$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7675d262-4d44-3834-ab36-7be25716a0e4.roa File: 7675d262-4d44-3834-ab36-7be25716a0e4.roa (raw, json) Hash identifier: 4fuSNe/e1GLH2dwSGQcnSMODUzcnh7P2IGv4qVLPygw= Subject key identifier: 4E:67:AA:1D:8A:DA:00:61:C8:F8:B7:DE:FD:7E:26:61:46:39:EA:AF Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285848F4F698A80DDB393D6321A600 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7675d262-4d44-3834-ab36-7be25716a0e4.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 54994 IP address blocks: 209.9.208.0/24 maxlen: 24 209.9.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:98:a8:0d:db:39:3d:63:21:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=c012e73d-4350-4d70-968d-5fb4da8f7109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:52:41:85:96:9b:98:06:70:73:b0:7e:8f:74: 37:9e:67:35:8f:61:3b:66:1e:b5:48:94:09:23:ea: 0e:b8:9b:f4:7c:76:aa:85:2d:34:5f:57:84:90:2c: 0b:ee:33:d1:5b:94:c9:2a:39:a9:1e:19:f9:3e:b6: 3d:15:3c:0b:34:3b:02:22:65:e9:59:b2:cd:9f:eb: 03:9b:e1:12:94:76:e5:e2:52:21:c8:bf:66:24:f6: 1e:88:c9:d6:a5:1d:b5:67:9d:7d:bc:02:a1:f8:48: eb:4f:1a:60:ea:85:63:f2:6d:f7:a4:a5:aa:9f:a6: 68:ee:d0:36:79:6d:76:80:3d:ce:c3:88:93:cc:ff: 1d:44:80:72:52:9f:25:f1:03:4b:9b:f0:c3:5f:bd: 40:31:31:5b:28:0b:96:22:27:85:c5:85:3e:ff:82: 89:74:0d:61:6e:0b:23:c5:ef:9f:6c:85:7d:14:dc: 6a:30:a3:92:38:08:7e:da:de:b7:31:d7:c8:83:bd: 26:b2:72:db:00:85:ad:ce:90:c2:d8:a4:99:a0:cc: bc:39:b4:ad:e0:0c:ba:8b:b1:e2:34:18:7d:4a:15: 88:d6:78:16:b0:f1:e7:ca:38:e4:34:70:59:ac:70: b3:57:4a:d1:3c:fc:c2:b5:fa:27:f3:b4:f8:c2:3d: 65:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:67:AA:1D:8A:DA:00:61:C8:F8:B7:DE:FD:7E:26:61:46:39:EA:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7675d262-4d44-3834-ab36-7be25716a0e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.9.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:35:b0:20:9b:07:a2:81:71:f3:3a:9e:46:88:45:1e:1e:76: dc:aa:cc:7b:3d:eb:68:09:3e:fd:65:f5:aa:1c:8a:2b:5a:f5: a7:e2:7f:db:0c:ae:72:5e:c7:1a:f5:3a:00:2d:b5:36:b3:a6: f4:e1:9d:0d:51:75:9a:10:8b:43:6d:46:a6:ea:3d:1f:28:41: 79:4a:52:af:7a:e9:93:c9:16:bd:67:8d:95:56:89:b9:04:59: 1d:87:68:81:e6:ad:01:a3:0c:ef:36:ba:c2:47:1c:69:76:23: e1:9b:fc:3e:bf:ff:1f:e9:77:40:0a:69:56:40:8b:7b:e1:45: 05:de:16:2d:31:b1:fb:49:50:c3:8c:d4:5a:28:6a:b8:b8:89: 4f:ee:40:ed:f1:a0:30:3b:02:d8:e4:ea:bf:d5:aa:0d:6a:44: 74:9d:1f:98:66:0f:30:55:2c:fa:3a:f3:7b:f9:69:11:cd:07: 3c:56:89:e1:18:f5:01:2f:41:2e:15:13:d4:37:a3:bf:3f:0a: 0a:c9:f8:0a:be:41:a7:d9:5d:14:0d:51:f3:91:92:a8:de:d8: be:bc:c1:cc:f5:d8:7c:7d:8e:c2:0f:29:9f:ab:cc:80:ae:04: 9f:2b:0b:21:da:fb:7d:61:9a:9c:3f:bd:d3:21:b4:6e:61:10: e8:6f:f1:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09pioDds5PWMhpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YzAxMmU3M2QtNDM1MC00ZDcwLTk2OGQtNWZiNGRhOGY3MTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVJBhZabmAZwc7B+j3Q3nmc1j2E7Zh61SJQJ I+oOuJv0fHaqhS00X1eEkCwL7jPRW5TJKjmpHhn5PrY9FTwLNDsCImXpWbLNn+sD m+ESlHbl4lIhyL9mJPYeiMnWpR21Z519vAKh+EjrTxpg6oVj8m33pKWqn6Zo7tA2 eW12gD3Ow4iTzP8dRIByUp8l8QNLm/DDX71AMTFbKAuWIieFxYU+/4KJdA1hbgsj xe+fbIV9FNxqMKOSOAh+2t63MdfIg70msnLbAIWtzpDC2KSZoMy8ObSt4Ay6i7Hi NBh9ShWI1ngWsPHnyjjkNHBZrHCzV0rRPPzCtfon87T4wj1lqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5nqh2K2gBhyPi33v1+JmFGOeqvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvNzY3NWQyNjItNGQ0NC0z ODM0LWFiMzYtN2JlMjU3MTZhMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0QnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMo1sCCbB6KBcfM6nkaIRR4edtyqzHs962gJPv1l9aociita9afif9sM rnJexxr1OgAttTazpvThnQ1RdZoQi0NtRqbqPR8oQXlKUq966ZPJFr1njZVWibkE WR2HaIHmrQGjDO82usJHHGl2I+Gb/D6//x/pd0AKaVZAi3vhRQXeFi0xsftJUMOM 1Fooari4iU/uQO3xoDA7Atjk6r/Vqg1qRHSdH5hmDzBVLPo683v5aRHNBzxWieEY 9QEvQS4VE9Q3o78/CgrJ+Aq+QafZXRQNUfORkqje2L68wcz12Hx9jsIPKZ+rzICu BJ8rCyHa+31hmpw/vdMhtG5hEOhv8ZU= -----END CERTIFICATE-----Generated at Wed Apr 9 05:24:56 2025 by rpki-client