$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/fe58db13-046a-3bdc-a208-09c6956ecec3.roa File: fe58db13-046a-3bdc-a208-09c6956ecec3.roa (raw, json) Hash identifier: rpGHyoY4pFzr49jqQ2dHV8dB1hXyRLiCfi/mVHvk6S4= Subject key identifier: A7:F3:71:23:72:4D:53:EB:6A:17:B7:47:C8:8C:36:AE:93:83:7D:9E Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F43285849166BA738EB2C2993622A7700 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/fe58db13-046a-3bdc-a208-09c6956ecec3.roa Signing time: Wed 05 Mar 2025 13:38:31 +0000 ROA not before: Wed 05 Mar 2025 13:38:31 +0000 ROA not after: Tue 03 Jun 2025 12:38:31 +0000 asID: 53356 IP address blocks: 209.178.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:16:6b:a7:38:eb:2c:29:93:62:2a:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Mar 5 13:38:31 2025 GMT Not After : Jun 3 12:38:31 2025 GMT Subject: CN=df082d69-dc36-4a90-a033-a800adef2258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b7:e9:b2:65:a8:15:5f:9f:e2:6e:65:35:33: 19:68:3b:6d:e1:a0:04:4d:50:0f:bb:34:e4:b6:57: cf:7f:2c:be:3e:94:0c:ea:2b:d6:af:b3:03:ee:f0: e0:9e:5b:ff:bb:cc:da:3f:30:f1:e7:39:b9:06:f0: ee:19:e8:62:fd:83:f8:09:15:26:bb:5d:07:19:b2: 62:04:a7:6d:4a:8c:0e:03:18:63:94:c8:ad:b2:aa: af:66:15:e7:c7:a9:14:85:93:3e:e9:e9:8b:39:72: 8a:fe:f2:6e:8e:ed:21:8d:68:40:66:93:d8:91:ea: e1:e8:a5:da:e2:d2:70:37:13:ea:0d:97:f3:8f:b6: 8b:3f:83:d4:c7:a5:2f:f6:fd:0d:ab:42:e0:b8:dc: 33:9e:36:49:64:02:40:1e:97:c9:30:8d:6a:ea:70: dd:50:2b:81:49:fa:40:21:59:c3:15:e1:34:4f:f3: b5:c5:a2:8d:fa:3b:70:85:bb:02:1e:00:49:c2:55: 74:e6:73:51:10:ac:c0:a5:20:05:20:a7:c9:3a:7d: 8e:b9:9b:67:9f:98:ab:31:2d:2d:f9:f2:06:16:e4: 22:91:a7:e1:39:38:a7:19:90:aa:5e:da:22:b7:08: 3d:90:08:d0:ba:52:4d:44:e1:91:9e:e8:04:9e:a9: 93:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F3:71:23:72:4D:53:EB:6A:17:B7:47:C8:8C:36:AE:93:83:7D:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/fe58db13-046a-3bdc-a208-09c6956ecec3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 209.178.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:84:b2:7c:84:13:36:22:39:13:d6:3e:62:18:e8:0b:d4:85: 57:9a:d1:f8:e6:45:0c:df:d3:53:ab:db:b2:60:16:61:4d:cb: 70:7b:78:3d:f2:33:af:68:9b:cc:c7:bf:41:e4:e0:33:e1:6e: 23:ee:5b:78:13:06:85:1f:23:91:42:9d:a4:74:3b:4a:e6:9e: 0d:50:63:be:36:2e:22:a0:54:a8:2d:3c:e1:78:3b:87:80:0d: 02:71:d5:04:08:82:08:b4:10:4a:f4:d1:8f:fa:72:aa:82:85: df:e3:c6:23:1f:7f:d9:76:68:55:89:02:a4:b2:44:6e:dd:fb: c7:6a:66:7b:65:ac:9b:b2:4d:70:b5:d3:73:8c:7c:4b:f8:3a: 8d:b1:38:85:b9:b9:5f:54:75:85:21:77:c7:f4:21:6f:e3:de: 46:95:c3:45:03:8b:ee:4a:d2:c3:f9:5e:13:fb:05:e1:db:c4: a9:ee:ca:db:60:bc:f7:7a:ab:32:f2:74:fd:eb:98:c7:1b:83: f4:41:8b:1b:a0:c2:54:ab:31:85:e2:5a:e0:ad:52:70:9c:8c: b9:86:ae:8c:5d:bc:be:70:70:87:5b:2d:b8:f8:73:50:c7:7f: 33:ea:3d:34:6b:11:2d:4e:33:81:f8:aa:d7:32:07:5b:ad:ad: c3:f9:15:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkWa6c46ywpk2IqdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDMwNTEzMzgzMVoXDTI1MDYwMzEyMzgzMVowLzEtMCsGA1UEAxMk ZGYwODJkNjktZGMzNi00YTkwLWEwMzMtYTgwMGFkZWYyMjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrfpsmWoFV+f4m5lNTMZaDtt4aAETVAPuzTk tlfPfyy+PpQM6ivWr7MD7vDgnlv/u8zaPzDx5zm5BvDuGehi/YP4CRUmu10HGbJi BKdtSowOAxhjlMitsqqvZhXnx6kUhZM+6emLOXKK/vJuju0hjWhAZpPYkerh6KXa 4tJwNxPqDZfzj7aLP4PUx6Uv9v0Nq0LguNwznjZJZAJAHpfJMI1q6nDdUCuBSfpA IVnDFeE0T/O1xaKN+jtwhbsCHgBJwlV05nNREKzApSAFIKfJOn2OuZtnn5irMS0t +fIGFuQikafhOTinGZCqXtoitwg9kAjQulJNROGRnugEnqmTRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfzcSNyTVPrahe3R8iMNq6Tg32eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvZmU1OGRiMTMtMDQ2YS0z YmRjLWEyMDgtMDljNjk1NmVjZWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bLpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyEsnyEEzYiORPWPmIY6AvUhVea0fjmRQzf01Or27JgFmFNy3B7eD3y M69om8zHv0Hk4DPhbiPuW3gTBoUfI5FCnaR0O0rmng1QY742LiKgVKgtPOF4O4eA DQJx1QQIggi0EEr00Y/6cqqChd/jxiMff9l2aFWJAqSyRG7d+8dqZntlrJuyTXC1 03OMfEv4Oo2xOIW5uV9UdYUhd8f0IW/j3kaVw0UDi+5K0sP5XhP7BeHbxKnuyttg vPd6qzLydP3rmMcbg/RBixugwlSrMYXiWuCtUnCcjLmGroxdvL5wcIdbLbj4c1DH fzPqPTRrES1OM4H4qtcyB1utrcP5FYc= -----END CERTIFICATE-----Generated at Sat Apr 5 06:29:55 2025 by rpki-client