$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/b5f0e06a-af60-38fc-9dee-3312e7c2b8e5.roa File: b5f0e06a-af60-38fc-9dee-3312e7c2b8e5.roa (raw, json) Hash identifier: qvgRQYCqBADZRNERSl8z8ig61xkI1Bv6DQSV0kKdQzU= Subject key identifier: DD:5D:3E:30:62:16:F1:C6:1B:D8:D6:F7:3F:FA:34:06:4C:D3:C4:F6 Certificate issuer: /CN=10aa04f0-7421-4813-bfda-269303d05d1d Certificate serial: 010D0C9F4328584902EC16E0E5E1E49F766FAA00 Authority key identifier: 4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/b5f0e06a-af60-38fc-9dee-3312e7c2b8e5.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 77 IP address blocks: 204.9.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:16:e0:e5:e1:e4:9f:76:6f:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10aa04f0-7421-4813-bfda-269303d05d1d Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=10a290d0-3f83-4329-9b8d-8aa52913c1f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:66:74:5c:ba:3e:24:f4:13:4f:84:7e:fc:7a: 1c:ae:7f:16:1f:32:cf:ad:9b:0e:cc:85:48:f4:01: fd:9c:d5:a2:0f:8b:62:9e:a8:7a:be:20:02:2c:23: d2:5e:50:ca:40:30:a5:8b:e7:47:bb:fb:76:0f:39: 6a:16:20:42:03:f0:47:b9:67:71:1f:13:e0:03:b1: 7e:47:da:53:ff:68:92:eb:80:3c:8d:cb:a2:99:81: 43:03:66:a2:a0:d8:db:4e:aa:54:c2:a3:0b:ea:2a: c0:a4:6d:b4:6b:ed:23:12:86:1f:a9:9f:9e:b2:c3: cd:4b:67:6c:55:c2:db:5b:7e:fb:53:c5:d1:32:1d: 74:e6:7a:38:5e:8c:79:a0:99:a1:d0:fd:a1:37:3a: 16:57:84:08:74:e3:32:d9:3a:a9:31:72:b2:44:32: ae:ff:4d:0c:60:80:66:df:a3:a1:01:5b:3b:8c:19: 2d:c7:b1:9e:86:9d:68:c6:dd:2c:ab:4a:18:3c:71: 7b:ca:db:0a:74:dd:7c:93:cc:0f:b5:d3:1e:d0:7f: b0:b3:6d:ab:70:eb:36:b4:13:ce:78:de:6a:bc:e8: c4:fd:cf:b8:af:11:98:ed:35:39:12:35:5a:d7:e4: 20:e3:a9:5c:40:19:e3:9b:99:54:aa:2c:aa:1a:fb: 40:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5D:3E:30:62:16:F1:C6:1B:D8:D6:F7:3F:FA:34:06:4C:D3:C4:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/b5f0e06a-af60-38fc-9dee-3312e7c2b8e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl X509v3 Authority Key Identifier: keyid:4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer sbgp-ipAddrBlock: critical IPv4: 204.9.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:ae:3b:ea:02:f1:09:79:8c:50:a5:12:1c:df:29:c9:0c:60: 98:80:76:fd:07:42:e8:28:a3:91:e5:c8:7a:f5:b7:0d:5b:22: 2c:29:c0:2f:5b:b1:67:43:88:b2:40:39:b6:23:81:52:93:a2: c3:e8:31:27:b8:af:1c:fa:df:5b:11:0f:b7:1e:7a:26:e2:d0: f9:e0:2d:e1:79:01:f1:3a:5b:d7:33:5f:55:cc:b2:a4:6d:6a: 0b:f2:5a:2b:18:aa:d0:64:7a:5f:06:3e:11:cb:06:79:78:da: 14:65:df:15:bb:0b:0c:45:75:b2:21:8f:44:b5:5e:72:14:c6: f1:34:76:d5:2f:56:96:71:b1:6e:d1:f0:1f:15:fe:f2:da:26: 6c:4b:93:13:5d:8c:4c:ff:28:d4:ba:3e:f8:ba:79:cb:02:f7: 4e:b0:47:97:d8:c4:b1:d9:5a:2a:79:54:8d:ef:bd:c1:3e:d1: 08:6e:46:14:16:10:c0:ec:f8:36:9e:bc:3f:5d:42:21:fa:30: a8:f1:59:3d:21:11:e9:9e:31:ce:e8:01:77:a1:ac:fc:90:d2: f5:1d:45:fd:69:51:5c:83:1d:33:b5:d8:73:65:be:0d:41:cc: 66:80:c1:60:b0:b9:54:ca:a9:33:da:0c:31:24:9b:ec:55:23: 62:12:54:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7Bbg5eHkn3ZvqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBhYTA0ZjAtNzQyMS00ODEzLWJmZGEtMjY5MzAzZDA1 ZDFkMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk MTBhMjkwZDAtM2Y4My00MzI5LTliOGQtOGFhNTI5MTNjMWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02Z0XLo+JPQTT4R+/Hocrn8WHzLPrZsOzIVI 9AH9nNWiD4tinqh6viACLCPSXlDKQDCli+dHu/t2DzlqFiBCA/BHuWdxHxPgA7F+ R9pT/2iS64A8jcuimYFDA2aioNjbTqpUwqML6irApG20a+0jEoYfqZ+essPNS2ds VcLbW377U8XRMh105no4Xox5oJmh0P2hNzoWV4QIdOMy2TqpMXKyRDKu/00MYIBm 36OhAVs7jBktx7Gehp1oxt0sq0oYPHF7ytsKdN18k8wPtdMe0H+ws22rcOs2tBPO eN5qvOjE/c+4rxGY7TU5EjVa1+Qg46lcQBnjm5lUqiyqGvtApwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1dPjBiFvHGG9jW9z/6NAZM08T2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMGFh MDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkzMDNkMDVkMWQvYjVmMGUwNmEtYWY2MC0z OGZjLTlkZWUtMzMxMmU3YzJiOGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTBhYTA0ZjAtNzQyMS00ODEzLWJm ZGEtMjY5MzAzZDA1ZDFkLzEwYWEwNGYwLTc0MjEtNDgxMy1iZmRhLTI2OTMwM2Qw NWQxZC5jcmwwHwYDVR0jBBgwFoAUTGfGK5MkpuRq99aLqn2ln2oTfgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMGFhMDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkz MDNkMDVkMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAmBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJyuO+oC8Ql5jFClEhzfKckMYJiAdv0HQugoo5HlyHr1tw1bIiwpwC9b sWdDiLJAObYjgVKTosPoMSe4rxz631sRD7ceeibi0PngLeF5AfE6W9czX1XMsqRt agvyWisYqtBkel8GPhHLBnl42hRl3xW7CwxFdbIhj0S1XnIUxvE0dtUvVpZxsW7R 8B8V/vLaJmxLkxNdjEz/KNS6Pvi6ecsC906wR5fYxLHZWip5VI3vvcE+0QhuRhQW EMDs+DaevD9dQiH6MKjxWT0hEemeMc7oAXehrPyQ0vUdRf1pUVyDHTO12HNlvg1B zGaAwWCwuVTKqTPaDDEkm+xVI2ISVO8= -----END CERTIFICATE-----Generated at Sat Apr 12 15:24:11 2025 by rpki-client