a2:2c:10:91:71:3a: c0:36:ee:64:a7:12:58:db:21:c8:82:b5:49:7d:65: 65:fe:3e:56:88:3a:b0:46:74:04:45:8a:e4:89:43: e3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:EF:4E:68:1F:08:8B:52:50:F6:FA:1F:BA:6E:78:8A:47:F5:88:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/db2c72f7-3286-32e2-a5b4-b8c822069d0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl X509v3 Authority Key Identifier: keyid:54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer sbgp-ipAddrBlock: critical IPv4: 9.9.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:cb:61:61:58:d2:77:8d:8b:ad:2d:e6:7d:97:f2:d4:ae:46: 2b:e8:c8:4b:71:58:b7:16:b4:2d:1c:00:f1:a3:af:49:a0:46: 98:64:c3:97:9c:69:84:c7:e5:4b:33:6c:50:63:9c:1f:75:16: 0d:03:30:65:62:77:5e:ca:83:1a:35:67:35:88:d8:24:d8:7e: 73:e9:bb:28:38:5e:7c:73:c2:a6:d4:7a:a6:5d:57:95:3f:be: 20:be:19:a8:c4:c6:ba:d8:99:71:80:91:01:c4:97:1c:c5:ff: 20:f5:29:14:88:97:32:96:2e:5b:41:18:74:9e:04:30:b1:fd: bd:f0:ca:a5:28:2b:78:34:72:f7:71:ed:28:ee:4f:fd:26:d4: 8e:fc:ec:bd:04:58:b3:38:5f:f1:46:2e:dc:81:1f:62:62:2b: e3:2e:72:9e:cf:50:01:84:36:9e:bb:a7:28:e3:ae:e6:13:4a: 77:8b:5e:17:4b:57:14:67:b0:60:4a:65:df:0a:a5:80:5c:1a: fd:5d:f9:ee:2b:94:5f:bf:ba:e0:64:24:ce:32:74:93:da:9a: 41:81:fe:82:19:7e:83:c5:d3:65:30:e2:42:75:4a:d2:04:4c: e5:b9:74:0f:ca:08:15:f7:c9:dc:7e:ab:2d:d5:20:e6:9d:8a: 03:4c:d8:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha+X3a8KCjyYb54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThmY2VmMzEtYmM2MS00MjE3LWE2NDgtMmQ1YmIwMGM5 M2E5MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk N2Q4ZDcyMjgtMDBjYi00OTZjLWIxMGMtMmVkZjhmYjlhOGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jtV01UmWItCSl0NJy3JNac7xZ+3F2tt9ftW 6nkbIaPSChI1y6ddvJd18JhmTvYbcLN8/Quv6dEXqoxtMoig5DOosku3+3TgmpfW 4tKcpOawAVmvFcS9t5CiPNVZqixeUXtVuKqeDFOkQ6p451hS7U6Db7E1hblLbkia J7DYIoE2b3VeUXlCZ75l2+3GuvyCFbV/tdHMK3f/xmwucS7aty8Jx1lLddddl+Bn pc5AE6ovOKDuwQxClwlTxJDgwFQuYbxfR+Kh0+j9QWsigbo/p6TtVHYCCvIZCqGi LBCRcTrANu5kpxJY2yHIgrVJfWVl/j5WiDqwRnQERYrkiUPjYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrvTmgfCItSUPb6H7pueIpH9YjgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OGZj ZWYzMS1iYzYxLTQyMTctYTY0OC0yZDViYjAwYzkzYTkvZGIyYzcyZjctMzI4Ni0z MmUyLWE1YjQtYjhjODIyMDY5ZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNThmY2VmMzEtYmM2MS00MjE3LWE2 NDgtMmQ1YmIwMGM5M2E5LzU4ZmNlZjMxLWJjNjEtNDIxNy1hNjQ4LTJkNWJiMDBj OTNhOS5jcmwwHwYDVR0jBBgwFoAUVLP5RXnTuHPWUn9Y82AjBARQS2YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81OGZjZWYzMS1iYzYxLTQyMTctYTY0OC0yZDVi YjAwYzkzYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACQkJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvLYWFY0neNi60t5n2X8tSuRivoyEtxWLcWtC0cAPGjr0mgRphkw5ec aYTH5UszbFBjnB91Fg0DMGVid17Kgxo1ZzWI2CTYfnPpuyg4XnxzwqbUeqZdV5U/ viC+GajExrrYmXGAkQHElxzF/yD1KRSIlzKWLltBGHSeBDCx/b3wyqUoK3g0cvdx 7SjuT/0m1I787L0EWLM4X/FGLtyBH2JiK+Mucp7PUAGENp67pyjjruYTSneLXhdL VxRnsGBKZd8KpYBcGv1d+e4rlF+/uuBkJM4ydJPamkGB/oIZfoPF02Uw4kJ1StIE TOW5dA/KCBX3ydx+qy3VIOadigNM2KQ= -----END CERTIFICATE-----Generated at Thu Apr 10 05:00:06 2025 by rpki-client