$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/119725c3-7279-3b5c-bc1e-05a462651ad0.roa File: 119725c3-7279-3b5c-bc1e-05a462651ad0.roa (raw, json) Hash identifier: mJoCDX+6Z69HQ/dq42SEvAQ/8zVZZZGEx9tFaS2j64I= Subject key identifier: A9:B8:C8:A5:EE:2C:24:AA:AD:94:B3:A4:C5:44:78:FB:2C:5E:87:35 Certificate issuer: /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b Certificate serial: 010D0C9F43285848CC7B8E91F994F7CBB864AF00 Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/119725c3-7279-3b5c-bc1e-05a462651ad0.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 10753 IP address blocks: 204.9.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:8e:91:f9:94:f7:cb:b8:64:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=838d5393-bdb7-47a6-8f3c-0417899e5994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a1:75:c4:07:40:fe:bd:ab:f1:f8:39:eb:62: 4b:ec:6e:ae:09:df:98:d5:19:9d:4e:c5:c0:a2:bb: 17:f7:cf:7f:2f:52:90:aa:48:e7:b2:41:48:d1:98: a1:8a:29:ff:10:1b:f4:47:0c:bb:55:25:43:ac:76: 17:fd:f3:0c:60:c6:55:54:8d:45:86:9f:1d:78:a5: 61:b0:ce:6c:c9:af:0c:e9:3c:9a:3d:f6:fa:17:90: 0d:75:55:f3:4b:89:9f:55:bd:52:7a:44:6a:ad:a0: 88:a9:16:85:22:7a:e0:0c:5c:f9:b9:26:47:c7:0c: 52:2a:99:da:78:ab:e6:48:18:4e:8c:19:f9:59:7f: 34:c5:da:b7:e5:60:d1:b2:1e:2b:d3:51:b8:65:8b: af:41:6e:14:d3:1e:45:3a:bb:56:dc:02:89:2d:b5: 57:4e:a5:51:bf:46:ae:ed:60:23:7b:94:50:4c:48: d3:70:d4:4e:5e:a0:12:4b:61:56:1f:41:4e:e5:0d: 97:6c:c5:be:38:a7:6d:4f:85:a5:b8:82:10:7d:8d: c7:02:da:6a:ac:b3:d2:d7:96:06:e1:62:4c:9d:47: ec:b7:3c:f7:93:09:f4:39:65:c4:32:d1:1c:15:9d: a2:fb:7c:51:50:b9:d6:4f:af:be:68:c8:b2:92:d0: 65:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B8:C8:A5:EE:2C:24:AA:AD:94:B3:A4:C5:44:78:FB:2C:5E:87:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/119725c3-7279-3b5c-bc1e-05a462651ad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl X509v3 Authority Key Identifier: keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer sbgp-ipAddrBlock: critical IPv4: 204.9.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:b2:76:08:07:36:aa:03:1f:7f:c3:5c:0a:c1:13:4a:63:dd: b1:71:e7:df:08:d6:d1:9d:4f:d6:d7:e0:0d:7a:25:46:a3:45: 94:8a:76:98:68:de:f7:a4:61:a8:5f:ec:e4:34:d3:b1:11:7a: 5a:46:bb:7c:d3:10:84:8f:56:e7:7b:7f:b7:72:93:e1:2c:4a: 10:55:57:a5:74:a5:a3:0a:bc:ad:48:42:fe:8c:85:a6:e0:b7: 86:58:72:dc:78:da:61:6e:27:a0:31:2f:cc:44:29:57:45:9b: db:87:6f:51:01:62:27:d0:06:56:c8:51:64:92:39:26:3f:70: f5:22:67:c4:10:7c:56:22:bb:20:a2:f3:b4:03:51:dd:64:95: 6e:3a:6c:0e:94:23:5c:16:d9:09:60:68:ea:41:3f:dd:bf:02: 7f:67:7c:79:06:7e:e1:17:10:ac:80:42:f9:1d:6f:aa:0e:6c: 63:46:87:c5:5f:19:09:39:66:36:26:4e:fe:86:1a:50:e2:6d: 83:63:83:e9:49:08:82:b4:5b:21:a6:d7:ca:82:dc:43:02:81: 4b:cb:d6:e8:d3:55:28:86:d7:c7:cb:48:ea:91:97:3a:9f:f4: 78:73:d4:eb:c8:d5:26:60:3a:2d:a7:fd:aa:9a:d1:00:7e:76: e7:85:01:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe46R+ZT3y7hkrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlM2U3MmUtMzJjYi00ZTgzLThkNDQtODYyNDY2YmIw YzhiMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk ODM4ZDUzOTMtYmRiNy00N2E2LThmM2MtMDQxNzg5OWU1OTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaF1xAdA/r2r8fg562JL7G6uCd+Y1RmdTsXA orsX989/L1KQqkjnskFI0Zihiin/EBv0Rwy7VSVDrHYX/fMMYMZVVI1Fhp8deKVh sM5sya8M6TyaPfb6F5ANdVXzS4mfVb1SekRqraCIqRaFInrgDFz5uSZHxwxSKpna eKvmSBhOjBn5WX80xdq35WDRsh4r01G4ZYuvQW4U0x5FOrtW3AKJLbVXTqVRv0au 7WAje5RQTEjTcNROXqASS2FWH0FO5Q2XbMW+OKdtT4WluIIQfY3HAtpqrLPS15YG 4WJMnUfstzz3kwn0OWXEMtEcFZ2i+3xRULnWT6++aMiyktBluwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKm4yKXuLCSqrZSzpMVEePssXoc1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUz ZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0NjZiYjBjOGIvMTE5NzI1YzMtNzI3OS0z YjVjLWJjMWUtMDVhNDYyNjUxYWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTRlM2U3MmUtMzJjYi00ZTgzLThk NDQtODYyNDY2YmIwYzhiL2E0ZTNlNzJlLTMyY2ItNGU4My04ZDQ0LTg2MjQ2NmJi MGM4Yi5jcmwwHwYDVR0jBBgwFoAU36ao4MNy5scPhIXGsRigy1w+vcMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUzZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0 NjZiYjBjOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAk7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCydggHNqoDH3/DXArBE0pj3bFx598I1tGdT9bX4A16JUajRZSKdpho 3vekYahf7OQ007ERelpGu3zTEISPVud7f7dyk+EsShBVV6V0paMKvK1IQv6Mhabg t4ZYctx42mFuJ6AxL8xEKVdFm9uHb1EBYifQBlbIUWSSOSY/cPUiZ8QQfFYiuyCi 87QDUd1klW46bA6UI1wW2QlgaOpBP92/An9nfHkGfuEXEKyAQvkdb6oObGNGh8Vf GQk5ZjYmTv6GGlDibYNjg+lJCIK0WyGm18qC3EMCgUvL1ujTVSiG18fLSOqRlzqf 9Hhz1OvI1SZgOi2n/aqa0QB+dueFAfA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:46 2025 by rpki-client