$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/efc30983-7bc9-38f7-8f16-a8f87278f805.roa File: efc30983-7bc9-38f7-8f16-a8f87278f805.roa (raw, json) Hash identifier: s15Yo1cr1vwETcMFtoZCPvIXOEAD+cO2QJS0lTh7+dY= Subject key identifier: DC:27:36:16:C8:31:11:84:30:96:6D:41:CD:34:FA:45:99:AE:8F:C2 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584961B99AE4CA8FDBA5B996E800 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/efc30983-7bc9-38f7-8f16-a8f87278f805.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 11105 IP address blocks: 209.87.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:9a:e4:ca:8f:db:a5:b9:96:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=43a62847-fc32-4f9e-b064-8074febda734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:19:86:8a:e1:71:bd:7c:74:11:07:72:ef:7d: 15:34:83:00:a7:72:ff:20:75:23:fe:f1:12:23:81: 6c:f1:31:11:e4:6d:ef:cb:7b:7e:7f:28:8b:d4:54: c6:ff:78:b9:bb:08:2d:2d:c5:91:06:a0:49:91:1e: 22:ea:06:de:65:eb:ac:39:23:ae:f5:44:37:7d:a2: 6c:ca:61:67:aa:be:d2:63:8c:12:6a:6d:51:ea:ae: dc:29:ec:33:28:6c:9f:97:a4:14:29:2b:44:90:26: 28:df:79:84:0a:f7:d9:ee:0a:cc:65:96:bf:95:ea: 6b:cf:83:58:08:9a:b2:02:dc:a4:4d:2c:9f:79:32: db:40:20:f2:16:2c:03:cd:e4:85:94:65:95:b0:b1: 66:ec:02:3c:9d:7e:b0:4d:80:b8:82:4c:25:05:fa: 1f:30:97:2d:10:2b:09:ca:91:d7:bb:45:4b:d8:c8: 8b:81:56:71:76:21:34:37:a0:3f:76:de:46:e2:c9: 2c:40:ce:4b:f0:70:b7:56:c6:58:f5:66:bf:59:b2: ed:ee:9a:15:b7:33:d5:a2:6f:f4:7d:7e:52:d3:b6: 43:ba:6b:f7:a2:44:de:4c:0c:1a:4e:f4:2e:5c:40: fb:d6:54:67:6f:67:27:65:1f:1c:de:ff:d5:c2:9e: 1e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:27:36:16:C8:31:11:84:30:96:6D:41:CD:34:FA:45:99:AE:8F:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/efc30983-7bc9-38f7-8f16-a8f87278f805.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 209.87.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:ef:5c:24:f0:7d:9d:85:79:31:61:d9:fe:86:7c:b6:97:01: bd:10:76:36:74:d9:a2:a8:2c:97:bf:ba:80:77:e6:d2:7a:20: b6:11:8b:eb:6a:8c:8b:5e:c1:6a:a7:94:b5:4a:66:75:ad:26: eb:bd:98:3e:c7:ae:79:13:1a:89:4b:e5:3b:f2:4a:1a:54:13: e4:2a:c9:0a:1a:91:24:61:ff:25:df:50:c5:3b:69:b4:22:14: 79:76:71:9e:af:32:75:11:6b:84:67:9d:7d:34:c4:ce:66:91: 9f:03:03:5c:07:a0:8c:02:4e:e5:90:82:ae:c6:ff:15:10:3a: 4b:12:07:77:fe:57:97:d4:68:1e:3d:67:be:2a:d0:39:07:97: 94:9e:7f:c7:2f:49:4f:d1:75:46:bf:b2:89:d6:c7:f6:66:88: 01:42:9b:63:8e:04:82:28:85:07:33:b8:6c:71:4e:51:38:db: 50:32:7c:80:f5:8d:34:37:b1:f9:39:9f:d7:52:02:2e:64:6f: b2:8a:20:ad:d6:b0:46:52:03:8b:00:c5:b5:d4:19:be:08:34: 36:6a:b3:a2:75:55:0f:6b:79:1e:08:4c:f9:ca:1f:7d:4d:80: 57:2d:97:86:f3:70:58:53:4c:12:2a:b3:6c:36:cd:c9:15:34: 3b:77:50:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZrkyo/bpbmW6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk NDNhNjI4NDctZmMzMi00ZjllLWIwNjQtODA3NGZlYmRhNzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRmGiuFxvXx0EQdy730VNIMAp3L/IHUj/vES I4Fs8TER5G3vy3t+fyiL1FTG/3i5uwgtLcWRBqBJkR4i6gbeZeusOSOu9UQ3faJs ymFnqr7SY4wSam1R6q7cKewzKGyfl6QUKStEkCYo33mECvfZ7grMZZa/leprz4NY CJqyAtykTSyfeTLbQCDyFiwDzeSFlGWVsLFm7AI8nX6wTYC4gkwlBfofMJctECsJ ypHXu0VL2MiLgVZxdiE0N6A/dt5G4sksQM5L8HC3VsZY9Wa/WbLt7poVtzPVom/0 fX5S07ZDumv3okTeTAwaTvQuXED71lRnb2cnZR8c3v/Vwp4emQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwnNhbIMRGEMJZtQc00+kWZro/CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvZWZjMzA5ODMtN2JjOS0z OGY3LThmMTYtYThmODcyNzhmODA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Vc8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7vXCTwfZ2FeTFh2f6GfLaXAb0QdjZ02aKoLJe/uoB35tJ6ILYRi+tq jItewWqnlLVKZnWtJuu9mD7HrnkTGolL5TvyShpUE+QqyQoakSRh/yXfUMU7abQi FHl2cZ6vMnURa4RnnX00xM5mkZ8DA1wHoIwCTuWQgq7G/xUQOksSB3f+V5fUaB49 Z74q0DkHl5Sef8cvSU/RdUa/sonWx/ZmiAFCm2OOBIIohQczuGxxTlE421AyfID1 jTQ3sfk5n9dSAi5kb7KKIK3WsEZSA4sAxbXUGb4INDZqs6J1VQ9reR4ITPnKH31N gFctl4bzcFhTTBIqs2w2zckVNDt3UBc= -----END CERTIFICATE-----Generated at Fri Apr 4 16:00:45 2025 by rpki-client