$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/bb1281d1-e460-37d2-86c6-7963176a95b0.roa File: bb1281d1-e460-37d2-86c6-7963176a95b0.roa (raw, json) Hash identifier: XIsvJG5QyL3bD3g2WW5mRMaaBHDizsL9WWWvORn3YYE= Subject key identifier: 4C:71:AD:6B:B6:2C:67:09:8B:A5:4D:18:46:3E:92:FC:07:95:19:49 Certificate issuer: /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3 Certificate serial: 010D0C9F432858494733F0EF276D63F697212B40 Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/bb1281d1-e460-37d2-86c6-7963176a95b0.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 984 IP address blocks: 209.142.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:f0:ef:27:6d:63:f6:97:21:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3 Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=ada56bf3-575f-40a1-b26d-7ff416e6da6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ca:28:3b:a6:dd:78:e5:4a:86:8f:d9:f4:8a: 3b:db:28:ca:50:72:b3:8d:33:35:5a:71:30:f6:cf: db:59:3b:b6:13:97:d0:b8:78:2f:63:2c:0c:40:04: 45:b0:1c:25:d8:95:a1:2e:7d:1b:e3:97:e1:9f:dd: 6c:3c:59:6b:a2:2a:66:20:ee:4f:33:4b:91:5c:be: 43:c9:22:11:45:ac:49:bc:75:1f:20:f6:6d:8e:2f: b5:53:f3:b2:c3:d7:57:c1:b1:c2:c2:ad:ff:b2:ff: 7d:7d:f9:1a:70:99:0d:13:d2:13:ae:c2:8c:8d:fc: 13:4d:f9:ab:6c:2b:67:31:8c:7a:61:58:aa:0d:54: ee:32:95:9e:05:4c:a7:fa:93:45:e7:43:7e:01:14: 7a:fd:92:b4:55:87:f7:68:b1:70:76:b0:5f:29:bf: cf:33:c0:b5:54:f0:76:ae:81:0b:df:0d:71:a8:6e: 99:d6:c5:fb:b6:5f:6e:65:07:1a:d0:98:2f:9c:81: c0:12:df:37:ff:30:20:3a:6c:62:32:47:77:8a:44: 44:33:82:c5:b3:68:df:ad:46:ef:eb:a6:1a:78:9e: b3:5d:cb:63:0e:b1:25:00:64:93:56:f9:56:c1:42: b6:93:83:e6:77:0c:fb:7c:17:87:95:6d:a8:d7:63: 8b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:71:AD:6B:B6:2C:67:09:8B:A5:4D:18:46:3E:92:FC:07:95:19:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/bb1281d1-e460-37d2-86c6-7963176a95b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl X509v3 Authority Key Identifier: keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer sbgp-ipAddrBlock: critical IPv4: 209.142.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:92:5c:8b:68:03:55:d0:fd:8b:4b:88:e7:32:e1:96:27:7b: 3f:d2:02:09:e2:90:3e:42:19:9f:5f:d4:3e:c9:ac:55:ee:4f: f3:52:5d:41:ca:8d:33:5a:5e:c0:6a:ce:44:52:76:a0:88:07: 12:58:81:09:40:6b:f8:a6:22:78:ce:f8:5c:3a:6d:90:80:6b: 2f:80:68:08:dc:51:77:0a:c6:47:a3:35:f5:c9:af:d6:72:69: e5:ba:14:1d:c6:bb:41:ba:2e:77:a6:a5:81:98:6d:a1:c7:50: b2:01:2f:e0:c8:93:c0:30:c9:c4:24:a8:1a:38:08:71:6d:bb: af:1c:54:30:76:9c:38:04:a7:8e:cd:1a:07:bc:47:1e:95:d4: fa:e3:8a:e0:08:94:94:bc:8d:79:5c:c2:17:65:92:b6:f5:ae: 6a:6c:66:cd:74:0e:30:f5:a1:22:ea:3a:98:d6:c5:ed:59:ec: e5:44:d7:97:ab:c7:be:85:ad:47:ba:45:e5:70:33:0d:b9:ad: 14:11:70:b0:64:81:81:5d:20:5c:dd:1c:f5:af:70:f5:8b:88: 6f:a0:47:a7:51:fc:37:cb:ab:01:59:ee:4f:a5:fc:33:24:58: 4e:69:1d:4c:0c:82:07:16:19:9d:c7:06:5e:38:9f:60:ab:4d: 36:4c:33:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM/DvJ21j9pchK0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjMzhhN2QtMmI1Yy00MzJjLTlkYTAtNzliY2Y5Njc4 MGMzMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk YWRhNTZiZjMtNTc1Zi00MGExLWIyNmQtN2ZmNDE2ZTZkYTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8ooO6bdeOVKho/Z9Io72yjKUHKzjTM1WnEw 9s/bWTu2E5fQuHgvYywMQARFsBwl2JWhLn0b45fhn91sPFlroipmIO5PM0uRXL5D ySIRRaxJvHUfIPZtji+1U/Oyw9dXwbHCwq3/sv99ffkacJkNE9ITrsKMjfwTTfmr bCtnMYx6YViqDVTuMpWeBUyn+pNF50N+ARR6/ZK0VYf3aLFwdrBfKb/PM8C1VPB2 roEL3w1xqG6Z1sX7tl9uZQca0JgvnIHAEt83/zAgOmxiMkd3ikREM4LFs2jfrUbv 66YaeJ6zXctjDrElAGSTVvlWwUK2k4Pmdwz7fBeHlW2o12OLBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExxrWu2LGcJi6VNGEY+kvwHlRlJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83M2Mz OGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJjZjk2NzgwYzMvYmIxMjgxZDEtZTQ2MC0z N2QyLTg2YzYtNzk2MzE3NmE5NWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzNjMzhhN2QtMmI1Yy00MzJjLTlk YTAtNzliY2Y5Njc4MGMzLzczYzM4YTdkLTJiNWMtNDMyYy05ZGEwLTc5YmNmOTY3 ODBjMy5jcmwwHwYDVR0jBBgwFoAUkm0CVqEdKJlOuyyRi5298DR4zDEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83M2MzOGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJj Zjk2NzgwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y5nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6SXItoA1XQ/YtLiOcy4ZYnez/SAgnikD5CGZ9f1D7JrFXuT/NSXUHK jTNaXsBqzkRSdqCIBxJYgQlAa/imInjO+Fw6bZCAay+AaAjcUXcKxkejNfXJr9Zy aeW6FB3Gu0G6LnempYGYbaHHULIBL+DIk8AwycQkqBo4CHFtu68cVDB2nDgEp47N Gge8Rx6V1PrjiuAIlJS8jXlcwhdlkrb1rmpsZs10DjD1oSLqOpjWxe1Z7OVE15er x76FrUe6ReVwMw25rRQRcLBkgYFdIFzdHPWvcPWLiG+gR6dR/DfLqwFZ7k+l/DMk WE5pHUwMggcWGZ3HBl44n2CrTTZMM24= -----END CERTIFICATE-----Generated at Sat Apr 5 03:43:08 2025 by rpki-client