$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/27d56712-a81b-3e14-ad6f-c9196927e93f.roa File: 27d56712-a81b-3e14-ad6f-c9196927e93f.roa (raw, json) Hash identifier: 2Y1e7L9K3ZYicR9zE2xR9f0bi9m9OfUqYmV3A4F3EGQ= Subject key identifier: 25:92:AE:82:7A:76:6E:25:9E:0C:A7:95:DF:0C:44:78:F7:7B:A4:09 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584957F412DC70EBA255A695C640 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/27d56712-a81b-3e14-ad6f-c9196927e93f.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 203963 IP address blocks: 209.145.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:12:dc:70:eb:a2:55:a6:95:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=c3f40b8c-ca8f-49ed-a5b1-dfd46b5964f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:23:b7:4c:7e:e8:ab:ff:1e:2a:cc:6d:ac:c7: 9f:53:2e:3e:e0:7e:c0:70:12:00:40:e6:2a:a3:26: 8f:f4:af:a9:31:39:67:01:6c:b0:e3:9f:f6:9b:dd: 1a:de:e6:27:90:f4:4f:60:8e:c1:b9:15:e8:7b:16: 43:f7:04:ac:07:6c:0e:ef:fc:88:95:48:1f:00:a1: f5:4c:ed:12:44:24:19:2d:a5:8b:fe:40:a6:c0:df: a3:5f:3c:9f:09:4d:66:cb:22:fd:f8:06:de:d0:1a: 5f:c0:bd:39:57:9a:d3:ac:6b:3b:b6:73:a2:ef:82: 58:67:5c:21:17:96:6d:11:7b:39:8e:7d:6e:c4:5e: d1:75:e2:3a:03:cf:c2:bf:2e:06:7d:65:7e:99:58: d1:d2:57:dc:7d:c2:c4:6a:21:b2:3e:d6:03:bf:a6: 31:aa:f7:0d:17:2e:08:fb:5b:df:e7:37:ee:6a:fc: ba:85:97:86:9a:dd:68:0c:0f:d4:fa:38:39:fa:22: 12:ad:15:32:d3:fa:cc:17:dd:8a:35:b3:97:9d:65: 39:cb:7d:55:51:17:7e:58:ef:70:84:4a:53:d0:fb: 6e:86:6a:dd:19:5a:78:89:47:06:ed:13:5a:b6:e4: b3:14:2c:02:90:2a:e7:65:c6:7f:d7:ea:71:5e:7c: 63:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:92:AE:82:7A:76:6E:25:9E:0C:A7:95:DF:0C:44:78:F7:7B:A4:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/27d56712-a81b-3e14-ad6f-c9196927e93f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 209.145.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:86:95:56:9b:34:3d:c0:39:16:c4:c8:65:c7:5d:ab:13:8e: 2b:86:7c:fd:f3:fb:78:cd:a5:d5:cf:4c:fc:4b:a8:4a:4f:c8: f9:75:c0:b7:3a:eb:0e:c8:d1:0a:15:ac:04:a9:d3:f9:99:b3: c2:7a:2e:0e:8a:21:f9:54:bb:89:a6:de:ad:2a:8f:30:18:ab: 14:7e:4a:e1:37:46:7e:01:30:12:6d:f9:5a:71:35:da:3e:c9: fe:d8:ef:0a:b7:50:b2:cb:57:d1:0e:9b:c9:b5:b5:2d:dc:8c: b3:06:c2:38:e3:22:f2:3e:8d:3a:49:17:9e:43:2b:c2:a4:49: f6:41:9d:04:74:af:a6:29:86:62:39:5f:3d:11:55:7c:25:67: c8:0e:39:78:bb:be:02:b4:e8:04:cd:96:d2:5a:37:2a:d8:59: c7:6e:f4:d0:5f:93:ac:96:7c:ac:ca:b6:01:81:e1:9c:34:71: 7e:75:2f:96:65:a4:a6:c2:9e:a2:86:e9:35:08:3c:df:3a:59: b6:96:0e:a1:d6:c6:7b:c7:41:33:55:89:af:db:5b:c2:a6:b0: 3b:10:89:fc:71:25:29:3b:a0:55:26:0b:6b:e9:b0:75:4e:90: cf:2d:87:bc:6e:8b:00:1a:96:d8:86:29:d9:b5:a0:c2:5f:90: 6c:09:d7:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9BLccOuiVaaVxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk YzNmNDBiOGMtY2E4Zi00OWVkLWE1YjEtZGZkNDZiNTk2NGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiO3TH7oq/8eKsxtrMefUy4+4H7AcBIAQOYq oyaP9K+pMTlnAWyw45/2m90a3uYnkPRPYI7BuRXoexZD9wSsB2wO7/yIlUgfAKH1 TO0SRCQZLaWL/kCmwN+jXzyfCU1myyL9+Abe0BpfwL05V5rTrGs7tnOi74JYZ1wh F5ZtEXs5jn1uxF7RdeI6A8/Cvy4GfWV+mVjR0lfcfcLEaiGyPtYDv6YxqvcNFy4I +1vf5zfuavy6hZeGmt1oDA/U+jg5+iISrRUy0/rMF92KNbOXnWU5y31VURd+WO9w hEpT0PtuhmrdGVp4iUcG7RNatuSzFCwCkCrnZcZ/1+pxXnxj1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWSroJ6dm4lngynld8MRHj3e6QJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvMjdkNTY3MTItYTgxYi0z ZTE0LWFkNmYtYzkxOTY5MjdlOTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZEqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyGlVabND3AORbEyGXHXasTjiuGfP3z+3jNpdXPTPxLqEpPyPl1wLc6 6w7I0QoVrASp0/mZs8J6Lg6KIflUu4mm3q0qjzAYqxR+SuE3Rn4BMBJt+VpxNdo+ yf7Y7wq3ULLLV9EOm8m1tS3cjLMGwjjjIvI+jTpJF55DK8KkSfZBnQR0r6YphmI5 Xz0RVXwlZ8gOOXi7vgK06ATNltJaNyrYWcdu9NBfk6yWfKzKtgGB4Zw0cX51L5Zl pKbCnqKG6TUIPN86WbaWDqHWxnvHQTNVia/bW8KmsDsQifxxJSk7oFUmC2vpsHVO kM8th7xuiwAaltiGKdm1oMJfkGwJ198= -----END CERTIFICATE-----Generated at Sat Apr 26 12:52:56 2025 by rpki-client