$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/f9b7eb33-b9b9-3d28-8064-2e14559854b9.roa File: f9b7eb33-b9b9-3d28-8064-2e14559854b9.roa (raw, json) Hash identifier: DXtbIn3iUbpQ61hqjaGxg7ocD9SqV48twI1bJC4uIxM= Subject key identifier: 74:A2:6E:66:75:5F:D6:F0:3E:E0:80:6C:9E:6B:55:52:AD:1C:EB:75 Certificate issuer: /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Certificate serial: 010D0C9F43285849203C11D8D690DF479E3CDD80 Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/f9b7eb33-b9b9-3d28-8064-2e14559854b9.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 400238 IP address blocks: 109.73.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:11:d8:d6:90:df:47:9e:3c:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=2d03a757-162f-40df-b1db-726125128621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d1:32:92:ec:de:14:03:f1:ab:e5:1b:9e:0a: 47:b2:a0:44:8c:98:7b:4b:61:c8:49:7c:a9:e3:70: fe:37:44:7e:dd:67:4a:40:53:2a:ad:91:44:fc:8f: c2:96:e4:22:9d:74:e2:e2:f3:56:83:b7:e3:00:86: 3c:12:14:8c:f3:1a:cf:4c:3c:3c:5e:be:f5:52:36: 60:ff:55:dd:9b:f6:cf:4d:ff:71:fe:18:82:cd:02: d8:35:9a:f3:3f:d8:21:36:6d:cb:6b:d8:71:8d:5e: f1:be:07:dd:ff:90:90:f8:4f:13:1d:a9:c2:1b:49: b0:59:ef:8f:70:6a:c1:9d:5b:fa:94:1f:2d:97:b9: 3f:66:f6:36:e7:64:f5:dd:86:99:b2:cd:4a:58:6b: 3f:3c:86:7f:cf:da:ab:b1:9a:a4:5b:21:3c:c1:3b: 54:74:21:4e:44:fc:e0:81:74:9f:9c:27:a7:20:93: 30:ad:17:28:bb:88:2c:62:08:d5:f3:9f:d2:41:e0: 9c:07:9d:36:76:fe:cd:8e:ce:51:57:de:a0:ea:49: 60:85:16:13:96:b9:3a:a1:15:ca:4a:92:74:3f:4e: 4c:29:11:e1:c5:c7:8c:86:eb:56:b6:02:26:82:96: 70:8d:19:c0:4d:94:89:6e:85:f8:49:02:a0:40:f7: fd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A2:6E:66:75:5F:D6:F0:3E:E0:80:6C:9E:6B:55:52:AD:1C:EB:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/f9b7eb33-b9b9-3d28-8064-2e14559854b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl X509v3 Authority Key Identifier: keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer sbgp-ipAddrBlock: critical IPv4: 109.73.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:9a:63:cf:e3:07:fb:11:d5:ec:bd:45:9c:87:7b:58:09:f8: f8:07:3c:3d:51:f9:b5:32:e5:7a:c5:45:a1:65:7d:33:04:14: 32:c2:e5:fe:56:75:0d:44:fc:7c:53:d1:ec:a1:24:76:a3:12: bc:a4:86:a3:62:2c:16:4b:d8:11:b8:0b:41:2f:59:cd:61:3d: 4d:35:4f:08:29:a1:28:96:e9:b7:80:7c:d5:de:46:e2:4d:39: 73:87:d9:d4:77:ee:60:40:73:f2:90:99:d7:28:d4:c6:3a:3e: f7:b2:e2:a4:c0:04:86:e5:2a:29:56:3f:79:7e:9f:39:14:72: 6c:9d:80:fa:56:bc:d7:f0:a8:50:9a:25:6b:4c:28:a6:cf:5f: fd:78:1a:3e:06:3b:bf:09:a3:20:0a:70:37:10:87:b0:b8:0c: c3:3b:ac:32:e2:dc:d0:03:e2:d7:78:27:9c:c8:09:92:7a:24: 11:df:8f:02:6f:a4:13:f9:73:06:60:21:d2:60:2c:3a:bf:2d: 8f:92:51:39:ba:9b:2e:89:e7:d7:f5:81:41:51:fd:2f:de:8a: 6f:11:72:8a:69:f2:d7:0a:d9:78:31:cf:9d:5d:4f:dc:0b:7f: db:44:1f:fe:2a:fd:5b:52:39:74:38:b8:86:77:e6:6a:bf:a5: e3:46:81:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPBHY1pDfR5483YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY2YTZjOGUtYWE3My00ZDgyLWEyYjEtZTYxOWViM2Yy YWVjMB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk MmQwM2E3NTctMTYyZi00MGRmLWIxZGItNzI2MTI1MTI4NjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtEykuzeFAPxq+UbngpHsqBEjJh7S2HISXyp 43D+N0R+3WdKQFMqrZFE/I/CluQinXTi4vNWg7fjAIY8EhSM8xrPTDw8Xr71UjZg /1Xdm/bPTf9x/hiCzQLYNZrzP9ghNm3La9hxjV7xvgfd/5CQ+E8THanCG0mwWe+P cGrBnVv6lB8tl7k/ZvY252T13YaZss1KWGs/PIZ/z9qrsZqkWyE8wTtUdCFORPzg gXSfnCenIJMwrRcou4gsYgjV85/SQeCcB502dv7Njs5RV96g6klghRYTlrk6oRXK SpJ0P05MKRHhxceMhutWtgImgpZwjRnATZSJboX4SQKgQPf9rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSibmZ1X9bwPuCAbJ5rVVKtHOt1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZh NmM4ZS1hYTczLTRkODItYTJiMS1lNjE5ZWIzZjJhZWMvZjliN2ViMzMtYjliOS0z ZDI4LTgwNjQtMmUxNDU1OTg1NGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWY2YTZjOGUtYWE3My00ZDgyLWEy YjEtZTYxOWViM2YyYWVjLzFmNmE2YzhlLWFhNzMtNGQ4Mi1hMmIxLWU2MTllYjNm MmFlYy5jcmwwHwYDVR0jBBgwFoAU4cKiXdGkcBTXif4pkOW5K7a7dxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZhNmM4ZS1hYTczLTRkODItYTJiMS1lNjE5 ZWIzZjJhZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbUngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiaY8/jB/sR1ey9RZyHe1gJ+PgHPD1R+bUy5XrFRaFlfTMEFDLC5f5W dQ1E/HxT0eyhJHajErykhqNiLBZL2BG4C0EvWc1hPU01TwgpoSiW6beAfNXeRuJN OXOH2dR37mBAc/KQmdco1MY6Pvey4qTABIblKilWP3l+nzkUcmydgPpWvNfwqFCa JWtMKKbPX/14Gj4GO78JoyAKcDcQh7C4DMM7rDLi3NAD4td4J5zICZJ6JBHfjwJv pBP5cwZgIdJgLDq/LY+SUTm6my6J59f1gUFR/S/eim8Rcopp8tcK2Xgxz51dT9wL f9tEH/4q/VtSOXQ4uIZ35mq/peNGgRA= -----END CERTIFICATE-----Generated at Sun Apr 6 13:34:19 2025 by rpki-client