$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/0187a465-5877-364d-b1a0-2133ea204e7c.roa File: 0187a465-5877-364d-b1a0-2133ea204e7c.roa (raw, json) Hash identifier: nRU5SD4BF0m5JEJ1brBNM8ZyUBItqOqxW6N4MtRH/Ns= Subject key identifier: F7:3E:57:A4:B2:5B:E9:A2:55:45:F3:04:02:29:8D:22:77:CD:2C:E5 Certificate issuer: /CN=974309dc-20f5-4894-9707-f2e446573ea1 Certificate serial: 010D0C9F43285848F9269E8654A127F169EBD280 Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/0187a465-5877-364d-b1a0-2133ea204e7c.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 14618 IP address blocks: 209.142.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:9e:86:54:a1:27:f1:69:eb:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=20033068-755c-484a-b173-e51afedea27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bf:03:95:4f:c4:8f:de:da:7b:d4:01:ea:06: 8f:c7:1f:c5:a6:c0:b5:ac:8b:a7:cd:9f:41:51:a7: bb:98:b7:9f:c9:39:cf:ed:45:1d:6f:0c:10:b6:50: f7:7a:b2:29:15:da:7c:dc:6c:53:e1:79:51:bc:d8: 9d:00:8e:c3:18:e5:e0:29:5c:bd:3a:95:82:41:3d: dd:ce:c3:1a:9f:94:fc:b8:da:93:84:75:17:d5:b1: d0:da:8b:c2:49:ea:02:0d:c9:83:f7:dc:5f:e2:dd: 0d:33:08:15:c6:17:37:2c:61:74:04:cf:9b:f3:a5: 1b:7d:f9:9c:a9:f9:45:76:23:81:cf:e2:44:9c:44: 22:1d:60:d2:ee:34:b8:d7:69:04:8e:f1:55:1d:1a: 08:8b:5e:0b:c8:b6:1f:b3:3a:1b:dc:5a:54:b4:f4: 5c:bf:60:61:66:df:5f:54:09:d9:7f:06:4c:93:a9: 92:d3:36:61:ed:51:8c:48:b6:0a:b1:4f:33:8f:55: 2d:a9:c8:23:a2:27:0d:33:5c:80:a9:81:11:fb:0d: b8:49:e9:ba:b2:77:d0:a1:85:79:e4:2c:db:cf:05: e1:b6:09:fe:dc:93:5d:6b:5d:f5:e0:c1:5a:89:21: 26:b9:9d:a4:11:97:7c:47:b3:a4:eb:bd:6c:a7:8c: 38:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:3E:57:A4:B2:5B:E9:A2:55:45:F3:04:02:29:8D:22:77:CD:2C:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/0187a465-5877-364d-b1a0-2133ea204e7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl X509v3 Authority Key Identifier: keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer sbgp-ipAddrBlock: critical IPv4: 209.142.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:69:98:30:fd:01:77:16:58:ce:55:94:97:8b:81:64:87:8e: da:17:62:6e:d5:6a:e9:e0:29:b9:fa:30:bb:1d:38:e8:13:ed: 3a:cd:7b:f6:ac:4d:5a:de:86:65:2a:50:6f:7e:ae:9d:2f:20: ad:12:4a:c0:35:62:62:a4:4b:f9:2d:45:7b:0b:30:9f:49:a7: f7:eb:36:77:78:ef:02:9f:e7:5e:82:53:dd:01:71:91:1a:aa: 17:4a:96:6a:10:00:29:9e:f3:b1:66:8c:02:fc:89:be:d5:a0: 0b:72:e4:1a:5b:47:8a:0e:31:43:d7:0a:26:be:4c:0e:20:6c: 86:3c:fa:05:de:c5:5e:0d:e3:21:34:7d:2c:d8:c2:89:fe:7e: fe:b8:7f:56:d7:e6:91:c6:33:7b:32:0c:37:1a:cc:4c:5d:59: c9:84:21:10:b4:b6:7c:3a:82:30:70:95:e8:9e:28:07:75:e8: 92:30:cf:34:7d:26:0b:af:cd:fe:28:eb:cd:70:33:ad:41:bc: ef:fc:de:6d:d3:a9:f2:87:d4:0f:07:c9:1c:94:52:78:92:c4: 0f:a3:01:b4:7a:49:71:6a:87:f8:28:a6:33:93:95:0b:bb:00: 7d:cb:42:b2:4f:b4:c4:0e:40:29:b9:49:41:2c:ec:de:d5:99: 83:2d:24:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5Jp6GVKEn8Wnr0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTc0MzA5ZGMtMjBmNS00ODk0LTk3MDctZjJlNDQ2NTcz ZWExMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MjAwMzMwNjgtNzU1Yy00ODRhLWIxNzMtZTUxYWZlZGVhMjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb8DlU/Ej97ae9QB6gaPxx/FpsC1rIunzZ9B Uae7mLefyTnP7UUdbwwQtlD3erIpFdp83GxT4XlRvNidAI7DGOXgKVy9OpWCQT3d zsMan5T8uNqThHUX1bHQ2ovCSeoCDcmD99xf4t0NMwgVxhc3LGF0BM+b86Ubffmc qflFdiOBz+JEnEQiHWDS7jS412kEjvFVHRoIi14LyLYfszob3FpUtPRcv2BhZt9f VAnZfwZMk6mS0zZh7VGMSLYKsU8zj1UtqcgjoicNM1yAqYER+w24Sem6snfQoYV5 5CzbzwXhtgn+3JNda1314MFaiSEmuZ2kEZd8R7Ok671sp4w4MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPc+V6SyW+miVUXzBAIpjSJ3zSzlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85NzQz MDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0NDY1NzNlYTEvMDE4N2E0NjUtNTg3Ny0z NjRkLWIxYTAtMjEzM2VhMjA0ZTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTc0MzA5ZGMtMjBmNS00ODk0LTk3 MDctZjJlNDQ2NTczZWExLzk3NDMwOWRjLTIwZjUtNDg5NC05NzA3LWYyZTQ0NjU3 M2VhMS5jcmwwHwYDVR0jBBgwFoAU8wpyK8l5Fe1rdy/fvqwHji6l1eEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NzQzMDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0 NDY1NzNlYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y5OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFpmDD9AXcWWM5VlJeLgWSHjtoXYm7VaungKbn6MLsdOOgT7TrNe/as TVrehmUqUG9+rp0vIK0SSsA1YmKkS/ktRXsLMJ9Jp/frNnd47wKf516CU90BcZEa qhdKlmoQACme87FmjAL8ib7VoAty5BpbR4oOMUPXCia+TA4gbIY8+gXexV4N4yE0 fSzYwon+fv64f1bX5pHGM3syDDcazExdWcmEIRC0tnw6gjBwleieKAd16JIwzzR9 Jguvzf4o681wM61BvO/83m3TqfKH1A8HyRyUUniSxA+jAbR6SXFqh/gopjOTlQu7 AH3LQrJPtMQOQCm5SUEs7N7VmYMtJLc= -----END CERTIFICATE-----Generated at Fri Apr 4 23:52:46 2025 by rpki-client