$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/9996e972-6eae-3d44-ad69-6a057d20eca9.roa File: 9996e972-6eae-3d44-ad69-6a057d20eca9.roa (raw, json) Hash identifier: K59omVXaCbd46OUw61XBXCRAKIF6CvFudQHuI2BrwwI= Subject key identifier: 79:17:CF:80:99:5F:60:C0:DA:08:FD:57:04:EC:D5:FE:8C:D7:67:58 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584930DE6C662D291583F0AFC180 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/9996e972-6eae-3d44-ad69-6a057d20eca9.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 18258 IP address blocks: 209.8.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:6c:66:2d:29:15:83:f0:af:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=2c3f49c8-e1e0-4545-bc01-b2fc60d90a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c2:0f:ac:e8:2d:9e:2c:22:51:97:cb:50:7a: 5e:43:ab:f4:ba:33:73:22:b0:c5:c5:18:a3:f0:16: 96:a2:90:97:77:3f:2d:bd:fb:8c:0a:1a:35:44:c3: 07:07:06:14:3a:af:47:1b:8f:68:96:e3:67:7d:98: 43:73:9e:de:63:88:86:35:2c:c2:bc:76:5e:2a:53: 22:85:09:41:04:ff:bc:e4:2a:6c:10:71:a2:f6:3b: 5e:a6:e5:33:7f:07:3a:79:05:b4:f9:b2:cb:b8:d8: c2:9f:6d:6d:d4:b9:ce:46:57:39:1d:68:65:f5:59: e8:30:50:7d:0e:ff:87:f5:64:9c:2f:e6:62:17:12: 22:28:b6:15:8e:69:d6:18:a2:0c:6f:bc:e8:0d:8a: fb:cc:84:14:c1:e6:3b:1b:69:7d:7b:fb:3a:98:8c: 92:ce:8e:fa:7a:76:73:49:a2:37:2d:77:78:cb:c0: e9:72:2a:b6:c0:e9:e1:20:79:33:a9:dd:25:b9:6e: b7:4b:d1:bf:00:83:e1:c0:01:2a:70:92:2f:cb:07: 6d:a0:4d:94:76:49:89:50:45:55:57:a9:18:56:16: 77:89:df:ab:ad:d0:13:78:6a:b5:46:52:32:29:95: c3:56:c8:67:36:b7:f5:e2:d7:ab:2d:56:4b:26:26: f7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:17:CF:80:99:5F:60:C0:DA:08:FD:57:04:EC:D5:FE:8C:D7:67:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/9996e972-6eae-3d44-ad69-6a057d20eca9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.8.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:37:15:74:4e:d8:ca:6d:e7:e3:ad:a8:d6:f7:91:b9:e2:39: e3:86:a9:ff:b3:e2:f2:94:a9:00:7c:0b:7c:ee:92:35:16:4c: c4:1f:e0:5c:6a:8b:65:5f:3e:a7:7f:18:90:b4:a2:10:0d:f1: 99:e3:f7:21:a3:c4:78:6e:dd:00:02:0f:51:f3:2d:4c:c2:d0: ea:37:f7:57:b7:5f:e0:20:c2:62:ac:ad:54:2f:f3:9d:79:ee: 24:63:9b:32:64:5a:2f:9e:64:de:a3:9d:ec:d7:3d:e5:0e:8e: 6d:44:82:eb:5d:c1:bb:f2:85:55:b3:b9:49:ad:09:05:e3:20: 2f:3a:51:3e:d8:b9:49:ad:e1:07:79:43:7c:00:b6:1d:16:0f: 67:fa:ae:3a:9f:07:95:08:58:f4:55:52:b9:5d:1d:f1:6f:28: 85:8c:5e:09:d5:b8:87:21:10:71:8a:0d:5e:33:66:21:31:5d: 05:6a:c4:04:f8:c3:06:f4:1a:89:8f:85:0a:dc:67:47:96:00: 11:f7:04:e8:5a:61:60:43:67:85:a6:07:c8:eb:23:be:3b:9c: d4:0c:cd:55:b1:77:86:13:38:20:fe:f1:d2:ab:71:9f:f8:2f: a7:75:60:3e:e9:ff:27:c2:90:17:8f:9f:ec:24:0b:31:1c:8c: 9d:be:01:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3mxmLSkVg/CvwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk MmMzZjQ5YzgtZTFlMC00NTQ1LWJjMDEtYjJmYzYwZDkwYTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MIPrOgtniwiUZfLUHpeQ6v0ujNzIrDFxRij 8BaWopCXdz8tvfuMCho1RMMHBwYUOq9HG49oluNnfZhDc57eY4iGNSzCvHZeKlMi hQlBBP+85CpsEHGi9jtepuUzfwc6eQW0+bLLuNjCn21t1LnORlc5HWhl9VnoMFB9 Dv+H9WScL+ZiFxIiKLYVjmnWGKIMb7zoDYr7zIQUweY7G2l9e/s6mIySzo76enZz SaI3LXd4y8Dpciq2wOnhIHkzqd0luW63S9G/AIPhwAEqcJIvywdtoE2UdkmJUEVV V6kYVhZ3id+rrdATeGq1RlIyKZXDVshnNrf14terLVZLJib3jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkXz4CZX2DA2gj9VwTs1f6M12dYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvOTk5NmU5NzItNmVhZS0z ZDQ0LWFkNjktNmEwNTdkMjBlY2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0QiwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQ3FXRO2Mpt5+OtqNb3kbniOeOGqf+z4vKUqQB8C3zukjUWTMQf4Fxq i2VfPqd/GJC0ohAN8Znj9yGjxHhu3QACD1HzLUzC0Oo391e3X+AgwmKsrVQv8515 7iRjmzJkWi+eZN6jnezXPeUOjm1EgutdwbvyhVWzuUmtCQXjIC86UT7YuUmt4Qd5 Q3wAth0WD2f6rjqfB5UIWPRVUrldHfFvKIWMXgnVuIchEHGKDV4zZiExXQVqxAT4 wwb0GomPhQrcZ0eWABH3BOhaYWBDZ4WmB8jrI747nNQMzVWxd4YTOCD+8dKrcZ/4 L6d1YD7p/yfCkBePn+wkCzEcjJ2+AZg= -----END CERTIFICATE-----Generated at Sun Apr 6 18:11:12 2025 by rpki-client