$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/da1badaf-a81a-3e30-a837-19d39181a3ec.roa File: da1badaf-a81a-3e30-a837-19d39181a3ec.roa (raw, json) Hash identifier: HjaPuURtbrgJxHRUv1IEJoatDfh5ANHjkA+WjSqftsQ= Subject key identifier: E8:00:3B:51:10:8D:11:EB:73:D7:38:40:FE:87:BE:59:82:24:8E:7A Certificate issuer: /CN=d578f033-7588-487c-9d67-16453bc5710a Certificate serial: 010D0C9F432858498339EF6FA6C13AD4FEACB4A0 Authority key identifier: 01:EC:38:FE:98:BE:12:4B:D8:6C:E5:E5:D0:83:C2:AB:ED:62:77:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/da1badaf-a81a-3e30-a837-19d39181a3ec.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 14618 IP address blocks: 209.142.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/d578f033-7588-487c-9d67-16453bc5710a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/d578f033-7588-487c-9d67-16453bc5710a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:ef:6f:a6:c1:3a:d4:fe:ac:b4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d578f033-7588-487c-9d67-16453bc5710a Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=323dc503-d6a1-4bf3-bb34-0b484a5d0884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:19:4c:1f:51:13:09:f7:e1:da:6c:7d:ca:80: b9:7d:02:24:e8:50:55:8b:66:6b:52:c7:43:df:4e: ee:cd:13:25:27:85:10:5c:b3:21:01:86:07:40:12: a8:69:d4:ac:6c:7b:17:50:4f:0d:1e:7b:d5:c5:96: 74:3f:c3:66:17:b6:fa:8d:4a:8e:31:37:df:b8:79: f7:c1:29:b7:68:f3:6b:9b:e8:52:32:95:95:95:75: ee:e5:cb:ba:ad:55:f5:bb:fb:0f:df:b5:64:dc:55: ef:18:7c:25:b3:c1:0a:f5:e7:7c:8d:1b:40:70:49: 98:d5:5d:f9:b0:4e:13:ea:53:05:6a:ef:53:98:37: fd:72:71:05:01:df:5d:87:d4:9d:3b:c3:75:43:11: cd:76:58:d5:65:7c:d1:07:39:fb:97:28:50:49:11: e3:4a:f5:d7:c9:8e:a3:87:81:c6:a2:88:8e:56:70: 47:41:79:59:b6:10:ea:84:0f:82:e7:e0:89:43:44: ff:47:8b:d2:c1:53:9c:ee:37:f1:43:7f:0a:2a:86: db:6a:9a:d8:73:0d:eb:2a:d6:9b:51:9a:57:83:c1: 69:75:cb:b6:ac:28:11:d4:c4:59:dd:37:32:51:21: e5:02:a1:5e:69:19:ae:46:d5:ef:29:54:32:fe:04: 29:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:00:3B:51:10:8D:11:EB:73:D7:38:40:FE:87:BE:59:82:24:8E:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/da1badaf-a81a-3e30-a837-19d39181a3ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/d578f033-7588-487c-9d67-16453bc5710a.crl X509v3 Authority Key Identifier: keyid:01:EC:38:FE:98:BE:12:4B:D8:6C:E5:E5:D0:83:C2:AB:ED:62:77:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a.cer sbgp-ipAddrBlock: critical IPv4: 209.142.