$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/44f4d94e-6d2b-3fc6-90f2-5d4925f83f9a.roa File: 44f4d94e-6d2b-3fc6-90f2-5d4925f83f9a.roa (raw, json) Hash identifier: BqCI6illX6bUdwwOmYWmW9qUlkZXr1T2YGNpAEIBX8U= Subject key identifier: E6:5C:F4:E6:EF:B2:3F:CF:A0:C7:68:4D:39:00:EB:05:03:84:B8:48 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584961B99ABDC37C7B5D788FE180 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/44f4d94e-6d2b-3fc6-90f2-5d4925f83f9a.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 11105 IP address blocks: 209.87.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:9a:bd:c3:7c:7b:5d:78:8f:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=f2ea40c6-55f2-4108-95a5-072c6902bf7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5d:b3:57:aa:7c:58:a3:e9:40:95:c7:f3:c4: 15:c0:ed:1a:69:04:17:34:b2:be:36:6b:4f:1c:54: ec:ff:f5:38:e7:23:34:5d:a3:01:5b:86:dd:20:b2: f2:49:cb:f1:05:7f:dc:c0:22:f5:40:de:28:36:01: 45:92:4c:80:94:7d:1e:32:ee:66:00:b7:75:7f:8f: be:19:fd:4e:18:a1:5e:65:2c:1b:d4:52:dd:d2:89: d6:7e:1c:55:79:4c:51:fb:18:0e:c1:ff:12:a6:c2: 02:81:5d:f7:7b:81:7a:94:77:10:e6:dd:20:9c:55: 45:63:43:81:43:74:50:72:54:b8:e2:46:19:a8:9e: 87:38:84:9c:88:6d:94:f8:6f:ba:16:67:4a:3c:a0: 7c:fd:2d:8c:ec:39:e7:80:a4:87:7b:d8:5a:f2:22: 78:c8:46:f8:a6:36:78:e8:e2:75:38:fc:0b:46:75: 23:25:71:f0:2f:c6:06:85:65:e9:22:ce:75:04:c1: 69:a7:6b:35:7f:78:a2:6f:78:6f:df:da:17:e2:a7: 1c:a3:ba:7e:26:47:5a:9d:62:0b:6c:e8:4f:ad:a8: f8:09:c6:a4:7c:ea:83:cc:f1:99:ce:c4:d0:d7:f8: f3:c4:b8:26:61:51:f0:06:58:9a:af:44:05:7f:5c: ec:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5C:F4:E6:EF:B2:3F:CF:A0:C7:68:4D:39:00:EB:05:03:84:B8:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/44f4d94e-6d2b-3fc6-90f2-5d4925f83f9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 209.87.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:d9:c4:6d:99:c9:5b:11:ec:8a:56:b1:8d:63:28:eb:87:1b: df:ae:f3:d8:be:a5:6a:0b:71:70:16:f0:a7:43:f9:5c:03:e7: 9b:41:4e:c0:ac:4d:c2:60:00:70:bc:fe:29:03:f9:23:33:20: 0f:c0:c8:45:21:80:94:b4:71:77:ae:0c:0b:74:28:39:21:65: 2c:64:4a:6b:09:e0:cb:c9:f7:48:29:a2:af:86:4f:27:60:4e: a3:4e:a2:a4:87:96:91:a3:67:52:3d:8c:77:47:83:d2:2c:56: 0e:4a:41:4f:ba:33:89:c2:74:33:ae:50:24:d3:f9:a7:83:1c: 26:52:00:7e:59:9c:90:4b:e0:db:59:d0:8e:25:60:a0:c3:8b: e0:c4:17:06:38:2e:d5:2d:80:e4:03:d1:2d:1d:fd:7f:7b:02: c3:1d:d7:77:5b:2a:80:37:aa:07:36:b4:70:51:43:70:fc:19: a2:4e:44:0f:91:c3:27:83:f4:d1:06:4d:4a:a6:bc:57:09:14: 48:91:0b:a5:cf:55:06:3c:95:e8:20:64:92:24:69:2b:22:f4: f1:bb:5d:fb:4b:da:93:0a:98:b0:db:16:03:d6:9c:80:41:5a: b5:06:68:89:f2:3e:07:29:d9:0b:b2:ad:cf:96:92:85:98:7a: 6c:f0:66:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZq9w3x7XXiP4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk ZjJlYTQwYzYtNTVmMi00MTA4LTk1YTUtMDcyYzY5MDJiZjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV2zV6p8WKPpQJXH88QVwO0aaQQXNLK+NmtP HFTs//U45yM0XaMBW4bdILLyScvxBX/cwCL1QN4oNgFFkkyAlH0eMu5mALd1f4++ Gf1OGKFeZSwb1FLd0onWfhxVeUxR+xgOwf8SpsICgV33e4F6lHcQ5t0gnFVFY0OB Q3RQclS44kYZqJ6HOISciG2U+G+6FmdKPKB8/S2M7DnngKSHe9ha8iJ4yEb4pjZ4 6OJ1OPwLRnUjJXHwL8YGhWXpIs51BMFpp2s1f3iib3hv39oX4qcco7p+JkdanWIL bOhPraj4CcakfOqDzPGZzsTQ1/jzxLgmYVHwBliar0QFf1zsLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZc9Obvsj/PoMdoTTkA6wUDhLhIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNDRmNGQ5NGUtNmQyYi0z ZmM2LTkwZjItNWQ0OTI1ZjgzZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VcfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/ZxG2ZyVsR7IpWsY1jKOuHG9+u89i+pWoLcXAW8KdD+VwD55tBTsCs TcJgAHC8/ikD+SMzIA/AyEUhgJS0cXeuDAt0KDkhZSxkSmsJ4MvJ90gpoq+GTydg TqNOoqSHlpGjZ1I9jHdHg9IsVg5KQU+6M4nCdDOuUCTT+aeDHCZSAH5ZnJBL4NtZ 0I4lYKDDi+DEFwY4LtUtgOQD0S0d/X97AsMd13dbKoA3qgc2tHBRQ3D8GaJORA+R wyeD9NEGTUqmvFcJFEiRC6XPVQY8leggZJIkaSsi9PG7XftL2pMKmLDbFgPWnIBB WrUGaInyPgcp2Quyrc+WkoWYemzwZqo= -----END CERTIFICATE-----Generated at Fri Apr 4 15:56:38 2025 by rpki-client