$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/7f03ac7a-8b28-320a-8294-afea39e3db08.roa File: 7f03ac7a-8b28-320a-8294-afea39e3db08.roa (raw, json) Hash identifier: Eg7R4Z2BQIMEkec9OVMGGplNyzQ8r+tn5/EI79ZluOA= Subject key identifier: 4C:9C:87:48:AE:64:F4:8C:5E:C9:9A:DC:C1:7D:45:8E:67:87:1C:EC Certificate issuer: /CN=d578f033-7588-487c-9d67-16453bc5710a Certificate serial: 010D0C9F432858498339F2177B3383BDCFA98100 Authority key identifier: 01:EC:38:FE:98:BE:12:4B:D8:6C:E5:E5:D0:83:C2:AB:ED:62:77:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/7f03ac7a-8b28-320a-8294-afea39e3db08.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16509 IP address blocks: 209.142.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/d578f033-7588-487c-9d67-16453bc5710a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/d578f033-7588-487c-9d67-16453bc5710a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:f2:17:7b:33:83:bd:cf:a9:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d578f033-7588-487c-9d67-16453bc5710a Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=c13df86a-0c88-4c20-b446-0159c7ee7655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1f:94:e6:ea:a6:bf:f6:70:53:e7:87:00:82: 93:5f:33:2c:cf:f9:75:6e:17:63:ee:15:9c:16:92: 47:f9:2c:65:b5:bd:6c:b3:bc:50:45:ff:57:20:b3: 82:28:60:7d:14:c5:1b:65:45:ab:0c:b4:4c:25:0c: cb:cb:eb:b2:8f:a3:46:1a:4d:01:d8:ce:49:e1:03: c7:7a:23:90:4f:76:53:3b:b2:b8:86:c8:81:de:0c: c3:06:bc:c5:b3:c8:0a:7e:8d:75:e7:de:49:5f:f2: 60:9f:34:4f:8a:4f:4a:e2:f4:26:01:16:3d:d1:50: 04:39:aa:91:8a:1b:be:c2:6c:a8:1b:c2:57:71:24: 56:82:70:bb:d1:3d:0f:fe:9b:f8:92:4a:d6:80:14: 1f:e9:ec:22:7f:6d:bc:29:4d:11:22:78:69:af:46: 6b:13:e0:8f:e2:23:5b:b0:11:d3:4f:05:46:1e:a8: fc:79:b9:4e:bd:ed:48:40:20:27:31:77:f0:de:59: c3:ca:8e:a8:ad:68:e5:53:13:a4:a0:c1:8e:4c:6d: c1:f8:03:4c:23:2a:cf:e5:a6:9a:39:34:fe:8e:c8: 1c:69:24:12:9c:f0:08:f9:a9:38:c7:1a:95:9c:00: 4f:82:1e:fc:40:e2:76:34:2f:97:d3:70:68:75:9c: ac:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9C:87:48:AE:64:F4:8C:5E:C9:9A:DC:C1:7D:45:8E:67:87:1C:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/7f03ac7a-8b28-320a-8294-afea39e3db08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/d578f033-7588-487c-9d67-16453bc5710a.crl X509v3 Authority Key Identifier: keyid:01:EC:38:FE:98:BE:12:4B:D8:6C:E5:E5:D0:83:C2:AB:ED:62:77:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a.cer sbgp-ipAddrBlock: critical IPv4: 209.142.