$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca43ef40-a891-3e42-a32d-6f967b3bc73e.roa File: ca43ef40-a891-3e42-a32d-6f967b3bc73e.roa (raw, json) Hash identifier: uY+SxZ94Zh1S7iE/0CNsa9lF/KowNYPhnJV5bpc4BSE= Subject key identifier: 29:32:9D:00:6C:6D:19:EB:10:72:99:1C:2B:A8:E2:FA:48:84:C5:63 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858493C0937B97BF84237AC3483B0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca43ef40-a891-3e42-a32d-6f967b3bc73e.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 7342 IP address blocks: 209.131.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:37:b9:7b:f8:42:37:ac:34:83:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=13c09c6a-618a-44b0-9aa6-b1dfea84a20d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:19:40:34:7a:04:85:6f:a1:13:9e:a6:cd:a8: 7a:20:3e:a9:39:ab:6b:38:fc:10:3d:e9:89:49:9c: 17:63:21:ee:8b:55:0f:f8:31:4e:cb:bd:43:05:44: 7a:80:36:e8:d8:6f:d4:72:ea:ab:76:09:89:2e:77: c7:8c:87:72:76:a1:4d:8b:c7:6b:51:01:30:80:e5: 86:e8:4c:14:47:fa:eb:04:ba:b9:98:e6:d7:66:1b: 96:50:32:f1:26:82:b4:20:be:38:c4:a3:f7:c3:02: 71:b1:12:3b:9b:1d:cf:94:9b:5a:cd:6d:35:ae:d9: 13:96:4a:91:59:e6:42:7f:81:81:a3:66:1b:ba:70: e7:30:d2:ab:31:60:13:51:d2:92:81:5b:b6:f3:04: 0e:df:6c:ec:15:7c:c3:66:28:17:60:29:9e:11:f0: 62:15:76:ac:30:fb:b3:80:a3:bb:f2:60:f4:38:db: 3e:dd:fa:a6:36:7b:86:30:c0:61:e2:9f:9d:1c:10: 3c:6e:5f:06:4c:bd:b9:0c:82:a9:7b:11:52:b7:c1: 2f:72:a1:14:4d:17:57:d4:48:b6:9a:e2:2c:2b:d6: 33:0b:c5:92:bd:9d:0c:33:51:e0:aa:48:4e:53:73: 39:f2:fa:61:f0:2e:01:75:30:5c:1c:00:a2:77:c8: 9c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:32:9D:00:6C:6D:19:EB:10:72:99:1C:2B:A8:E2:FA:48:84:C5:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca43ef40-a891-3e42-a32d-6f967b3bc73e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:51:4a:37:6d:78:cc:1f:7c:ef:d8:1f:2a:31:63:14:4b:2c: 1b:d2:1a:0f:97:8f:09:0a:ef:89:bb:4c:cb:7a:44:8e:3b:32: a4:ff:eb:af:e6:e5:61:16:5f:f6:e5:07:d6:d1:fd:80:4d:f9: b7:d9:c9:75:13:a8:ee:56:2b:55:16:c6:0b:0a:84:de:74:60: 62:92:05:82:d6:92:f0:a8:f4:e4:59:83:17:f0:4f:0f:1e:e0: 77:1a:75:14:aa:fb:44:ae:11:6a:ab:83:c3:5d:96:eb:64:08: 6f:b8:3c:d4:f1:10:70:8f:81:14:52:8d:8a:5a:a2:a5:76:15: 0f:d6:9a:81:f2:17:6d:1d:27:2c:4b:4f:b1:59:35:4e:8e:14: 67:1f:b3:64:07:71:71:97:5f:3f:e4:0e:f1:35:8c:87:e6:d0: 8a:c2:cc:52:92:b0:cf:40:22:67:2f:71:71:48:da:bc:3d:8a: e9:f0:a3:27:5f:0b:ee:98:c7:f3:aa:7a:21:b8:47:48:30:d2: c0:36:06:11:95:d5:8f:80:ba:11:bc:a3:f7:35:28:5f:67:3d: 04:d8:6b:47:c5:28:f4:de:83:88:ac:71:e3:52:1f:03:ff:c9: ea:02:a8:f2:d8:1c:fe:30:e3:a3:f0:02:3d:1e:0e:81:15:b1: d7:c0:33:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CTe5e/hCN6w0g7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk MTNjMDljNmEtNjE4YS00NGIwLTlhYTYtYjFkZmVhODRhMjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBlANHoEhW+hE56mzah6ID6pOatrOPwQPemJ SZwXYyHui1UP+DFOy71DBUR6gDbo2G/UcuqrdgmJLnfHjIdydqFNi8drUQEwgOWG 6EwUR/rrBLq5mObXZhuWUDLxJoK0IL44xKP3wwJxsRI7mx3PlJtazW01rtkTlkqR WeZCf4GBo2YbunDnMNKrMWATUdKSgVu28wQO32zsFXzDZigXYCmeEfBiFXasMPuz gKO78mD0ONs+3fqmNnuGMMBh4p+dHBA8bl8GTL25DIKpexFSt8EvcqEUTRdX1Ei2 muIsK9YzC8WSvZ0MM1HgqkhOU3M58vph8C4BdTBcHACid8icmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkynQBsbRnrEHKZHCuo4vpIhMVjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2E0M2VmNDAtYTg5MS0z ZTQyLWEzMmQtNmY5NjdiM2JjNzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBRSjdteMwffO/YHyoxYxRLLBvSGg+XjwkK74m7TMt6RI47MqT/66/m 5WEWX/blB9bR/YBN+bfZyXUTqO5WK1UWxgsKhN50YGKSBYLWkvCo9ORZgxfwTw8e 4HcadRSq+0SuEWqrg8NdlutkCG+4PNTxEHCPgRRSjYpaoqV2FQ/WmoHyF20dJyxL T7FZNU6OFGcfs2QHcXGXXz/kDvE1jIfm0IrCzFKSsM9AImcvcXFI2rw9iunwoydf C+6Yx/OqeiG4R0gw0sA2BhGV1Y+AuhG8o/c1KF9nPQTYa0fFKPTeg4isceNSHwP/ yeoCqPLYHP4w46PwAj0eDoEVsdfAM5E= -----END CERTIFICATE-----Generated at Sun Apr 27 01:08:58 2025 by rpki-client