$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/8c0cf3f7-33fa-3591-ab58-960d708c9989.roa File: 8c0cf3f7-33fa-3591-ab58-960d708c9989.roa (raw, json) Hash identifier: ETcpvSZi7UPc0DBhHat+KCHts0M82jhf2SmbxeVQpoQ= Subject key identifier: B1:0E:E2:E1:24:35:BD:F7:44:68:11:B8:AC:7A:DC:55:D5:01:1A:57 Certificate issuer: /CN=974309dc-20f5-4894-9707-f2e446573ea1 Certificate serial: 010D0C9F43285848F9269E7833A152DBA3AAEB40 Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/8c0cf3f7-33fa-3591-ab58-960d708c9989.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 16509 IP address blocks: 209.142.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:9e:78:33:a1:52:db:a3:aa:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=3a582036-085e-4f94-ae8e-713b05414eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b3:fa:9c:73:4f:88:b0:21:44:1a:55:4c:44: ed:a3:fd:5a:e0:d6:2c:6c:c5:bf:d7:17:dd:d7:09: fe:8a:3c:e1:38:2e:18:62:66:f3:4c:81:87:45:93: c0:33:79:34:58:40:0b:44:ff:22:af:64:30:93:61: 05:8e:d4:e6:78:b0:51:bb:64:7b:79:4f:e0:41:ae: ee:8a:d7:82:ba:b8:64:bd:81:11:16:c5:ee:d7:21: c3:64:f2:0d:82:50:db:9e:ee:1f:4a:f0:6a:7a:01: 81:4d:c3:4d:c5:bf:fd:d1:1e:f8:53:04:2d:21:1e: 5d:bd:8b:ce:06:78:23:73:3d:52:e1:98:2a:97:40: 54:11:24:02:84:f1:7d:d3:67:33:b9:e9:ec:ea:bd: 83:ce:51:9f:74:12:20:79:e5:83:73:c3:a7:67:24: 9f:29:2b:33:65:66:87:0a:e6:84:be:9d:84:74:57: 28:cc:4b:a8:6a:14:42:03:cd:ac:f7:80:bc:a4:0a: 32:1c:4e:e8:86:a2:c3:db:67:dd:77:9a:65:3e:28: e6:e7:33:3c:5e:78:dd:b9:1e:b6:54:3f:a4:63:23: 5e:31:83:d1:c3:e9:ed:6a:86:30:6b:c3:67:dd:1c: bc:05:5e:fb:b2:f3:a8:3e:50:b6:ea:9b:c2:b5:79: 8b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0E:E2:E1:24:35:BD:F7:44:68:11:B8:AC:7A:DC:55:D5:01:1A:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/8c0cf3f7-33fa-3591-ab58-960d708c9989.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl X509v3 Authority Key Identifier: keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer sbgp-ipAddrBlock: critical IPv4: 209.142.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:0d:f5:15:b9:01:19:69:c0:9c:85:ab:40:84:f2:4f:9f:e0: 99:cf:57:15:a0:af:97:82:3f:57:45:77:25:68:82:86:3a:3b: 29:10:e3:89:c1:08:25:0c:26:ff:f8:64:5f:58:97:7f:bb:7b: c7:4c:1c:90:8e:88:16:02:8a:9f:da:d0:70:f3:63:91:94:94: 74:b9:7b:e4:ed:28:55:04:5c:57:05:92:41:3e:22:db:f0:d8: e0:bc:c6:a5:fa:c1:b8:00:21:69:c4:fb:10:bc:04:fc:bd:e1: b8:5e:0b:83:45:4b:73:9f:c9:d5:0c:f1:71:a3:2c:c8:0c:88: 25:4f:ca:b6:a6:8f:83:76:50:1d:be:35:1b:26:16:f7:5f:25: a4:3c:96:88:df:9d:22:cc:e4:94:95:d0:8b:6d:4a:db:56:5a: a5:9e:5e:e9:ae:1c:b2:da:7c:bc:4c:7f:80:fa:5a:fd:c2:e4: d8:d5:a3:5d:89:d7:5b:ba:ed:08:11:c5:6f:74:f9:72:1e:92: 54:56:62:21:c2:80:65:0a:0d:10:28:ca:7d:6f:cb:fe:ae:2a: da:99:c1:d0:24:a8:9c:39:39:5b:9a:89:0c:99:d4:52:43:d1: 26:e0:c9:22:cf:7f:0b:c3:64:c9:4f:ad:b1:11:12:2f:62:1d: 62:f2:eb:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5Jp54M6FS26Oq60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTc0MzA5ZGMtMjBmNS00ODk0LTk3MDctZjJlNDQ2NTcz ZWExMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk M2E1ODIwMzYtMDg1ZS00Zjk0LWFlOGUtNzEzYjA1NDE0ZWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbP6nHNPiLAhRBpVTETto/1a4NYsbMW/1xfd 1wn+ijzhOC4YYmbzTIGHRZPAM3k0WEALRP8ir2Qwk2EFjtTmeLBRu2R7eU/gQa7u iteCurhkvYERFsXu1yHDZPINglDbnu4fSvBqegGBTcNNxb/90R74UwQtIR5dvYvO Bngjcz1S4Zgql0BUESQChPF902czuens6r2DzlGfdBIgeeWDc8OnZySfKSszZWaH CuaEvp2EdFcozEuoahRCA82s94C8pAoyHE7ohqLD22fdd5plPijm5zM8XnjduR62 VD+kYyNeMYPRw+ntaoYwa8Nn3Ry8BV77svOoPlC26pvCtXmLUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEO4uEkNb33RGgRuKx63FXVARpXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85NzQz MDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0NDY1NzNlYTEvOGMwY2YzZjctMzNmYS0z NTkxLWFiNTgtOTYwZDcwOGM5OTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTc0MzA5ZGMtMjBmNS00ODk0LTk3 MDctZjJlNDQ2NTczZWExLzk3NDMwOWRjLTIwZjUtNDg5NC05NzA3LWYyZTQ0NjU3 M2VhMS5jcmwwHwYDVR0jBBgwFoAU8wpyK8l5Fe1rdy/fvqwHji6l1eEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NzQzMDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0 NDY1NzNlYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y5OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcN9RW5ARlpwJyFq0CE8k+f4JnPVxWgr5eCP1dFdyVogoY6OykQ44nB CCUMJv/4ZF9Yl3+7e8dMHJCOiBYCip/a0HDzY5GUlHS5e+TtKFUEXFcFkkE+Itvw 2OC8xqX6wbgAIWnE+xC8BPy94bheC4NFS3OfydUM8XGjLMgMiCVPyramj4N2UB2+ NRsmFvdfJaQ8lojfnSLM5JSV0IttSttWWqWeXumuHLLafLxMf4D6Wv3C5NjVo12J 11u67QgRxW90+XIeklRWYiHCgGUKDRAoyn1vy/6uKtqZwdAkqJw5OVuaiQyZ1FJD 0SbgySLPfwvDZMlPrbEREi9iHWLy68g= -----END CERTIFICATE-----Generated at Sat Apr 5 03:54:30 2025 by rpki-client