$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/e84cb9af-b706-3cf4-8dd9-7e233014e201.roa File: e84cb9af-b706-3cf4-8dd9-7e233014e201.roa (raw, json) Hash identifier: vi33QNflCWvfQVrtntwV1qzv0H05e4cZNtpAt6pLGyo= Subject key identifier: 4C:AD:73:F0:F3:D9:3C:B2:47:66:E4:0A:DD:A7:CC:28:2C:0B:C7:F1 Certificate issuer: /CN=c057d9a7-8f3f-4c97-9503-e2a936c27c7b Certificate serial: 010D0C9F432858492CB2208FAE82E3C609392580 Authority key identifier: 5F:FC:6F:16:2F:93:08:ED:CA:F2:1D:62:E6:3C:59:3D:85:58:13:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/e84cb9af-b706-3cf4-8dd9-7e233014e201.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 3653 IP address blocks: 209.71.32.0/22 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:20:8f:ae:82:e3:c6:09:39:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c057d9a7-8f3f-4c97-9503-e2a936c27c7b Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=31a34ba1-91f2-4ba3-bf48-6bf4a0fb6b37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:23:97:1f:e4:65:a2:2f:c4:67:89:ca:fe:cd: a8:37:70:98:96:52:a3:41:db:bd:f3:76:a0:88:43: 16:2f:6b:d0:1a:84:23:86:6b:a7:7e:e8:ae:3a:80: 0f:fd:51:4c:d5:ee:12:6b:94:e4:f5:46:21:21:3b: 88:5d:83:e4:ea:d0:b8:51:5f:9d:7f:f4:c5:23:71: d8:fb:26:b6:ff:94:fd:15:bf:8d:c9:d3:75:00:32: 75:18:cc:d8:46:65:96:ed:10:b6:85:45:04:96:a0: ea:25:73:17:9c:fd:0e:86:48:d1:58:fc:f8:3f:07: 6d:41:26:d4:ab:df:14:09:16:a3:7d:7a:4d:23:00: 66:2a:8b:6a:58:3c:d9:05:b5:65:f4:c9:d0:31:b7: 15:38:53:38:0c:aa:62:fc:c9:b2:d5:20:45:a0:c4: d6:ef:83:2e:4a:04:5a:19:85:64:bd:7c:ab:b3:38: 0e:92:0a:fd:b9:64:01:93:15:08:35:15:14:6f:50: df:2b:e8:8b:f7:49:9a:05:af:2f:b2:17:73:97:ef: 23:d7:4a:8e:e4:ec:3b:19:ee:87:0a:dc:c9:c9:82: 08:c0:58:86:f6:1c:86:a3:6e:4b:66:2d:67:6d:92: 9a:b7:0d:62:7c:63:f6:e1:7e:7c:f2:c6:f9:0a:cf: 7d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:AD:73:F0:F3:D9:3C:B2:47:66:E4:0A:DD:A7:CC:28:2C:0B:C7:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/e84cb9af-b706-3cf4-8dd9-7e233014e201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl X509v3 Authority Key Identifier: keyid:5F:FC:6F:16:2F:93:08:ED:CA:F2:1D:62:E6:3C:59:3D:85:58:13:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer sbgp-ipAddrBlock: critical IPv4: 209.71.