$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07/c0aac8f0-caba-3622-a1be-349b5ab8e7a4.roa File: c0aac8f0-caba-3622-a1be-349b5ab8e7a4.roa (raw, json) Hash identifier: PPC08wXyii+VlHnRmNPUIYgmXpSq6tO7ZmV9i21rZOo= Subject key identifier: 97:88:2E:C8:B1:5C:28:BE:BA:2A:A3:7A:89:EC:A2:17:7A:23:2D:C2 Certificate issuer: /CN=0c75fe19-a93c-4656-bf2d-b205565f9d07 Certificate serial: 010D0C9F43285849780F0243661AE196772B5F40 Authority key identifier: 6D:14:45:B4:DD:37:4A:3C:63:2C:A6:D0:69:3E:98:46:CF:B4:7C:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07/c0aac8f0-caba-3622-a1be-349b5ab8e7a4.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 10482 IP address blocks: 204.209.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07/0c75fe19-a93c-4656-bf2d-b205565f9d07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07/0c75fe19-a93c-4656-bf2d-b205565f9d07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:02:43:66:1a:e1:96:77:2b:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c75fe19-a93c-4656-bf2d-b205565f9d07 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=f00a80be-1cda-489b-9bd4-8c456049e7f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d4:30:57:e3:f8:18:ba:7b:81:b8:b2:ed:e3: 6d:d8:cd:ac:d6:60:6d:db:e4:ab:a6:e4:e9:46:4d: 22:25:9a:e8:66:04:0d:78:fa:3c:a5:49:57:4d:66: 00:3e:ee:a6:4f:46:d7:5a:5e:71:9c:47:39:6e:eb: 68:ca:7a:ab:e3:8d:fe:56:26:e1:32:e3:35:35:4f: f1:34:41:00:84:8e:5a:b8:a2:8f:c6:3c:ff:33:cb: 22:cb:0c:ac:eb:8e:a5:e4:4a:54:54:36:26:cc:3e: c4:59:70:bc:d1:bd:ff:4b:34:a6:a0:05:72:9a:43: 85:be:e2:5b:bd:cb:52:86:8d:53:b4:ce:b1:eb:59: 93:46:57:0a:ae:44:4d:30:ca:5b:f5:93:8d:23:fa: 65:95:3b:68:49:58:6e:7b:ef:78:c4:2a:8c:66:c1: 78:59:d5:ef:95:74:69:cd:cf:b4:6d:b5:56:33:ee: 27:ba:16:d4:ed:38:31:cf:5a:e5:58:67:00:cc:2c: 27:1c:8b:cc:8e:5e:4d:7f:d0:8f:0c:c5:1e:70:e3: ec:44:c7:d8:77:38:5e:28:07:f6:ce:81:b6:b1:a9: 59:b9:13:c2:aa:53:f1:53:ee:ed:9a:a3:26:7a:20: 15:47:12:a1:82:5b:c0:91:7a:a9:90:bb:1d:21:af: 0a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:88:2E:C8:B1:5C:28:BE:BA:2A:A3:7A:89:EC:A2:17:7A:23:2D:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07/c0aac8f0-caba-3622-a1be-349b5ab8e7a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07/0c75fe19-a93c-4656-bf2d-b205565f9d07.crl X509v3 Authority Key Identifier: keyid:6D:14:45:B4:DD:37:4A:3C:63:2C:A6:D0:69:3E:98:46:CF:B4:7C:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07.cer sbgp-ipAddrBlock: critical IPv4: 204.209.