$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/b72df9de-f9f2-3565-af7d-2c7971de29d8.roa File: b72df9de-f9f2-3565-af7d-2c7971de29d8.roa (raw, json) Hash identifier: +hjJeokwQ5x50zEMzOtKMm6lrYLZYNkSEIRdb3yQt5U= Subject key identifier: B5:8B:A0:B1:94:9A:AA:D3:D2:B8:6A:1A:0B:9C:C6:2E:EF:52:8C:92 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F43285849A217D23314740DBD44433700 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/b72df9de-f9f2-3565-af7d-2c7971de29d8.roa Signing time: Thu 24 Apr 2025 14:22:46 +0000 ROA not before: Thu 24 Apr 2025 14:22:46 +0000 ROA not after: Wed 23 Jul 2025 14:22:46 +0000 asID: 62610 IP address blocks: 209.178.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:17:d2:33:14:74:0d:bd:44:43:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Apr 24 14:22:46 2025 GMT Not After : Jul 23 14:22:46 2025 GMT Subject: CN=8c534334-314b-45b9-9f4a-a12daa54ab88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0e:c0:a5:ec:07:46:35:65:16:8f:b8:62:28: 21:28:6a:91:29:bc:63:2a:56:1e:dc:16:fe:b3:42: 36:5b:d4:78:34:4c:8c:39:61:94:35:62:14:af:85: c8:12:2b:de:11:4b:2d:60:b3:14:85:58:1c:b1:45: 41:41:fc:b5:af:45:4a:20:d9:e3:40:b4:a4:55:e7: bf:0a:ed:c9:9f:e2:a0:42:fe:8a:c5:cd:0d:25:92: a5:e0:8c:7f:a2:09:b7:9a:76:87:e0:4a:79:a1:c4: 3e:74:a9:ed:34:49:c1:d3:5e:45:05:60:fb:8c:4e: 9f:88:89:3c:d7:3b:7a:41:96:d0:97:94:38:50:d8: c8:af:3e:7c:e5:d0:c7:0d:4e:95:27:d4:b6:7f:0d: 00:8e:f5:aa:0d:6f:12:08:54:98:d6:b6:47:24:fe: 6b:8b:fd:89:fc:11:e5:fd:1a:78:51:04:4c:09:8c: f9:3f:e5:59:b7:56:05:29:a1:77:c3:8a:51:6e:02: bb:c7:4b:18:a4:7d:37:c3:49:c9:62:5a:7a:a9:d0: 75:5a:3a:66:56:a6:71:cd:ea:e2:28:76:d9:8c:8d: 84:9b:3d:bb:85:2b:8e:ba:f0:13:f3:37:ef:8a:a2: 64:ed:21:de:af:4c:55:93:bd:c4:09:50:a1:2a:b7: 27:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:8B:A0:B1:94:9A:AA:D3:D2:B8:6A:1A:0B:9C:C6:2E:EF:52:8C:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/b72df9de-f9f2-3565-af7d-2c7971de29d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 209.178.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:2a:32:3a:a4:96:b7:94:d9:95:67:0a:52:2a:47:56:13:96: 52:ad:fc:4f:55:53:24:c7:88:57:85:67:c1:19:76:66:11:a2: 11:91:d1:68:2c:a8:b3:e4:7d:d7:85:43:e5:7d:69:f1:61:6a: 1e:dd:b8:d3:9c:4f:9c:6d:37:d5:60:3a:e6:aa:bd:3a:74:be: 81:f9:e3:38:34:8f:9c:45:44:c1:58:75:7b:00:cc:8a:a9:4c: da:7e:62:7e:2a:4b:4d:02:1a:2e:87:f1:de:b1:b5:1a:c5:49: 53:54:29:16:be:19:01:5c:60:90:80:d0:da:c2:39:46:a2:af: 4d:65:77:90:4a:d5:c0:0e:5d:78:0e:2f:1f:ba:5b:5f:78:a1: 82:c9:81:00:2c:e6:9a:c7:2c:7d:f7:0a:2b:61:5d:7c:a1:b2: 81:1b:ab:e8:54:ab:6b:81:de:d9:80:01:1f:4e:8f:cc:31:03: 30:a7:6c:6c:82:89:23:5e:b1:b4:5c:c5:e8:21:cf:9c:94:e6: 68:24:52:5e:94:b1:03:e3:e3:2a:64:5a:51:7c:e2:c7:58:d7: 0d:49:bb:87:fb:9b:c8:a8:33:13:35:bf:63:12:b2:5b:d6:9e: aa:43:87:9f:38:0c:fc:c3:60:0e:69:a1:f7:31:f3:cb:a3:14: df:e3:d8:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiF9IzFHQNvURDNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDQyNDE0MjI0NloXDTI1MDcyMzE0MjI0NlowLzEtMCsGA1UEAxMk OGM1MzQzMzQtMzE0Yi00NWI5LTlmNGEtYTEyZGFhNTRhYjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ7ApewHRjVlFo+4YighKGqRKbxjKlYe3Bb+ s0I2W9R4NEyMOWGUNWIUr4XIEiveEUstYLMUhVgcsUVBQfy1r0VKINnjQLSkVee/ Cu3Jn+KgQv6Kxc0NJZKl4Ix/ogm3mnaH4Ep5ocQ+dKntNEnB015FBWD7jE6fiIk8 1zt6QZbQl5Q4UNjIrz585dDHDU6VJ9S2fw0AjvWqDW8SCFSY1rZHJP5ri/2J/BHl /Rp4UQRMCYz5P+VZt1YFKaF3w4pRbgK7x0sYpH03w0nJYlp6qdB1WjpmVqZxzeri KHbZjI2Emz27hSuOuvAT8zfviqJk7SHer0xVk73ECVChKrcnMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWLoLGUmqrT0rhqGgucxi7vUoySMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvYjcyZGY5ZGUtZjlmMi0z NTY1LWFmN2QtMmM3OTcxZGUyOWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bLvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcqMjqklreU2ZVnClIqR1YTllKt/E9VUyTHiFeFZ8EZdmYRohGR0Wgs qLPkfdeFQ+V9afFhah7duNOcT5xtN9VgOuaqvTp0voH54zg0j5xFRMFYdXsAzIqp TNp+Yn4qS00CGi6H8d6xtRrFSVNUKRa+GQFcYJCA0NrCOUair01ld5BK1cAOXXgO Lx+6W194oYLJgQAs5prHLH33CithXXyhsoEbq+hUq2uB3tmAAR9Oj8wxAzCnbGyC iSNesbRcxeghz5yU5mgkUl6UsQPj4ypkWlF84sdY1w1Ju4f7m8ioMxM1v2MSslvW nqpDh584DPzDYA5pofcx88ujFN/j2Ic= -----END CERTIFICATE-----Generated at Sat Apr 26 19:05:27 2025 by rpki-client