$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/470a0d1c-0b52-3d81-807b-734f35cf00ea.roa File: 470a0d1c-0b52-3d81-807b-734f35cf00ea.roa (raw, json) Hash identifier: K7qlI+lw6npgka8or8+LqhxCP/Y/8kLjAHblkB9ql8M= Subject key identifier: 09:BF:31:DA:77:75:9E:7E:4A:5A:99:47:C2:69:53:9F:FD:7E:1E:67 Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F432858494CC94168D0664F972605D2A0 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/470a0d1c-0b52-3d81-807b-734f35cf00ea.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 14618 IP address blocks: 208.71.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:41:68:d0:66:4f:97:26:05:d2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=54c9d30f-23ee-4855-8c4d-f901943caf0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8a:01:53:31:ef:a8:a1:9d:98:d9:09:56:2e: 79:1a:c5:8e:8c:d2:b7:77:6e:bf:1c:79:54:a6:17: 58:2f:f7:b7:4e:86:e7:79:25:bf:b9:8a:f0:c6:d3: 1e:2b:c2:a6:0f:c0:31:a8:e2:e4:28:71:e8:59:b4: ba:a0:28:1b:8f:ce:c9:3f:9c:91:2d:eb:4d:2b:d9: ea:66:da:5e:1e:99:12:39:d0:b0:18:9b:31:09:be: f7:7d:c1:f1:bc:74:4f:7c:21:c7:9b:3e:cf:d6:5e: d3:d8:02:e8:0b:c3:6a:0f:c3:5c:b7:13:57:4e:40: fa:53:2a:c0:5b:86:d2:93:99:71:be:e1:c1:28:7a: f0:3d:c2:3e:7f:14:26:27:70:53:fb:2f:a9:09:cb: 65:38:fd:a1:28:5d:16:24:3b:50:e0:5c:13:66:44: cc:21:0d:54:d8:f9:32:1e:56:cf:95:44:03:57:e2: 81:60:22:cd:5a:a5:b0:92:8f:e6:d2:23:0f:23:7d: a7:ee:24:d6:21:41:d7:94:27:a4:7f:46:f4:9d:48: 9e:d4:3b:6f:40:cf:78:c9:40:86:63:43:26:7a:00: 99:05:c9:99:a3:b8:3f:58:76:08:bd:89:de:63:0f: 2e:0b:b5:51:39:4f:54:b6:64:d3:fd:0b:6c:43:6c: 02:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BF:31:DA:77:75:9E:7E:4A:5A:99:47:C2:69:53:9F:FD:7E:1E:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/470a0d1c-0b52-3d81-807b-734f35cf00ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:cc:ad:42:84:cb:15:c6:0c:83:28:cf:cb:c7:4f:94:ee:59: 67:b3:3a:4b:0c:20:b9:29:0f:46:09:e6:9e:d9:0b:58:11:ee: f1:1f:1f:21:c1:2f:cf:2f:c0:eb:dc:ee:66:4a:ed:68:e5:92: ae:cb:40:85:08:9f:93:ab:14:6b:e1:52:a5:ee:9c:b1:36:1e: bf:bc:c9:36:54:8b:ca:19:00:7d:b4:e5:cf:f3:9e:26:0a:a6: 6b:99:12:61:ca:84:c0:07:6c:55:52:da:5a:46:11:d6:49:76: 56:ff:9d:b5:bb:1b:d5:3e:12:7b:fa:4c:91:7f:99:dc:98:06: 5b:56:4a:ff:45:2a:2b:72:b0:11:55:f5:5c:b8:94:f3:2f:08: 32:fa:fd:80:b2:b3:b9:7f:de:ba:ed:29:7d:cd:a8:b0:7a:04: 09:0b:12:8b:02:cf:94:e9:75:50:03:15:54:dc:4d:db:8a:ec: 5e:cd:b1:3c:b9:c3:c1:24:e7:e3:30:96:7b:37:8f:fb:75:26: 67:aa:2c:4c:d5:d1:eb:96:59:74:f8:d5:c2:a9:92:3a:34:4e: d5:40:1a:93:32:6c:33:75:84:96:93:b4:24:66:e8:a8:1e:ac: f7:f2:12:39:13:7f:29:9f:39:70:e1:df:fe:92:71:bf:5b:ce: 66:06:e3:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUFo0GZPlyYF0qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk NTRjOWQzMGYtMjNlZS00ODU1LThjNGQtZjkwMTk0M2NhZjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIoBUzHvqKGdmNkJVi55GsWOjNK3d26/HHlU phdYL/e3TobneSW/uYrwxtMeK8KmD8AxqOLkKHHoWbS6oCgbj87JP5yRLetNK9nq ZtpeHpkSOdCwGJsxCb73fcHxvHRPfCHHmz7P1l7T2ALoC8NqD8NctxNXTkD6UyrA W4bSk5lxvuHBKHrwPcI+fxQmJ3BT+y+pCctlOP2hKF0WJDtQ4FwTZkTMIQ1U2Pky HlbPlUQDV+KBYCLNWqWwko/m0iMPI32n7iTWIUHXlCekf0b0nUie1DtvQM94yUCG Y0MmegCZBcmZo7g/WHYIvYneYw8uC7VROU9UtmTT/QtsQ2wCLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAm/Mdp3dZ5+SlqZR8JpU5/9fh5nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvNDcwYTBkMWMtMGI1Mi0z ZDgxLTgwN2ItNzM0ZjM1Y2YwMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ef1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzMrUKEyxXGDIMoz8vHT5TuWWezOksMILkpD0YJ5p7ZC1gR7vEfHyHB L88vwOvc7mZK7Wjlkq7LQIUIn5OrFGvhUqXunLE2Hr+8yTZUi8oZAH205c/zniYK pmuZEmHKhMAHbFVS2lpGEdZJdlb/nbW7G9U+Env6TJF/mdyYBltWSv9FKitysBFV 9Vy4lPMvCDL6/YCys7l/3rrtKX3NqLB6BAkLEosCz5TpdVADFVTcTduK7F7NsTy5 w8Ek5+Mwlns3j/t1JmeqLEzV0euWWXT41cKpkjo0TtVAGpMybDN1hJaTtCRm6Kge rPfyEjkTfymfOXDh3/6Scb9bzmYG4yI= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:28 2025 by rpki-client