$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/a1f6d499-4f97-3e96-b33e-adb8ba79683d.roa File: a1f6d499-4f97-3e96-b33e-adb8ba79683d.roa (raw, json) Hash identifier: 8YbLkO4w+Ah/ipQE4lTT74kMQgezfLB482ypLtS2JYQ= Subject key identifier: A6:77:4D:FE:E6:0F:A2:DE:8F:DE:44:B6:F7:03:56:81:3C:D7:8B:86 Certificate issuer: /CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf Certificate serial: 010D0C9F43285849287E67D87EAFC032099019A0 Authority key identifier: 0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/a1f6d499-4f97-3e96-b33e-adb8ba79683d.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 18587 IP address blocks: 204.209.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:67:d8:7e:af:c0:32:09:90:19:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=59b8cb5c-eb46-4f0c-b1e3-9571c23a169e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:91:74:99:b5:5e:b9:31:f8:d3:45:52:19:8a: 53:32:3a:ef:99:e2:7c:79:1d:eb:4b:96:59:b1:e2: af:ee:42:f8:eb:64:53:77:cf:cc:43:ad:3b:fd:d4: e5:b9:27:94:10:35:15:82:23:76:1a:4f:c9:f7:2f: 10:ea:40:60:c3:cf:6d:ec:a1:01:79:73:dc:2c:0d: 4d:25:45:53:00:c8:dd:e5:cf:19:b9:03:97:6f:18: 9f:5d:c4:28:b7:5a:ab:58:aa:81:0e:c9:1d:93:c6: 18:42:21:90:eb:7c:8f:73:87:5a:49:8b:f6:34:b3: e8:a1:1e:f6:e2:32:5a:e3:ef:73:16:92:c0:f7:63: a1:4d:40:9e:66:10:9f:4a:8e:f4:f0:77:42:48:2f: 69:47:eb:be:45:ba:86:f3:04:3d:ce:42:3f:6c:92: f3:e2:4b:ea:3f:d8:71:41:7f:84:79:69:94:59:04: b6:01:b7:43:bb:45:f2:dd:77:2e:8a:76:a8:ef:ae: 21:ce:e2:32:8d:cb:f3:37:98:94:4e:f2:ae:05:65: 9b:68:c5:71:26:8f:63:bf:3b:3e:80:9d:9d:87:77: de:d6:0c:6d:a7:3f:61:7d:3e:6d:15:ce:c6:61:ef: f9:ec:8d:87:df:79:d0:d9:97:42:25:d7:d2:1d:40: 4b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:77:4D:FE:E6:0F:A2:DE:8F:DE:44:B6:F7:03:56:81:3C:D7:8B:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/a1f6d499-4f97-3e96-b33e-adb8ba79683d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl X509v3 Authority Key Identifier: keyid:0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer sbgp-ipAddrBlock: critical IPv4: 204.209.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:16:ea:d1:7f:75:3c:e0:cc:3e:db:bc:42:57:9b:98:60:f5: 42:4f:a8:2d:51:66:de:a3:59:38:03:cb:1e:9a:03:82:63:f6: bc:07:21:05:5c:f7:ee:be:3b:f2:e3:79:b9:9c:a6:f6:56:6a: 31:53:6e:6d:5b:d2:99:d6:38:c4:4e:67:39:ae:d3:fd:85:98: 13:40:2a:82:69:00:30:e5:70:ba:6f:c9:f6:37:e3:89:5e:e7: 70:d7:d3:59:4a:1c:af:2c:4c:06:54:4c:0c:71:09:8c:85:d9: 96:5c:4f:59:58:24:6e:9d:01:6f:40:bf:0b:41:1c:2c:4a:7a: 5d:87:5a:14:ca:75:74:1f:36:b3:d8:7e:53:42:75:17:a3:06: 49:25:ce:ad:a6:7e:e2:1a:da:3d:17:e1:4b:03:de:50:51:14: 25:4a:e4:df:39:71:10:8c:57:0d:0c:96:21:57:f7:2b:cc:94: 09:7e:5e:0a:ad:54:5b:3c:3c:03:e0:6e:0c:52:de:1e:e9:7a: 92:67:33:6a:32:b8:d7:03:83:18:27:fe:2b:0b:5a:6f:dd:6e: fe:3c:2f:5a:2e:2b:e9:c6:94:ad:05:3b:04:56:f3:65:3d:52: 69:b7:22:c2:f1:94:dd:39:94:c0:7c:32:eb:39:7d:0c:e7:54: 55:65:fd:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofmfYfq/AMgmQGaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjlkMzViNWQtYjU2YS00OWVhLWJlMDEtZmNiZmY4ZTAy ZmNmMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk NTliOGNiNWMtZWI0Ni00ZjBjLWIxZTMtOTU3MWMyM2ExNjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJF0mbVeuTH400VSGYpTMjrvmeJ8eR3rS5ZZ seKv7kL462RTd8/MQ607/dTluSeUEDUVgiN2Gk/J9y8Q6kBgw89t7KEBeXPcLA1N JUVTAMjd5c8ZuQOXbxifXcQot1qrWKqBDskdk8YYQiGQ63yPc4daSYv2NLPooR72 4jJa4+9zFpLA92OhTUCeZhCfSo708HdCSC9pR+u+RbqG8wQ9zkI/bJLz4kvqP9hx QX+EeWmUWQS2AbdDu0Xy3Xcuinao764hzuIyjcvzN5iUTvKuBWWbaMVxJo9jvzs+ gJ2dh3fe1gxtpz9hfT5tFc7GYe/57I2H33nQ2ZdCJdfSHUBL9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZ3Tf7mD6Lej95EtvcDVoE814uGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yOWQz NWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2JmZjhlMDJmY2YvYTFmNmQ0OTktNGY5Ny0z ZTk2LWIzM2UtYWRiOGJhNzk2ODNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjlkMzViNWQtYjU2YS00OWVhLWJl MDEtZmNiZmY4ZTAyZmNmLzI5ZDM1YjVkLWI1NmEtNDllYS1iZTAxLWZjYmZmOGUw MmZjZi5jcmwwHwYDVR0jBBgwFoAUCuttE9fwYHuK0QB7KKCVi0UQpC0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yOWQzNWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2Jm ZjhlMDJmY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwW6tF/dTzgzD7bvEJXm5hg9UJPqC1RZt6jWTgDyx6aA4Jj9rwHIQVc 9+6+O/LjebmcpvZWajFTbm1b0pnWOMROZzmu0/2FmBNAKoJpADDlcLpvyfY344le 53DX01lKHK8sTAZUTAxxCYyF2ZZcT1lYJG6dAW9AvwtBHCxKel2HWhTKdXQfNrPY flNCdRejBkklzq2mfuIa2j0X4UsD3lBRFCVK5N85cRCMVw0MliFX9yvMlAl+Xgqt VFs8PAPgbgxS3h7pepJnM2oyuNcDgxgn/isLWm/dbv48L1ouK+nGlK0FOwRW82U9 Umm3IsLxlN05lMB8Mus5fQznVFVl/cg= -----END CERTIFICATE-----Generated at Fri Apr 4 19:07:11 2025 by rpki-client