$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/496bc6f2-9e7c-3877-9ad8-7c2416cc3bc6.roa File: 496bc6f2-9e7c-3877-9ad8-7c2416cc3bc6.roa (raw, json) Hash identifier: YPFNsGFc3Y57bXJj3IGIVzVGhP0JOc2X4DFRVWGX/E4= Subject key identifier: 52:F9:EE:C6:4E:99:15:D4:C1:00:CE:0C:92:EF:F8:01:57:37:14:00 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F43285849166CC7E6DC56EC95C60AF100 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/496bc6f2-9e7c-3877-9ad8-7c2416cc3bc6.roa Signing time: Wed 05 Mar 2025 13:40:47 +0000 ROA not before: Wed 05 Mar 2025 13:40:47 +0000 ROA not after: Tue 03 Jun 2025 12:40:47 +0000 asID: 53356 IP address blocks: 209.178.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:16:6c:c7:e6:dc:56:ec:95:c6:0a:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Mar 5 13:40:47 2025 GMT Not After : Jun 3 12:40:47 2025 GMT Subject: CN=fd6eb5f0-9613-42d3-b066-d97969ea1371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e5:10:a6:33:34:e5:71:39:ae:87:73:38:45: 93:99:e0:84:a8:9d:58:9d:cd:b1:f7:63:03:4c:79: c2:92:21:c1:b5:51:d5:06:78:6b:7a:06:98:a4:4a: 6f:85:75:4e:d1:74:f5:d4:43:d4:1d:ad:cc:8c:eb: bd:d2:60:9f:34:b8:82:14:61:c8:0c:d0:67:de:35: dc:a9:77:71:9e:ec:ac:09:9a:ce:08:e0:9e:5c:94: 09:1a:88:a0:af:2a:5a:a3:3d:06:b0:c3:51:74:9e: 55:01:49:b1:a0:a1:1a:7c:2b:77:9c:68:3a:11:7e: 3a:66:ae:8a:6e:4d:fa:14:39:5f:28:24:b5:47:13: f7:39:d0:d6:13:cd:37:be:29:ee:39:97:b6:14:67: 8e:c7:34:32:06:3d:08:75:81:95:5b:80:29:1e:b4: f4:32:e4:d1:c2:7a:93:22:67:7d:92:3c:d3:18:89: 51:18:bc:79:5b:f4:0b:63:6c:cd:26:d6:71:14:b7: e6:4a:26:73:5c:a4:ba:93:bd:45:3c:c5:12:e3:ca: 9f:b2:aa:b4:41:59:59:82:5b:35:09:90:5a:e7:8c: 86:a8:7a:34:13:d7:db:12:1a:b5:aa:0b:4a:75:16: 7c:bc:22:ca:1d:fc:98:8d:0f:33:c8:cd:c8:49:58: fa:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F9:EE:C6:4E:99:15:D4:C1:00:CE:0C:92:EF:F8:01:57:37:14:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/496bc6f2-9e7c-3877-9ad8-7c2416cc3bc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 209.178.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:62:fd:2e:e7:f8:29:b2:81:a8:51:dc:db:3e:af:2f:2b:41: 5a:8d:14:63:35:34:c6:51:f2:3c:07:29:cc:44:7b:38:0d:e6: e9:e5:3c:6d:61:03:40:f5:f5:3e:22:e2:b7:7d:49:07:70:24: 9c:79:de:80:d8:80:41:e4:a9:a6:8c:cc:12:f7:da:3b:f0:26: 74:10:63:21:c7:a6:8a:b5:ab:f5:dd:06:78:07:33:e1:88:97: 98:f4:35:6d:53:4d:a2:49:53:79:f7:01:13:f0:37:bf:6e:9a: ed:53:80:91:23:b1:46:5f:06:3f:ef:84:d2:d1:e2:22:1c:57: 05:fb:ed:52:1b:68:25:bd:7e:d6:b7:72:45:c3:c2:63:9f:e5: b5:7d:0e:08:01:fe:c0:b7:21:43:ef:40:e4:65:0b:04:86:57: b4:ad:ff:f9:4c:c7:45:df:84:dd:ac:40:50:ec:92:73:e3:11: 9f:35:56:ec:5c:19:16:a8:9e:82:53:a7:f0:60:94:40:ac:30: da:88:b1:fb:16:87:48:2d:ce:c1:9c:c8:f9:da:de:45:7f:e2: 62:ff:d3:3d:d2:89:bf:7d:e2:d4:e5:86:37:92:2d:35:77:e5: 88:5d:ab:88:15:54:04:8e:f4:a3:6e:8f:0f:94:0c:07:33:9c: 9a:f5:c4:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkWbMfm3FbslcYK8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDMwNTEzNDA0N1oXDTI1MDYwMzEyNDA0N1owLzEtMCsGA1UEAxMk ZmQ2ZWI1ZjAtOTYxMy00MmQzLWIwNjYtZDk3OTY5ZWExMzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOUQpjM05XE5rodzOEWTmeCEqJ1Ync2x92MD THnCkiHBtVHVBnhregaYpEpvhXVO0XT11EPUHa3MjOu90mCfNLiCFGHIDNBn3jXc qXdxnuysCZrOCOCeXJQJGoigrypaoz0GsMNRdJ5VAUmxoKEafCt3nGg6EX46Zq6K bk36FDlfKCS1RxP3OdDWE803vinuOZe2FGeOxzQyBj0IdYGVW4ApHrT0MuTRwnqT Imd9kjzTGIlRGLx5W/QLY2zNJtZxFLfmSiZzXKS6k71FPMUS48qfsqq0QVlZgls1 CZBa54yGqHo0E9fbEhq1qgtKdRZ8vCLKHfyYjQ8zyM3ISVj6oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFL57sZOmRXUwQDODJLv+AFXNxQAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvNDk2YmM2ZjItOWU3Yy0z ODc3LTlhZDgtN2MyNDE2Y2MzYmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bLtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdi/S7n+CmygahR3Ns+ry8rQVqNFGM1NMZR8jwHKcxEezgN5unlPG1h A0D19T4i4rd9SQdwJJx53oDYgEHkqaaMzBL32jvwJnQQYyHHpoq1q/XdBngHM+GI l5j0NW1TTaJJU3n3ARPwN79umu1TgJEjsUZfBj/vhNLR4iIcVwX77VIbaCW9fta3 ckXDwmOf5bV9DggB/sC3IUPvQORlCwSGV7St//lMx0XfhN2sQFDsknPjEZ81Vuxc GRaonoJTp/BglECsMNqIsfsWh0gtzsGcyPna3kV/4mL/0z3Sib994tTlhjeSLTV3 5Yhdq4gVVASO9KNujw+UDAcznJr1xDI= -----END CERTIFICATE-----Generated at Sun Apr 27 09:25:44 2025 by rpki-client