$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/efd48fea-fbb1-3268-a9a1-4f9caa081aa8.roa File: efd48fea-fbb1-3268-a9a1-4f9caa081aa8.roa (raw, json) Hash identifier: eH4gyvBZfxgHVP5HKUNUQTF/b3xdn6aM1yr/8NE/NQo= Subject key identifier: F2:15:A7:BC:EC:0E:AF:1C:82:61:8B:25:D7:2C:50:AC:A3:7C:3E:71 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F43285848ADC613B048B2F0D644394A80 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/efd48fea-fbb1-3268-a9a1-4f9caa081aa8.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 40836 IP address blocks: 209.114.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:13:b0:48:b2:f0:d6:44:39:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=fb62a329-3797-48e5-88a3-dcce2c56d13e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:82:23:c7:6b:0f:d5:ee:06:d8:dc:37:7f:35: 0b:69:81:e0:1a:a1:98:a9:e9:54:b5:d8:f6:42:08: 34:35:01:f4:9f:53:b2:57:1b:b3:73:28:1e:72:69: c4:69:e6:f5:75:cc:fa:db:5f:26:45:88:23:9c:11: fc:d2:a3:9a:8d:c7:e5:0e:d9:79:ea:0d:d7:16:da: db:c2:6e:fc:cf:38:f0:71:cd:30:91:25:8c:3e:6c: 6f:7b:19:5c:d8:c3:6f:bb:93:08:f8:b3:f3:ef:33: 15:09:42:6f:fe:11:db:09:df:6e:e4:39:da:68:c9: 2c:12:a3:a8:aa:93:af:15:fe:20:26:6f:f5:26:dc: f1:00:a1:ca:e7:9e:d9:eb:8a:b6:1e:7e:6b:6e:89: 10:8a:05:8e:2a:95:02:fb:06:36:0e:9f:97:d2:0d: 0c:f9:b5:5e:98:cb:2b:c8:6f:56:cc:ee:60:77:2b: ce:e0:22:36:4c:4a:11:4e:fd:1a:e7:80:ae:f7:b6: 39:46:7e:48:7b:9a:f4:89:8f:ea:f6:75:89:ae:80: 2a:38:0c:8b:0e:04:38:f1:cf:46:04:02:aa:b4:ea: 57:e5:3f:b6:96:c9:91:ac:fc:b5:c4:87:be:60:28: ab:4c:0c:03:b8:a4:63:3a:88:c9:03:c8:6c:61:79: 87:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:15:A7:BC:EC:0E:AF:1C:82:61:8B:25:D7:2C:50:AC:A3:7C:3E:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/efd48fea-fbb1-3268-a9a1-4f9caa081aa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.114.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:76:aa:2e:63:08:d2:b6:08:36:97:0d:de:76:41:1e:2d:ec: 0a:6c:30:87:4a:a1:64:c9:f7:9d:4f:2a:a6:bb:d0:fc:7a:f7: 13:8b:62:0a:9f:cb:0e:b2:6e:39:9c:13:9c:31:3b:27:49:9a: 5d:ca:72:bf:ca:00:a0:d4:54:64:8b:ed:10:34:a1:d3:21:cd: f7:09:a2:4f:9d:91:b6:e3:23:54:a3:79:96:63:b1:c6:a2:b8: de:e0:44:a1:c7:e8:d8:46:da:2a:5f:5c:d6:50:54:d0:b8:cf: d9:81:12:42:79:f0:63:1d:1b:0a:63:bd:d9:f1:8c:0c:72:92: 1f:58:bf:18:36:bc:ea:0a:9e:d9:09:40:b6:28:d5:32:d6:76: f7:86:3d:e7:72:bb:7e:c9:d5:0f:fe:85:8f:04:b6:28:b0:a8: 3c:f7:ef:02:ee:dd:53:8f:cb:13:f2:a0:4a:d7:5e:ca:3d:2c: 09:ec:fd:4a:c3:1e:46:4d:de:6f:71:36:b9:95:d4:41:2a:06: 4c:40:ca:8d:e9:8b:35:31:c2:54:34:2c:a1:3b:d2:2d:26:ba: bc:02:c3:5a:61:ae:84:30:41:e1:00:7c:14:0f:92:20:1b:79: 44:ab:27:2e:c5:ca:bd:c8:8a:34:34:a7:a8:20:94:f4:18:ff: 2c:e8:db:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxhOwSLLw1kQ5SoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk ZmI2MmEzMjktMzc5Ny00OGU1LTg4YTMtZGNjZTJjNTZkMTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoIjx2sP1e4G2Nw3fzULaYHgGqGYqelUtdj2 Qgg0NQH0n1OyVxuzcygecmnEaeb1dcz6218mRYgjnBH80qOajcflDtl56g3XFtrb wm78zzjwcc0wkSWMPmxvexlc2MNvu5MI+LPz7zMVCUJv/hHbCd9u5DnaaMksEqOo qpOvFf4gJm/1JtzxAKHK557Z64q2Hn5rbokQigWOKpUC+wY2Dp+X0g0M+bVemMsr yG9WzO5gdyvO4CI2TEoRTv0a54Cu97Y5Rn5Ie5r0iY/q9nWJroAqOAyLDgQ48c9G BAKqtOpX5T+2lsmRrPy1xIe+YCirTAwDuKRjOojJA8hsYXmHawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIVp7zsDq8cgmGLJdcsUKyjfD5xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvZWZkNDhmZWEtZmJiMS0z MjY4LWE5YTEtNGY5Y2FhMDgxYWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XK6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAV2qi5jCNK2CDaXDd52QR4t7ApsMIdKoWTJ951PKqa70Px69xOLYgqf yw6ybjmcE5wxOydJml3Kcr/KAKDUVGSL7RA0odMhzfcJok+dkbbjI1SjeZZjscai uN7gRKHH6NhG2ipfXNZQVNC4z9mBEkJ58GMdGwpjvdnxjAxykh9Yvxg2vOoKntkJ QLYo1TLWdveGPedyu37J1Q/+hY8EtiiwqDz37wLu3VOPyxPyoErXXso9LAns/UrD HkZN3m9xNrmV1EEqBkxAyo3pizUxwlQ0LKE70i0murwCw1phroQwQeEAfBQPkiAb eUSrJy7Fyr3IijQ0p6gglPQY/yzo2+M= -----END CERTIFICATE-----Generated at Sat Apr 12 15:09:35 2025 by rpki-client