$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4266adfb-3c0c-3234-a71e-165bccb44350.roa File: 4266adfb-3c0c-3234-a71e-165bccb44350.roa (raw, json) Hash identifier: xT2+J5q6Xo602Yrvdid9hEGIbCwUClV3OwHYlsfBp+Q= Subject key identifier: A9:94:B4:E7:A7:BE:4C:CD:C2:7A:0B:EB:70:DB:F4:E3:3C:57:95:BB Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584989A104DE5BC059204C031A40 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4266adfb-3c0c-3234-a71e-165bccb44350.roa Signing time: Tue 15 Apr 2025 20:04:00 +0000 ROA not before: Tue 15 Apr 2025 20:04:00 +0000 ROA not after: Mon 14 Jul 2025 20:04:00 +0000 asID: 53356 IP address blocks: 209.178.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:89:a1:04:de:5b:c0:59:20:4c:03:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Apr 15 20:04:00 2025 GMT Not After : Jul 14 20:04:00 2025 GMT Subject: CN=50306aaf-6fe5-46c6-ba81-2046896edc87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:50:4b:3c:43:19:ea:55:51:ab:88:13:50:03: 9f:6c:cd:5f:4e:30:0c:28:80:11:1a:a6:0a:35:58: 77:92:39:80:3a:68:72:38:ec:ff:86:15:2b:e1:e6: 9d:86:e3:f0:f2:7d:08:f5:45:aa:e3:46:39:95:aa: cf:37:2e:c4:77:3c:64:db:5f:18:70:69:17:b7:85: 23:3e:ae:b8:04:b2:4d:15:bb:0e:1f:49:f8:02:b1: 65:0b:04:97:b8:db:22:02:e1:e4:bb:9b:ae:b9:8b: ef:ca:bd:09:92:d9:26:df:76:62:15:88:b7:c7:e6: a5:59:bc:d3:85:3b:68:b3:7c:85:cb:e3:c4:06:80: 10:57:5c:d4:cb:4c:d4:53:96:ff:b6:21:e8:25:70: 2b:ea:1c:bc:93:30:85:82:13:57:51:64:83:fe:15: 97:af:55:1d:e1:e9:c8:bc:9f:5f:87:ae:b6:58:de: d0:89:b8:c9:2b:1c:f0:46:fc:3b:cf:d0:b6:21:4f: 74:3e:2b:22:40:7e:27:a5:90:37:db:24:ca:73:29: 29:c0:77:fd:8e:1c:8c:b7:e9:6b:70:83:7a:dc:59: fa:91:ea:30:5f:4d:d8:a8:a4:68:e3:66:99:0c:68: d5:81:89:4c:ba:0b:44:3d:1b:8b:2e:fc:46:72:42: e9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:94:B4:E7:A7:BE:4C:CD:C2:7A:0B:EB:70:DB:F4:E3:3C:57:95:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4266adfb-3c0c-3234-a71e-165bccb44350.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 209.178.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:7f:6c:41:88:33:89:b3:a7:6d:1a:4c:7c:90:91:64:22:fd: d4:64:75:6c:a9:4a:ae:75:36:cc:de:5b:84:4f:c5:ae:93:8c: 12:fd:8c:55:e4:21:72:3a:5b:74:ef:26:a3:d8:ed:33:45:20: 1f:f4:c1:7d:52:28:09:0c:16:9e:66:02:5a:5f:01:33:51:95: a2:37:d9:47:a6:ed:f0:26:e4:c1:80:4c:54:e0:5b:38:f2:a3: 09:55:51:54:c7:51:f4:dd:81:b0:c9:d2:d5:db:24:8c:a9:26: c0:78:52:0d:9a:37:ad:66:a1:20:41:08:9a:02:bc:6a:2b:57: 99:53:a2:46:10:5a:a6:7f:7b:99:26:1f:0c:04:09:c0:9e:af: 4a:4f:0a:50:43:93:89:24:4d:9c:d9:46:ea:8f:71:94:3e:5e: 54:e0:e2:59:d6:bb:a4:75:37:74:96:1b:36:86:9f:33:ba:db: 7f:f0:87:3a:6a:9d:5c:c0:00:d9:36:47:73:dc:b8:d6:f3:c8: c2:94:f2:3b:6a:16:93:97:e5:e0:32:47:58:6b:ce:38:9f:f6: ad:16:ed:3b:b1:bc:0e:50:b8:c2:20:c0:3e:54:af:b3:b0:ea: ce:ad:30:7e:5c:9e:bd:cb:a0:93:ff:a3:74:ac:1d:9e:74:18: 40:db:64:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmJoQTeW8BZIEwDGkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDQxNTIwMDQwMFoXDTI1MDcxNDIwMDQwMFowLzEtMCsGA1UEAxMk NTAzMDZhYWYtNmZlNS00NmM2LWJhODEtMjA0Njg5NmVkYzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FBLPEMZ6lVRq4gTUAOfbM1fTjAMKIARGqYK NVh3kjmAOmhyOOz/hhUr4eadhuPw8n0I9UWq40Y5larPNy7Edzxk218YcGkXt4Uj Pq64BLJNFbsOH0n4ArFlCwSXuNsiAuHku5uuuYvvyr0Jktkm33ZiFYi3x+alWbzT hTtos3yFy+PEBoAQV1zUy0zUU5b/tiHoJXAr6hy8kzCFghNXUWSD/hWXr1Ud4enI vJ9fh662WN7QibjJKxzwRvw7z9C2IU90PisiQH4npZA32yTKcykpwHf9jhyMt+lr cIN63Fn6keowX03YqKRo42aZDGjVgYlMugtEPRuLLvxGckLpRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmUtOenvkzNwnoL63Db9OM8V5W7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvNDI2NmFkZmItM2MwYy0z MjM0LWE3MWUtMTY1YmNjYjQ0MzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bLsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZ/bEGIM4mzp20aTHyQkWQi/dRkdWypSq51NszeW4RPxa6TjBL9jFXk IXI6W3TvJqPY7TNFIB/0wX1SKAkMFp5mAlpfATNRlaI32Uem7fAm5MGATFTgWzjy owlVUVTHUfTdgbDJ0tXbJIypJsB4Ug2aN61moSBBCJoCvGorV5lTokYQWqZ/e5km HwwECcCer0pPClBDk4kkTZzZRuqPcZQ+XlTg4lnWu6R1N3SWGzaGnzO623/whzpq nVzAANk2R3PcuNbzyMKU8jtqFpOX5eAyR1hrzjif9q0W7TuxvA5QuMIgwD5Ur7Ow 6s6tMH5cnr3LoJP/o3SsHZ50GEDbZFw= -----END CERTIFICATE-----Generated at Mon Apr 28 06:06:51 2025 by rpki-client