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:88:e3:2c:0b:1c:ea:6f:1f:bb:f4:99:c7:7a:8c:6a:c1:34: 25:0c:db:8d:3b:bd:1b:1b:9d:31:45:c8:ae:eb:5a:db:4d:cd: 0d:2d:27:a4:20:95:7b:6d:13:3d:03:45:d3:11:a6:be:0c:d5: 5a:a4:3b:f7:35:31:42:98:4f:2e:ba:6d:e7:9c:e0:f5:2b:9c: 47:04:29:a5:07:44:2d:ac:f9:46:ba:b0:7c:5b:8a:12:ec:7d: 6e:21:3f:6b:c1:64:15:60:11:4f:46:92:9d:39:49:a2:e7:cb: e3:19:bc:f1:80:00:fc:14:37:bd:6d:e3:35:19:e1:e9:3d:9e: 31:a1:33:13:e1:1f:48:d0:98:82:d0:b7:cd:82:1c:db:2f:67: 3f:7a:dd:55:9f:a0:b8:53:dd:c3:dd:54:85:1f:2e:57:96:f9: f2:c3:9e:bc:4a:c1:d4:fe:8c:e3:a8:09:1d:48:68:7f:88:58: 25:90:0b:de:aa:bd:a6:de:32:99:b3:86:1a:89:36:28:c4:72: 11:1d:8b:c2:c1:26:62:e3:e3:e5:45:19:1d:7f:9a:60:e7:1d: dc:e0:3d:74:7d:ce:44:8c:85:88:f7:93:88:54:a4:32:ca:b3: f4:0a:df:32:06:5c:b4:ac:f5:6c:45:2e:db:c7:68:a4:fe:97: 26:af:c0:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOfIXezODvc+pgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU3OGYwMzMtNzU4OC00ODdjLTlkNjctMTY0NTNiYzU3 MTBhMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk YzEzZGY4NmEtMGM4OC00YzIwLWI0NDYtMDE1OWM3ZWU3NjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlx+U5uqmv/ZwU+eHAIKTXzMsz/l1bhdj7hWc FpJH+Sxltb1ss7xQRf9XILOCKGB9FMUbZUWrDLRMJQzLy+uyj6NGGk0B2M5J4QPH eiOQT3ZTO7K4hsiB3gzDBrzFs8gKfo11595JX/JgnzRPik9K4vQmARY90VAEOaqR ihu+wmyoG8JXcSRWgnC70T0P/pv4kkrWgBQf6ewif228KU0RInhpr0ZrE+CP4iNb sBHTTwVGHqj8eblOve1IQCAnMXfw3lnDyo6orWjlUxOkoMGOTG3B+ANMIyrP5aaa OTT+jsgcaSQSnPAI+ak4xxqVnABPgh78QOJ2NC+X03BodZyskwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEych0iuZPSMXsma3MF9RY5nhxzsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNTc4 ZjAzMy03NTg4LTQ4N2MtOWQ2Ny0xNjQ1M2JjNTcxMGEvN2YwM2FjN2EtOGIyOC0z MjBhLTgyOTQtYWZlYTM5ZTNkYjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDU3OGYwMzMtNzU4OC00ODdjLTlk NjctMTY0NTNiYzU3MTBhL2Q1NzhmMDMzLTc1ODgtNDg3Yy05ZDY3LTE2NDUzYmM1 NzEwYS5jcmwwHwYDVR0jBBgwFoAUAew4/pi+EkvYbOXl0IPCq+1id4owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNTc4ZjAzMy03NTg4LTQ4N2MtOWQ2Ny0xNjQ1 M2JjNTcxMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyI4ywLHOpvH7v0mcd6jGrBNCUM2407vRsbnTFFyK7rWttNzQ0tJ6Qg lXttEz0DRdMRpr4M1VqkO/c1MUKYTy66beec4PUrnEcEKaUHRC2s+Ua6sHxbihLs fW4hP2vBZBVgEU9Gkp05SaLny+MZvPGAAPwUN71t4zUZ4ek9njGhMxPhH0jQmILQ t82CHNsvZz963VWfoLhT3cPdVIUfLleW+fLDnrxKwdT+jOOoCR1IaH+IWCWQC96q vabeMpmzhhqJNijEchEdi8LBJmLj4+VFGR1/mmDnHdzgPXR9zkSMhYj3k4hUpDLK s/QK3zIGXLSs9WxFLtvHaKT+lyavwLE= -----END CERTIFICATE-----Generated at Sat Apr 26 16:48:33 2025 by rpki-client