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:4e:59:08:fa:4b:c2:d3:e4:c2:c4:8b:25:94:23:e9:ec:c7: 0d:20:94:7d:2c:9e:30:93:41:5b:5e:4b:38:78:c4:de:e1:22: bb:31:26:87:e9:3e:ef:3d:bf:e5:30:51:d0:90:49:2d:87:c7: b3:8a:a1:e9:ac:23:34:4e:d1:95:62:7d:5a:ca:9b:3a:d9:b2: 6e:27:98:f4:d4:f8:e7:bb:3b:80:b9:53:5f:d4:ab:36:cd:8a: 7c:50:1d:43:4a:b7:5c:8f:27:16:e6:46:21:76:a2:50:14:2f: 9c:21:1b:e4:97:01:16:07:c1:6a:ce:76:93:82:24:63:a4:75: 3b:e8:66:c4:19:cb:83:c5:60:01:dd:a8:a3:25:d7:ae:01:ad: 15:5e:2f:c4:07:f8:73:64:d9:9b:2a:ff:41:48:c9:54:a7:26: 6c:15:85:2a:6e:2b:63:5d:f8:57:75:65:c8:f8:d5:59:51:5d: 87:f3:8a:03:5d:82:4b:5d:75:bf:c7:36:38:01:95:02:0f:29: 76:de:64:ff:11:23:55:9e:72:cf:2a:d3:3e:21:eb:ac:1f:71: 9d:a2:00:ac:55:46:86:75:d5:d1:23:b2:bd:6d:85:4b:54:52: 6e:0b:04:b5:c5:c9:c7:4e:99:41:41:fa:f2:b7:12:5e:84:80: b2:c4:26:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssiCProLjxgk5JYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA1N2Q5YTctOGYzZi00Yzk3LTk1MDMtZTJhOTM2YzI3 YzdiMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MzFhMzRiYTEtOTFmMi00YmEzLWJmNDgtNmJmNGEwZmI2YjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCOXH+Rloi/EZ4nK/s2oN3CYllKjQdu983ag iEMWL2vQGoQjhmunfuiuOoAP/VFM1e4Sa5Tk9UYhITuIXYPk6tC4UV+df/TFI3HY +ya2/5T9Fb+NydN1ADJ1GMzYRmWW7RC2hUUElqDqJXMXnP0OhkjRWPz4PwdtQSbU q98UCRajfXpNIwBmKotqWDzZBbVl9MnQMbcVOFM4DKpi/Mmy1SBFoMTW74MuSgRa GYVkvXyrszgOkgr9uWQBkxUINRUUb1DfK+iL90maBa8vshdzl+8j10qO5Ow7Ge6H CtzJyYIIwFiG9hyGo25LZi1nbZKatw1ifGP24X588sb5Cs996wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEytc/Dz2TyyR2bkCt2nzCgsC8fxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDU3 ZDlhNy04ZjNmLTRjOTctOTUwMy1lMmE5MzZjMjdjN2IvZTg0Y2I5YWYtYjcwNi0z Y2Y0LThkZDktN2UyMzMwMTRlMjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzA1N2Q5YTctOGYzZi00Yzk3LTk1 MDMtZTJhOTM2YzI3YzdiL2MwNTdkOWE3LThmM2YtNGM5Ny05NTAzLWUyYTkzNmMy N2M3Yi5jcmwwHwYDVR0jBBgwFoAUX/xvFi+TCO3K8h1i5jxZPYVYE2QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDU3ZDlhNy04ZjNmLTRjOTctOTUwMy1lMmE5 MzZjMjdjN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0UcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVOWQj6S8LT5MLEiyWUI+nsxw0glH0snjCTQVteSzh4xN7hIrsxJofp Pu89v+UwUdCQSS2Hx7OKoemsIzRO0ZVifVrKmzrZsm4nmPTU+Oe7O4C5U1/UqzbN inxQHUNKt1yPJxbmRiF2olAUL5whG+SXARYHwWrOdpOCJGOkdTvoZsQZy4PFYAHd qKMl164BrRVeL8QH+HNk2Zsq/0FIyVSnJmwVhSpuK2Nd+Fd1Zcj41VlRXYfzigNd gktddb/HNjgBlQIPKXbeZP8RI1Wecs8q0z4h66wfcZ2iAKxVRoZ11dEjsr1thUtU Um4LBLXFycdOmUFB+vK3El6EgLLEJk4= -----END CERTIFICATE-----Generated at Fri Apr 11 21:28:01 2025 by rpki-client