$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/7e48d7bf-de4f-3cb7-979e-2a2b474f4a6a.roa File: 7e48d7bf-de4f-3cb7-979e-2a2b474f4a6a.roa (raw, json) Hash identifier: RUnBMJ6MaQIlDpkoM47LxamH4Jtj4i4kYuCFHN+YDQI= Subject key identifier: 16:A7:68:43:7A:A8:6F:57:B6:26:0F:E1:8C:E6:8E:3F:44:F4:8A:0D Certificate issuer: /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3 Certificate serial: 010D0C9F43285848BFEBA4BACEDAE10B3C533128 Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/7e48d7bf-de4f-3cb7-979e-2a2b474f4a6a.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 209.142.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:a4:ba:ce:da:e1:0b:3c:53:31:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=4977be7c-c6d4-467f-95e4-dcc6c7525f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:82:79:20:1d:04:fa:67:22:c1:91:e5:20:88: 06:70:8c:65:36:6a:16:7b:ca:12:9c:fe:c1:9b:31: 1a:b6:ab:5c:ab:da:a0:87:3e:4b:20:9e:45:b2:22: b6:43:f1:8d:67:bd:27:70:27:cd:aa:24:12:0e:40: 34:14:c8:80:2c:6c:d8:c4:44:bd:26:53:96:2c:d9: 25:78:6e:42:cd:90:1d:c3:1e:5f:c4:c2:a8:2f:94: ff:37:0e:63:ff:6b:98:cf:0e:b5:d3:41:29:f8:01: 4e:6b:b4:04:f0:79:71:7b:ee:32:dd:61:62:56:a0: c8:f3:5a:6c:25:91:4a:48:8d:b5:c0:fb:d7:78:0f: 02:81:e8:b0:95:a1:df:4e:a4:87:79:fb:68:0b:59: 68:e3:0b:3b:81:de:fb:bd:ba:71:ec:dc:6c:af:73: 40:8d:01:02:ff:9b:87:0a:eb:4e:59:b9:55:c1:a2: 84:1a:0e:49:09:61:00:65:ba:b5:cd:b1:ea:bf:c3: b9:8c:b1:e7:d0:4a:8f:58:6f:97:b4:49:b8:3f:45: 3b:ef:19:28:43:64:17:39:be:4f:1b:33:aa:d3:07: c0:e7:88:26:03:1c:fc:66:b3:f0:88:a9:06:5e:34: f2:53:8d:59:88:a3:a3:7d:4f:a8:c8:eb:e2:91:1b: 4a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A7:68:43:7A:A8:6F:57:B6:26:0F:E1:8C:E6:8E:3F:44:F4:8A:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/7e48d7bf-de4f-3cb7-979e-2a2b474f4a6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl X509v3 Authority Key Identifier: keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer sbgp-ipAddrBlock: critical IPv4: 209.142.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:fe:bd:03:c7:3e:d1:d2:bd:4d:d0:c7:8e:2f:79:dd:70:e4: 6b:7d:c2:bd:88:a0:43:c9:19:d4:82:ea:97:7a:d5:f0:c1:55: 7f:33:56:01:20:69:32:77:53:88:5b:76:6d:45:0d:37:26:ee: 14:5b:c4:c3:ca:3d:3f:27:0a:ba:c7:89:2c:65:64:9d:fa:d5: 51:29:f4:af:d0:70:9c:fa:ad:ac:3d:d7:97:fc:8e:8e:af:a1: b0:8c:22:26:e2:14:64:e3:8a:04:61:14:45:9a:38:95:7d:03: b9:c0:d1:cd:60:43:eb:53:4a:75:e3:bc:f1:30:d9:8c:bb:63: 07:fc:14:cf:c7:3a:3e:cc:55:0f:e9:30:cf:a4:44:6e:81:c5: ec:b5:11:0f:55:08:eb:26:76:ee:3d:71:0b:35:f0:6f:57:d1: d8:ff:27:df:25:d3:b0:ae:e5:f9:3a:0f:42:21:5a:24:53:75: 15:94:45:c9:32:e8:9f:61:17:ad:e6:54:5c:ed:60:30:08:1f: 5d:7f:2b:99:2a:de:20:0d:d6:55:6e:63:79:a6:f4:af:a7:25: d4:ed:18:df:49:01:16:3b:61:b9:3e:af:93:99:cd:3c:01:9c: a8:0c:21:4f:02:e4:70:36:72:7a:17:7a:bb:76:a6:48:7e:b5: ed:fa:54:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/66S6ztrhCzxTMSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjMzhhN2QtMmI1Yy00MzJjLTlkYTAtNzliY2Y5Njc4 MGMzMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk NDk3N2JlN2MtYzZkNC00NjdmLTk1ZTQtZGNjNmM3NTI1ZjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oJ5IB0E+mciwZHlIIgGcIxlNmoWe8oSnP7B mzEatqtcq9qghz5LIJ5FsiK2Q/GNZ70ncCfNqiQSDkA0FMiALGzYxES9JlOWLNkl eG5CzZAdwx5fxMKoL5T/Nw5j/2uYzw6100Ep+AFOa7QE8Hlxe+4y3WFiVqDI81ps JZFKSI21wPvXeA8CgeiwlaHfTqSHeftoC1lo4ws7gd77vbpx7Nxsr3NAjQEC/5uH CutOWblVwaKEGg5JCWEAZbq1zbHqv8O5jLHn0EqPWG+XtEm4P0U77xkoQ2QXOb5P GzOq0wfA54gmAxz8ZrPwiKkGXjTyU41ZiKOjfU+oyOvikRtKswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBanaEN6qG9XtiYP4Yzmjj9E9IoNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83M2Mz OGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJjZjk2NzgwYzMvN2U0OGQ3YmYtZGU0Zi0z Y2I3LTk3OWUtMmEyYjQ3NGY0YTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzNjMzhhN2QtMmI1Yy00MzJjLTlk YTAtNzliY2Y5Njc4MGMzLzczYzM4YTdkLTJiNWMtNDMyYy05ZGEwLTc5YmNmOTY3 ODBjMy5jcmwwHwYDVR0jBBgwFoAUkm0CVqEdKJlOuyyRi5298DR4zDEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83M2MzOGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJj Zjk2NzgwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y5kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFT+vQPHPtHSvU3Qx44ved1w5Gt9wr2IoEPJGdSC6pd61fDBVX8zVgEg aTJ3U4hbdm1FDTcm7hRbxMPKPT8nCrrHiSxlZJ361VEp9K/QcJz6raw915f8jo6v obCMIibiFGTjigRhFEWaOJV9A7nA0c1gQ+tTSnXjvPEw2Yy7Ywf8FM/HOj7MVQ/p MM+kRG6Bxey1EQ9VCOsmdu49cQs18G9X0dj/J98l07Cu5fk6D0IhWiRTdRWURcky 6J9hF63mVFztYDAIH11/K5kq3iAN1lVuY3mm9K+nJdTtGN9JARY7Ybk+r5OZzTwB nKgMIU8C5HA2cnoXert2pkh+te36VGE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:16 2025 by rpki-client