$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/9085b4dc-4e06-3c72-a680-8a3e7602f71a.roa File: 9085b4dc-4e06-3c72-a680-8a3e7602f71a.roa (raw, json) Hash identifier: fWNAXOdHvqWcJZkJdTgKcwITYSm4lB6og7TVqvwFQHE= Subject key identifier: 56:DB:1E:D5:E1:5C:7C:34:10:49:57:C5:1E:5E:C7:0E:24:C3:10:D6 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F43285849278DADFB8E157A5980F3E950 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/9085b4dc-4e06-3c72-a680-8a3e7602f71a.roa Signing time: Tue 11 Mar 2025 16:55:49 +0000 ROA not before: Tue 11 Mar 2025 16:55:49 +0000 ROA not after: Mon 09 Jun 2025 16:55:49 +0000 asID: 14315 IP address blocks: 209.178.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:27:8d:ad:fb:8e:15:7a:59:80:f3:e9:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Mar 11 16:55:49 2025 GMT Not After : Jun 9 16:55:49 2025 GMT Subject: CN=b3f91d43-59da-4947-be28-34f5bd5c381e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fd:43:fb:af:d0:d5:4f:36:8c:2d:02:f5:36: 47:58:e0:e6:8c:44:7d:1e:90:a8:4c:50:dc:6f:c9: 7d:33:65:a3:f7:a6:e3:57:c4:9a:c5:9c:24:35:b8: 6a:1a:da:79:6d:88:2a:46:6e:23:c1:3a:91:76:bc: b7:3f:f8:74:b2:99:11:24:fb:2c:15:24:ff:43:1b: 8e:b7:f2:ab:76:3b:fc:51:26:3e:83:c6:81:63:61: 1d:49:75:4b:49:a6:d5:fd:4b:42:5d:9d:a4:cb:aa: 01:f9:ed:55:d5:a1:88:c9:f0:1d:ce:e2:48:b5:86: 8b:55:0c:e9:cc:e4:5e:53:4a:48:bb:94:26:a8:3f: 57:ac:a2:5f:75:e8:00:6e:33:be:b2:8a:c4:f6:3c: 57:c5:39:8e:18:80:7e:8c:3d:a0:fc:03:a5:a3:b8: d4:50:40:58:98:ef:a9:96:51:3a:c7:e9:ac:6c:06: 96:af:25:a1:c7:19:a2:df:cf:86:88:3e:66:dd:dc: b2:ab:7b:6d:b0:9b:4e:b1:b9:09:16:3d:98:1a:bc: 06:6f:4a:07:87:4d:c0:05:15:0d:34:2c:2f:08:bf: 0d:09:57:18:04:3e:74:88:07:98:93:6b:34:a7:14: 5d:ca:89:91:41:51:0c:f8:5f:f6:00:f6:9a:df:ed: d2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:DB:1E:D5:E1:5C:7C:34:10:49:57:C5:1E:5E:C7:0E:24:C3:10:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/9085b4dc-4e06-3c72-a680-8a3e7602f71a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 209.178.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ee:8c:fa:1a:b0:b5:54:32:56:a0:0f:cb:d5:ee:6b:86:f3: 60:7e:2f:da:85:fa:9a:55:d0:ba:a8:fa:b9:42:87:12:43:ee: 3a:ed:93:c8:09:d2:2f:c3:64:1d:55:47:3e:57:7a:65:34:85: 7b:2b:44:52:db:14:45:16:05:35:51:37:74:21:5e:0e:5e:82: 47:c0:66:bc:19:c4:6d:24:5f:d5:e9:2a:5e:bd:bd:a9:74:7f: a6:3d:fd:6b:03:52:cb:a4:96:26:00:e6:cc:76:4f:1f:65:6b: a3:ba:68:6b:a4:8c:c4:40:3f:8c:ee:27:b6:09:24:bd:d0:8e: ad:72:5e:fe:c4:92:4a:19:b4:73:55:85:8a:1d:0d:01:c3:de: 88:4b:7d:f4:95:8d:75:29:28:09:af:41:94:14:ef:bf:17:12: e9:68:cd:68:f3:05:e7:6f:71:85:e7:43:ad:7c:ea:d3:60:88: 34:50:84:cf:23:d1:dc:83:01:86:09:0e:5e:27:bf:95:9d:53: 7d:db:51:d5:19:56:a2:11:7a:48:77:85:b7:da:7a:00:bd:2e: b7:44:40:22:a2:fc:b0:aa:26:82:f4:92:c4:67:31:95:4e:78: cf:21:b3:19:c5:1c:29:e7:09:4a:2b:93:1d:ce:09:b0:be:75: 01:3b:a1:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEknja37jhV6WYDz6VAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDMxMTE2NTU0OVoXDTI1MDYwOTE2NTU0OVowLzEtMCsGA1UEAxMk YjNmOTFkNDMtNTlkYS00OTQ3LWJlMjgtMzRmNWJkNWMzODFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/1D+6/Q1U82jC0C9TZHWODmjER9HpCoTFDc b8l9M2Wj96bjV8SaxZwkNbhqGtp5bYgqRm4jwTqRdry3P/h0spkRJPssFST/QxuO t/Krdjv8USY+g8aBY2EdSXVLSabV/UtCXZ2ky6oB+e1V1aGIyfAdzuJItYaLVQzp zOReU0pIu5QmqD9XrKJfdegAbjO+sorE9jxXxTmOGIB+jD2g/AOlo7jUUEBYmO+p llE6x+msbAaWryWhxxmi38+GiD5m3dyyq3ttsJtOsbkJFj2YGrwGb0oHh03ABRUN NCwvCL8NCVcYBD50iAeYk2s0pxRdyomRQVEM+F/2APaa3+3STQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbbHtXhXHw0EElXxR5exw4kwxDWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvOTA4NWI0ZGMtNGUwNi0z YzcyLWE2ODAtOGEzZTc2MDJmNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bLuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjujPoasLVUMlagD8vV7muG82B+L9qF+ppV0Lqo+rlChxJD7jrtk8gJ 0i/DZB1VRz5XemU0hXsrRFLbFEUWBTVRN3QhXg5egkfAZrwZxG0kX9XpKl69val0 f6Y9/WsDUsukliYA5sx2Tx9la6O6aGukjMRAP4zuJ7YJJL3Qjq1yXv7EkkoZtHNV hYodDQHD3ohLffSVjXUpKAmvQZQU778XEulozWjzBedvcYXnQ6186tNgiDRQhM8j 0dyDAYYJDl4nv5WdU33bUdUZVqIRekh3hbfaegC9LrdEQCKi/LCqJoL0ksRnMZVO eM8hsxnFHCnnCUorkx3OCbC+dQE7of8= -----END CERTIFICATE-----Generated at Sat Apr 26 18:36:30 2025 by rpki-client