$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/ab4c49e6-70a7-364a-859e-9e88bba251d9.roa File: ab4c49e6-70a7-364a-859e-9e88bba251d9.roa (raw, json) Hash identifier: CDy8Fv+/FL22Q/lvXBRWpAjDaGoVd/vbZbA8J6Eiovo= Subject key identifier: 51:1F:C1:56:CA:DD:54:F6:9F:95:98:A6:30:AB:0C:6C:74:53:39:1B Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F432858498CFF0F6217EADD0C093AC380 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/ab4c49e6-70a7-364a-859e-9e88bba251d9.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 54518 IP address blocks: 209.143.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:0f:62:17:ea:dd:0c:09:3a:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=707122b9-8ff8-4d31-ac99-b318b1162742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:59:b9:bb:35:f5:98:b0:3e:14:bf:07:25:dc: ee:9c:96:bb:3b:02:0c:6f:10:63:26:b7:73:68:3b: 32:07:7f:d5:e7:cb:26:e7:dc:99:f4:8f:bc:f0:11: 08:b1:7e:0c:fd:0e:27:a8:22:cb:99:d8:88:e2:6c: 44:97:50:3f:cb:ca:98:0a:f6:ca:14:85:19:ef:15: 27:05:03:72:5b:68:ae:cc:ee:02:ae:d6:e5:a4:71: 81:15:4b:a6:9a:2c:90:d7:5c:98:7d:04:1c:49:f0: 60:65:33:d5:8c:72:f2:87:fe:05:a5:9d:7b:d0:43: 76:d4:eb:14:6f:be:22:65:e5:88:4f:6e:a9:65:06: e6:a2:be:25:1c:32:3d:2c:c4:bb:9b:5f:ca:f0:26: 5d:96:6b:e7:8a:34:2b:cf:21:35:49:b0:9d:b7:74: e8:49:e3:37:f1:d9:da:7b:b1:bd:ff:ca:b1:85:53: 11:75:14:f3:8b:d8:b9:2b:aa:3d:13:e1:34:f0:85: 5e:b2:7b:96:73:e6:c8:01:e0:cb:12:37:37:58:a6: a3:02:47:85:93:bc:81:dd:fa:74:3d:66:09:51:9e: 61:c0:d4:7d:7f:54:bc:7d:b6:62:1a:da:fe:26:90: 98:ae:0a:8e:73:10:cb:09:0f:66:7a:44:e7:9e:f2: 81:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:1F:C1:56:CA:DD:54:F6:9F:95:98:A6:30:AB:0C:6C:74:53:39:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/ab4c49e6-70a7-364a-859e-9e88bba251d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.143.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:e5:0d:a1:af:72:92:a6:74:69:d8:e8:71:d7:5f:ee:21:66: c3:7e:81:8a:b9:47:21:e3:38:5a:1c:cb:f1:33:cb:05:3f:91: 73:07:82:67:f5:3a:bd:5c:d0:38:1c:9b:32:88:4c:08:ad:07: dd:26:7a:49:3b:9b:f7:06:d7:4a:4f:9b:99:58:18:0c:26:1c: 7f:0b:79:8a:f2:7d:75:de:d3:ea:36:cc:d7:7a:12:56:58:ae: 0e:b3:37:4a:f0:09:9d:c7:09:d2:20:b3:bf:34:a7:ac:2a:11: 48:e8:1a:be:f8:af:b5:9e:2a:c8:62:a2:c5:f2:2c:36:ec:bf: cd:f4:33:24:04:61:c6:45:76:de:1d:88:48:61:20:52:fc:d1: 5c:64:36:10:52:68:95:d2:34:ed:02:d7:27:58:03:d8:03:d5: 8a:bf:71:21:57:f1:68:50:17:9d:96:60:cc:fc:02:31:4b:5d: 8c:a1:23:76:81:86:54:6f:0b:84:10:ea:a7:10:27:c3:d1:cc: 45:6f:77:f2:68:99:5a:e7:6e:9a:fc:25:04:5c:87:fe:98:5b: d1:0f:00:f7:6e:2c:b3:56:0d:e1:fb:dd:b7:20:69:eb:c2:65: d9:2a:e0:7c:4f:44:2c:26:f6:07:2c:e8:d3:84:19:70:95:7e: bd:3e:de:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/w9iF+rdDAk6w4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk NzA3MTIyYjktOGZmOC00ZDMxLWFjOTktYjMxOGIxMTYyNzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31m5uzX1mLA+FL8HJdzunJa7OwIMbxBjJrdz aDsyB3/V58sm59yZ9I+88BEIsX4M/Q4nqCLLmdiI4mxEl1A/y8qYCvbKFIUZ7xUn BQNyW2iuzO4CrtblpHGBFUummiyQ11yYfQQcSfBgZTPVjHLyh/4FpZ170EN21OsU b74iZeWIT26pZQbmor4lHDI9LMS7m1/K8CZdlmvnijQrzyE1SbCdt3ToSeM38dna e7G9/8qxhVMRdRTzi9i5K6o9E+E08IVesnuWc+bIAeDLEjc3WKajAkeFk7yB3fp0 PWYJUZ5hwNR9f1S8fbZiGtr+JpCYrgqOcxDLCQ9mekTnnvKB+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEfwVbK3VT2n5WYpjCrDGx0UzkbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvYWI0YzQ5ZTYtNzBhNy0z NjRhLTg1OWUtOWU4OGJiYTI1MWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y9KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3lDaGvcpKmdGnY6HHXX+4hZsN+gYq5RyHjOFocy/EzywU/kXMHgmf1 Or1c0DgcmzKITAitB90mekk7m/cG10pPm5lYGAwmHH8LeYryfXXe0+o2zNd6ElZY rg6zN0rwCZ3HCdIgs780p6wqEUjoGr74r7WeKshiosXyLDbsv830MyQEYcZFdt4d iEhhIFL80VxkNhBSaJXSNO0C1ydYA9gD1Yq/cSFX8WhQF52WYMz8AjFLXYyhI3aB hlRvC4QQ6qcQJ8PRzEVvd/JomVrnbpr8JQRch/6YW9EPAPduLLNWDeH73bcgaevC Zdkq4HxPRCwm9gcs6NOEGXCVfr0+3og= -----END CERTIFICATE-----Generated at Tue Apr 29 18:39:43 2025 by rpki-client