$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa File: 4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa (raw, json) Hash identifier: T/M7NLmO8/544Je/1hAbE4aWPO9tyrVIXG3Ez1q4cGs= Subject key identifier: C3:31:A7:31:0A:86:36:3A:2A:8A:7D:34:CA:BE:8F:E6:AA:AD:F4:9F Certificate issuer: /CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Certificate serial: 010D0C9F432858498769B7A58DA317CC63F92700 Authority key identifier: 60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 8075 IP address blocks: 209.143.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:b7:a5:8d:a3:17:cc:63:f9:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=ffeaf72c-014d-4aee-962d-813af584be0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:96:53:67:cf:7f:16:5e:ff:0c:67:62:5e:7c: e3:56:0d:c1:85:1c:f8:4f:e6:0b:d1:f4:93:21:f3: e0:db:6c:ca:3a:b3:d7:cb:19:7c:04:34:58:eb:1c: e3:c4:c2:a1:e1:8b:4e:04:a5:cf:f9:08:73:ef:74: 75:69:23:f2:8e:27:23:29:22:86:8b:3f:a8:74:1a: ce:23:2e:36:50:bd:75:63:7a:c4:9a:3a:e5:a3:3a: 03:4b:1b:62:d9:e2:31:56:f5:d3:28:25:7d:bf:ad: 09:a6:e6:ad:85:d4:ca:5a:3b:68:35:fd:3d:1a:24: b8:8c:23:8b:50:2a:2d:ce:82:b7:c9:bc:60:0e:d8: 08:f2:ae:3b:81:1d:d9:97:c3:f3:b0:e7:06:ef:52: 9f:c4:ec:d0:52:70:4b:a7:d7:38:55:ab:d6:6f:e0: fe:82:f1:92:06:42:d3:d4:a5:7c:6c:c7:0c:81:38: 80:34:07:99:54:43:7a:e4:50:16:87:d1:d6:25:4c: 75:e3:22:14:4d:1c:e6:de:33:cb:a4:83:9b:bf:6c: fe:2c:d1:e4:24:6f:ce:3c:29:66:fe:19:d1:77:07: 26:c2:c0:fa:33:dd:ac:5c:ed:5b:44:11:72:74:bb: 7d:6b:a2:41:70:d7:12:11:f0:06:73:9b:39:d7:7a: 49:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:31:A7:31:0A:86:36:3A:2A:8A:7D:34:CA:BE:8F:E6:AA:AD:F4:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl X509v3 Authority Key Identifier: keyid:60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer sbgp-ipAddrBlock: critical IPv4: 209.143.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:61:87:e9:d6:c7:50:78:2c:9c:6d:7d:9a:d0:cf:6b:03:0d: 9e:ce:01:14:8b:b9:60:f8:ce:9c:05:de:b7:82:37:6d:70:08: 4a:73:75:18:08:ad:d7:a1:b3:64:93:64:61:43:de:8c:9f:6f: ac:af:dd:06:c7:14:72:e7:07:2b:ff:39:ca:70:f0:ec:6e:34: e7:fd:23:ec:c6:c3:06:a9:16:fa:64:09:ee:cf:f5:8b:09:19: 24:2d:70:00:11:26:46:ea:d8:26:0c:86:60:ba:c4:35:54:58: 3d:4a:5a:48:30:fd:cb:ae:d2:6b:bd:70:71:22:a3:ea:f0:52: 7d:4f:1f:a9:23:49:32:1d:86:9e:89:30:26:fc:a5:b8:3d:14: 34:6c:a2:31:ff:58:25:69:82:46:df:93:0b:64:ba:6d:32:66: aa:74:51:20:a1:90:ed:1f:48:e1:86:d3:1c:db:fa:ca:88:d0: 4c:83:d8:78:c9:3e:02:7d:13:61:3f:c2:69:6d:8e:98:01:94: 16:68:6a:2b:c8:4e:34:66:e3:9e:f3:49:9e:66:0b:1f:af:c9: d8:90:b1:54:2f:37:f5:8a:89:cc:27:7d:98:ff:b5:9d:4c:78: 58:42:ae:9e:e4:e3:d4:e9:2f:2b:77:61:31:43:79:9d:ae:45: 02:bd:31:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHabeljaMXzGP5JwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwZjRhNGEtOGYzMS00N2Y4LTg1MjktMWVjYjExYTRl NjYzMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk ZmZlYWY3MmMtMDE0ZC00YWVlLTk2MmQtODEzYWY1ODRiZTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZZTZ89/Fl7/DGdiXnzjVg3BhRz4T+YL0fST IfPg22zKOrPXyxl8BDRY6xzjxMKh4YtOBKXP+Qhz73R1aSPyjicjKSKGiz+odBrO Iy42UL11Y3rEmjrlozoDSxti2eIxVvXTKCV9v60JpuathdTKWjtoNf09GiS4jCOL UCotzoK3ybxgDtgI8q47gR3Zl8PzsOcG71KfxOzQUnBLp9c4VavWb+D+gvGSBkLT 1KV8bMcMgTiANAeZVEN65FAWh9HWJUx14yIUTRzm3jPLpIObv2z+LNHkJG/OPClm /hnRdwcmwsD6M92sXO1bRBFydLt9a6JBcNcSEfAGc5s513pJVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMxpzEKhjY6Kop9NMq+j+aqrfSfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBm NGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNiMTFhNGU2NjMvNDUyNWQwYWEtMWIzZi0z YjZkLWJkNjEtMDVlMzY4MWY3NjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDQwZjRhNGEtOGYzMS00N2Y4LTg1 MjktMWVjYjExYTRlNjYzLzA0MGY0YTRhLThmMzEtNDdmOC04NTI5LTFlY2IxMWE0 ZTY2My5jcmwwHwYDVR0jBBgwFoAUYBryhPLVze+SLIFZvhWKznYxnRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBmNGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNi MTFhNGU2NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y/UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1hh+nWx1B4LJxtfZrQz2sDDZ7OARSLuWD4zpwF3reCN21wCEpzdRgI rdehs2STZGFD3oyfb6yv3QbHFHLnByv/Ocpw8OxuNOf9I+zGwwapFvpkCe7P9YsJ GSQtcAARJkbq2CYMhmC6xDVUWD1KWkgw/cuu0mu9cHEio+rwUn1PH6kjSTIdhp6J MCb8pbg9FDRsojH/WCVpgkbfkwtkum0yZqp0USChkO0fSOGG0xzb+sqI0EyD2HjJ PgJ9E2E/wmltjpgBlBZoaivITjRm457zSZ5mCx+vydiQsVQvN/WKicwnfZj/tZ1M eFhCrp7k49TpLyt3YTFDeZ2uRQK9MQo= -----END CERTIFICATE-----Generated at Mon Apr 28 11:17:21 2025 by rpki-client