$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/cbf84949-5a41-3aab-b6f9-f96b596dd3c3.roa File: cbf84949-5a41-3aab-b6f9-f96b596dd3c3.roa (raw, json) Hash identifier: j0UhiFg0OyOpVcbZbXcb4qW8CnZj29j5ll4XZq1yaqQ= Subject key identifier: 8D:86:EF:87:0B:E3:D6:92:15:E8:10:28:E8:06:93:9D:9A:E3:52:6D Certificate issuer: /CN=ef573c37-3920-4b85-b5ca-50707eefe4b3 Certificate serial: 010D0C9F43285848A400C19A8C4369778E099B00 Authority key identifier: AA:51:97:02:8A:6A:68:80:01:9B:E8:D2:E8:D9:46:50:CB:DD:63:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/cbf84949-5a41-3aab-b6f9-f96b596dd3c3.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 25617 IP address blocks: 204.9.32.0/24 maxlen: 24 204.9.33.0/24 maxlen: 24 204.9.34.0/24 maxlen: 24 204.9.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/ef573c37-3920-4b85-b5ca-50707eefe4b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/ef573c37-3920-4b85-b5ca-50707eefe4b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:c1:9a:8c:43:69:77:8e:09:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef573c37-3920-4b85-b5ca-50707eefe4b3 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=9ffe56ee-4275-462d-9c5d-247eebad8861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a3:c1:3d:dc:56:fb:cf:c6:dc:a8:ea:ee:87: 4c:e2:73:07:3e:60:bf:63:2b:b4:6f:02:b9:16:85: e2:cb:e4:ca:32:e4:30:e0:4c:ec:10:0a:94:d8:47: 88:c2:a2:9e:57:fe:06:eb:3b:2f:93:4f:9e:0c:c3: b7:53:eb:91:59:a1:7a:e4:85:e5:a1:dd:c5:6a:8e: c4:34:93:ac:a6:f2:33:cf:0b:31:55:09:21:1c:98: 2f:f6:c9:b1:80:9a:a3:d4:e3:f3:a2:5c:53:d0:21: db:ea:d7:00:e6:a8:dc:04:b7:64:09:f1:93:72:ff: 6b:fa:a8:3f:26:60:24:12:9b:85:5b:09:64:61:83: d8:56:98:f2:19:21:31:94:29:9b:ff:03:78:a4:eb: 9f:83:87:81:cf:ed:f5:6d:8d:e9:a5:6c:10:e6:31: 37:1a:b7:73:c8:b7:25:99:6f:ae:ee:48:b6:4b:24: 65:78:a2:6d:6a:7e:74:61:18:c9:4b:20:b3:eb:67: f4:18:b3:a8:09:3b:2a:48:e6:f7:68:e1:84:68:dc: 88:99:7e:04:4a:7c:83:da:81:1c:60:19:93:bd:08: 44:9e:bd:3e:3b:95:82:bf:ba:60:02:a4:a1:a8:be: 76:e3:6f:13:20:e4:3d:ef:21:84:79:37:89:d9:2f: ee:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:86:EF:87:0B:E3:D6:92:15:E8:10:28:E8:06:93:9D:9A:E3:52:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/cbf84949-5a41-3aab-b6f9-f96b596dd3c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/ef573c37-3920-4b85-b5ca-50707eefe4b3.crl X509v3 Authority Key Identifier: keyid:AA:51:97:02:8A:6A:68:80:01:9B:E8:D2:E8:D9:46:50:CB:DD:63:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3.cer sbgp-ipAddrBlock: critical IPv4: 204.9.