$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/1ea1e11d-1e69-31f2-901e-8f79bf7ff187.roa File: 1ea1e11d-1e69-31f2-901e-8f79bf7ff187.roa (raw, json) Hash identifier: zqK7+DxfXVm3MRVJyh3adV86tzmj6baHG1EJB1EEMgg= Subject key identifier: D9:7F:5B:5D:C8:7A:61:66:B7:00:4A:D5:AE:01:05:14:5D:08:4F:2E Certificate issuer: /CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Certificate serial: 010D0C9F432858493C09210973F1599C4E823700 Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/1ea1e11d-1e69-31f2-901e-8f79bf7ff187.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 62856 IP address blocks: 209.112.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:21:09:73:f1:59:9c:4e:82:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=098cd137-62e9-410b-9aca-cd53e726750a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:38:f2:22:e4:99:9f:9f:71:57:21:40:a9:72: d0:0b:e7:94:8d:44:d2:01:94:ad:4b:da:23:11:d4: 1c:c8:68:99:59:7b:7d:f3:1e:97:03:1a:5a:cd:86: 6f:6d:24:e3:6c:31:53:57:9b:bc:b6:a9:1e:d6:a8: 58:4a:7d:40:2c:05:92:3d:9a:51:09:d0:e4:f4:38: 58:49:2f:f3:49:1b:e4:a1:78:2c:f0:f3:9a:67:90: c4:33:32:46:06:b0:9e:4d:5d:a0:db:3f:ac:8c:49: b9:7a:88:52:39:46:d4:e3:cf:b1:48:37:86:64:91: 5e:2d:41:2b:95:51:e3:e7:f8:16:8b:41:ff:af:35: 1d:2c:b3:f3:30:a7:cb:62:15:87:b4:12:b7:ec:80: 72:64:b3:a1:2f:ee:a0:7f:23:66:12:30:42:27:e7: 62:f1:86:b8:73:06:4d:da:cc:19:3a:75:a6:9f:7c: 0a:c0:c3:81:e5:b5:a4:ea:4a:44:f1:51:bb:d3:71: bb:23:10:b3:05:93:c1:cf:5b:10:aa:69:9b:2c:9d: 29:88:1d:32:fd:ee:ed:96:fd:47:95:26:aa:a8:07: 36:86:cc:a5:19:db:df:a5:21:4d:dd:52:d1:46:4c: 9f:0d:65:2c:a0:4a:e9:19:87:83:3e:0b:74:42:b0: 69:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7F:5B:5D:C8:7A:61:66:B7:00:4A:D5:AE:01:05:14:5D:08:4F:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/1ea1e11d-1e69-31f2-901e-8f79bf7ff187.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl X509v3 Authority Key Identifier: keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer sbgp-ipAddrBlock: critical IPv4: 209.112.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:00:1a:15:36:f2:c7:da:b0:29:f8:a5:3f:55:24:7a:83:bd: 4a:87:3e:86:75:dd:6f:b6:e9:67:d4:2e:d4:45:3f:49:c2:a8: 22:76:85:04:b1:85:b6:9e:21:4f:d4:0c:23:01:57:3b:a7:be: 74:3d:3e:7b:01:79:91:3e:d9:90:85:3f:47:e7:29:2c:31:23: 83:07:c5:76:60:0e:73:b1:ff:58:ca:99:ec:b2:f1:2f:26:a8: ce:00:5f:b2:99:88:90:2b:fb:22:62:3b:00:65:e7:0d:75:73: 57:7a:86:35:25:57:50:e2:bc:c6:e1:90:a2:a9:7d:6c:79:f7: ab:44:42:56:35:86:c6:3d:b2:cc:07:f6:30:7f:7d:67:59:5a: 71:05:ef:a1:62:7c:6d:7e:63:eb:d8:9b:e2:12:01:96:02:b0: 89:f2:bd:60:5d:b1:76:5e:da:55:b0:38:09:7f:86:0a:ea:78: 59:2f:f3:47:03:8c:1e:96:17:f9:3b:89:0b:f0:db:fd:c4:48: 45:95:c3:0d:20:8b:e7:73:67:31:92:4d:dd:b6:3e:f4:40:d7: a7:d2:1c:97:42:c3:be:2f:3b:7e:22:67:f6:34:69:8a:7a:a4: 92:43:62:ff:18:43:ab:99:67:d7:c2:a0:cb:9e:09:7d:e8:97: 51:1c:6a:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CSEJc/FZnE6CNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5 ZWYzMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk MDk4Y2QxMzctNjJlOS00MTBiLTlhY2EtY2Q1M2U3MjY3NTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjjyIuSZn59xVyFAqXLQC+eUjUTSAZStS9oj EdQcyGiZWXt98x6XAxpazYZvbSTjbDFTV5u8tqke1qhYSn1ALAWSPZpRCdDk9DhY SS/zSRvkoXgs8POaZ5DEMzJGBrCeTV2g2z+sjEm5eohSOUbU48+xSDeGZJFeLUEr lVHj5/gWi0H/rzUdLLPzMKfLYhWHtBK37IByZLOhL+6gfyNmEjBCJ+di8Ya4cwZN 2swZOnWmn3wKwMOB5bWk6kpE8VG703G7IxCzBZPBz1sQqmmbLJ0piB0y/e7tlv1H lSaqqAc2hsylGdvfpSFN3VLRRkyfDWUsoErpGYeDPgt0QrBpCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNl/W13IemFmtwBK1a4BBRRdCE8uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3 ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvMWVhMWUxMWQtMWU2OS0z MWYyLTkwMWUtOGY3OWJmN2ZmMTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWFmN2RmMzUtYzY3Zi00NDBkLTk3 OTktNDYxZTdhODA5ZWYzL2VhZjdkZjM1LWM2N2YtNDQwZC05Nzk5LTQ2MWU3YTgw OWVmMy5jcmwwHwYDVR0jBBgwFoAU2Wzj3bzwBlTPKTIqIy/84RLCWzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFl N2E4MDllZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XBpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMAGhU28sfasCn4pT9VJHqDvUqHPoZ13W+26WfULtRFP0nCqCJ2hQSx hbaeIU/UDCMBVzunvnQ9PnsBeZE+2ZCFP0fnKSwxI4MHxXZgDnOx/1jKmeyy8S8m qM4AX7KZiJAr+yJiOwBl5w11c1d6hjUlV1DivMbhkKKpfWx596tEQlY1hsY9sswH 9jB/fWdZWnEF76FifG1+Y+vYm+ISAZYCsInyvWBdsXZe2lWwOAl/hgrqeFkv80cD jB6WF/k7iQvw2/3ESEWVww0gi+dzZzGSTd22PvRA16fSHJdCw74vO34iZ/Y0aYp6 pJJDYv8YQ6uZZ9fCoMueCX3ol1Ecav8= -----END CERTIFICATE-----Generated at Mon Apr 28 15:26:13 2025 by rpki-client