$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/78e252cc-bd09-3239-a78c-700cc4a2804d.roa File: 78e252cc-bd09-3239-a78c-700cc4a2804d.roa (raw, json) Hash identifier: zm5czd+5U7w1MlW8CITQPUhlDAGxuK9OaarJ40ta+CI= Subject key identifier: E2:2E:1A:00:26:85:45:6B:D0:B6:40:D0:10:0C:85:64:EB:34:DE:09 Certificate issuer: /CN=5b640257-7947-43c1-997a-0af58a465bdc Certificate serial: 010D0C9F43285848F22C634117F7487C92C00F40 Authority key identifier: E5:30:3C:9A:AD:0F:44:F7:1E:E3:C1:3C:2D:1B:1C:51:F5:1C:34:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/78e252cc-bd09-3239-a78c-700cc4a2804d.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 209.209.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/5b640257-7947-43c1-997a-0af58a465bdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/5b640257-7947-43c1-997a-0af58a465bdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:63:41:17:f7:48:7c:92:c0:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b640257-7947-43c1-997a-0af58a465bdc Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=1116deea-eda0-4a39-bd89-b4c465482dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a5:a9:52:44:2a:83:78:1a:5e:12:20:cf:3d: 2b:f4:66:fb:a9:8d:c5:0d:3b:66:48:c4:78:0d:74: cc:ac:1f:97:8a:0f:1a:78:05:ab:4c:a0:fd:2d:b5: 25:8a:f9:52:92:2c:ba:27:83:1a:75:69:d2:22:bc: 5f:05:53:7f:5e:26:ef:f0:7b:10:6e:85:59:ce:05: f8:b8:5c:52:41:92:8c:b6:da:b9:8e:d2:bd:4e:36: a0:c3:c0:52:77:ee:87:ba:29:f4:91:44:73:1f:18: 2d:51:0f:68:18:cd:5b:73:b4:b4:86:39:f6:13:96: b1:8e:78:92:9c:cf:ed:e8:bd:a6:77:9e:12:12:13: cb:89:5b:48:15:5e:9a:d6:2c:1d:dc:73:a2:48:b3: 34:1a:47:b5:e8:ee:dc:ec:42:1c:24:39:54:86:94: 54:5e:b2:e2:a1:c7:2d:90:4c:d5:b3:92:e9:4d:1c: 5f:1d:62:73:99:2f:d3:db:0d:29:2c:a6:4d:2d:32: 0c:0e:0e:c3:07:06:8d:e5:4c:16:2b:ab:b7:20:b8: 91:d3:48:b3:0f:d9:62:7b:e5:13:a8:28:a7:8d:34: 2c:4f:ca:31:98:de:6e:e3:fe:9a:55:17:c5:69:85: 62:65:da:95:73:4d:27:c9:46:66:1c:ed:af:37:97: e4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:2E:1A:00:26:85:45:6B:D0:B6:40:D0:10:0C:85:64:EB:34:DE:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/78e252cc-bd09-3239-a78c-700cc4a2804d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/5b640257-7947-43c1-997a-0af58a465bdc.crl X509v3 Authority Key Identifier: keyid:E5:30:3C:9A:AD:0F:44:F7:1E:E3:C1:3C:2D:1B:1C:51:F5:1C:34:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc.cer sbgp-ipAddrBlock: critical IPv4: 209.209.