$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/be603bce-d702-3a38-a547-dae20b5de158.roa File: be603bce-d702-3a38-a547-dae20b5de158.roa (raw, json) Hash identifier: 24pr+M+GjcgmcU6KhMGtu3n3Cn1NkTdgjsenfCKHugk= Subject key identifier: 84:44:E3:46:C8:28:43:1D:98:E8:B4:39:FC:9B:5C:84:A2:5E:16:A4 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F43285848ADC61392FE7EA50FD105D280 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/be603bce-d702-3a38-a547-dae20b5de158.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 31813 IP address blocks: 209.221.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:13:92:fe:7e:a5:0f:d1:05:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=5d5c870c-4dc5-4b8b-80d4-c2361fe11d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f7:d7:78:b2:3a:b4:6a:6d:7c:79:67:a1:28: 4a:cf:26:c6:44:d7:93:56:5b:f7:79:25:15:d4:2c: 09:1d:8e:4e:ec:12:c4:30:2f:2e:3d:de:45:22:2f: 6c:29:ff:60:33:4c:36:af:2a:ff:0b:68:1b:e1:ed: 92:63:d2:ff:41:73:92:61:7d:62:2a:93:65:aa:7b: 42:9f:87:16:4b:34:78:e2:ad:0c:4a:7e:91:72:4d: c6:f7:fa:46:5e:be:50:a3:f3:0d:1a:c2:60:d4:45: 98:84:8e:10:98:af:76:0e:a9:93:fb:5c:0f:94:54: ce:68:25:b2:4a:96:f6:bc:bd:f7:9f:1d:e0:86:21: 3d:e2:a3:3a:d0:d4:48:c3:65:63:49:64:6a:37:c4: cb:a6:52:50:04:7b:54:fd:a3:0f:94:1f:79:e2:6c: bb:f9:29:2a:55:f8:c5:67:a0:94:1b:5b:ab:6d:1d: c3:19:88:e2:96:6a:6c:0d:36:98:23:9a:84:07:8b: f6:a7:50:0b:74:33:0e:40:81:11:b8:f7:80:65:76: 36:88:16:11:7c:d3:29:1d:8b:d7:f6:b5:c1:cb:eb: cb:e5:1a:24:0a:72:d7:c1:ba:af:a1:03:df:c0:7f: 78:b0:b3:1b:d4:b8:13:2b:2d:17:f9:d0:b5:18:fd: 83:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:44:E3:46:C8:28:43:1D:98:E8:B4:39:FC:9B:5C:84:A2:5E:16:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/be603bce-d702-3a38-a547-dae20b5de158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.221.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:82:3c:56:c4:fe:db:f5:83:c1:9b:2b:23:e7:dd:d0:b1:45: af:36:f8:08:03:76:73:c7:cd:33:6d:72:9f:f5:2d:76:3b:68: 18:83:5a:97:7c:52:b4:63:6f:7f:92:99:40:4d:4f:9c:43:62: a9:20:fd:61:37:80:d0:67:07:26:60:01:5c:6b:ec:83:57:72: c3:b8:50:2c:2d:38:25:ce:4e:15:e1:b9:12:13:93:07:68:d7: db:69:d4:b6:ef:82:09:78:f5:ab:0a:e0:e6:49:7d:42:9c:8a: 82:6b:10:5b:39:fb:93:da:d1:c3:d2:1e:46:fa:cb:e1:8d:4b: bf:99:37:a9:95:04:d1:c6:0b:fc:60:c6:4e:fa:34:88:d7:34: eb:7e:61:16:d2:c8:99:49:32:d1:a3:91:78:3c:98:5f:33:dc: af:44:37:33:91:79:0e:35:df:e4:41:3c:77:77:08:c7:82:70: bb:3c:63:8b:00:8e:1a:02:30:6a:37:4e:a9:ed:f6:50:2a:3b: 9a:3f:dc:48:9a:0c:44:b0:fb:29:ff:01:8c:4e:20:c1:b4:f9: e3:41:c0:b0:6b:ae:6d:1f:56:a0:58:78:a9:eb:a1:98:a6:60: 52:81:9f:88:fa:df:f7:76:45:85:2c:5e:4a:60:0c:eb:df:34: 6b:da:aa:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxhOS/n6lD9EF0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk NWQ1Yzg3MGMtNGRjNS00YjhiLTgwZDQtYzIzNjFmZTExZDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPfXeLI6tGptfHlnoShKzybGRNeTVlv3eSUV 1CwJHY5O7BLEMC8uPd5FIi9sKf9gM0w2ryr/C2gb4e2SY9L/QXOSYX1iKpNlqntC n4cWSzR44q0MSn6Rck3G9/pGXr5Qo/MNGsJg1EWYhI4QmK92DqmT+1wPlFTOaCWy Spb2vL33nx3ghiE94qM60NRIw2VjSWRqN8TLplJQBHtU/aMPlB954my7+SkqVfjF Z6CUG1urbR3DGYjilmpsDTaYI5qEB4v2p1ALdDMOQIERuPeAZXY2iBYRfNMpHYvX 9rXBy+vL5RokCnLXwbqvoQPfwH94sLMb1LgTKy0X+dC1GP2D2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRE40bIKEMdmOi0OfybXISiXhakMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvYmU2MDNiY2UtZDcwMi0z YTM4LWE1NDctZGFlMjBiNWRlMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d0EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqCPFbE/tv1g8GbKyPn3dCxRa82+AgDdnPHzTNtcp/1LXY7aBiDWpd8 UrRjb3+SmUBNT5xDYqkg/WE3gNBnByZgAVxr7INXcsO4UCwtOCXOThXhuRITkwdo 19tp1Lbvggl49asK4OZJfUKcioJrEFs5+5Pa0cPSHkb6y+GNS7+ZN6mVBNHGC/xg xk76NIjXNOt+YRbSyJlJMtGjkXg8mF8z3K9ENzOReQ413+RBPHd3CMeCcLs8Y4sA jhoCMGo3Tqnt9lAqO5o/3EiaDESw+yn/AYxOIMG0+eNBwLBrrm0fVqBYeKnroZim YFKBn4j63/d2RYUsXkpgDOvfNGvaqqk= -----END CERTIFICATE-----Generated at Sat Apr 12 15:21:04 2025 by rpki-client