$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40ea4ff8-a757-3282-be61-5854c9bdee32.roa File: 40ea4ff8-a757-3282-be61-5854c9bdee32.roa (raw, json) Hash identifier: bd4jcaHqIqEE79m6QyRmJwOxtZrmti7clhHleYPQu2U= Subject key identifier: BC:83:0C:0C:6F:98:70:DE:C7:B7:6C:30:85:CE:0C:CA:9D:25:A0:59 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848F22A7DBEDF7D3F3BA9463680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40ea4ff8-a757-3282-be61-5854c9bdee32.roa Signing time: Thu 20 Feb 2025 13:58:07 +0000 ROA not before: Thu 20 Feb 2025 13:58:07 +0000 ROA not after: Wed 21 May 2025 12:58:07 +0000 asID: 0 IP address blocks: 209.112.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2a:7d:be:df:7d:3f:3b:a9:46:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 20 13:58:07 2025 GMT Not After : May 21 12:58:07 2025 GMT Subject: CN=8b250260-62ee-4291-baca-24b0dc6c458e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:50:2c:ab:5a:8b:c2:2d:51:4a:16:b0:68:64: 60:eb:f7:24:eb:ce:5c:48:f7:1b:13:3c:29:12:87: d7:c3:d1:24:fd:d6:d6:0f:51:08:67:9d:bb:18:89: cf:e4:93:32:a8:47:97:59:55:5f:bc:f9:9d:77:f6: 9c:3b:78:3f:12:6b:94:1c:4d:06:c7:bd:28:cb:7f: 28:84:09:af:ed:e7:f1:87:a6:09:93:86:52:5c:de: 76:ad:e1:19:b5:a0:43:72:93:80:39:98:a5:3d:8e: 64:e1:a5:70:57:9d:86:9f:59:ed:c9:31:56:8f:19: f0:34:8e:40:7c:65:62:40:31:26:f8:82:0e:8e:df: e4:92:82:bf:17:f1:7b:50:8d:3a:db:06:2d:06:d1: 3e:ee:fe:c0:f9:f8:a4:67:1a:47:00:8b:5d:fa:b3: 0c:2f:9d:f1:e7:66:ed:4a:3c:70:c0:d9:7f:aa:81: f0:ec:07:5a:68:01:90:83:31:43:2f:63:f2:47:2f: a0:3f:40:59:47:30:f6:df:8a:ea:d5:57:bd:07:dd: 48:99:1c:49:34:62:66:25:50:cf:07:34:d8:60:f1: d4:cd:f7:13:38:28:79:46:a6:51:cf:b4:17:90:d4: dd:26:91:c8:e4:50:8d:76:fe:e1:79:02:dc:d5:4c: 42:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:83:0C:0C:6F:98:70:DE:C7:B7:6C:30:85:CE:0C:CA:9D:25:A0:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40ea4ff8-a757-3282-be61-5854c9bdee32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:15:35:b2:ca:3d:a1:e5:8c:3b:12:f6:59:63:e1:7d:15:fb: e0:51:13:f5:60:42:58:b3:be:c1:b3:6b:96:df:f4:7c:36:2e: 43:63:10:7f:a2:0d:39:20:c7:ee:dd:26:fa:14:64:1a:ea:be: ef:5e:a0:35:52:e4:cc:e3:b9:5d:87:64:be:d9:8f:f7:5d:0a: ff:d6:81:4e:40:40:1b:1b:cc:07:a5:69:79:f0:8f:02:3a:44: fb:45:73:a4:59:80:10:b6:90:c9:b1:6f:54:7b:a1:e3:3d:2d: e3:a3:2a:da:12:bf:70:a1:21:c0:f0:9a:6d:46:8b:14:c1:da: bc:59:ca:c7:9e:8b:4a:bc:c0:2c:1e:e4:95:34:ae:5b:67:3b: 05:53:dc:33:1a:fe:c9:97:fe:c2:6d:af:ea:0f:e4:4c:4e:25: 39:eb:3f:fb:5a:f9:35:63:29:81:72:55:03:72:d6:c0:d6:91: 61:f4:f1:37:8d:5e:95:91:5d:8f:f3:65:05:2c:21:06:be:ce: 47:a5:c5:4a:5d:6d:9d:57:3b:81:a9:9f:5c:05:03:f1:3c:75: 08:7b:bc:b8:60:3a:c2:e2:97:70:b9:dd:40:58:70:4b:6f:c3: 16:9c:dd:d5:b7:92:5c:50:fc:48:fc:4d:d1:99:be:33:c6:f2: d9:3e:8b:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyKn2+330/O6lGNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIyMDEzNTgwN1oXDTI1MDUyMTEyNTgwN1owLzEtMCsGA1UEAxMk OGIyNTAyNjAtNjJlZS00MjkxLWJhY2EtMjRiMGRjNmM0NThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lAsq1qLwi1RShawaGRg6/ck685cSPcbEzwp EofXw9Ek/dbWD1EIZ527GInP5JMyqEeXWVVfvPmdd/acO3g/EmuUHE0Gx70oy38o hAmv7efxh6YJk4ZSXN52reEZtaBDcpOAOZilPY5k4aVwV52Gn1ntyTFWjxnwNI5A fGViQDEm+IIOjt/kkoK/F/F7UI062wYtBtE+7v7A+fikZxpHAItd+rMML53x52bt SjxwwNl/qoHw7AdaaAGQgzFDL2PyRy+gP0BZRzD234rq1Ve9B91ImRxJNGJmJVDP BzTYYPHUzfcTOCh5RqZRz7QXkNTdJpHI5FCNdv7heQLc1UxC6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyDDAxvmHDex7dsMIXODMqdJaBZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDBlYTRmZjgtYTc1Ny0z MjgyLWJlNjEtNTg1NGM5YmRlZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8VNbLKPaHljDsS9llj4X0V++BRE/VgQlizvsGza5bf9Hw2LkNjEH+i DTkgx+7dJvoUZBrqvu9eoDVS5MzjuV2HZL7Zj/ddCv/WgU5AQBsbzAelaXnwjwI6 RPtFc6RZgBC2kMmxb1R7oeM9LeOjKtoSv3ChIcDwmm1GixTB2rxZyseei0q8wCwe 5JU0rltnOwVT3DMa/smX/sJtr+oP5ExOJTnrP/ta+TVjKYFyVQNy1sDWkWH08TeN XpWRXY/zZQUsIQa+zkelxUpdbZ1XO4Gpn1wFA/E8dQh7vLhgOsLil3C53UBYcEtv wxac3dW3klxQ/Ej8TdGZvjPG8tk+i5c= -----END CERTIFICATE-----Generated at Sat Apr 12 00:04:01 2025 by rpki-client