$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/c914ae45-f96a-379f-b2e6-986e217df7d0.roa File: c914ae45-f96a-379f-b2e6-986e217df7d0.roa (raw, json) Hash identifier: /euXkWv24hVqmuWGWiwotpvN4+Gbqz++oijAeDohCHE= Subject key identifier: 99:21:94:33:D2:3E:2D:73:DE:A6:73:33:C4:11:D4:78:95:49:D4:7F Certificate issuer: /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Certificate serial: 010D0C9F43285848F65BCD147462E4C09CCA9C40 Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/c914ae45-f96a-379f-b2e6-986e217df7d0.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 16904 IP address blocks: 209.237.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:cd:14:74:62:e4:c0:9c:ca:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=36267ace-1ae4-4984-94d5-1e00b521dd86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:69:6c:21:d0:e7:dc:85:54:fc:b5:e7:7c:9d: 3b:45:fd:e5:fe:09:0e:10:a7:64:eb:7a:3a:e0:dd: 52:78:53:d7:06:08:72:21:be:5b:37:6c:98:de:37: c6:82:8a:84:d1:ac:20:a5:59:8e:de:60:3f:76:d7: 61:04:f6:50:d2:3f:7c:0c:36:7b:d3:ac:52:c6:30: fb:27:01:44:e5:6a:d8:6e:fc:51:17:e1:9c:83:97: 06:82:1b:c4:54:68:c8:d6:c8:7a:e5:f2:83:bd:11: 56:2a:de:ce:58:0f:ba:99:61:25:2a:36:86:f5:27: dd:ff:77:2d:4a:a7:a6:2e:f9:ad:ce:7a:09:46:4b: da:b6:3c:52:0a:5a:c9:6e:bf:d4:50:c6:e6:d3:c1: 73:69:83:73:08:34:85:97:5a:09:ad:ea:08:e9:90: a2:5f:04:16:6d:69:e5:42:35:22:fe:5f:62:71:ba: bb:53:e2:5c:a6:62:a0:23:b3:08:66:3e:ce:08:b7: 95:11:2b:31:d0:a4:03:8f:d1:8b:b4:2a:06:ab:f9: 2b:3c:8c:ce:2e:6c:4d:7d:89:a3:99:01:e3:e0:17: b1:70:ce:0b:65:c7:9d:5a:39:eb:f1:0a:da:19:97: ec:53:73:06:e4:ba:92:7e:96:e5:06:43:4a:d1:a3: 65:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:21:94:33:D2:3E:2D:73:DE:A6:73:33:C4:11:D4:78:95:49:D4:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/c914ae45-f96a-379f-b2e6-986e217df7d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl X509v3 Authority Key Identifier: keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer sbgp-ipAddrBlock: critical IPv4: 209.237.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:d1:68:a6:17:71:08:d2:66:d9:fc:e2:e1:fc:03:81:3e:d8: f6:32:71:7d:40:48:8e:9c:60:a3:77:a2:36:1f:79:56:be:e1: 27:23:28:37:70:89:ae:7e:4c:81:15:36:e3:d5:63:08:9e:98: 65:17:dc:e1:ad:34:4c:b6:52:78:d5:0d:0a:57:0c:1f:53:9d: e2:ce:a9:00:f2:2c:85:94:07:1a:bc:5a:d2:99:9a:76:11:3f: 7f:40:50:11:ff:a3:23:73:79:48:2a:ac:c9:f7:d3:e8:35:84: ab:c0:94:a9:0c:49:2d:e1:d1:ec:dd:f4:79:5c:b5:f4:f4:8b: 6f:f8:75:72:9b:5c:27:97:cd:69:04:57:d5:32:d7:9f:41:fa: 2f:e9:85:65:87:84:0b:e1:47:f3:67:7a:32:8f:6c:45:d3:d6: 54:6f:7e:65:24:d4:3e:dd:24:f4:9c:6a:2b:06:2d:73:4a:6d: 5a:3c:f6:7a:e6:79:68:80:3d:0b:16:ec:b3:ed:bf:32:a0:7c: 4f:e1:17:1e:6f:19:9c:8c:0c:54:5b:d1:ac:82:aa:d8:fd:0b: 8a:40:3e:3d:ef:d6:b8:62:c5:57:de:59:8a:6c:98:66:f5:3c: e7:4a:4a:fd:6b:de:16:55:c6:81:46:52:9d:28:b8:67:73:50: 45:7d:91:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W80UdGLkwJzKnEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx MzFiMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk MzYyNjdhY2UtMWFlNC00OTg0LTk0ZDUtMWUwMGI1MjFkZDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GlsIdDn3IVU/LXnfJ07Rf3l/gkOEKdk63o6 4N1SeFPXBghyIb5bN2yY3jfGgoqE0awgpVmO3mA/dtdhBPZQ0j98DDZ706xSxjD7 JwFE5WrYbvxRF+Gcg5cGghvEVGjI1sh65fKDvRFWKt7OWA+6mWElKjaG9Sfd/3ct SqemLvmtznoJRkvatjxSClrJbr/UUMbm08FzaYNzCDSFl1oJreoI6ZCiXwQWbWnl QjUi/l9icbq7U+JcpmKgI7MIZj7OCLeVESsx0KQDj9GLtCoGq/krPIzOLmxNfYmj mQHj4BexcM4LZcedWjnr8QraGZfsU3MG5LqSfpblBkNK0aNlqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkhlDPSPi1z3qZzM8QR1HiVSdR/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1 YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvYzkxNGFlNDUtZjk2YS0z NzlmLWIyZTYtOTg2ZTIxN2RmN2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi ZGFiMDEzMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0e1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTRaKYXcQjSZtn84uH8A4E+2PYycX1ASI6cYKN3ojYfeVa+4ScjKDdw ia5+TIEVNuPVYwiemGUX3OGtNEy2UnjVDQpXDB9TneLOqQDyLIWUBxq8WtKZmnYR P39AUBH/oyNzeUgqrMn30+g1hKvAlKkMSS3h0ezd9HlctfT0i2/4dXKbXCeXzWkE V9Uy159B+i/phWWHhAvhR/NnejKPbEXT1lRvfmUk1D7dJPScaisGLXNKbVo89nrm eWiAPQsW7LPtvzKgfE/hFx5vGZyMDFRb0ayCqtj9C4pAPj3v1rhixVfeWYpsmGb1 POdKSv1r3hZVxoFGUp0ouGdzUEV9kec= -----END CERTIFICATE-----Generated at Fri Mar 14 08:42:35 2025 by rpki-client