$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/40df0d8c-78eb-39e8-80b9-dfebb173d0bb.roa File: 40df0d8c-78eb-39e8-80b9-dfebb173d0bb.roa (raw, json) Hash identifier: s9smwPCwRtoLfC38RymnlTB87oJiU0VKyEN4uXy+PUA= Subject key identifier: 0D:5F:74:5E:93:FF:10:3B:AA:FB:D4:C3:FC:CD:97:18:01:04:E7:F4 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584965E97467A0D265B055E91900 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/40df0d8c-78eb-39e8-80b9-dfebb173d0bb.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 271 IP address blocks: 209.87.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:74:67:a0:d2:65:b0:55:e9:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=d1dd8029-1248-4629-b435-a64192ed9d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c0:8b:6c:ac:fc:b1:41:cc:14:f6:15:51:01: 41:77:a7:65:37:de:d6:61:b4:98:85:3d:f1:28:8b: ff:df:3a:6a:8b:1c:fc:49:f6:aa:34:c3:c0:07:c5: 08:0b:6f:62:d2:70:90:2b:d0:72:6d:eb:a4:12:b6: 24:cf:4f:fb:65:41:c0:63:e1:de:c6:ce:ee:c6:a1: 78:c9:20:b7:43:66:8c:1c:14:77:16:5d:6e:7c:23: 6f:62:b8:04:d7:84:05:0d:cd:95:00:95:c4:2b:da: 9b:17:55:1f:82:63:67:51:fb:14:43:0e:22:b8:ab: 53:59:34:4c:d7:08:91:c0:e6:7f:32:97:2d:78:a8: d5:da:dc:0b:fc:20:50:9f:8e:17:c6:03:ed:ff:c6: b6:06:40:86:df:38:0a:87:00:b0:49:8b:0a:48:12: f5:80:80:a1:8e:6b:36:6c:b1:80:15:fe:47:62:7b: df:4f:17:5d:87:a8:6f:d2:4d:27:dc:6f:24:5d:6a: 12:e6:01:3a:d5:26:dc:73:15:91:f5:3f:b9:f3:98: 4d:87:30:0b:15:61:77:cc:24:ae:9c:4b:03:fc:3a: 45:aa:8e:c7:26:00:67:1e:a5:8b:7f:16:2b:a3:c8: e9:29:36:46:24:e7:25:0b:f5:5e:32:58:f1:20:3d: fb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5F:74:5E:93:FF:10:3B:AA:FB:D4:C3:FC:CD:97:18:01:04:E7:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/40df0d8c-78eb-39e8-80b9-dfebb173d0bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 209.87.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:5d:d8:d1:a4:8f:54:4c:1c:3c:9d:9c:e4:3f:04:2c:d7:99: ec:bf:7f:b7:c1:a4:3e:11:f9:24:af:18:a5:30:01:de:17:65: 24:02:3d:7b:03:83:df:1d:98:a0:a2:35:ec:cc:09:a0:10:37: a4:3f:b3:4d:2b:9d:d8:3e:84:be:5e:3d:cc:78:95:2e:cf:50: de:d3:3e:b0:1f:64:65:6a:4d:7a:db:70:3e:b4:66:df:3f:91: 16:c6:12:92:94:fe:a0:01:90:f8:19:48:52:96:f9:72:99:8e: c1:94:12:f0:87:2b:1c:02:d4:52:bc:30:b8:4a:54:9f:72:05: 84:d1:a8:76:b6:15:60:d6:eb:3f:f3:f1:a6:43:cf:3c:c0:59: f2:30:e5:40:18:8e:72:a2:7d:2f:72:22:36:4e:6b:7d:35:2f: 55:51:ab:19:30:ce:13:22:0f:1f:08:2e:b3:dc:f2:b0:27:6c: 52:16:09:1d:f5:e2:7b:1b:d9:bc:38:02:af:b2:b3:01:75:d0: f4:dc:70:2f:93:38:41:5a:41:90:0d:52:a6:34:63:ab:0b:96: 1a:15:18:f1:50:10:ef:db:3e:b9:4c:5b:05:13:13:05:5f:54: a6:e3:f6:ee:b0:fb:0e:c1:89:be:72:92:c0:76:36:ed:0e:45: f0:5b:d1:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEll6XRnoNJlsFXpGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk ZDFkZDgwMjktMTI0OC00NjI5LWI0MzUtYTY0MTkyZWQ5ZDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcCLbKz8sUHMFPYVUQFBd6dlN97WYbSYhT3x KIv/3zpqixz8SfaqNMPAB8UIC29i0nCQK9BybeukErYkz0/7ZUHAY+Hexs7uxqF4 ySC3Q2aMHBR3Fl1ufCNvYrgE14QFDc2VAJXEK9qbF1UfgmNnUfsUQw4iuKtTWTRM 1wiRwOZ/MpcteKjV2twL/CBQn44XxgPt/8a2BkCG3zgKhwCwSYsKSBL1gIChjms2 bLGAFf5HYnvfTxddh6hv0k0n3G8kXWoS5gE61SbccxWR9T+585hNhzALFWF3zCSu nEsD/DpFqo7HJgBnHqWLfxYro8jpKTZGJOclC/VeMljxID37XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1fdF6T/xA7qvvUw/zNlxgBBOf0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNDBkZjBkOGMtNzhlYi0z OWU4LTgwYjktZGZlYmIxNzNkMGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0VcYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5d2NGkj1RMHDydnOQ/BCzXmey/f7fBpD4R+SSvGKUwAd4XZSQCPXsD g98dmKCiNezMCaAQN6Q/s00rndg+hL5ePcx4lS7PUN7TPrAfZGVqTXrbcD60Zt8/ kRbGEpKU/qABkPgZSFKW+XKZjsGUEvCHKxwC1FK8MLhKVJ9yBYTRqHa2FWDW6z/z 8aZDzzzAWfIw5UAYjnKifS9yIjZOa301L1VRqxkwzhMiDx8ILrPc8rAnbFIWCR31 4nsb2bw4Aq+yswF10PTccC+TOEFaQZANUqY0Y6sLlhoVGPFQEO/bPrlMWwUTEwVf VKbj9u6w+w7Bib5yksB2Nu0ORfBb0cc= -----END CERTIFICATE-----Generated at Fri Apr 4 15:56:43 2025 by rpki-client