$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/38571c14-5975-3249-9151-857c5a59c9be.roa File: 38571c14-5975-3249-9151-857c5a59c9be.roa (raw, json) Hash identifier: pENb6LiG3V1sgFebbyVUBfyVWDWTg9FtkLW0hwgysfg= Subject key identifier: D8:D5:25:EA:80:D5:13:8B:54:54:D3:AA:C4:EA:3B:6E:BA:8C:AF:EA Certificate issuer: /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e Certificate serial: 010D0C9F4328584950F96312B351822107315380 Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/38571c14-5975-3249-9151-857c5a59c9be.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 6939 IP address blocks: 209.142.71.0/24 maxlen: 31 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:63:12:b3:51:82:21:07:31:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=190f3b14-e787-412f-b804-592f1a67951a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2c:e9:80:97:cf:aa:23:2b:43:38:bd:d9:2a: 97:ea:18:23:15:89:9b:7e:b0:ee:0a:a3:95:bc:b6: b1:eb:19:ca:74:85:01:bc:74:85:43:f4:90:c4:9f: 81:20:b5:fc:c3:70:1e:66:4d:b1:c8:73:d5:59:e0: 01:5d:4a:c6:a8:36:b9:75:59:86:94:3a:db:b3:a5: 51:b2:0d:87:e2:c9:75:7d:32:1b:14:b0:bc:71:8c: 82:76:29:d0:79:63:c3:03:38:d8:a6:f6:92:5c:7f: 76:6c:0e:f0:68:e1:14:94:31:21:84:56:81:6e:f1: 57:ce:dd:4a:e3:e6:5e:0c:09:f9:33:6c:fe:ca:92: 68:42:5f:95:d7:2c:b7:2d:ca:63:07:5b:e0:66:4f: 4b:09:74:be:db:af:23:11:6e:c0:0e:cb:9a:98:f3: 95:75:1c:ac:e7:db:d8:a4:85:4e:6a:67:43:56:a9: 80:7d:b5:de:a9:76:5a:5f:07:ed:b5:31:c0:8d:bd: 3f:7e:94:f6:85:a0:e9:1e:bc:11:7f:d2:46:b7:b4: 83:ae:6d:8d:59:95:9b:50:43:ba:28:4b:72:51:8b: 84:a6:80:2c:11:13:25:0c:d3:cc:9e:3e:eb:43:bb: 60:0c:39:68:6e:07:22:e2:33:a7:5e:db:72:13:63: 0f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D5:25:EA:80:D5:13:8B:54:54:D3:AA:C4:EA:3B:6E:BA:8C:AF:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/38571c14-5975-3249-9151-857c5a59c9be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl X509v3 Authority Key Identifier: keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer sbgp-ipAddrBlock: critical IPv4: 209.142.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:a3:eb:02:ea:bb:ce:00:b4:dc:4e:7c:cc:c6:22:91:75:50: 12:bc:d2:46:9c:f8:c6:a1:4f:ce:a2:7c:4d:15:6a:05:01:63: 56:31:b7:43:97:b0:c2:bd:fd:c7:62:9f:65:e7:5c:3b:42:79: f6:be:f3:46:2b:7d:16:5d:e3:62:0c:1e:14:5f:51:5e:d6:d1: ad:e4:25:59:fc:d5:8b:07:07:e9:d1:c5:8c:17:d0:88:85:7e: 68:86:6b:06:67:c0:74:54:85:33:74:36:0e:5a:1f:0e:52:97: 96:09:d2:88:9f:da:ce:42:d2:da:26:d8:24:d5:4d:19:a9:b4: 0f:0b:fd:1b:17:45:c8:02:c2:78:f4:a6:6a:df:b3:9d:22:27: b1:bf:5b:26:97:a6:2c:9a:45:c0:2a:c3:1a:0f:a0:6b:67:2d: ab:0d:8f:1e:94:e3:39:53:7f:54:ba:ca:e9:52:d3:c1:b3:74: f3:bd:c9:3a:2e:19:16:df:19:3f:fb:a9:43:20:67:ec:5f:8c: 10:53:12:3a:48:80:25:af:b4:00:32:79:43:c0:42:46:e2:33: dc:2b:2f:f3:5b:95:22:b7:4f:81:be:16:9c:e6:c7:a3:48:1f: 9b:48:70:17:9f:f1:48:0b:63:3d:84:cd:d4:2c:68:d6:25:0e: 32:17:8c:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElQ+WMSs1GCIQcxU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzViOWNiOGUtN2E3Ny00MDhlLTgxZDktMDc1ZjhlZjcy MDBlMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk MTkwZjNiMTQtZTc4Ny00MTJmLWI4MDQtNTkyZjFhNjc5NTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyzpgJfPqiMrQzi92SqX6hgjFYmbfrDuCqOV vLax6xnKdIUBvHSFQ/SQxJ+BILX8w3AeZk2xyHPVWeABXUrGqDa5dVmGlDrbs6VR sg2H4sl1fTIbFLC8cYyCdinQeWPDAzjYpvaSXH92bA7waOEUlDEhhFaBbvFXzt1K 4+ZeDAn5M2z+ypJoQl+V1yy3LcpjB1vgZk9LCXS+268jEW7ADsuamPOVdRys59vY pIVOamdDVqmAfbXeqXZaXwfttTHAjb0/fpT2haDpHrwRf9JGt7SDrm2NWZWbUEO6 KEtyUYuEpoAsERMlDNPMnj7rQ7tgDDlobgci4jOnXttyE2MPAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjVJeqA1ROLVFTTqsTqO266jK/qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NWI5 Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVmOGVmNzIwMGUvMzg1NzFjMTQtNTk3NS0z MjQ5LTkxNTEtODU3YzVhNTljOWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzViOWNiOGUtN2E3Ny00MDhlLTgx ZDktMDc1ZjhlZjcyMDBlLzc1YjljYjhlLTdhNzctNDA4ZS04MWQ5LTA3NWY4ZWY3 MjAwZS5jcmwwHwYDVR0jBBgwFoAUUCXJ4rB8e2VaqkLiQ9juoPxY5KIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NWI5Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVm OGVmNzIwMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y5HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOj6wLqu84AtNxOfMzGIpF1UBK80kac+MahT86ifE0VagUBY1Yxt0OX sMK9/cdin2XnXDtCefa+80YrfRZd42IMHhRfUV7W0a3kJVn81YsHB+nRxYwX0IiF fmiGawZnwHRUhTN0Ng5aHw5Sl5YJ0oif2s5C0tom2CTVTRmptA8L/RsXRcgCwnj0 pmrfs50iJ7G/WyaXpiyaRcAqwxoPoGtnLasNjx6U4zlTf1S6yulS08GzdPO9yTou GRbfGT/7qUMgZ+xfjBBTEjpIgCWvtAAyeUPAQkbiM9wrL/NblSK3T4G+Fpzmx6NI H5tIcBef8UgLYz2EzdQsaNYlDjIXjGc= -----END CERTIFICATE-----Generated at Tue Apr 15 06:07:13 2025 by rpki-client