$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/b5b2d102-d231-33cf-b28b-1bedc1cd640d.roa File: b5b2d102-d231-33cf-b28b-1bedc1cd640d.roa (raw, json) Hash identifier: 32gR3sIWRLL7xILZ+j8Z9s4hbhEYgHiOprjx/xJTXvg= Subject key identifier: D5:A1:86:11:6B:2A:58:66:F7:8D:46:BA:B1:FE:F7:FD:49:00:74:AC Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F43285848AF2B7EA6FE1DED0B25042A40 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/b5b2d102-d231-33cf-b28b-1bedc1cd640d.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 397090 IP address blocks: 209.143.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:7e:a6:fe:1d:ed:0b:25:04:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=7e6f6883-83b4-4d5d-98e3-fab5e3979e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6e:73:83:05:2e:54:61:96:e9:fe:19:df:20: 1f:99:78:25:e4:41:a5:06:3f:5f:51:7f:92:ed:79: 57:e4:62:f7:d9:c2:a7:8c:d1:dd:57:f6:c8:7e:ff: 5f:64:72:fd:fe:0e:23:22:b5:44:e5:bb:ae:e0:96: 91:6e:b8:df:a2:4e:d9:26:8d:78:5a:01:e9:af:58: 5b:84:fa:b9:da:c4:a7:d5:90:73:e7:60:5b:f3:09: ea:e0:d8:95:0f:3e:25:11:97:f9:99:e0:84:3f:05: 98:7e:60:ba:a6:90:32:04:64:9a:df:ae:b9:27:1a: e5:1f:93:77:90:64:fe:44:d2:ab:b4:b2:2a:5b:41: ab:70:a8:01:84:cf:06:c6:1b:11:51:d3:e1:ca:68: d0:d3:8e:ad:20:88:3a:85:e1:52:5c:d6:bf:cb:f0: b7:1b:05:fa:db:3e:69:24:39:ac:d5:41:01:f2:e5: d8:6e:4a:19:ca:68:9e:58:33:2f:6c:5e:40:99:e0: 84:41:0b:3f:16:bb:45:a2:f4:07:3e:7c:04:cc:f2: 60:cf:26:75:0b:90:3b:5f:b8:29:c4:4b:cb:a3:3c: c5:b1:71:1b:c8:77:d5:4e:6f:25:49:24:27:47:38: b1:3f:b1:2c:bb:64:0e:9b:9f:8c:cb:84:26:5f:9d: c3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A1:86:11:6B:2A:58:66:F7:8D:46:BA:B1:FE:F7:FD:49:00:74:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/b5b2d102-d231-33cf-b28b-1bedc1cd640d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.143.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:be:4e:d5:1d:94:57:6d:8c:10:d2:ce:96:c3:34:0a:31:da: 44:27:da:db:f5:c2:35:44:0d:3c:62:77:e5:10:5c:e0:aa:00: 4b:19:5a:a5:cc:4e:12:92:c1:fd:04:0c:11:15:bf:ac:cc:81: 12:df:2a:63:01:d7:4f:84:93:d6:29:6d:0f:67:8f:a8:ff:2d: f8:14:5f:f3:0e:2a:24:3a:9d:2d:16:b9:06:a3:37:30:bb:f2: 17:0f:04:70:1e:3c:ba:83:ed:6f:8b:ec:75:6a:ed:23:0a:16: 19:06:6e:c3:77:88:c8:f3:32:60:ae:68:30:33:e9:c6:87:61: 53:e3:38:a1:d8:c8:cc:12:78:ba:67:4a:d0:a0:53:20:1a:e4: bb:90:a6:3f:43:f6:3e:40:9f:23:02:c6:81:bb:27:2b:da:e6: ad:5c:48:24:5d:75:3f:f8:4c:22:70:0f:51:6e:ee:da:2b:28: 15:ba:2d:37:56:09:56:78:c4:b9:54:23:c3:1c:23:bc:ca:8e: 3f:d8:83:06:d9:7e:f8:8f:f0:ca:dc:f5:11:13:17:48:95:d2: 1c:d4:0d:e8:69:c6:71:55:86:8b:78:4c:7b:fe:ee:b3:c1:01: aa:e9:cb:4e:ec:1a:26:6f:3f:cf:bb:a6:52:7c:19:2a:e6:67: ef:40:d5:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK36m/h3tCyUEKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk N2U2ZjY4ODMtODNiNC00ZDVkLTk4ZTMtZmFiNWUzOTc5ZTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkG5zgwUuVGGW6f4Z3yAfmXgl5EGlBj9fUX+S 7XlX5GL32cKnjNHdV/bIfv9fZHL9/g4jIrVE5buu4JaRbrjfok7ZJo14WgHpr1hb hPq52sSn1ZBz52Bb8wnq4NiVDz4lEZf5meCEPwWYfmC6ppAyBGSa3665JxrlH5N3 kGT+RNKrtLIqW0GrcKgBhM8GxhsRUdPhymjQ046tIIg6heFSXNa/y/C3GwX62z5p JDms1UEB8uXYbkoZymieWDMvbF5AmeCEQQs/FrtFovQHPnwEzPJgzyZ1C5A7X7gp xEvLozzFsXEbyHfVTm8lSSQnRzixP7Esu2QOm5+My4QmX53D0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWhhhFrKlhm941GurH+9/1JAHSsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvYjViMmQxMDItZDIzMS0z M2NmLWIyOGItMWJlZGMxY2Q2NDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y9OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACa+TtUdlFdtjBDSzpbDNAox2kQn2tv1wjVEDTxid+UQXOCqAEsZWqXM ThKSwf0EDBEVv6zMgRLfKmMB10+Ek9YpbQ9nj6j/LfgUX/MOKiQ6nS0WuQajNzC7 8hcPBHAePLqD7W+L7HVq7SMKFhkGbsN3iMjzMmCuaDAz6caHYVPjOKHYyMwSeLpn StCgUyAa5LuQpj9D9j5AnyMCxoG7Jyva5q1cSCRddT/4TCJwD1Fu7torKBW6LTdW CVZ4xLlUI8McI7zKjj/YgwbZfviP8Mrc9RETF0iV0hzUDehpxnFVhot4THv+7rPB Aarpy07sGiZvP8+7plJ8GSrmZ+9A1VA= -----END CERTIFICATE-----Generated at Sat Apr 12 15:18:51 2025 by rpki-client