$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/16acb57d-3c0a-3f43-8b14-b036a05c515b.roa File: 16acb57d-3c0a-3f43-8b14-b036a05c515b.roa (raw, json) Hash identifier: VsXHodM7KePoySENLt+Kr0i3mNs7LHA/4hby1YKcJ9g= Subject key identifier: 29:81:4C:9A:B9:FC:93:60:D8:14:A3:46:A3:36:3D:94:FF:24:09:DC Certificate issuer: /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Certificate serial: 010D0C9F43285849203C12876CB2E2B68CDB8980 Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/16acb57d-3c0a-3f43-8b14-b036a05c515b.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 400238 IP address blocks: 209.145.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:12:87:6c:b2:e2:b6:8c:db:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=38c30275-2732-4a09-8aa8-2f98f61ccb0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9a:8f:bd:61:51:99:91:88:9b:4b:43:81:88: f7:c5:db:3f:f4:de:ac:34:4e:eb:ba:16:73:f3:f6: 7c:8d:c7:15:da:ff:ea:84:31:8b:b7:de:68:15:9e: 07:58:6e:79:76:5d:df:f8:82:22:ff:87:da:68:b0: 12:2b:13:a7:1f:60:42:f3:c5:09:69:49:86:58:f1: e2:4a:dc:00:85:14:b4:9e:ea:24:cc:a6:2e:70:d7: b5:4e:c9:5a:77:0d:dc:8d:5a:fc:32:86:65:bb:b6: 07:33:41:39:02:93:0d:ac:fa:80:12:32:96:43:b1: c6:81:63:15:32:31:7f:80:2e:cd:04:3c:70:0e:29: 57:03:bc:04:a2:d5:53:42:e8:7e:83:33:8c:2e:0c: ac:35:27:79:1a:7d:60:3d:98:d4:b5:78:1b:bd:b3: f8:d4:8a:d8:2e:85:0d:d0:dc:b5:94:c2:31:93:47: a5:4c:51:c3:2e:5d:67:7b:b3:14:7c:39:20:64:e0: d4:52:80:04:eb:dc:7d:a5:40:71:a3:4e:25:18:57: 95:bb:89:92:ed:a4:2d:3e:0f:5f:40:0d:9e:1d:63: 57:44:9e:1a:37:ab:eb:21:6b:1d:16:4e:4d:89:49: c1:6e:a4:06:f5:6f:c9:26:93:bf:05:6f:26:e6:52: ed:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:81:4C:9A:B9:FC:93:60:D8:14:A3:46:A3:36:3D:94:FF:24:09:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/16acb57d-3c0a-3f43-8b14-b036a05c515b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl X509v3 Authority Key Identifier: keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer sbgp-ipAddrBlock: critical IPv4: 209.145.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:43:6f:91:b6:cb:c9:34:2e:86:80:be:fc:4e:e2:27:1b:ef: 59:b8:b7:69:27:09:bc:38:3c:84:0d:9f:18:7f:a2:5a:31:8a: a1:c7:d6:dd:00:40:88:52:2d:19:1a:9d:3e:b5:45:8a:e3:ea: 48:85:8b:50:70:32:df:cd:bf:59:f6:89:5f:b8:7a:89:53:ef: 45:08:2b:d2:46:ea:26:b5:b7:18:2e:0c:16:84:eb:5f:bd:47: cf:e0:d5:38:0d:6e:b6:f2:c0:b0:18:09:5c:eb:4a:1f:71:07: 09:69:b2:0a:54:fb:d2:3d:f4:3e:c9:5e:8f:7d:3a:3c:e1:f1: c9:f7:b7:46:cd:21:6e:38:8d:0e:60:0b:e9:43:82:7a:5e:e3: 58:e5:50:03:89:19:17:e3:f6:bd:9f:61:6d:b0:33:06:ad:f3: e3:e0:3b:3d:1b:66:74:82:48:3a:9d:d1:96:e0:b6:b9:df:3e: cf:9a:06:44:07:3d:6b:36:c0:c5:c8:12:fd:11:ac:2e:3f:20: d9:18:13:70:77:3f:a9:7a:91:4f:91:f1:51:de:27:fb:65:ff: c7:09:09:f2:a1:e7:8c:44:67:fd:5b:93:26:e0:bc:00:a0:97: e2:20:aa:cf:8a:62:55:3f:99:b7:91:00:78:e1:df:7f:f9:8f: e7:0b:97:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPBKHbLLitozbiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY2YTZjOGUtYWE3My00ZDgyLWEyYjEtZTYxOWViM2Yy YWVjMB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk MzhjMzAyNzUtMjczMi00YTA5LThhYTgtMmY5OGY2MWNjYjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJqPvWFRmZGIm0tDgYj3xds/9N6sNE7ruhZz 8/Z8jccV2v/qhDGLt95oFZ4HWG55dl3f+IIi/4faaLASKxOnH2BC88UJaUmGWPHi StwAhRS0nuokzKYucNe1Tsladw3cjVr8MoZlu7YHM0E5ApMNrPqAEjKWQ7HGgWMV MjF/gC7NBDxwDilXA7wEotVTQuh+gzOMLgysNSd5Gn1gPZjUtXgbvbP41IrYLoUN 0Ny1lMIxk0elTFHDLl1ne7MUfDkgZODUUoAE69x9pUBxo04lGFeVu4mS7aQtPg9f QA2eHWNXRJ4aN6vrIWsdFk5NiUnBbqQG9W/JJpO/BW8m5lLtiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmBTJq5/JNg2BSjRqM2PZT/JAncMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZh NmM4ZS1hYTczLTRkODItYTJiMS1lNjE5ZWIzZjJhZWMvMTZhY2I1N2QtM2MwYS0z ZjQzLThiMTQtYjAzNmEwNWM1MTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWY2YTZjOGUtYWE3My00ZDgyLWEy YjEtZTYxOWViM2YyYWVjLzFmNmE2YzhlLWFhNzMtNGQ4Mi1hMmIxLWU2MTllYjNm MmFlYy5jcmwwHwYDVR0jBBgwFoAU4cKiXdGkcBTXif4pkOW5K7a7dxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZhNmM4ZS1hYTczLTRkODItYTJiMS1lNjE5 ZWIzZjJhZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZEpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINDb5G2y8k0LoaAvvxO4icb71m4t2knCbw4PIQNnxh/oloxiqHH1t0A QIhSLRkanT61RYrj6kiFi1BwMt/Nv1n2iV+4eolT70UIK9JG6ia1txguDBaE61+9 R8/g1TgNbrbywLAYCVzrSh9xBwlpsgpU+9I99D7JXo99Ojzh8cn3t0bNIW44jQ5g C+lDgnpe41jlUAOJGRfj9r2fYW2wMwat8+PgOz0bZnSCSDqd0ZbgtrnfPs+aBkQH PWs2wMXIEv0RrC4/INkYE3B3P6l6kU+R8VHeJ/tl/8cJCfKh54xEZ/1bkybgvACg l+Igqs+KYlU/mbeRAHjh33/5j+cLl4g= -----END CERTIFICATE-----Generated at Sun Apr 6 13:34:15 2025 by rpki-client