$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4bac9e77-be29-3b62-ae04-4c0c5aae4f78.roa File: 4bac9e77-be29-3b62-ae04-4c0c5aae4f78.roa (raw, json) Hash identifier: 6yZgaYWGaQ+ra2tq6UFokE9iNsRctnrGdmcr6ZiMo2c= Subject key identifier: E4:95:F6:76:72:64:07:26:0D:6C:06:03:A6:A3:96:B5:5E:60:5A:6C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858494CC94AB4A634ADF5BEBED580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4bac9e77-be29-3b62-ae04-4c0c5aae4f78.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 0 IP address blocks: 209.112.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:4a:b4:a6:34:ad:f5:be:be:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=2b50801e-9fb1-4c6c-9620-86a12c64ef75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6f:dd:38:5f:49:83:7b:70:96:d0:9b:dc:ba: 25:12:e3:9c:aa:89:07:9f:60:fb:bd:d9:79:e2:ea: 76:c0:f6:5b:ff:ec:94:2c:9b:61:c8:f8:28:65:3a: 41:3b:59:60:65:0d:35:7e:cc:84:1d:ce:7a:f1:66: e1:ec:e3:ea:fc:ae:9f:49:54:f5:64:8f:98:ee:1c: 88:aa:c1:91:fc:3d:d7:4c:bd:a1:ec:52:c3:c1:bf: db:09:ac:aa:54:f7:fd:e7:43:a9:86:f5:97:ad:7b: 7e:38:cc:e6:b6:a4:ec:42:20:e8:6c:4b:98:cb:ac: 29:dd:cf:39:4f:f7:62:03:16:42:7c:dd:89:44:20: 85:d1:61:14:36:19:6d:38:75:88:33:0c:4e:0a:b3: da:e5:7e:62:08:41:e9:19:53:2d:00:1d:67:c6:74: 95:69:ff:90:f8:c5:21:f1:d2:a6:39:a2:03:a8:ef: b5:6c:ff:fa:4f:1a:75:0d:c7:33:11:2a:51:20:dd: ee:e3:3b:3f:7b:8c:bf:a2:34:7b:9a:af:3a:43:ad: 65:4d:41:46:86:19:3d:0c:3b:43:cd:55:05:94:6b: fa:f1:1d:26:85:a6:96:5f:19:99:e9:37:5a:d4:98: 12:af:b2:fa:44:81:dd:61:8f:dc:43:4b:0d:05:d4: 1e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:95:F6:76:72:64:07:26:0D:6C:06:03:A6:A3:96:B5:5E:60:5A:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4bac9e77-be29-3b62-ae04-4c0c5aae4f78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:bf:d7:27:59:87:fa:95:c7:80:0d:48:f9:2d:d2:c8:09:b1: e2:bb:1c:23:f3:0d:40:9d:b5:ae:a8:fc:33:3e:b0:e9:16:a9: 1a:5c:ce:32:41:cd:f7:1c:70:bc:88:b5:9a:32:5c:ac:dd:45: ec:10:f3:4b:c5:37:25:70:ca:54:2e:77:49:93:d4:10:4e:1d: 9b:74:35:13:d3:1a:5d:0b:37:fc:d8:b4:ae:0c:c0:b7:d9:d6: b2:76:55:22:5c:6a:94:70:d1:e7:41:af:4c:d3:6d:3b:b3:f2: 91:f9:6f:25:43:e8:2e:22:bd:f1:a6:50:55:18:61:92:11:80: c7:86:2f:a4:08:9b:7a:52:08:4a:48:dc:ca:c2:fe:03:d2:0e: e6:72:65:53:82:cb:f0:f4:53:b7:b8:1b:80:be:40:a7:d7:f4: 72:3b:8b:cf:3f:9f:bb:ca:c5:e7:d8:c7:68:4a:92:d3:bc:4f: 57:31:f7:ab:6c:ce:7d:d8:fd:96:49:db:d0:a4:f1:b0:f3:3b: 95:0d:38:7b:c4:9f:19:5d:a4:88:52:a2:f8:75:6c:aa:b8:9c: 6d:f7:bd:6a:87:4f:17:96:c6:57:a9:6d:2b:0d:b2:ff:19:f9: cf:d2:f7:18:d1:66:7b:10:ac:d4:63:78:e8:f5:b8:3a:94:46: e1:cd:b9:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUq0pjSt9b6+1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk MmI1MDgwMWUtOWZiMS00YzZjLTk2MjAtODZhMTJjNjRlZjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW/dOF9Jg3twltCb3LolEuOcqokHn2D7vdl5 4up2wPZb/+yULJthyPgoZTpBO1lgZQ01fsyEHc568Wbh7OPq/K6fSVT1ZI+Y7hyI qsGR/D3XTL2h7FLDwb/bCayqVPf950OphvWXrXt+OMzmtqTsQiDobEuYy6wp3c85 T/diAxZCfN2JRCCF0WEUNhltOHWIMwxOCrPa5X5iCEHpGVMtAB1nxnSVaf+Q+MUh 8dKmOaIDqO+1bP/6Txp1DcczESpRIN3u4zs/e4y/ojR7mq86Q61lTUFGhhk9DDtD zVUFlGv68R0mhaaWXxmZ6Tda1JgSr7L6RIHdYY/cQ0sNBdQeSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSV9nZyZAcmDWwGA6ajlrVeYFpsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGJhYzllNzctYmUyOS0z YjYyLWFlMDQtNGMwYzVhYWU0Zjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XByMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACC/1ydZh/qVx4ANSPkt0sgJseK7HCPzDUCdta6o/DM+sOkWqRpczjJB zfcccLyItZoyXKzdRewQ80vFNyVwylQud0mT1BBOHZt0NRPTGl0LN/zYtK4MwLfZ 1rJ2VSJcapRw0edBr0zTbTuz8pH5byVD6C4ivfGmUFUYYZIRgMeGL6QIm3pSCEpI 3MrC/gPSDuZyZVOCy/D0U7e4G4C+QKfX9HI7i88/n7vKxefYx2hKktO8T1cx96ts zn3Y/ZZJ29Ck8bDzO5UNOHvEnxldpIhSovh1bKq4nG33vWqHTxeWxlepbSsNsv8Z +c/S9xjRZnsQrNRjeOj1uDqURuHNuVQ= -----END CERTIFICATE-----Generated at Sat Apr 26 19:13:32 2025 by rpki-client