$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/f96003a4-5e6a-3408-ad84-035ada29fedc.roa File: f96003a4-5e6a-3408-ad84-035ada29fedc.roa (raw, json) Hash identifier: PjXvlFHnLp4xxvZEAT0NCpa11aIyvc1q7j/KRCl6RQI= Subject key identifier: 38:B1:6E:31:0C:B3:C7:93:FF:A5:E4:64:C8:F5:0A:BF:D5:EA:AF:49 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F43285848ADC613A3473B050849019600 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/f96003a4-5e6a-3408-ad84-035ada29fedc.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 399635 IP address blocks: 209.221.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:13:a3:47:3b:05:08:49:01:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=bebacce7-0b58-4a07-8663-87c7b1c0f962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:04:0e:30:23:10:f8:de:3f:c9:eb:ce:8a:5e: 45:bd:15:bc:33:4d:2c:34:0c:fe:7d:da:14:4b:e1: e9:32:41:32:26:9f:c5:11:0d:c5:44:75:e4:70:c1: 89:c7:f1:3d:b7:22:98:a2:52:f4:95:04:b6:5e:4b: 0c:c8:f3:a6:fd:11:3e:72:c0:87:7d:51:ef:29:df: 4f:ab:68:d4:26:44:50:7e:a1:93:89:63:13:88:68: 02:bc:ff:2b:08:77:e0:74:29:b4:7a:79:be:88:3d: fd:09:44:48:49:89:08:45:47:1f:e5:22:da:2b:9a: 33:4f:af:45:94:56:0b:79:e6:57:15:b0:17:a7:76: 52:9f:d3:84:54:79:36:0a:db:c2:9d:6f:32:eb:76: 74:52:33:3b:66:ed:26:28:08:a9:ba:44:7f:04:56: 94:03:16:59:52:33:35:89:a8:34:1d:e2:6a:f8:54: ba:19:3e:78:0f:99:04:85:7e:6d:74:24:d0:cd:a5: 11:9c:4d:eb:7d:cf:25:7c:25:aa:cc:6e:e7:d8:91: 12:b1:fd:e3:d6:fc:54:5d:f1:00:9e:62:8a:d9:f2: fe:e9:4b:06:71:1a:6e:99:d8:31:cd:b7:68:34:5a: a7:b7:c6:66:b4:7d:bd:7a:01:57:ce:d2:15:f9:d1: 93:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B1:6E:31:0C:B3:C7:93:FF:A5:E4:64:C8:F5:0A:BF:D5:EA:AF:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/f96003a4-5e6a-3408-ad84-035ada29fedc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.221.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e4:05:ca:b2:41:47:3e:0d:dd:2e:69:a4:f2:50:36:f5:1a: 3c:c6:ab:3b:ee:45:3f:73:ce:81:4b:e1:57:76:e3:20:f6:07: ab:11:a0:52:9b:f7:e9:56:a8:b3:13:59:98:ef:b3:fd:fb:ec: f0:e4:f2:3a:3a:4e:21:9a:8c:79:6a:b8:f7:fa:2c:9f:4e:4f: da:e3:e8:e1:07:ba:6f:63:b5:bf:72:77:6c:ea:a1:c0:de:85: b6:ff:e3:be:7d:8c:bc:37:00:37:df:73:41:f6:ef:9b:68:d7: ef:08:ad:8b:dd:d2:84:f0:73:77:eb:74:92:1c:52:72:85:3a: f3:b2:b1:2e:c5:bd:24:39:55:d1:1f:15:85:bc:3d:09:b2:13: 06:ea:c4:0d:67:82:b2:a3:7b:d4:fd:b7:bc:19:5b:e5:85:5d: 86:6e:97:a6:6b:62:00:39:c3:95:43:b7:cc:26:2c:3e:03:6c: 4c:3d:b8:d9:8f:3a:d5:20:b7:2b:c1:36:95:e8:a1:a4:0d:06: 19:87:8b:2c:33:5b:dd:c8:69:6b:af:9d:f8:70:c9:10:f1:35: 35:9e:16:d9:1d:b1:11:ee:5f:fa:5c:ff:9e:0e:5f:d4:f4:ba: 99:1d:ee:07:6d:40:f0:79:60:f3:0a:e3:ac:b8:bb:be:66:36: 7d:8f:00:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxhOjRzsFCEkBlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk YmViYWNjZTctMGI1OC00YTA3LTg2NjMtODdjN2IxYzBmOTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowQOMCMQ+N4/yevOil5FvRW8M00sNAz+fdoU S+HpMkEyJp/FEQ3FRHXkcMGJx/E9tyKYolL0lQS2XksMyPOm/RE+csCHfVHvKd9P q2jUJkRQfqGTiWMTiGgCvP8rCHfgdCm0enm+iD39CURISYkIRUcf5SLaK5ozT69F lFYLeeZXFbAXp3ZSn9OEVHk2CtvCnW8y63Z0UjM7Zu0mKAipukR/BFaUAxZZUjM1 iag0HeJq+FS6GT54D5kEhX5tdCTQzaURnE3rfc8lfCWqzG7n2JESsf3j1vxUXfEA nmKK2fL+6UsGcRpumdgxzbdoNFqnt8ZmtH29egFXztIV+dGTswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDixbjEMs8eT/6XkZMj1Cr/V6q9JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvZjk2MDAzYTQtNWU2YS0z NDA4LWFkODQtMDM1YWRhMjlmZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d0dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbkBcqyQUc+Dd0uaaTyUDb1GjzGqzvuRT9zzoFL4Vd24yD2B6sRoFKb 9+lWqLMTWZjvs/377PDk8jo6TiGajHlquPf6LJ9OT9rj6OEHum9jtb9yd2zqocDe hbb/4759jLw3ADffc0H275to1+8IrYvd0oTwc3frdJIcUnKFOvOysS7FvSQ5VdEf FYW8PQmyEwbqxA1ngrKje9T9t7wZW+WFXYZul6ZrYgA5w5VDt8wmLD4DbEw9uNmP OtUgtyvBNpXooaQNBhmHiywzW93IaWuvnfhwyRDxNTWeFtkdsRHuX/pc/54OX9T0 upkd7gdtQPB5YPMK46y4u75mNn2PAFs= -----END CERTIFICATE-----Generated at Sat Apr 12 18:41:57 2025 by rpki-client