$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa File: 1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa (raw, json) Hash identifier: 1lwzqjyuZSg3ecjGDw8xVo8pkShWuJcGox9Vvn62XLQ= Subject key identifier: C3:B2:2B:32:B7:CF:45:A3:A8:79:6E:0E:4D:54:8F:1B:41:66:07:1C Certificate issuer: /CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Certificate serial: 010D0C9F432858498769B7B54851F7EDC4A3B300 Authority key identifier: 60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 8075 IP address blocks: 209.143.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:b7:b5:48:51:f7:ed:c4:a3:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=d196c3e8-5c01-4ee2-9044-bbfa7c5d3dae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1a:ce:90:f2:5c:e7:fb:dc:56:d7:c1:17:23: 94:e7:1f:42:96:83:69:25:53:eb:26:4d:3f:67:23: 06:b5:4f:fe:13:6e:b1:68:a1:39:ff:60:0d:f2:11: 1b:e7:ff:53:aa:3b:0a:19:bf:29:75:1f:e5:f5:8a: 2c:a5:f5:0a:f9:ad:02:87:9d:13:2f:f7:fb:72:ff: 88:ec:a0:88:4c:9e:c5:1f:ea:6c:14:1d:fa:c7:cb: c5:f3:fd:a7:5e:09:95:5f:54:67:48:46:19:a1:25: 47:8d:f6:50:59:0d:c5:8b:0b:69:ca:8e:9a:1f:fb: 5b:69:97:4c:88:17:fe:0d:15:05:49:aa:33:58:11: 73:13:db:de:3d:2f:ec:86:a4:92:13:e8:f6:f1:aa: c2:81:d6:8f:d8:32:b3:0e:53:00:73:0b:bf:ab:e7: 84:63:3e:75:f2:0f:e0:6a:2a:f2:dd:a6:0f:aa:6f: d8:5d:a7:33:5f:41:0f:8d:57:75:b8:90:67:4c:10: d8:4b:bb:08:96:ae:24:f2:b1:a6:ac:4e:42:66:66: b7:34:3d:b7:6c:99:33:4f:89:9f:f5:d5:f6:18:4a: f9:60:7e:23:1e:69:63:b1:6b:51:29:a0:3d:98:43: cd:f3:aa:13:f9:b0:3a:d9:d2:09:5c:a3:1d:a8:40: c5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B2:2B:32:B7:CF:45:A3:A8:79:6E:0E:4D:54:8F:1B:41:66:07:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl X509v3 Authority Key Identifier: keyid:60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer sbgp-ipAddrBlock: critical IPv4: 209.143.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:e8:be:5d:58:54:1c:d1:71:1d:0a:68:8e:d1:04:ff:a6:74: ad:a1:98:e1:96:bf:ff:50:b0:7e:e8:4a:79:01:ad:f9:2e:24: 48:96:6e:da:15:07:97:e3:67:07:b1:81:0f:da:f5:fd:3f:06: e7:8d:a5:be:0d:4e:fd:0a:00:3c:80:76:12:3b:a0:85:ba:e7: 44:ed:dd:cd:a6:a9:82:1a:33:bf:38:09:6e:29:35:51:59:fb: 55:57:d8:f8:14:1b:6c:b8:05:60:c6:d1:41:7f:2d:fe:4e:49: 76:b4:3e:cc:67:c3:5b:94:7e:48:07:80:15:76:67:b9:fd:06: 58:8b:22:88:2e:98:75:85:35:b5:ff:dc:eb:cf:9b:84:bd:65: d3:33:39:7a:11:62:ef:4b:6d:2f:ac:1d:31:79:3c:fc:fc:46: bd:2b:3c:c0:6e:f8:3e:b4:6c:2b:d4:b4:50:38:6c:69:a4:76: d3:0d:28:71:d0:34:cf:f7:ad:0d:b9:ef:15:85:91:30:76:01: ea:ba:7b:3e:7d:e5:c0:c8:23:95:55:53:59:91:04:87:f3:60: 92:4b:f7:f8:59:01:5d:1d:f9:93:38:c3:b3:e3:a9:00:3f:25: b6:4d:57:0c:c3:14:93:10:8c:be:6b:7f:c1:6d:05:30:5f:ce: e4:07:b1:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHabe1SFH37cSjswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwZjRhNGEtOGYzMS00N2Y4LTg1MjktMWVjYjExYTRl NjYzMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk ZDE5NmMzZTgtNWMwMS00ZWUyLTkwNDQtYmJmYTdjNWQzZGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhrOkPJc5/vcVtfBFyOU5x9CloNpJVPrJk0/ ZyMGtU/+E26xaKE5/2AN8hEb5/9TqjsKGb8pdR/l9YospfUK+a0Ch50TL/f7cv+I 7KCITJ7FH+psFB36x8vF8/2nXgmVX1RnSEYZoSVHjfZQWQ3Fiwtpyo6aH/tbaZdM iBf+DRUFSaozWBFzE9vePS/shqSSE+j28arCgdaP2DKzDlMAcwu/q+eEYz518g/g airy3aYPqm/YXaczX0EPjVd1uJBnTBDYS7sIlq4k8rGmrE5CZma3ND23bJkzT4mf 9dX2GEr5YH4jHmljsWtRKaA9mEPN86oT+bA62dIJXKMdqEDFHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOyKzK3z0WjqHluDk1UjxtBZgccMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBm NGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNiMTFhNGU2NjMvMWE3MDRkMWMtNGU3OS0z Y2ZiLWIzM2YtZjczMjVhNWE3ZGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDQwZjRhNGEtOGYzMS00N2Y4LTg1 MjktMWVjYjExYTRlNjYzLzA0MGY0YTRhLThmMzEtNDdmOC04NTI5LTFlY2IxMWE0 ZTY2My5jcmwwHwYDVR0jBBgwFoAUYBryhPLVze+SLIFZvhWKznYxnRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBmNGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNi MTFhNGU2NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y/VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPovl1YVBzRcR0KaI7RBP+mdK2hmOGWv/9QsH7oSnkBrfkuJEiWbtoV B5fjZwexgQ/a9f0/BueNpb4NTv0KADyAdhI7oIW650Tt3c2mqYIaM784CW4pNVFZ +1VX2PgUG2y4BWDG0UF/Lf5OSXa0Psxnw1uUfkgHgBV2Z7n9BliLIogumHWFNbX/ 3OvPm4S9ZdMzOXoRYu9LbS+sHTF5PPz8Rr0rPMBu+D60bCvUtFA4bGmkdtMNKHHQ NM/3rQ257xWFkTB2Aeq6ez595cDII5VVU1mRBIfzYJJL9/hZAV0d+ZM4w7PjqQA/ JbZNVwzDFJMQjL5rf8FtBTBfzuQHsVs= -----END CERTIFICATE-----Generated at Mon Apr 28 09:09:44 2025 by rpki-client