$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a97b9046-55be-3d39-8005-833ad34d16c8.roa File: a97b9046-55be-3d39-8005-833ad34d16c8.roa (raw, json) Hash identifier: HtLQ4uKibV5Ogl9M5auHd1FQiGcRjXNhq8Z3kRV7C2E= Subject key identifier: 27:D4:75:98:98:09:83:7D:11:4E:0A:5F:57:70:B6:C4:84:9E:D5:E4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848E9CBF498E626F3539E464D90 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a97b9046-55be-3d39-8005-833ad34d16c8.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 0 IP address blocks: 209.131.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:f4:98:e6:26:f3:53:9e:46:4d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=f556b54f-4b63-4feb-8819-3d786dabfb78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:46:82:56:11:80:ef:22:8b:5e:e6:3d:5e:90: 20:48:e3:1f:39:ab:fa:05:a4:49:71:94:c2:7a:74: 07:f3:6f:be:4d:6f:78:b8:74:b2:4a:e6:d2:e7:cc: 7c:50:03:b1:c6:7f:51:9e:72:77:9f:86:74:65:d8: b4:85:c3:f6:10:77:d9:6b:60:0e:52:2e:85:df:85: 76:94:92:11:63:3b:2c:38:7c:8f:2f:1e:03:88:c8: 8e:c5:e5:d0:8c:0b:7d:fd:60:e1:8e:e0:72:fa:a8: f1:09:fd:aa:7d:fb:fc:7d:38:d5:f5:b3:74:dd:fd: b6:b3:ed:91:c9:5a:ef:a5:45:7f:ea:a1:55:f6:b0: 2c:af:d5:8c:b2:22:a6:95:4e:c4:70:ad:13:88:1d: 0b:4c:fa:ec:0e:40:c1:f9:62:03:cc:65:79:ad:b5: f7:9e:f2:31:45:cd:bf:c7:45:85:7f:6f:54:aa:9e: 83:af:f4:50:39:25:4c:b8:97:dd:dc:94:47:75:53: 54:6b:bf:67:da:ae:4e:34:e1:b9:6e:18:4d:6a:2e: f6:a0:b7:c5:52:2e:cf:ad:7c:13:6c:d2:8b:05:ea: c2:7d:0b:4a:6c:21:1b:67:f6:89:41:9b:f3:7e:28: b9:ce:7a:70:a6:7c:a1:3c:48:66:3e:4f:8b:c8:86: d2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D4:75:98:98:09:83:7D:11:4E:0A:5F:57:70:B6:C4:84:9E:D5:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a97b9046-55be-3d39-8005-833ad34d16c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:2b:f7:a4:bc:7a:5f:e2:97:0c:56:2b:1f:08:0b:47:db:53: b8:2c:35:56:69:87:56:74:6a:db:df:d5:04:62:1f:61:71:39: a2:a4:6f:77:e9:12:ad:2c:ab:fd:1a:a1:12:35:ec:ce:9b:95: 86:28:f1:26:58:66:01:cf:9f:4d:07:53:62:03:00:b0:fe:26: 95:e1:99:fd:de:56:9f:c6:d6:83:b9:ce:2b:22:68:25:31:63: 79:bd:c0:57:88:19:6b:ee:ad:98:db:8c:81:a6:58:26:d9:c4: 43:df:3d:ef:52:d9:48:2e:b8:b0:73:3d:39:b0:a2:a6:8a:17: 16:1f:7a:6d:32:fd:db:7b:ad:6b:fc:9c:45:d6:08:2c:3d:e4: c5:e5:6d:f5:44:64:39:ab:d2:7f:08:9e:26:3b:57:91:e5:83: 6d:5e:7d:5e:58:e7:63:cb:7c:eb:ab:64:62:33:4a:61:a6:cf: 02:7b:68:23:08:a0:7b:7f:13:99:3f:7b:5d:7e:e0:ad:97:89: c5:42:77:d0:bd:31:a9:03:11:4a:94:db:90:a4:c2:6b:9d:94: ca:c5:8f:1f:35:e4:a8:d5:1a:b6:aa:34:c7:e7:7d:8e:2f:65: 1c:f9:b1:a2:2b:0b:8e:d1:b3:db:2f:fa:82:ad:b5:c9:3c:ae: 63:2f:3e:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy/SY5ibzU55GTZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk ZjU1NmI1NGYtNGI2My00ZmViLTg4MTktM2Q3ODZkYWJmYjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0aCVhGA7yKLXuY9XpAgSOMfOav6BaRJcZTC enQH82++TW94uHSySubS58x8UAOxxn9RnnJ3n4Z0Zdi0hcP2EHfZa2AOUi6F34V2 lJIRYzssOHyPLx4DiMiOxeXQjAt9/WDhjuBy+qjxCf2qffv8fTjV9bN03f22s+2R yVrvpUV/6qFV9rAsr9WMsiKmlU7EcK0TiB0LTPrsDkDB+WIDzGV5rbX3nvIxRc2/ x0WFf29Uqp6Dr/RQOSVMuJfd3JRHdVNUa79n2q5ONOG5bhhNai72oLfFUi7PrXwT bNKLBerCfQtKbCEbZ/aJQZvzfii5znpwpnyhPEhmPk+LyIbS5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfUdZiYCYN9EU4KX1dwtsSEntXkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTk3YjkwNDYtNTViZS0z ZDM5LTgwMDUtODMzYWQzNGQxNmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEr96S8el/ilwxWKx8IC0fbU7gsNVZph1Z0atvf1QRiH2FxOaKkb3fp Eq0sq/0aoRI17M6blYYo8SZYZgHPn00HU2IDALD+JpXhmf3eVp/G1oO5zisiaCUx Y3m9wFeIGWvurZjbjIGmWCbZxEPfPe9S2UguuLBzPTmwoqaKFxYfem0y/dt7rWv8 nEXWCCw95MXlbfVEZDmr0n8IniY7V5Hlg21efV5Y52PLfOurZGIzSmGmzwJ7aCMI oHt/E5k/e11+4K2XicVCd9C9MakDEUqU25CkwmudlMrFjx815KjVGraqNMfnfY4v ZRz5saIrC47Rs9sv+oKttck8rmMvPsg= -----END CERTIFICATE-----Generated at Fri Apr 11 22:46:58 2025 by rpki-client