$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e3f33b55-b1ed-3f4f-bc44-9f847dff294a.roa File: e3f33b55-b1ed-3f4f-bc44-9f847dff294a.roa (raw, json) Hash identifier: xbNH1pVwx1LY9nsAfVzgOdfPyWGPlZbhhxI0+vYs5wA= Subject key identifier: 9C:8C:14:3C:15:04:77:11:5A:3F:88:CF:CD:FD:B2:18:25:B4:CE:03 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285848E006875BD552A98947397700 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e3f33b55-b1ed-3f4f-bc44-9f847dff294a.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 16787 IP address blocks: 209.16.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:87:5b:d5:52:a9:89:47:39:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=c0b6e037-4236-4c72-a2fa-e2fe2815779f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:12:92:64:a2:5c:50:27:06:eb:32:57:87:8f: f1:98:a1:7b:f2:0f:5b:dc:88:ef:4e:f9:64:76:58: 18:71:3b:55:f5:42:70:67:a6:0d:c5:fd:21:5d:7b: 79:5c:d9:07:9f:de:4f:38:83:11:56:3a:ab:1a:61: 75:fd:22:3a:ad:27:c5:99:b3:23:c3:7d:b6:41:ee: b4:f5:ea:46:74:9c:00:88:60:15:a8:8b:5f:66:b2: 4e:6e:ac:da:c5:40:1d:f6:9b:2b:b2:96:37:93:f9: 72:02:b4:fe:0b:68:b8:6a:e3:9e:e4:8c:38:1b:5b: 45:b1:6a:e8:d5:52:be:5d:b3:35:38:93:39:51:d2: 6a:4c:c8:3d:24:7d:c7:5b:f8:50:60:ff:f4:4b:d1: 70:bf:1c:9f:27:11:4d:ed:fa:37:fc:e7:78:39:b3: cd:60:ca:25:5a:65:75:73:ea:b0:78:38:6f:1f:dc: ce:c7:50:a6:5c:6d:7d:30:f4:a7:0b:98:22:80:28: ef:16:9a:e9:3e:d6:74:5a:bc:ef:e9:f1:d5:57:48: 31:f1:8e:9c:12:34:4a:e2:f3:05:a9:46:c8:61:8f: e4:82:70:ea:c9:02:65:93:c0:29:b5:f1:d4:52:32: e6:ca:ed:6a:52:91:dd:66:69:04:5c:92:e3:99:6e: 4c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8C:14:3C:15:04:77:11:5A:3F:88:CF:CD:FD:B2:18:25:B4:CE:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e3f33b55-b1ed-3f4f-bc44-9f847dff294a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 209.16.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:6d:d0:3d:b5:5e:e2:18:63:97:54:f7:d4:63:96:d1:f4:2b: 21:0d:61:9a:ad:69:06:1f:06:9e:69:59:7e:46:15:1a:c2:e9: 30:0d:e6:9f:5c:51:05:1f:f4:7c:42:5f:9a:9c:e9:94:d3:11: 01:ee:43:12:fb:b6:9a:61:56:4a:e9:f5:79:86:d4:67:97:c2: 20:fa:41:32:03:7c:25:cc:22:55:7c:6d:46:ba:88:b9:a0:51: f5:5b:59:31:07:3d:d0:a3:c9:e1:84:49:1a:35:70:ef:5d:3e: 60:fd:2d:be:85:f4:79:2e:e4:d4:f2:a1:aa:ff:12:74:2d:9f: d2:33:ab:c0:86:47:44:7e:0f:4b:21:04:4e:a8:2a:61:51:b8: e8:64:f2:8d:3a:43:d6:da:9b:ee:43:3e:17:13:45:ac:41:c1: b7:88:15:d7:ca:10:33:69:b2:70:f7:04:01:53:43:07:ca:32: 3a:fe:01:7b:09:6e:df:6b:19:fd:3d:66:74:a8:97:a1:cd:fd: 55:96:d7:0e:f7:fc:d1:29:2a:46:5b:2a:9b:c4:ea:61:db:18: ed:10:36:e9:f3:c1:c8:22:ee:0c:61:76:37:4a:43:27:a6:17: a5:8c:bd:72:14:c5:7a:0f:45:3d:fd:6d:28:c5:4e:90:99:2d: 45:3a:2d:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBodb1VKpiUc5dwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk YzBiNmUwMzctNDIzNi00YzcyLWEyZmEtZTJmZTI4MTU3NzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxKSZKJcUCcG6zJXh4/xmKF78g9b3IjvTvlk dlgYcTtV9UJwZ6YNxf0hXXt5XNkHn95POIMRVjqrGmF1/SI6rSfFmbMjw322Qe60 9epGdJwAiGAVqItfZrJObqzaxUAd9psrspY3k/lyArT+C2i4auOe5Iw4G1tFsWro 1VK+XbM1OJM5UdJqTMg9JH3HW/hQYP/0S9FwvxyfJxFN7fo3/Od4ObPNYMolWmV1 c+qweDhvH9zOx1CmXG19MPSnC5gigCjvFprpPtZ0Wrzv6fHVV0gx8Y6cEjRK4vMF qUbIYY/kgnDqyQJlk8AptfHUUjLmyu1qUpHdZmkEXJLjmW5MLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyMFDwVBHcRWj+Iz839shgltM4DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZTNmMzNiNTUtYjFlZC0z ZjRmLWJjNDQtOWY4NDdkZmYyOTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RB7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5t0D21XuIYY5dU99RjltH0KyENYZqtaQYfBp5pWX5GFRrC6TAN5p9c UQUf9HxCX5qc6ZTTEQHuQxL7tpphVkrp9XmG1GeXwiD6QTIDfCXMIlV8bUa6iLmg UfVbWTEHPdCjyeGESRo1cO9dPmD9Lb6F9Hku5NTyoar/EnQtn9Izq8CGR0R+D0sh BE6oKmFRuOhk8o06Q9bam+5DPhcTRaxBwbeIFdfKEDNpsnD3BAFTQwfKMjr+AXsJ bt9rGf09ZnSol6HN/VWW1w73/NEpKkZbKpvE6mHbGO0QNunzwcgi7gxhdjdKQyem F6WMvXIUxXoPRT39bSjFTpCZLUU6LVY= -----END CERTIFICATE-----Generated at Wed Apr 30 03:36:20 2025 by rpki-client