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:55:d4:dc:23:0c:5c:d5:79:cd:4b:59:e9:1d:c9:bb:d0:99: 74:2d:75:3e:bd:63:0a:0d:89:6e:9c:63:ef:f5:05:7a:a4:5c: 93:b7:14:3c:94:52:c0:8a:1a:a6:76:bd:10:f0:45:48:d5:5c: 9d:dc:be:3d:5e:9e:d0:aa:1e:b1:a1:69:18:c8:2e:34:23:bc: a8:1c:32:8b:26:82:f3:54:4c:31:df:a9:e9:a4:c8:e5:52:9f: d3:c2:e8:5d:1e:a8:ec:2d:01:55:56:97:f8:43:48:d2:23:77: eb:96:44:90:00:de:9d:34:aa:16:b0:01:5b:a2:98:47:0b:27: 02:1f:d2:cb:32:77:4e:8e:9d:fb:9e:12:ce:a6:eb:27:58:98: bf:3a:c6:88:ad:fd:d4:cf:55:2a:86:4b:1a:4c:8d:17:f6:41: 56:47:39:a5:db:55:c7:db:a0:7f:25:a1:82:9f:5b:9e:12:fc: 7c:41:ec:76:53:15:27:ed:88:ea:d0:79:b2:da:4b:bf:8a:95: 45:13:41:bc:d2:5a:cd:b1:9b:1a:8a:6b:9c:08:4a:0e:ca:c1: 9e:0f:da:3b:de:72:f7:56:9a:06:c9:38:34:15:7a:0d:d4:6e: eb:04:23:25:ec:f1:7c:a8:e7:82:e2:de:a4:38:08:8c:63:a1: 0e:9d:00:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGNBF/dIfJLAD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI2NDAyNTctNzk0Ny00M2MxLTk5N2EtMGFmNThhNDY1 YmRjMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk MTExNmRlZWEtZWRhMC00YTM5LWJkODktYjRjNDY1NDgyZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aWpUkQqg3gaXhIgzz0r9Gb7qY3FDTtmSMR4 DXTMrB+Xig8aeAWrTKD9LbUlivlSkiy6J4MadWnSIrxfBVN/Xibv8HsQboVZzgX4 uFxSQZKMttq5jtK9Tjagw8BSd+6Huin0kURzHxgtUQ9oGM1bc7S0hjn2E5axjniS nM/t6L2md54SEhPLiVtIFV6a1iwd3HOiSLM0Gke16O7c7EIcJDlUhpRUXrLiocct kEzVs5LpTRxfHWJzmS/T2w0pLKZNLTIMDg7DBwaN5UwWK6u3ILiR00izD9lie+UT qCinjTQsT8oxmN5u4/6aVRfFaYViZdqVc00nyUZmHO2vN5fkewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIuGgAmhUVr0LZA0BAMhWTrNN4JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81YjY0 MDI1Ny03OTQ3LTQzYzEtOTk3YS0wYWY1OGE0NjViZGMvNzhlMjUyY2MtYmQwOS0z MjM5LWE3OGMtNzAwY2M0YTI4MDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWI2NDAyNTctNzk0Ny00M2MxLTk5 N2EtMGFmNThhNDY1YmRjLzViNjQwMjU3LTc5NDctNDNjMS05OTdhLTBhZjU4YTQ2 NWJkYy5jcmwwHwYDVR0jBBgwFoAU5TA8mq0PRPce48E8LRscUfUcNMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81YjY0MDI1Ny03OTQ3LTQzYzEtOTk3YS0wYWY1 OGE0NjViZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dEZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRV1NwjDFzVec1LWekdybvQmXQtdT69YwoNiW6cY+/1BXqkXJO3FDyU UsCKGqZ2vRDwRUjVXJ3cvj1entCqHrGhaRjILjQjvKgcMosmgvNUTDHfqemkyOVS n9PC6F0eqOwtAVVWl/hDSNIjd+uWRJAA3p00qhawAVuimEcLJwIf0ssyd06Onfue Es6m6ydYmL86xoit/dTPVSqGSxpMjRf2QVZHOaXbVcfboH8loYKfW54S/HxB7HZT FSftiOrQebLaS7+KlUUTQbzSWs2xmxqKa5wISg7KwZ4P2jvecvdWmgbJODQVeg3U busEIyXs8Xyo54Li3qQ4CIxjoQ6dAHM= -----END CERTIFICATE-----Generated at Sat Apr 26 13:30:24 2025 by rpki-client