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:c1:f9:07:5a:4e:68:98:f7:7e:2e:ad:5b:1b:3d:9d:44:21: cc:b6:68:b9:95:9c:01:1d:4b:64:5b:13:53:62:e8:a4:36:86: 4e:04:1c:87:d6:fb:54:29:82:27:e7:fd:d1:3a:ee:20:1d:8a: b9:b1:ce:65:08:3c:48:21:11:ca:5c:09:29:66:5a:b4:11:89: a6:12:8f:d3:e3:f7:6e:82:e2:0b:f8:18:cd:2f:51:66:84:42: 84:e5:c4:6e:5c:ef:d9:96:19:b0:22:ac:c2:5b:ee:e4:08:07: 63:4c:d2:02:bc:e7:b6:78:32:8e:a7:43:f7:35:a1:9d:50:60: 01:bc:81:f7:cb:e2:58:47:c7:58:77:af:cc:f1:e8:ea:b0:38: 52:c3:6a:92:d2:db:fa:8c:ab:6f:51:f4:20:1f:d8:ab:78:08: 68:b1:34:0a:14:23:60:8e:fe:ef:a4:11:55:0b:36:c3:61:1a: 80:50:ae:9a:95:10:44:33:44:10:8e:70:22:12:14:44:e3:6b: 2e:42:43:f7:15:91:9f:9b:f5:47:92:9b:ed:08:6a:f1:06:7b: bd:ca:63:b4:c4:f3:4b:2c:c3:1d:04:fa:dd:4d:db:ae:d5:cb: 26:62:35:4a:13:3d:46:ae:9d:ec:de:a9:6c:c2:cb:21:27:47: 39:72:e7:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4DwJDZhrhlncrX0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM3NWZlMTktYTkzYy00NjU2LWJmMmQtYjIwNTU2NWY5 ZDA3MB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk ZjAwYTgwYmUtMWNkYS00ODliLTliZDQtOGM0NTYwNDllN2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9QwV+P4GLp7gbiy7eNt2M2s1mBt2+SrpuTp Rk0iJZroZgQNePo8pUlXTWYAPu6mT0bXWl5xnEc5butoynqr443+VibhMuM1NU/x NEEAhI5auKKPxjz/M8siywys646l5EpUVDYmzD7EWXC80b3/SzSmoAVymkOFvuJb vctSho1TtM6x61mTRlcKrkRNMMpb9ZONI/pllTtoSVhue+94xCqMZsF4WdXvlXRp zc+0bbVWM+4nuhbU7Tgxz1rlWGcAzCwnHIvMjl5Nf9CPDMUecOPsRMfYdzheKAf2 zoG2salZuRPCqlPxU+7tmqMmeiAVRxKhglvAkXqpkLsdIa8KUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJeILsixXCi+uiqjeonsohd6Iy3CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzc1 ZmUxOS1hOTNjLTQ2NTYtYmYyZC1iMjA1NTY1ZjlkMDcvYzBhYWM4ZjAtY2FiYS0z NjIyLWExYmUtMzQ5YjVhYjhlN2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGM3NWZlMTktYTkzYy00NjU2LWJm MmQtYjIwNTU2NWY5ZDA3LzBjNzVmZTE5LWE5M2MtNDY1Ni1iZjJkLWIyMDU1NjVm OWQwNy5jcmwwHwYDVR0jBBgwFoAUbRRFtN03SjxjLKbQaT6YRs+0fGEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzc1ZmUxOS1hOTNjLTQ2NTYtYmYyZC1iMjA1 NTY1ZjlkMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzNHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETB+QdaTmiY934urVsbPZ1EIcy2aLmVnAEdS2RbE1Ni6KQ2hk4EHIfW +1Qpgifn/dE67iAdirmxzmUIPEghEcpcCSlmWrQRiaYSj9Pj926C4gv4GM0vUWaE QoTlxG5c79mWGbAirMJb7uQIB2NM0gK857Z4Mo6nQ/c1oZ1QYAG8gffL4lhHx1h3 r8zx6OqwOFLDapLS2/qMq29R9CAf2Kt4CGixNAoUI2CO/u+kEVULNsNhGoBQrpqV EEQzRBCOcCISFETjay5CQ/cVkZ+b9UeSm+0IavEGe73KY7TE80sswx0E+t1N267V yyZiNUoTPUaunezeqWzCyyEnRzly534= -----END CERTIFICATE-----Generated at Sat Apr 12 13:29:36 2025 by rpki-client