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:a5:61:50:8d:20:20:a4:19:cd:ba:8c:76:3c:46:a3:f5:dd: 93:ee:43:2d:b7:96:cf:f5:70:ed:df:be:0a:23:16:81:64:d9: 04:82:c5:eb:b7:d9:ce:f4:74:d2:b3:b7:88:f3:ea:74:0c:3c: 00:26:42:2f:c1:83:2f:8b:a9:f9:7a:c0:d0:99:8a:83:a8:06: c5:60:5c:47:2d:14:e7:1f:38:00:8d:2c:d8:61:f3:04:9a:d3: 49:b7:5e:20:6c:0a:6e:b7:58:be:b6:c7:df:47:bb:fb:29:f4: df:7b:7a:f4:e2:67:4b:0f:e2:6a:6a:b2:ca:02:9c:6d:5c:ea: c0:7b:90:c2:ce:39:9f:58:32:3f:72:b9:c8:b4:c7:f4:e5:d0: 95:4d:db:b3:cd:79:0e:4f:a7:3a:d8:d7:98:fa:cb:d4:24:84: a0:69:8b:9f:a2:61:80:8d:78:ed:77:f3:10:d0:98:54:d8:e9: f6:2c:a9:8f:fa:68:ea:1c:7e:cd:a0:bf:0c:4b:2f:ec:e9:5d: 61:74:81:1a:f7:22:2e:81:20:9d:32:72:5e:8f:cc:c3:9f:a1: 30:6b:e6:03:d5:9f:c9:24:19:06:72:75:2c:f3:31:c8:41:1b: 13:43:8f:c6:99:92:72:72:84:c5:5b:cf:05:f0:53:9c:ac:6d: ad:f4:87:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOe9vpsE61P6stKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU3OGYwMzMtNzU4OC00ODdjLTlkNjctMTY0NTNiYzU3 MTBhMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk MzIzZGM1MDMtZDZhMS00YmYzLWJiMzQtMGI0ODRhNWQwODg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hlMH1ETCffh2mx9yoC5fQIk6FBVi2ZrUsdD 307uzRMlJ4UQXLMhAYYHQBKoadSsbHsXUE8NHnvVxZZ0P8NmF7b6jUqOMTffuHn3 wSm3aPNrm+hSMpWVlXXu5cu6rVX1u/sP37Vk3FXvGHwls8EK9ed8jRtAcEmY1V35 sE4T6lMFau9TmDf9cnEFAd9dh9SdO8N1QxHNdljVZXzRBzn7lyhQSRHjSvXXyY6j h4HGooiOVnBHQXlZthDqhA+C5+CJQ0T/R4vSwVOc7jfxQ38KKobbaprYcw3rKtab UZpXg8Fpdcu2rCgR1MRZ3TcyUSHlAqFeaRmuRtXvKVQy/gQpbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgAO1EQjRHrc9c4QP6HvlmCJI56MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNTc4 ZjAzMy03NTg4LTQ4N2MtOWQ2Ny0xNjQ1M2JjNTcxMGEvZGExYmFkYWYtYTgxYS0z ZTMwLWE4MzctMTlkMzkxODFhM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDU3OGYwMzMtNzU4OC00ODdjLTlk NjctMTY0NTNiYzU3MTBhL2Q1NzhmMDMzLTc1ODgtNDg3Yy05ZDY3LTE2NDUzYmM1 NzEwYS5jcmwwHwYDVR0jBBgwFoAUAew4/pi+EkvYbOXl0IPCq+1id4owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNTc4ZjAzMy03NTg4LTQ4N2MtOWQ2Ny0xNjQ1 M2JjNTcxMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEalYVCNICCkGc26jHY8RqP13ZPuQy23ls/1cO3fvgojFoFk2QSCxeu3 2c70dNKzt4jz6nQMPAAmQi/Bgy+Lqfl6wNCZioOoBsVgXEctFOcfOACNLNhh8wSa 00m3XiBsCm63WL62x99Hu/sp9N97evTiZ0sP4mpqssoCnG1c6sB7kMLOOZ9YMj9y uci0x/Tl0JVN27PNeQ5PpzrY15j6y9QkhKBpi5+iYYCNeO138xDQmFTY6fYsqY/6 aOocfs2gvwxLL+zpXWF0gRr3Ii6BIJ0ycl6PzMOfoTBr5gPVn8kkGQZydSzzMchB GxNDj8aZknJyhMVbzwXwU5ysba30h/E= -----END CERTIFICATE-----Generated at Sat Apr 26 13:34:15 2025 by rpki-client