$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/1d76a00b-5726-3dd4-9132-9abacfa2fff5.roa File: 1d76a00b-5726-3dd4-9132-9abacfa2fff5.roa (raw, json) Hash identifier: MfS5ZcO/wsr44DiiYBIjjBmpqBJPrxYct7Ii2iCqA4A= Subject key identifier: 00:75:9B:8E:61:9B:B6:F4:06:BF:31:13:EE:21:F5:AF:3A:C2:1F:7E Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285848F4F69AD2A76CD6597CBF5E80 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/1d76a00b-5726-3dd4-9132-9abacfa2fff5.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 20940 IP address blocks: 209.8.112.0/24 maxlen: 24 209.8.115.0/24 maxlen: 24 209.8.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:9a:d2:a7:6c:d6:59:7c:bf:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=ae35854b-e380-46ed-91ea-50403cfea54b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d1:9e:c9:44:36:f7:48:43:ca:6b:4e:bc:55: 74:22:ca:fd:12:49:70:89:9f:4c:85:9f:61:1f:e5: 53:27:80:9b:ea:c7:54:85:c2:84:b9:b1:32:10:2a: e7:a0:09:fe:e9:fc:38:de:19:95:3b:ec:aa:99:98: 16:55:36:65:ca:fa:36:1e:d3:8d:85:f4:50:d3:c1: a3:f1:56:95:d3:03:40:03:07:26:d1:be:2f:d8:e9: ce:f6:0d:74:94:5a:04:42:bb:14:fe:3b:c6:63:d4: 25:74:fd:82:5c:c1:b3:71:f2:d2:ed:29:9f:20:d7: 19:8a:7a:ee:83:c9:01:63:b7:84:d5:1e:7f:e6:71: 13:00:8a:dd:bf:b3:98:18:97:ad:7c:76:d2:b3:ee: 6a:37:81:d3:2f:fc:36:93:62:7b:0d:78:76:b8:7a: c0:97:43:d6:4a:30:80:7d:5e:e1:b1:3a:6d:0d:7c: d6:6b:fa:8a:be:1a:7e:54:23:c8:69:28:5b:4a:6c: 20:7f:5c:96:69:3c:25:4d:8e:28:7e:93:88:91:0a: 84:b8:98:bc:7f:6d:8f:6a:8d:9f:f1:b1:13:6e:36: ca:3c:a2:f8:66:2e:1a:94:27:18:fd:9c:1a:a3:43: 9d:fb:8b:0f:f5:17:e1:de:09:ab:b7:88:e6:4e:11: 09:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:75:9B:8E:61:9B:B6:F4:06:BF:31:13:EE:21:F5:AF:3A:C2:1F:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/1d76a00b-5726-3dd4-9132-9abacfa2fff5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.8.112.0/24 209.8.115.0/24 209.8.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:fc:73:9f:d2:1c:0f:2b:c2:93:6d:05:dc:66:e7:77:65:97: 20:3e:9f:59:81:d3:f7:9c:01:86:a0:62:4b:a5:a3:6c:a2:66: 4c:7e:a0:6b:c3:0f:fd:d5:91:23:dc:9e:82:54:64:1a:41:b3: 57:6c:89:f9:de:8b:d1:4c:80:a2:3f:d2:91:22:a8:51:d6:e4: f6:24:5b:8e:fa:d1:09:51:cf:e7:e7:d5:90:1d:7c:68:f0:3b: d8:c1:14:a4:b0:e2:24:15:72:f4:15:29:57:22:a5:95:7e:52: 4a:85:f7:94:f1:0b:be:9e:7d:9b:cc:ee:11:34:e2:09:96:3c: db:07:b9:75:8e:b0:b8:38:19:f4:4a:4d:4c:83:27:bf:bf:ba: 59:de:b1:91:3a:cf:44:8b:2a:d9:d7:47:e6:31:99:8f:f1:de: 5e:90:0b:92:5e:21:26:e3:68:75:fa:4d:62:94:65:96:33:d3: 02:e8:6a:06:83:7c:a1:38:08:c2:6c:a8:71:1e:6d:c4:cc:b4: 88:f7:54:87:55:ca:cb:1e:03:52:61:aa:d5:bb:16:5f:bb:18: dd:76:41:17:ef:da:70:17:f8:71:69:86:7b:18:26:73:63:28: 2c:1d:14:c6:95:06:41:ad:27:77:9c:92:6c:64:3d:92:64:08: 2d:2c:3b:b4 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEj09prSp2zWWXy/XoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YWUzNTg1NGItZTM4MC00NmVkLTkxZWEtNTA0MDNjZmVhNTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdGeyUQ290hDymtOvFV0Isr9EklwiZ9MhZ9h H+VTJ4Cb6sdUhcKEubEyECrnoAn+6fw43hmVO+yqmZgWVTZlyvo2HtONhfRQ08Gj 8VaV0wNAAwcm0b4v2OnO9g10lFoEQrsU/jvGY9QldP2CXMGzcfLS7SmfINcZinru g8kBY7eE1R5/5nETAIrdv7OYGJetfHbSs+5qN4HTL/w2k2J7DXh2uHrAl0PWSjCA fV7hsTptDXzWa/qKvhp+VCPIaShbSmwgf1yWaTwlTY4ofpOIkQqEuJi8f22Pao2f 8bETbjbKPKL4Zi4alCcY/Zwao0Od+4sP9Rfh3gmrt4jmThEJbQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFAB1m45hm7b0Br8xE+4h9a86wh9+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvMWQ3NmEwMGItNTcyNi0z ZGQ0LTkxMzItOWFiYWNmYTJmZmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA0QhwAwQA 0QhzAwQA0Qh2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAKT8c5/SHA8rwpNtBdxm53dllyA+n1mB0/ecAYag Ykulo2yiZkx+oGvDD/3VkSPcnoJUZBpBs1dsifnei9FMgKI/0pEiqFHW5PYkW476 0QlRz+fn1ZAdfGjwO9jBFKSw4iQVcvQVKVcipZV+UkqF95TxC76efZvM7hE04gmW PNsHuXWOsLg4GfRKTUyDJ7+/ulnesZE6z0SLKtnXR+YxmY/x3l6QC5JeISbjaHX6 TWKUZZYz0wLoagaDfKE4CMJsqHEebcTMtIj3VIdVysseA1JhqtW7Fl+7GN12QRfv 2nAX+HFphnsYJnNjKCwdFMaVBkGtJ3eckmxkPZJkCC0sO7Q= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:15 2025 by rpki-client