$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/0cba3e52-9fe1-3e95-8a27-07ec1927136f.roa File: 0cba3e52-9fe1-3e95-8a27-07ec1927136f.roa (raw, json) Hash identifier: +aawFP7nCpANJoZoaOROMlrmxi6QJFnUoFpUenpWKEA= Subject key identifier: D6:C8:E4:B4:5D:5A:A7:1D:5E:2C:67:F1:60:70:4C:C8:F3:63:A5:3E Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F43285849619F46C2A0AD23654A5C6D00 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/0cba3e52-9fe1-3e95-8a27-07ec1927136f.roa Signing time: Tue 01 Apr 2025 12:08:09 +0000 ROA not before: Tue 01 Apr 2025 12:08:09 +0000 ROA not after: Mon 30 Jun 2025 12:08:09 +0000 asID: 6079 IP address blocks: 209.178.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:9f:46:c2:a0:ad:23:65:4a:5c:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Apr 1 12:08:09 2025 GMT Not After : Jun 30 12:08:09 2025 GMT Subject: CN=d579f25b-1185-49c8-b6cf-d4da4f8005b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:10:8e:12:dd:c9:ab:34:3c:f1:40:84:86:33: 3c:8e:e4:e5:67:e1:ea:1d:ea:88:4d:c1:1b:b9:76: 26:0e:c7:8f:f1:95:34:75:cc:63:28:0f:f9:90:32: f0:d7:95:f6:49:b8:1c:24:7d:68:29:70:05:1d:f9: 12:5b:54:97:14:1a:71:35:80:b6:72:50:30:80:3e: da:05:05:d9:b4:7c:39:c2:b2:de:47:13:79:ba:ba: 7d:d7:a5:28:6b:58:d5:7b:f8:71:c0:d9:28:f2:43: e6:b0:29:47:1e:d6:a3:70:bf:b5:ae:ae:1d:e6:4d: 95:ce:0e:fe:ae:3a:50:cc:88:dc:13:65:a2:2c:58: 4e:26:03:db:79:17:25:44:ac:e2:cc:f6:cc:0b:a7: 42:dd:e3:c5:7c:d2:dd:98:db:7b:43:0b:d3:ff:53: 7b:76:50:29:56:09:00:b7:27:02:4f:85:41:a8:95: fb:75:c8:96:1b:ba:bb:a5:c5:7d:c9:88:e6:16:49: 3f:e6:25:62:f8:10:a9:b9:a6:f9:e5:07:fc:1a:5b: 43:7a:af:15:70:8e:e7:42:6e:1c:1e:8e:b0:b8:a1: 4c:fa:49:2c:e7:cf:9c:41:ac:e4:d4:b6:1c:7b:30: d8:f9:ed:1b:3a:c4:0e:33:98:b9:80:42:76:f4:ff: 31:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C8:E4:B4:5D:5A:A7:1D:5E:2C:67:F1:60:70:4C:C8:F3:63:A5:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/0cba3e52-9fe1-3e95-8a27-07ec1927136f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 209.178.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:19:d6:b3:72:50:ec:21:62:ba:a2:b2:46:fa:e5:a4:ac:d5: 06:d1:66:97:b0:ff:b6:ae:02:da:48:16:0f:9f:f9:45:58:7b: 3b:27:51:70:45:da:09:5a:7c:9c:0c:eb:f8:8e:c6:df:a5:ec: 60:83:e4:f7:6a:bd:33:d0:82:34:73:e0:ca:53:cf:20:c2:29: c7:56:17:72:bd:0f:51:eb:32:1b:47:8d:e8:5a:8a:e9:d9:7b: 1a:bc:81:51:20:05:02:5b:ab:7f:39:28:3e:3c:56:0c:65:79: 93:2d:fb:ea:64:43:9e:58:52:2b:86:88:1f:fa:e4:6d:e5:91: b0:15:3c:b7:a4:83:02:1c:94:44:92:a6:3d:99:5e:a9:98:ff: 89:9b:81:46:18:5c:16:90:45:87:1c:60:81:9d:df:c4:a2:85: ac:f5:cd:b8:91:e2:8b:c9:e6:9c:c3:c2:f6:59:5e:31:0e:1c: 15:ca:d2:80:ec:e9:ab:fc:57:64:13:42:77:e8:9b:e6:73:8c: 4f:b0:94:b0:78:c1:df:e9:8e:eb:b9:fa:42:d7:89:62:59:c2: a8:9a:38:95:93:26:e9:f4:03:1d:90:65:0a:0e:f8:a9:d4:7b: 76:73:05:43:47:e9:ad:12:90:20:7d:a6:af:0e:85:d7:d7:d0: fa:9b:eb:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhn0bCoK0jZUpcbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDQwMTEyMDgwOVoXDTI1MDYzMDEyMDgwOVowLzEtMCsGA1UEAxMk ZDU3OWYyNWItMTE4NS00OWM4LWI2Y2YtZDRkYTRmODAwNWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihCOEt3JqzQ88UCEhjM8juTlZ+HqHeqITcEb uXYmDseP8ZU0dcxjKA/5kDLw15X2SbgcJH1oKXAFHfkSW1SXFBpxNYC2clAwgD7a BQXZtHw5wrLeRxN5urp916Uoa1jVe/hxwNko8kPmsClHHtajcL+1rq4d5k2Vzg7+ rjpQzIjcE2WiLFhOJgPbeRclRKzizPbMC6dC3ePFfNLdmNt7QwvT/1N7dlApVgkA tycCT4VBqJX7dciWG7q7pcV9yYjmFkk/5iVi+BCpuab55Qf8GltDeq8VcI7nQm4c Ho6wuKFM+kks58+cQazk1LYcezDY+e0bOsQOM5i5gEJ29P8x2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbI5LRdWqcdXixn8WBwTMjzY6U+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvMGNiYTNlNTItOWZlMS0z ZTk1LThhMjctMDdlYzE5MjcxMzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bLsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0Z1rNyUOwhYrqiskb65aSs1QbRZpew/7auAtpIFg+f+UVYezsnUXBF 2glafJwM6/iOxt+l7GCD5PdqvTPQgjRz4MpTzyDCKcdWF3K9D1HrMhtHjehaiunZ exq8gVEgBQJbq385KD48VgxleZMt++pkQ55YUiuGiB/65G3lkbAVPLekgwIclESS pj2ZXqmY/4mbgUYYXBaQRYccYIGd38Sihaz1zbiR4ovJ5pzDwvZZXjEOHBXK0oDs 6av8V2QTQnfom+ZzjE+wlLB4wd/pjuu5+kLXiWJZwqiaOJWTJun0Ax2QZQoO+KnU e3ZzBUNH6a0SkCB9pq8OhdfX0Pqb6/Q= -----END CERTIFICATE-----Generated at Fri Apr 4 19:08:17 2025 by rpki-client