$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/696a248d-f86d-3cde-a6c8-1c1c2c41b851.roa File: 696a248d-f86d-3cde-a6c8-1c1c2c41b851.roa (raw, json) Hash identifier: wHZMUH9UrwdgtOHga4F7PGHc7LgfFmR3GjUfNPO8+Zw= Subject key identifier: 54:28:B5:E2:96:56:87:4D:74:A9:B1:F0:55:09:4B:55:7A:70:63:3E Certificate issuer: /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Certificate serial: 010D0C9F43285848F65BCCFD248B4E17C12EF5C0 Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/696a248d-f86d-3cde-a6c8-1c1c2c41b851.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 16904 IP address blocks: 209.237.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:cc:fd:24:8b:4e:17:c1:2e:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=aa58dc91-e93b-4092-9825-23e59d409ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d7:3d:92:e3:5d:6f:da:86:56:01:8e:8f:bb: 12:4d:b7:d7:5a:8c:ae:08:48:3a:e6:94:a5:d6:5b: ec:3a:ae:9a:fc:83:0d:b0:f4:94:a2:21:77:2d:67: 7c:ae:50:f4:19:c6:5c:62:bc:b9:84:9f:60:bf:ad: 34:02:0f:a0:82:8f:43:f1:74:23:b6:47:ee:cb:65: 1f:e6:da:36:62:7a:31:a3:f5:97:2c:47:d7:69:9e: 6d:20:82:ad:af:16:db:14:1f:86:df:9d:dd:47:f2: 7b:fe:15:89:a2:4c:5e:9a:2f:d8:63:87:26:36:be: 2a:95:3d:fa:21:db:72:58:9c:c0:a0:5d:9e:92:85: f5:f4:e4:a1:42:eb:6e:db:f5:21:0c:fa:f3:6e:28: 91:6f:1f:49:db:39:d5:3c:93:24:43:b4:62:a2:4a: 4c:3e:7f:e0:d4:48:c4:c0:d7:45:77:b0:8e:7d:2a: cf:5a:ae:0a:a5:b3:ff:08:d4:6b:96:0c:47:f1:ef: d5:1f:45:65:70:35:d9:9d:f1:b5:2d:73:63:9a:f1: 09:41:c7:73:d2:11:87:d2:b4:e8:5d:25:ee:7e:1f: a5:03:2c:fd:4d:56:fc:a6:51:ec:e7:22:e0:36:ca: b3:35:41:8a:5e:dd:26:f4:60:d5:7c:55:8c:55:23: e2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:28:B5:E2:96:56:87:4D:74:A9:B1:F0:55:09:4B:55:7A:70:63:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/696a248d-f86d-3cde-a6c8-1c1c2c41b851.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl X509v3 Authority Key Identifier: keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer sbgp-ipAddrBlock: critical IPv4: 209.237.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:17:f2:43:61:c6:3d:4a:c5:d9:8e:9e:f3:62:17:b8:94:9e: 8e:3f:04:fe:39:c3:5d:8f:ad:2d:91:b4:fb:76:ac:1c:52:ce: af:2b:f4:4f:be:cb:11:d1:7d:ea:55:8c:f3:90:5a:22:26:bb: a0:dc:7b:71:12:46:14:2b:8a:67:85:c3:fa:27:3b:76:4d:ac: 82:63:5e:0b:36:6e:eb:1b:1e:0c:4e:86:41:c5:4d:ee:84:c9: b6:5d:c3:47:b0:57:98:ee:a9:12:9b:f7:fe:1b:b5:b1:34:24: cd:3b:5e:a9:b8:8e:1e:c6:2c:4c:16:bb:b8:95:8a:ee:51:f6: fc:1a:d8:36:af:7e:b9:ba:b1:3c:2f:e6:c1:bb:7a:5d:c4:c2: 0c:3e:33:c5:c8:05:a2:5b:f9:c0:7c:81:33:1f:b4:a0:3c:5b: 55:14:f1:3d:48:82:6e:b7:4c:21:d3:2b:8d:96:e3:97:f1:e1: bf:58:5a:4f:4b:3e:db:7c:0e:7f:1a:19:48:9f:12:08:83:82: c4:6a:bc:9e:a7:1e:2a:ab:22:2a:98:a5:be:84:78:2c:67:99: 5d:e9:24:20:56:6f:42:5f:7c:9e:e2:6f:bd:3c:39:b9:02:33: 16:90:8c:84:e2:5a:e0:11:16:ca:54:fd:c4:58:f8:21:e1:58: 33:b5:ae:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W8z9JItOF8Eu9cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx MzFiMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk YWE1OGRjOTEtZTkzYi00MDkyLTk4MjUtMjNlNTlkNDA5Y2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNc9kuNdb9qGVgGOj7sSTbfXWoyuCEg65pSl 1lvsOq6a/IMNsPSUoiF3LWd8rlD0GcZcYry5hJ9gv600Ag+ggo9D8XQjtkfuy2Uf 5to2Ynoxo/WXLEfXaZ5tIIKtrxbbFB+G353dR/J7/hWJokxemi/YY4cmNr4qlT36 IdtyWJzAoF2ekoX19OShQutu2/UhDPrzbiiRbx9J2znVPJMkQ7RiokpMPn/g1EjE wNdFd7COfSrPWq4KpbP/CNRrlgxH8e/VH0VlcDXZnfG1LXNjmvEJQcdz0hGH0rTo XSXufh+lAyz9TVb8plHs5yLgNsqzNUGKXt0m9GDVfFWMVSPiAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQoteKWVodNdKmx8FUJS1V6cGM+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1 YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvNjk2YTI0OGQtZjg2ZC0z Y2RlLWE2YzgtMWMxYzJjNDFiODUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi ZGFiMDEzMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQX8kNhxj1KxdmOnvNiF7iUno4/BP45w12PrS2RtPt2rBxSzq8r9E++ yxHRfepVjPOQWiImu6Dce3ESRhQrimeFw/onO3ZNrIJjXgs2busbHgxOhkHFTe6E ybZdw0ewV5juqRKb9/4btbE0JM07Xqm4jh7GLEwWu7iViu5R9vwa2Davfrm6sTwv 5sG7el3Ewgw+M8XIBaJb+cB8gTMftKA8W1UU8T1Igm63TCHTK42W45fx4b9YWk9L Ptt8Dn8aGUifEgiDgsRqvJ6nHiqrIiqYpb6EeCxnmV3pJCBWb0JffJ7ib708ObkC MxaQjITiWuARFspU/cRY+CHhWDO1rmI= -----END CERTIFICATE-----Generated at Fri Mar 14 11:06:57 2025 by rpki-client