$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/98a3e3fc-6f6d-39b7-bab0-5274a9daafbb.roa File: 98a3e3fc-6f6d-39b7-bab0-5274a9daafbb.roa (raw, json) Hash identifier: FM+d9ZGjwO9fLPrN5GvqIW+vIqVaz3o0179gZqlKir4= Subject key identifier: B4:67:A5:42:BC:C5:3B:84:A0:FE:B5:3C:C6:0A:37:33:E5:6B:37:60 Certificate issuer: /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Certificate serial: 010D0C9F432858496484465246055C85C76ABCC0 Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/98a3e3fc-6f6d-39b7-bab0-5274a9daafbb.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 31834 IP address blocks: 209.222.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:46:52:46:05:5c:85:c7:6a:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=9512f662-0a39-462d-83bd-abe1ad0759ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d1:6c:7d:0e:ef:27:20:85:6f:51:7e:93:98: 3e:8a:a6:ad:66:d0:a0:ee:bc:7d:65:44:69:c6:7b: ba:83:3c:7a:f0:33:43:a3:92:c5:93:78:ff:5a:3b: 95:e2:8e:54:54:5a:56:8e:7b:c4:08:d2:6c:b2:9e: 1d:dd:18:6b:06:c4:ce:5d:66:8f:55:19:bd:74:c1: ce:97:49:a6:c9:01:61:3f:e2:9e:e3:72:d0:5d:50: 57:41:03:b0:19:bd:7a:48:d8:7f:49:26:51:ae:7f: 7b:3f:ad:d3:8e:6d:cf:dd:c8:f0:db:92:75:25:b2: f3:d4:d9:31:1c:9a:ef:d6:16:f8:30:d8:59:62:3d: d7:e4:4c:ff:2a:c4:ab:5a:45:c2:95:07:c3:8e:fe: b4:a5:7e:f7:6a:b5:18:66:e8:12:54:4b:9d:dd:2a: 7f:52:78:66:d2:00:99:ba:fc:7f:b7:91:f6:05:dd: 56:75:ad:b2:0d:c0:33:26:cd:28:b1:24:ed:b8:f2: 03:54:0b:dd:2e:7b:e0:c8:1f:e1:af:07:a4:4d:2a: a5:fd:ec:e1:8b:c4:4c:0d:3d:97:8a:8f:63:39:84: e5:26:41:cb:19:eb:47:fc:12:66:66:d1:17:0b:aa: 62:3e:69:6d:16:ed:a9:04:5d:e3:09:8c:8b:7b:e7: 13:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:67:A5:42:BC:C5:3B:84:A0:FE:B5:3C:C6:0A:37:33:E5:6B:37:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/98a3e3fc-6f6d-39b7-bab0-5274a9daafbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl X509v3 Authority Key Identifier: keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer sbgp-ipAddrBlock: critical IPv4: 209.222.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:ab:f9:df:82:d4:70:63:81:f2:d5:fb:c8:e0:cd:9d:1b:5d: 36:6f:c5:8d:9e:66:34:b3:00:bf:c9:c0:bb:11:7f:c9:99:80: fb:63:fe:49:a2:bb:8a:b6:59:e8:36:e9:6e:9e:f7:6b:3e:19: 78:7a:62:73:3b:6b:4a:e6:4a:f3:70:3a:3b:da:41:8f:63:9a: c6:68:05:19:f7:15:20:13:0b:c1:5b:04:9d:7d:ab:92:53:64: 4b:b7:37:c6:b8:68:5a:67:70:b3:1a:c1:74:4c:dc:06:3d:b7: 34:6f:85:b8:2d:1e:11:69:9b:b1:4c:8e:27:f4:4f:4d:be:eb: 32:93:87:08:58:56:97:54:e2:07:f2:cf:dd:78:17:3e:00:d3: f6:81:77:9b:ef:66:c1:eb:f4:e7:28:9f:4e:db:e5:8e:85:c8: 2e:76:f8:bf:c5:d8:9f:0f:f5:fe:4e:47:57:d8:64:ea:5b:ec: 9b:0e:9c:3c:9d:87:19:e2:b3:b3:4f:22:1e:55:5d:bd:b3:80: ae:96:32:84:88:ab:45:37:08:db:a5:87:7d:88:81:0d:a1:3e: 97:66:c1:9e:f1:fa:34:52:49:41:a1:72:b5:05:29:7d:73:41: d7:86:99:a1:f0:99:a3:b3:b8:04:2d:5c:35:1a:62:14:89:dc: 52:b3:b2:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhEZSRgVchcdqvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFhYzgzYjUtNGNmZC00YjM4LWIxYmItNDUwMDBlZWJh NmFlMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk OTUxMmY2NjItMGEzOS00NjJkLTgzYmQtYWJlMWFkMDc1OWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNFsfQ7vJyCFb1F+k5g+iqatZtCg7rx9ZURp xnu6gzx68DNDo5LFk3j/WjuV4o5UVFpWjnvECNJssp4d3RhrBsTOXWaPVRm9dMHO l0mmyQFhP+Ke43LQXVBXQQOwGb16SNh/SSZRrn97P63Tjm3P3cjw25J1JbLz1Nkx HJrv1hb4MNhZYj3X5Ez/KsSrWkXClQfDjv60pX73arUYZugSVEud3Sp/Unhm0gCZ uvx/t5H2Bd1Wda2yDcAzJs0osSTtuPIDVAvdLnvgyB/hrwekTSql/ezhi8RMDT2X io9jOYTlJkHLGetH/BJmZtEXC6piPmltFu2pBF3jCYyLe+cThQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRnpUK8xTuEoP61PMYKNzPlazdgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFj ODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAwMGVlYmE2YWUvOThhM2UzZmMtNmY2ZC0z OWI3LWJhYjAtNTI3NGE5ZGFhZmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjFhYzgzYjUtNGNmZC00YjM4LWIx YmItNDUwMDBlZWJhNmFlL2YxYWM4M2I1LTRjZmQtNGIzOC1iMWJiLTQ1MDAwZWVi YTZhZS5jcmwwHwYDVR0jBBgwFoAUCrA0V1FPrMSLEXsWcz7MjvXGb0YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFjODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAw MGVlYmE2YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d7zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWr+d+C1HBjgfLV+8jgzZ0bXTZvxY2eZjSzAL/JwLsRf8mZgPtj/kmi u4q2Weg26W6e92s+GXh6YnM7a0rmSvNwOjvaQY9jmsZoBRn3FSATC8FbBJ19q5JT ZEu3N8a4aFpncLMawXRM3AY9tzRvhbgtHhFpm7FMjif0T02+6zKThwhYVpdU4gfy z914Fz4A0/aBd5vvZsHr9Ocon07b5Y6FyC52+L/F2J8P9f5OR1fYZOpb7JsOnDyd hxnis7NPIh5VXb2zgK6WMoSIq0U3CNulh32IgQ2hPpdmwZ7x+jRSSUGhcrUFKX1z QdeGmaHwmaOzuAQtXDUaYhSJ3FKzskY= -----END CERTIFICATE-----Generated at Tue Apr 29 12:11:05 2025 by rpki-client