$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/40d3479d-bb5f-3869-8420-fee0194d4e25.roa File: 40d3479d-bb5f-3869-8420-fee0194d4e25.roa (raw, json) Hash identifier: ejSpBLi40srNP0sK4MD5clhCejBZKKyZHWv2ZpwvS5U= Subject key identifier: CC:7E:84:69:C7:AA:57:0B:8E:AB:DE:F6:B0:EF:AE:B0:26:87:29:CA Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F43285848ADC60D1EA849E1A09B612730 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/40d3479d-bb5f-3869-8420-fee0194d4e25.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 30610 IP address blocks: 209.166.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:0d:1e:a8:49:e1:a0:9b:61:27:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=f9395b41-4527-44fe-80b3-ac6e2dfdc1bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6a:4f:c4:e8:7c:d4:b1:0d:9d:d1:9a:b9:2a: ec:76:9e:b2:b8:aa:bd:73:02:c8:bd:dc:a6:54:4c: 8f:e4:ce:45:89:a4:4d:c2:ab:d2:0d:c9:08:ca:c0: 7b:1b:84:d1:76:2e:7b:47:4e:15:fd:1f:ab:91:9c: 38:44:69:be:7f:4c:41:d3:83:72:0c:e2:da:30:4f: 64:ff:ab:0b:af:13:3d:01:d8:3e:46:5d:27:b7:79: ac:50:25:55:bc:6d:e5:50:37:91:f7:5d:59:84:cf: f2:ee:ce:ff:d7:67:bb:d2:43:dd:b3:57:27:14:f8: 56:f9:99:9c:3e:1e:80:7a:49:d4:38:5e:54:4b:4a: b9:ca:9c:24:ad:a9:c6:d3:a2:27:9a:12:47:da:fa: 28:1e:f1:71:01:d5:5e:60:3c:c1:d7:bb:c6:2d:6d: a6:a5:0a:92:ba:db:06:08:3e:f7:cb:10:05:ac:68: 0c:3c:69:85:ea:b4:a0:68:cc:6f:22:26:ed:37:8e: e7:fa:69:2b:7e:07:d0:f1:34:23:2a:3a:65:b0:8b: a2:1a:3b:0f:e9:dd:6e:56:6b:14:c2:d7:e8:37:5c: 91:0a:2f:57:1f:8f:24:28:6a:09:87:6f:93:f4:79: fd:58:84:1d:c2:39:56:2a:92:34:80:c8:4c:77:5b: 55:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:7E:84:69:C7:AA:57:0B:8E:AB:DE:F6:B0:EF:AE:B0:26:87:29:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/40d3479d-bb5f-3869-8420-fee0194d4e25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.166.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:a3:5b:46:7b:f8:68:f6:ad:fe:a7:81:31:62:89:aa:bb:fc: c0:d9:38:c4:ec:0b:26:7e:ac:b7:da:20:2a:a8:cf:50:da:23: 67:aa:bf:65:af:80:54:c9:06:88:c2:f3:01:65:cb:d5:3f:18: 71:16:f7:99:1f:9e:a8:41:55:1d:d1:71:d3:39:49:db:95:74: 59:bb:1b:b1:ea:3f:2f:5c:d5:8e:28:1f:d0:55:02:12:c6:e8: 59:d8:96:85:4f:9d:40:aa:73:b6:62:1d:83:80:43:c6:63:0c: c4:28:2d:b2:51:79:47:27:b7:45:e6:e2:c2:9f:b5:0c:68:62: ef:29:63:cb:9b:9c:f0:7e:f6:31:cf:ea:e5:33:9c:d5:e6:30: cc:41:c4:6e:df:60:2c:99:c1:91:39:ef:89:52:e3:4d:56:c0: 93:18:96:74:0a:b0:a0:82:8a:b8:54:3f:e2:28:db:ff:37:83: 45:db:39:86:a9:13:59:61:66:a9:fd:6f:12:5b:41:63:86:63: 3f:aa:ad:fd:52:53:2f:b9:25:47:0c:5a:9d:bd:78:d3:e5:67: fd:b4:53:b8:3b:b2:b7:46:24:85:68:88:4a:c1:a1:80:ef:39: a9:87:11:4e:fc:b2:f1:8d:44:b4:a4:e1:6b:52:28:5b:98:3c: 2c:51:f6:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxg0eqEnhoJthJzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk ZjkzOTViNDEtNDUyNy00NGZlLTgwYjMtYWM2ZTJkZmRjMWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWpPxOh81LENndGauSrsdp6yuKq9cwLIvdym VEyP5M5FiaRNwqvSDckIysB7G4TRdi57R04V/R+rkZw4RGm+f0xB04NyDOLaME9k /6sLrxM9Adg+Rl0nt3msUCVVvG3lUDeR911ZhM/y7s7/12e70kPds1cnFPhW+Zmc Ph6AeknUOF5US0q5ypwkranG06InmhJH2vooHvFxAdVeYDzB17vGLW2mpQqSutsG CD73yxAFrGgMPGmF6rSgaMxvIibtN47n+mkrfgfQ8TQjKjplsIuiGjsP6d1uVmsU wtfoN1yRCi9XH48kKGoJh2+T9Hn9WIQdwjlWKpI0gMhMd1tVYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMx+hGnHqlcLjqve9rDvrrAmhynKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvNDBkMzQ3OWQtYmI1Zi0z ODY5LTg0MjAtZmVlMDE5NGQ0ZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aa/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCjW0Z7+Gj2rf6ngTFiiaq7/MDZOMTsCyZ+rLfaICqoz1DaI2eqv2Wv gFTJBojC8wFly9U/GHEW95kfnqhBVR3RcdM5SduVdFm7G7HqPy9c1Y4oH9BVAhLG 6FnYloVPnUCqc7ZiHYOAQ8ZjDMQoLbJReUcnt0Xm4sKftQxoYu8pY8ubnPB+9jHP 6uUznNXmMMxBxG7fYCyZwZE574lS401WwJMYlnQKsKCCirhUP+Io2/83g0XbOYap E1lhZqn9bxJbQWOGYz+qrf1SUy+5JUcMWp29eNPlZ/20U7g7srdGJIVoiErBoYDv OamHEU78svGNRLSk4WtSKFuYPCxR9q0= -----END CERTIFICATE-----Generated at Sat Apr 12 15:32:08 2025 by rpki-client