$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/f1d32fb4-228c-37d2-9751-57a3f0746694.roa File: f1d32fb4-228c-37d2-9751-57a3f0746694.roa (raw, json) Hash identifier: MZsmRhLRo/rzGzUwP2JVgSHvMjKlSfX8aVh6RtkZuc4= Subject key identifier: 48:9D:65:0F:96:6C:12:89:6E:EF:D6:F8:01:4E:72:7E:6F:C0:1B:F4 Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F43285849674EF5BB80CB1645F6549500 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/f1d32fb4-228c-37d2-9751-57a3f0746694.roa Signing time: Thu 03 Apr 2025 13:01:02 +0000 ROA not before: Thu 03 Apr 2025 13:01:02 +0000 ROA not after: Wed 02 Jul 2025 13:01:02 +0000 asID: 16509 IP address blocks: 209.114.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:4e:f5:bb:80:cb:16:45:f6:54:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: Apr 3 13:01:02 2025 GMT Not After : Jul 2 13:01:02 2025 GMT Subject: CN=d58e88f1-fe6f-491d-8cd7-06a2564d6213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6a:dd:fc:63:9f:3a:5b:55:f7:19:21:ac:4e: d6:53:b4:85:4d:6a:1d:fa:de:6b:fe:de:87:fe:51: db:b8:78:4d:4d:7b:0f:9e:c5:57:e2:9f:5a:4a:17: 20:53:c8:0d:9a:dd:d1:c1:dc:b2:bf:52:db:70:67: cc:c1:65:be:c1:bc:44:4b:04:0e:88:57:e3:a1:c3: 3f:be:c5:d5:90:95:11:37:e6:04:d4:56:c1:b1:a4: 44:5a:65:dc:82:44:61:72:b9:11:fb:fc:27:7f:7a: 71:00:b1:6a:96:27:6b:9b:03:f4:20:02:ab:08:dd: 4a:81:95:74:26:31:0d:db:63:63:45:5e:78:6c:e9: b0:52:44:b5:4f:de:9d:a3:27:43:2a:6e:b6:5e:d2: 93:3a:13:bb:47:f1:14:8d:32:07:2a:05:3e:d1:0b: 24:71:81:0a:5f:b1:25:ba:4d:34:d9:7c:fe:83:6f: 58:99:0b:0b:bf:13:a6:14:fa:6d:09:cf:d3:94:af: 16:ac:7d:19:32:2a:73:db:6f:ad:70:26:3d:4a:32: b4:1d:d8:82:b5:35:85:e8:65:9b:26:c4:6b:4e:d7: c2:74:36:10:df:32:05:0b:be:1d:ed:a1:00:b4:6c: 83:75:05:0f:b7:85:0c:64:df:40:d0:43:e1:75:ae: fa:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:9D:65:0F:96:6C:12:89:6E:EF:D6:F8:01:4E:72:7E:6F:C0:1B:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/f1d32fb4-228c-37d2-9751-57a3f0746694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:71:b3:7d:2a:a3:38:ad:87:ab:75:2f:a5:fd:64:24:5a:02: 5f:07:4b:36:8f:f8:64:d5:a5:01:3d:cc:8f:5d:ba:bd:3f:03: 80:91:12:ac:0f:71:e0:ba:be:b7:26:3f:a7:53:6b:e8:f7:a6: ec:61:51:d2:34:8c:90:a3:1d:b7:5b:c4:27:3f:1c:42:01:46: d2:b7:b9:63:a7:97:e2:3e:f9:11:8b:ee:dd:55:b1:54:05:39: be:37:21:09:ce:60:9a:e2:64:ce:c6:27:52:1b:86:0e:5d:02: 44:9e:57:a2:31:d2:7f:97:a6:0e:00:b0:0e:21:04:00:8c:af: 9a:a6:82:b3:3d:fb:2e:3d:5d:82:05:11:1c:b6:d9:99:82:be: 00:db:9b:5c:37:8d:33:d2:ea:17:be:b5:f0:25:78:13:eb:40: b1:7e:ac:9f:40:91:a3:15:85:73:15:c6:2c:97:c2:65:22:2d: f8:f3:d3:48:e8:0c:0b:27:e4:ea:ac:0c:f4:dd:b0:e7:65:4b: e0:ae:2e:e7:c6:80:35:cc:f8:60:48:f2:14:fd:4a:ef:30:7e: e0:4d:e3:1d:43:55:46:9c:0c:2d:9e:de:32:14:eb:dc:fb:4a: 4d:00:91:cc:36:e3:90:49:62:b4:b0:14:9f:a8:51:68:21:59: e6:62:c4:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElnTvW7gMsWRfZUlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI1MDQwMzEzMDEwMloXDTI1MDcwMjEzMDEwMlowLzEtMCsGA1UEAxMk ZDU4ZTg4ZjEtZmU2Zi00OTFkLThjZDctMDZhMjU2NGQ2MjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Grd/GOfOltV9xkhrE7WU7SFTWod+t5r/t6H /lHbuHhNTXsPnsVX4p9aShcgU8gNmt3Rwdyyv1LbcGfMwWW+wbxESwQOiFfjocM/ vsXVkJURN+YE1FbBsaREWmXcgkRhcrkR+/wnf3pxALFqlidrmwP0IAKrCN1KgZV0 JjEN22NjRV54bOmwUkS1T96doydDKm62XtKTOhO7R/EUjTIHKgU+0QskcYEKX7El uk002Xz+g29YmQsLvxOmFPptCc/TlK8WrH0ZMipz22+tcCY9SjK0HdiCtTWF6GWb JsRrTtfCdDYQ3zIFC74d7aEAtGyDdQUPt4UMZN9A0EPhda76VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEidZQ+WbBKJbu/W+AFOcn5vwBv0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvZjFkMzJmYjQtMjI4Yy0z N2QyLTk3NTEtNTdhM2YwNzQ2Njk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XICMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBxs30qozith6t1L6X9ZCRaAl8HSzaP+GTVpQE9zI9dur0/A4CREqwP ceC6vrcmP6dTa+j3puxhUdI0jJCjHbdbxCc/HEIBRtK3uWOnl+I++RGL7t1VsVQF Ob43IQnOYJriZM7GJ1Ibhg5dAkSeV6Ix0n+Xpg4AsA4hBACMr5qmgrM9+y49XYIF ERy22ZmCvgDbm1w3jTPS6he+tfAleBPrQLF+rJ9AkaMVhXMVxiyXwmUiLfjz00jo DAsn5OqsDPTdsOdlS+CuLufGgDXM+GBI8hT9Su8wfuBN4x1DVUacDC2e3jIU69z7 Sk0Akcw245BJYrSwFJ+oUWghWeZixFQ= -----END CERTIFICATE-----Generated at Fri Apr 4 23:54:27 2025 by rpki-client