$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a4b273c7-3b21-3d49-b100-53a1e74f3efe.roa File: a4b273c7-3b21-3d49-b100-53a1e74f3efe.roa (raw, json) Hash identifier: VsK1bClMgM7O3TsPlJNNjZxdDbrM4RULUgIoGNRmFwo= Subject key identifier: AF:32:4C:24:C5:C5:77:0F:34:2D:CD:84:59:88:C8:B6:D7:05:A4:76 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F43285848960B5765A981B011CCD07280 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a4b273c7-3b21-3d49-b100-53a1e74f3efe.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 212384 IP address blocks: 209.145.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:57:65:a9:81:b0:11:cc:d0:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=ee79fe89-8625-47fa-a522-6921db2ff688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:68:05:7d:a5:24:f3:a1:04:d5:af:0e:ee:08: 4a:da:1f:e1:e8:1f:b8:87:39:0e:64:ea:c9:50:8f: fc:58:78:de:03:10:96:ce:cc:7c:3a:92:52:af:96: 9c:b1:a3:a1:10:55:4a:8e:d4:cc:5c:0c:94:02:13: 48:a1:76:2a:2c:b1:11:73:d9:40:77:03:88:2b:ba: 49:30:47:8c:82:09:3d:e9:33:65:7b:89:ca:52:64: 03:88:b7:0a:00:82:ca:32:7f:6d:92:67:8c:ce:c0: 77:e3:53:4f:43:9d:ab:07:9a:1e:5b:61:23:c1:02: 6b:71:97:5d:f5:7f:e4:a9:b3:65:48:7f:69:40:29: fe:d2:07:54:51:d9:06:12:b6:c2:50:bd:95:08:b8: b5:d6:20:fe:d5:29:37:ff:c4:96:61:80:27:80:50: 61:95:a9:ae:01:7d:44:2b:18:97:db:5f:1d:9c:03: 84:17:4d:87:54:6f:1a:5e:74:62:d8:1c:4f:34:3f: f8:2c:41:66:cd:7d:c2:c6:66:e5:41:17:6c:af:df: bb:fb:21:3c:11:24:0c:57:3e:45:65:5b:17:cc:c6: b8:0d:38:13:b6:cb:0c:15:b7:c3:e4:80:e7:78:bd: c3:20:c3:45:4c:24:39:82:c1:3e:66:8e:9a:68:94: 02:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:32:4C:24:C5:C5:77:0F:34:2D:CD:84:59:88:C8:B6:D7:05:A4:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a4b273c7-3b21-3d49-b100-53a1e74f3efe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 209.145.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:de:5a:83:ec:d7:fe:b9:af:96:5c:0a:d2:71:5c:c7:30:b1: 9a:5e:0f:25:44:a6:fe:2b:c5:34:1e:5e:f4:16:2f:a3:f6:45: 54:2b:5c:06:23:87:c3:36:9b:9a:60:6c:5c:39:83:b7:73:17: 94:a5:b3:bb:a1:22:fd:df:0c:aa:03:ff:2a:27:18:c5:89:71: d3:e7:e5:25:c2:5c:2f:9b:75:75:38:d4:6b:6b:d9:5a:4c:cc: e2:fe:d1:1c:ed:0a:99:d7:bd:b8:52:26:ec:d2:51:fb:cb:0e: 60:60:fc:23:35:8e:32:8f:9a:cf:6d:d1:f1:e2:e1:e2:51:c6: 99:78:e2:dd:05:25:75:39:cb:6b:8f:7c:fe:2a:c7:ab:db:9e: 64:22:aa:d0:05:03:53:e2:77:df:72:aa:9e:80:9d:f7:03:16: 88:39:da:11:c9:a0:97:92:16:ce:94:a8:01:a9:44:0b:95:09: 88:ca:75:1a:d3:2d:b7:f6:42:5b:35:67:71:77:ed:52:02:c5: 18:ad:68:7d:2d:c5:7b:81:a4:1c:e4:92:b7:18:c7:c3:1f:9f: 8c:40:5e:24:0c:ef:a9:30:c2:ba:92:a5:e6:14:43:6c:63:7a: 7d:b7:be:9b:74:77:a6:5f:e2:66:7c:bd:33:c2:a5:a2:52:f7: 59:c5:c0:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC1dlqYGwEczQcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk ZWU3OWZlODktODYyNS00N2ZhLWE1MjItNjkyMWRiMmZmNjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGgFfaUk86EE1a8O7ghK2h/h6B+4hzkOZOrJ UI/8WHjeAxCWzsx8OpJSr5acsaOhEFVKjtTMXAyUAhNIoXYqLLERc9lAdwOIK7pJ MEeMggk96TNle4nKUmQDiLcKAILKMn9tkmeMzsB341NPQ52rB5oeW2EjwQJrcZdd 9X/kqbNlSH9pQCn+0gdUUdkGErbCUL2VCLi11iD+1Sk3/8SWYYAngFBhlamuAX1E KxiX218dnAOEF02HVG8aXnRi2BxPND/4LEFmzX3CxmblQRdsr9+7+yE8ESQMVz5F ZVsXzMa4DTgTtssMFbfD5IDneL3DIMNFTCQ5gsE+Zo6aaJQCdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8yTCTFxXcPNC3NhFmIyLbXBaR2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvYTRiMjczYzctM2IyMS0z ZDQ5LWIxMDAtNTNhMWU3NGYzZWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZErMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfeWoPs1/65r5ZcCtJxXMcwsZpeDyVEpv4rxTQeXvQWL6P2RVQrXAYj h8M2m5pgbFw5g7dzF5Sls7uhIv3fDKoD/yonGMWJcdPn5SXCXC+bdXU41Gtr2VpM zOL+0RztCpnXvbhSJuzSUfvLDmBg/CM1jjKPms9t0fHi4eJRxpl44t0FJXU5y2uP fP4qx6vbnmQiqtAFA1Pid99yqp6AnfcDFog52hHJoJeSFs6UqAGpRAuVCYjKdRrT Lbf2Qls1Z3F37VICxRitaH0txXuBpBzkkrcYx8Mfn4xAXiQM76kwwrqSpeYUQ2xj en23vpt0d6Zf4mZ8vTPCpaJS91nFwO4= -----END CERTIFICATE-----Generated at Sat Apr 5 23:16:46 2025 by rpki-client