$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/1b0b012c-d798-3ba9-924a-e7db90989295.roa File: 1b0b012c-d798-3ba9-924a-e7db90989295.roa (raw, json) Hash identifier: l0EqSfBLb9TekEVGfZAxG+w3j68rhLWWOQ3xff2De1g= Subject key identifier: 1B:C7:BA:FA:C1:D0:93:50:54:C6:FD:71:7A:13:D3:5C:9D:7E:38:D9 Certificate issuer: /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Certificate serial: 010D0C9F43285849244E7F064488A5C9EAC4B140 Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/1b0b012c-d798-3ba9-924a-e7db90989295.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 16904 IP address blocks: 209.237.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:7f:06:44:88:a5:c9:ea:c4:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=fa0e43ff-6952-4e1a-9066-87031207eb80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:98:3f:e5:87:42:dd:b8:5f:00:a7:19:57:c1: 4f:4c:10:83:2e:99:d5:88:24:e3:a6:92:17:b1:b8: 0a:fb:62:ef:01:ae:d6:81:50:bd:c7:6b:7e:f2:31: 09:c1:39:9b:96:3a:dd:94:0d:83:c7:51:9e:be:33: cd:da:04:49:50:0b:c3:e6:1a:39:c6:17:dc:e7:0e: f4:99:55:48:2d:45:ec:77:c3:92:31:de:4c:32:21: 8b:15:a6:05:85:82:43:80:1a:24:df:4e:1f:dd:de: b9:03:e2:cd:cc:5d:a8:99:0c:89:a7:ae:e0:be:a4: 83:19:fa:9c:3e:24:c4:51:fc:93:5d:6d:0c:40:e8: e2:56:24:81:4b:f9:be:de:a1:48:0f:54:96:3e:91: a7:75:bd:a5:64:ef:a1:4b:ed:91:d0:f1:f5:26:4d: 63:3a:c0:c1:ff:e6:ca:37:f7:d5:ee:eb:fd:b0:75: 3f:cf:c3:38:a5:84:9b:7a:0d:3c:51:6f:04:5d:eb: f4:a0:3f:ac:bc:30:0f:c3:88:3c:29:59:e7:1b:a6: 78:3b:3a:92:12:6b:cc:a4:8b:13:bf:6a:36:21:e7: 0b:e8:d3:91:e7:d1:d1:f6:a1:1f:94:5b:bd:b4:3c: 0b:ce:d7:df:8e:ad:dd:d3:5c:d4:46:a2:9a:5f:f4: 89:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C7:BA:FA:C1:D0:93:50:54:C6:FD:71:7A:13:D3:5C:9D:7E:38:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/1b0b012c-d798-3ba9-924a-e7db90989295.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl X509v3 Authority Key Identifier: keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer sbgp-ipAddrBlock: critical IPv4: 209.237.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:66:02:89:43:ec:65:2e:a9:60:79:4e:c0:71:67:40:dc:0a: cc:90:3a:75:30:2b:64:ea:e6:a9:a9:90:9b:9d:34:be:6d:44: c0:f1:90:a1:86:54:8f:a6:31:a2:b4:97:4d:38:8c:0a:f4:5e: 94:f8:1b:32:8c:74:df:f6:87:47:86:ed:44:5d:4e:19:fa:67: b3:4b:d6:2a:f7:aa:43:35:5f:51:46:3e:f3:3b:0f:4b:11:bf: f9:9a:8c:58:75:6d:6e:f7:99:05:92:d0:7c:83:0f:b2:31:56: b2:87:18:22:30:a3:d5:c8:50:31:3e:29:91:fe:b7:66:45:12: 48:a6:a8:32:bb:a7:ca:f0:5b:fd:b7:bb:3c:cb:47:ec:c8:a4: 42:92:c5:1c:2e:0b:1a:01:e4:a0:6e:f0:20:d9:a5:fa:1c:1f: da:2f:d8:f9:8a:10:7f:14:10:f4:c2:62:0d:2d:df:85:4d:5e: fe:18:e7:d3:29:4e:b4:6a:fc:02:a7:e9:0c:70:96:7c:ba:e7: 3a:c3:33:f7:9b:9b:54:b2:74:0c:17:4f:b4:a7:17:94:62:0a: 60:82:25:4e:6e:a4:83:4a:14:0b:03:10:7c:f5:ea:a6:2b:ba: 7e:6a:c6:09:1c:7d:59:6b:db:7f:83:be:2c:e7:b7:e8:52:fa: e0:d3:0b:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTn8GRIilyerEsUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx MzFiMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk ZmEwZTQzZmYtNjk1Mi00ZTFhLTkwNjYtODcwMzEyMDdlYjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Zg/5YdC3bhfAKcZV8FPTBCDLpnViCTjppIX sbgK+2LvAa7WgVC9x2t+8jEJwTmbljrdlA2Dx1GevjPN2gRJUAvD5ho5xhfc5w70 mVVILUXsd8OSMd5MMiGLFaYFhYJDgBok304f3d65A+LNzF2omQyJp67gvqSDGfqc PiTEUfyTXW0MQOjiViSBS/m+3qFID1SWPpGndb2lZO+hS+2R0PH1Jk1jOsDB/+bK N/fV7uv9sHU/z8M4pYSbeg08UW8EXev0oD+svDAPw4g8KVnnG6Z4OzqSEmvMpIsT v2o2IecL6NOR59HR9qEflFu9tDwLztffjq3d01zURqKaX/SJWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvHuvrB0JNQVMb9cXoT01ydfjjZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1 YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvMWIwYjAxMmMtZDc5OC0z YmE5LTkyNGEtZTdkYjkwOTg5Mjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi ZGFiMDEzMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJmAolD7GUuqWB5TsBxZ0DcCsyQOnUwK2Tq5qmpkJudNL5tRMDxkKGG VI+mMaK0l004jAr0XpT4GzKMdN/2h0eG7URdThn6Z7NL1ir3qkM1X1FGPvM7D0sR v/majFh1bW73mQWS0HyDD7IxVrKHGCIwo9XIUDE+KZH+t2ZFEkimqDK7p8rwW/23 uzzLR+zIpEKSxRwuCxoB5KBu8CDZpfocH9ov2PmKEH8UEPTCYg0t34VNXv4Y59Mp TrRq/AKn6Qxwlny65zrDM/ebm1SydAwXT7SnF5RiCmCCJU5upINKFAsDEHz16qYr un5qxgkcfVlr23+Dviznt+hS+uDTCwg= -----END CERTIFICATE-----Generated at Sat Apr 12 15:03:29 2025 by rpki-client