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:59:5c:0c:c7:01:39:68:c1:2d:af:08:9b:60:57:48:3b:11: ee:e4:ba:f7:a4:db:99:fb:76:5f:d7:01:af:e2:1e:28:40:fa: 87:00:41:a0:c0:7f:a5:e4:99:86:a5:8b:35:95:1a:f9:f0:fb: 3e:a9:2c:20:48:b2:4c:ff:a3:d0:d2:2d:a6:26:13:2d:8e:0d: ef:a3:f3:73:70:41:0e:de:97:1e:0e:d5:2e:bd:b9:31:a3:95: 11:37:38:e6:24:9b:54:e7:be:f7:2e:a6:6f:1b:ad:a5:50:17: 43:60:55:22:3b:71:b5:50:bb:bd:e5:48:7f:b5:e0:c8:78:25: 61:31:04:4c:cc:de:05:63:d8:75:fd:7a:ae:ee:09:f5:4d:3c: 9a:56:e8:92:f3:c8:04:79:58:5d:fa:2b:69:c2:8d:5f:15:93: f8:58:35:54:bc:84:1b:03:c0:c7:e2:82:3f:6f:de:1f:51:3c: 75:28:e4:e0:cb:f1:c8:09:e9:3c:00:0f:9a:7f:66:b7:83:61: 81:c7:aa:19:6d:8a:32:84:99:ac:96:2d:8d:76:f0:5e:57:c1: e3:a1:d4:a7:4f:f5:07:38:12:c2:98:6a:ed:c3:88:a8:37:9c: 3a:53:8b:e3:a6:e9:7a:1b:a4:4e:0c:95:18:fc:6f:7f:9e:4a: 15:42:d2:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAMGajENpd44JmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY1NzNjMzctMzkyMC00Yjg1LWI1Y2EtNTA3MDdlZWZl NGIzMB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk OWZmZTU2ZWUtNDI3NS00NjJkLTljNWQtMjQ3ZWViYWQ4ODYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6PBPdxW+8/G3Kjq7odM4nMHPmC/Yyu0bwK5 FoXiy+TKMuQw4EzsEAqU2EeIwqKeV/4G6zsvk0+eDMO3U+uRWaF65IXlod3Fao7E NJOspvIzzwsxVQkhHJgv9smxgJqj1OPzolxT0CHb6tcA5qjcBLdkCfGTcv9r+qg/ JmAkEpuFWwlkYYPYVpjyGSExlCmb/wN4pOufg4eBz+31bY3ppWwQ5jE3GrdzyLcl mW+u7ki2SyRleKJtan50YRjJSyCz62f0GLOoCTsqSOb3aOGEaNyImX4ESnyD2oEc YBmTvQhEnr0+O5WCv7pgAqShqL52428TIOQ97yGEeTeJ2S/ucwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2G74cL49aSFegQKOgGk52a41JtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lZjU3 M2MzNy0zOTIwLTRiODUtYjVjYS01MDcwN2VlZmU0YjMvY2JmODQ5NDktNWE0MS0z YWFiLWI2ZjktZjk2YjU5NmRkM2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWY1NzNjMzctMzkyMC00Yjg1LWI1 Y2EtNTA3MDdlZWZlNGIzL2VmNTczYzM3LTM5MjAtNGI4NS1iNWNhLTUwNzA3ZWVm ZTRiMy5jcmwwHwYDVR0jBBgwFoAUqlGXAopqaIABm+jS6NlGUMvdY98wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lZjU3M2MzNy0zOTIwLTRiODUtYjVjYS01MDcw N2VlZmU0YjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpZXAzHATlowS2vCJtgV0g7Ee7kuvek25n7dl/XAa/iHihA+ocAQaDA f6XkmYalizWVGvnw+z6pLCBIskz/o9DSLaYmEy2ODe+j83NwQQ7elx4O1S69uTGj lRE3OOYkm1Tnvvcupm8braVQF0NgVSI7cbVQu73lSH+14Mh4JWExBEzM3gVj2HX9 eq7uCfVNPJpW6JLzyAR5WF36K2nCjV8Vk/hYNVS8hBsDwMfigj9v3h9RPHUo5ODL 8cgJ6TwAD5p/ZreDYYHHqhltijKEmayWLY128F5XweOh1KdP9Qc4EsKYau3DiKg3 nDpTi+Om6XobpE4MlRj8b3+eShVC0qI= -----END CERTIFICATE-----Generated at Tue Apr 8 07:23:52 2025 by rpki-client