$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fb868ad7-a036-3451-bc20-5cd7cdc8d7c7.roa File: fb868ad7-a036-3451-bc20-5cd7cdc8d7c7.roa (raw, json) Hash identifier: PK8slPQLnmM4Gmy2afBgfv8k2oqZy9lW50qeoJ0uiTk= Subject key identifier: 6C:1C:15:90:BA:34:2B:FB:92:82:77:3A:30:FC:9C:E0:8A:F3:98:99 Certificate issuer: /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Certificate serial: 010D0C9F432858490021612588C403DA78F2FF80 Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fb868ad7-a036-3451-bc20-5cd7cdc8d7c7.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 16904 IP address blocks: 209.237.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:61:25:88:c4:03:da:78:f2:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=bf9b430d-36e0-4380-8fad-a3e13fea35f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0a:d2:3c:c2:92:0d:66:3c:41:f0:87:1d:6b: 29:5d:45:ef:70:d7:7b:f2:74:14:44:a9:ca:84:a4: 38:03:ae:d6:d9:2a:4a:a6:8a:8b:88:4c:d0:82:a3: 74:ef:cb:5b:21:89:75:2d:90:76:1e:8d:70:13:4a: ce:13:dd:59:7e:06:ec:35:bd:26:ae:53:d0:55:66: 1f:e8:b9:03:cb:2e:98:55:70:42:2d:95:06:07:9b: 63:d1:fa:be:47:40:c7:09:56:fb:8a:ae:64:c5:ae: e9:12:1e:72:61:ec:8e:39:e9:b9:3e:78:ae:f7:37: 04:90:b5:e5:68:36:83:da:07:40:d8:02:c0:97:ad: db:f8:52:ca:c3:f9:c9:02:a9:77:3a:f0:d3:e8:a5: b2:b7:52:c6:32:9b:65:81:e1:fa:2f:26:74:f9:e9: 9e:2a:bc:4b:36:a0:ee:ae:a4:17:9c:f1:cf:af:fb: 37:a3:cf:e2:5b:94:0f:8a:46:a6:07:df:98:da:9d: d1:ca:1e:50:4f:0e:89:04:e3:09:d9:2f:e9:86:73: 61:77:15:bc:6b:22:29:9d:b1:f8:06:1b:de:17:b6: 78:f3:cc:fb:21:90:64:45:80:f7:eb:68:b2:d7:a8: 3e:67:52:cc:42:9c:d9:db:81:9f:e6:7f:2a:82:e9: 17:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:1C:15:90:BA:34:2B:FB:92:82:77:3A:30:FC:9C:E0:8A:F3:98:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fb868ad7-a036-3451-bc20-5cd7cdc8d7c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl X509v3 Authority Key Identifier: keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer sbgp-ipAddrBlock: critical IPv4: 209.237.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:4d:22:47:79:20:3b:62:e6:78:7e:63:14:82:3a:54:bd:ef: 5a:35:99:f4:3d:ea:9e:c8:86:eb:63:d2:ac:fe:31:bf:4d:55: 3e:af:99:26:3e:51:05:40:37:b0:40:68:74:6e:cd:26:9e:01: 4c:78:ba:01:54:06:e4:ac:52:e8:c6:a9:9b:de:30:10:b5:5c: 72:47:16:da:08:7d:1c:fd:82:a4:5e:88:27:c9:4d:dd:48:c1: 05:bc:c1:89:35:77:97:38:3c:4a:52:eb:73:4c:ab:e8:0d:10: 42:f9:e6:a4:7e:e4:b0:b9:cc:9f:3b:78:50:0c:d6:64:72:e7: 7e:51:77:28:ff:a1:c3:29:64:8b:fd:3c:c7:24:27:29:6e:c8: 70:2c:fb:4a:bf:df:68:37:cd:34:39:2c:44:31:fb:5c:95:0a: 98:89:55:31:cc:bf:e1:c8:b2:43:38:76:f3:9d:c4:3f:8a:c7: 22:d9:1a:4e:7c:81:e7:68:3f:78:27:29:ef:d0:8d:2a:b1:26: aa:40:b4:9b:d7:7b:c2:b1:4d:61:13:8b:59:cf:bb:a1:73:66: 7f:f1:4e:c3:e4:b4:27:b1:21:e1:72:56:ef:2a:33:c4:da:7f: 6e:e2:2c:ab:95:09:ef:73:c9:98:13:9f:19:ae:03:41:9c:e4: 67:60:f7:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIWEliMQD2njy/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx MzFiMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk YmY5YjQzMGQtMzZlMC00MzgwLThmYWQtYTNlMTNmZWEzNWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwrSPMKSDWY8QfCHHWspXUXvcNd78nQURKnK hKQ4A67W2SpKpoqLiEzQgqN078tbIYl1LZB2Ho1wE0rOE91ZfgbsNb0mrlPQVWYf 6LkDyy6YVXBCLZUGB5tj0fq+R0DHCVb7iq5kxa7pEh5yYeyOOem5Pniu9zcEkLXl aDaD2gdA2ALAl63b+FLKw/nJAql3OvDT6KWyt1LGMptlgeH6LyZ0+emeKrxLNqDu rqQXnPHPr/s3o8/iW5QPikamB9+Y2p3Ryh5QTw6JBOMJ2S/phnNhdxW8ayIpnbH4 BhveF7Z488z7IZBkRYD362iy16g+Z1LMQpzZ24Gf5n8qgukXEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwcFZC6NCv7koJ3OjD8nOCK85iZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1 YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvZmI4NjhhZDctYTAzNi0z NDUxLWJjMjAtNWNkN2NkYzhkN2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi ZGFiMDEzMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElNIkd5IDti5nh+YxSCOlS971o1mfQ96p7Ihutj0qz+Mb9NVT6vmSY+ UQVAN7BAaHRuzSaeAUx4ugFUBuSsUujGqZveMBC1XHJHFtoIfRz9gqReiCfJTd1I wQW8wYk1d5c4PEpS63NMq+gNEEL55qR+5LC5zJ87eFAM1mRy535Rdyj/ocMpZIv9 PMckJyluyHAs+0q/32g3zTQ5LEQx+1yVCpiJVTHMv+HIskM4dvOdxD+KxyLZGk58 gedoP3gnKe/QjSqxJqpAtJvXe8KxTWETi1nPu6FzZn/xTsPktCexIeFyVu8qM8Ta f27iLKuVCe9zyZgTnxmuA0Gc5Gdg9+0= -----END CERTIFICATE-----Generated at Sat Apr 12 14:48:20 2025 by rpki-client