$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/938a1a8b-5d4c-3f95-8273-2135590b1d77.roa File: 938a1a8b-5d4c-3f95-8273-2135590b1d77.roa (raw, json) Hash identifier: AQsIRCA0snPgmRvM+R/R04TmWTJVEEPc7haVe6TzEy8= Subject key identifier: FC:96:A1:43:6D:F4:B6:EE:28:C7:88:48:10:58:77:A6:B3:25:7F:87 Certificate issuer: /CN=3e886672-55f3-450f-ab6e-342c76f256db Certificate serial: 010D0C9F43285848BBBB865D8CEF25DB32DF06F0 Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/938a1a8b-5d4c-3f95-8273-2135590b1d77.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 0 IP address blocks: 204.9.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:86:5d:8c:ef:25:db:32:df:06:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=bbb10abf-ca53-42db-a4ca-d8c4eef2d695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:29:96:7b:dd:fa:30:a0:1d:52:93:3c:74:c7: b7:c2:1b:72:7d:56:6f:33:a2:98:8e:99:36:43:f6: 67:f9:90:8e:2f:71:cd:ec:64:f4:59:4e:8b:a6:09: 3a:76:15:87:ce:d5:d3:71:2f:9c:22:e9:46:7b:f5: 8e:d1:5d:1f:90:43:11:65:b2:d1:59:74:56:2f:55: ce:8e:88:98:15:53:cf:41:d4:1c:31:df:40:2e:e5: 06:f6:68:37:20:41:aa:70:0b:69:1d:dc:ec:af:e2: 83:f3:d3:b1:9d:a0:1e:7f:8e:b2:75:d9:63:30:08: 25:13:b9:de:e1:8a:5c:35:24:4b:39:e2:04:6a:1d: ba:fb:95:69:13:fd:15:85:3b:c2:14:dc:e2:4b:a0: 22:62:49:89:27:86:a6:d5:76:23:ab:a1:23:17:1d: 3a:56:b1:0f:a9:2a:ab:5d:ed:56:a5:89:78:ab:27: a5:46:6e:16:ad:e3:71:79:9c:33:bc:73:79:1c:ee: 02:1f:a0:2f:72:9c:8b:78:00:ad:6d:c2:9a:9f:57: 23:3b:24:04:7e:52:a8:1b:4b:89:ec:c0:8b:c4:a7: 4a:09:49:e3:58:3d:fe:6b:25:e9:aa:3a:c4:f9:f5: 0f:c1:28:02:01:c6:e8:59:e4:44:e5:44:25:02:fc: 6e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:96:A1:43:6D:F4:B6:EE:28:C7:88:48:10:58:77:A6:B3:25:7F:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/938a1a8b-5d4c-3f95-8273-2135590b1d77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl X509v3 Authority Key Identifier: keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer sbgp-ipAddrBlock: critical IPv4: 204.9.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:c3:20:51:c4:48:8f:c5:e5:76:d3:37:ed:23:9f:b5:a8:37: 6e:35:17:26:1c:24:35:c0:d5:2d:34:fc:89:14:a1:b2:40:f2: 4f:0b:60:2c:32:16:98:7c:81:7b:af:72:75:1a:be:0f:e0:c5: bb:5f:f2:34:4f:a4:28:97:f7:e0:04:d9:77:2c:ab:07:50:ee: 26:42:e0:b4:81:85:98:11:09:fa:44:1f:27:5c:6e:7e:df:40: 55:c8:2f:00:15:4a:98:14:af:5e:6b:da:e5:6d:4a:de:29:99: d2:e4:7e:3e:0f:6c:ca:32:0b:2f:9d:8b:ba:df:62:a0:bb:27: f1:3c:2e:41:ee:73:49:ce:59:fb:1d:51:4c:e1:31:eb:96:e8: eb:b7:8e:f8:54:3e:a6:7d:27:77:c4:b2:30:7f:7e:3e:b9:21: ec:3c:40:66:8f:a1:5f:e9:13:ab:40:7a:41:52:ca:11:d5:15: df:ac:96:fc:01:b8:90:6c:81:4b:1d:94:bf:c7:d1:bb:27:5a: 14:20:b4:dd:f4:c1:be:17:f6:66:37:74:95:e4:d1:11:e8:9a: 78:0a:63:5e:90:26:49:6a:1d:30:79:23:d9:ca:9a:6f:00:aa: 75:da:63:c7:ae:29:95:37:47:70:e3:17:61:c0:8e:83:48:34: 29:fe:c8:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4ZdjO8l2zLfBvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U4ODY2NzItNTVmMy00NTBmLWFiNmUtMzQyYzc2ZjI1 NmRiMB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk YmJiMTBhYmYtY2E1My00MmRiLWE0Y2EtZDhjNGVlZjJkNjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCmWe936MKAdUpM8dMe3whtyfVZvM6KYjpk2 Q/Zn+ZCOL3HN7GT0WU6Lpgk6dhWHztXTcS+cIulGe/WO0V0fkEMRZbLRWXRWL1XO joiYFVPPQdQcMd9ALuUG9mg3IEGqcAtpHdzsr+KD89OxnaAef46yddljMAglE7ne 4YpcNSRLOeIEah26+5VpE/0VhTvCFNziS6AiYkmJJ4am1XYjq6EjFx06VrEPqSqr Xe1WpYl4qyelRm4WreNxeZwzvHN5HO4CH6AvcpyLeACtbcKan1cjOyQEflKoG0uJ 7MCLxKdKCUnjWD3+ayXpqjrE+fUPwSgCAcboWeRE5UQlAvxuUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyWoUNt9LbuKMeISBBYd6azJX+HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4 NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJjNzZmMjU2ZGIvOTM4YTFhOGItNWQ0Yy0z Zjk1LTgyNzMtMjEzNTU5MGIxZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2U4ODY2NzItNTVmMy00NTBmLWFi NmUtMzQyYzc2ZjI1NmRiLzNlODg2NjcyLTU1ZjMtNDUwZi1hYjZlLTM0MmM3NmYy NTZkYi5jcmwwHwYDVR0jBBgwFoAUyffaYgRlgk+Ha8qShuQWCtT5MZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJj NzZmMjU2ZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAknMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInDIFHESI/F5XbTN+0jn7WoN241FyYcJDXA1S00/IkUobJA8k8LYCwy Fph8gXuvcnUavg/gxbtf8jRPpCiX9+AE2XcsqwdQ7iZC4LSBhZgRCfpEHydcbn7f QFXILwAVSpgUr15r2uVtSt4pmdLkfj4PbMoyCy+di7rfYqC7J/E8LkHuc0nOWfsd UUzhMeuW6Ou3jvhUPqZ9J3fEsjB/fj65Iew8QGaPoV/pE6tAekFSyhHVFd+slvwB uJBsgUsdlL/H0bsnWhQgtN30wb4X9mY3dJXk0RHomngKY16QJklqHTB5I9nKmm8A qnXaY8euKZU3R3DjF2HAjoNINCn+yP4= -----END CERTIFICATE-----Generated at Fri Apr 11 21:06:48 2025 by rpki-client