$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bce1971d-2e46-3919-83e4-081329fc8f87.roa File: bce1971d-2e46-3919-83e4-081329fc8f87.roa (raw, json) Hash identifier: eto5nlpZ6WVdLDPbrZzXEH49hkcxbe+59B8SsnflXto= Subject key identifier: 17:7B:C9:C2:54:6F:34:41:12:FC:27:49:C9:FE:2E:DD:52:EC:A8:77 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246E2156623CBA467340E40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bce1971d-2e46-3919-83e4-081329fc8f87.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 19905 IP address blocks: 209.173.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:e2:15:66:23:cb:a4:67:34:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=b855c412-df4e-4551-8534-c2d588792298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:df:d0:ad:c0:0e:24:b2:70:46:4a:d6:1e:be: 8d:68:d0:44:03:d3:93:c9:3c:9c:4b:4e:a7:2b:4a: c9:41:03:a4:d2:f0:c2:78:f5:4e:13:4d:e4:43:6c: cc:10:f6:cd:a0:0a:ed:a6:d1:79:f9:b7:cc:4e:9e: e8:2b:fb:5f:77:de:b6:ca:20:23:35:f0:83:ce:0c: a1:f8:d5:42:ce:2e:09:83:d7:03:2c:1e:c7:8f:ac: 66:d1:5b:9a:12:f7:cc:77:82:8d:53:9e:88:0c:ea: 7a:05:f2:8d:88:10:7b:a4:0f:0c:da:b5:85:ba:9a: a9:6d:7a:07:03:df:db:c2:7f:bf:b2:9f:46:b1:9d: 83:35:bd:34:8c:1a:26:1b:69:d5:e4:f3:3d:8f:f6: 81:b5:8c:94:aa:9d:85:12:dc:6c:ef:32:b2:5a:51: 0b:c2:22:84:97:64:d4:48:ea:73:36:80:80:96:31: 08:48:36:60:18:b3:17:6a:2c:25:a4:21:6e:2a:d2: 90:6b:79:1d:62:68:e6:ca:db:3c:bb:45:ad:08:aa: 71:95:1a:93:87:88:58:d2:9c:49:15:66:24:ff:68: ff:9f:0a:e1:2c:5a:9b:48:15:ef:a5:a7:21:10:81: 8a:a8:d4:1e:60:20:34:52:b6:88:4c:fc:0b:89:ec: 5c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:7B:C9:C2:54:6F:34:41:12:FC:27:49:C9:FE:2E:DD:52:EC:A8:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bce1971d-2e46-3919-83e4-081329fc8f87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 209.173.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:36:4a:c5:e4:b3:40:f7:f9:41:15:26:98:2c:ef:55:ff:5a: f7:67:2e:9b:bb:f5:23:64:6b:ed:33:af:0a:36:b3:0f:8d:11: b1:0c:8f:73:b5:1d:9b:02:2d:ae:fd:b2:e1:5b:69:db:ae:4d: 01:3a:8c:c1:61:a1:c9:35:4b:1e:8a:2b:98:ce:48:33:20:d1: 24:e1:b5:17:01:8d:1f:d9:41:a6:38:8e:46:95:0a:df:85:81: 5e:d0:0d:e2:49:19:fb:de:ee:48:4b:e7:4a:c7:30:a8:08:22: b0:22:4f:75:ec:64:0a:33:e3:26:4f:1e:63:70:eb:fb:08:16: e0:31:33:a3:08:6f:5e:fb:f0:47:32:92:5f:84:62:7e:96:49: c1:3b:36:4c:54:1e:35:c8:8b:96:62:b9:26:39:52:21:83:26: 17:cc:97:81:ab:c9:db:c9:79:46:64:fb:0a:5f:03:a3:88:ab: 88:91:17:ff:46:1a:11:e9:a1:ac:00:2c:e2:b9:94:c9:cd:c7: bc:b5:4d:76:27:7b:69:4d:59:88:c6:c8:b3:d4:57:f9:e9:28: bc:f8:b5:12:92:03:69:61:c3:f7:18:e0:fb:74:33:eb:35:47: 92:fa:6c:17:7e:0e:28:92:fc:2a:5e:d7:c3:56:90:dc:02:b6: de:a3:e0:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRuIVZiPLpGc0DkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk Yjg1NWM0MTItZGY0ZS00NTUxLTg1MzQtYzJkNTg4NzkyMjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd/QrcAOJLJwRkrWHr6NaNBEA9OTyTycS06n K0rJQQOk0vDCePVOE03kQ2zMEPbNoArtptF5+bfMTp7oK/tfd962yiAjNfCDzgyh +NVCzi4Jg9cDLB7Hj6xm0VuaEvfMd4KNU56IDOp6BfKNiBB7pA8M2rWFupqpbXoH A9/bwn+/sp9GsZ2DNb00jBomG2nV5PM9j/aBtYyUqp2FEtxs7zKyWlELwiKEl2TU SOpzNoCAljEISDZgGLMXaiwlpCFuKtKQa3kdYmjmyts8u0WtCKpxlRqTh4hY0pxJ FWYk/2j/nwrhLFqbSBXvpachEIGKqNQeYCA0UraITPwLiexcWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBd7ycJUbzRBEvwnScn+Lt1S7Kh3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmNlMTk3MWQtMmU0Ni0z OTE5LTgzZTQtMDgxMzI5ZmM4Zjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a06MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEs2SsXks0D3+UEVJpgs71X/WvdnLpu79SNka+0zrwo2sw+NEbEMj3O1 HZsCLa79suFbaduuTQE6jMFhock1Sx6KK5jOSDMg0SThtRcBjR/ZQaY4jkaVCt+F gV7QDeJJGfve7khL50rHMKgIIrAiT3XsZAoz4yZPHmNw6/sIFuAxM6MIb1778Ecy kl+EYn6WScE7NkxUHjXIi5ZiuSY5UiGDJhfMl4GrydvJeUZk+wpfA6OIq4iRF/9G GhHpoawALOK5lMnNx7y1TXYne2lNWYjGyLPUV/npKLz4tRKSA2lhw/cY4Pt0M+s1 R5L6bBd+DiiS/Cpe18NWkNwCtt6j4G8= -----END CERTIFICATE-----Generated at Fri Mar 14 11:27:52 2025 by rpki-client