$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/b5b2d102-d231-33cf-b28b-1bedc1cd640d.roa File: b5b2d102-d231-33cf-b28b-1bedc1cd640d.roa (raw, json) Hash identifier: wcFJGzuRzW/y6mMjBxnd/KIIdanDNTSWbWvCjT/DPHo= Subject key identifier: 65:92:6C:49:F3:E3:B3:B2:0B:84:0E:95:15:38:41:60:95:B0:86:06 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F432858498E6482DA725CD6E65A1EC600 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/b5b2d102-d231-33cf-b28b-1bedc1cd640d.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 397090 IP address blocks: 209.143.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:82:da:72:5c:d6:e6:5a:1e:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=0195f0b6-ecbc-47fd-8d10-194d0c777da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cd:0f:d6:b8:8f:f7:3a:9e:58:6f:1f:76:d2: 84:fd:1f:a4:ce:9a:43:7e:6e:ec:c6:59:57:90:a7: 63:93:a6:1e:8a:53:54:18:b5:f1:63:d9:95:49:ab: 45:3d:d0:b8:cd:8e:6a:e2:d9:33:83:e2:ce:ba:97: 98:24:55:94:44:f6:c7:3f:e7:7f:6a:3e:f1:df:6c: 63:bc:d7:2d:fa:16:9f:b0:29:6c:7d:95:6e:2f:ac: 4d:bf:9a:2e:e4:c9:ef:fa:8d:8e:10:48:c5:2e:b1: 1c:be:84:30:07:c8:89:7e:52:33:98:e7:1a:fd:07: 73:51:2a:03:e5:c6:4a:77:2a:ae:54:79:ca:81:00: 5f:4f:51:53:ba:f4:3c:fa:76:9a:6c:4f:f3:cb:58: 82:13:28:a1:41:ba:40:92:5c:ae:ef:40:87:eb:b1: e6:85:77:b0:df:3b:05:82:fb:ed:2a:c3:76:51:78: d0:b4:08:ea:36:34:90:cf:31:b1:37:32:64:03:b8: a3:cb:09:c0:18:92:25:66:a6:55:ed:d0:d9:cc:20: 6b:9a:28:e8:7b:40:7e:9d:2d:4b:07:07:c2:5d:e7: 79:2a:0e:2b:e5:d7:78:bc:f0:20:16:bf:ab:bc:d1: 29:0c:ba:83:c6:94:ae:e8:f9:da:91:c1:5b:51:ad: b1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:92:6C:49:F3:E3:B3:B2:0B:84:0E:95:15:38:41:60:95:B0:86:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/b5b2d102-d231-33cf-b28b-1bedc1cd640d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.143.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:93:01:13:80:52:4b:72:1d:d3:85:c2:c8:1c:7b:41:71:a0: bd:f1:2c:39:19:0f:2d:5b:99:4d:16:a6:bb:d4:65:99:da:f7: 5f:4b:1d:ef:4d:cd:48:9a:b3:04:06:d4:ee:08:cd:8f:f4:2e: 2b:86:07:73:cc:dc:54:72:67:9d:bd:9c:79:de:92:7a:8f:7d: c8:20:2a:e1:ff:94:d4:9e:39:84:f8:c0:b6:4c:9a:4e:9e:ea: 59:86:8a:31:eb:f1:43:49:54:31:a3:12:1a:3c:90:b9:86:54: b8:4d:28:dc:e6:76:dc:77:1b:9f:bb:0c:87:ec:a5:c2:a4:a3: cf:da:28:de:95:e1:d4:c0:02:b2:1e:d7:6c:aa:c9:ff:9a:3b: fd:b0:05:2b:51:8b:c3:4c:8e:7e:da:1e:6b:b4:54:24:87:dc: 04:34:67:0d:1b:67:35:b1:1f:c7:b3:c0:5b:e4:f3:20:02:a9: 81:74:8b:6c:97:e3:13:c3:81:bf:9f:e2:64:7c:76:4e:30:b7: 40:79:1e:51:87:34:7c:ae:e0:78:4b:d2:17:ce:94:b9:16:c4: 2f:de:41:d6:b8:ac:a5:ec:81:31:f0:a9:4d:31:b6:d3:15:d4: d6:91:8c:a8:8c:af:28:23:77:f4:fc:8f:63:25:79:7f:eb:fc: 18:e6:ad:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZILaclzW5loexgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk MDE5NWYwYjYtZWNiYy00N2ZkLThkMTAtMTk0ZDBjNzc3ZGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM0P1riP9zqeWG8fdtKE/R+kzppDfm7sxllX kKdjk6YeilNUGLXxY9mVSatFPdC4zY5q4tkzg+LOupeYJFWURPbHP+d/aj7x32xj vNct+hafsClsfZVuL6xNv5ou5Mnv+o2OEEjFLrEcvoQwB8iJflIzmOca/QdzUSoD 5cZKdyquVHnKgQBfT1FTuvQ8+naabE/zy1iCEyihQbpAklyu70CH67HmhXew3zsF gvvtKsN2UXjQtAjqNjSQzzGxNzJkA7ijywnAGJIlZqZV7dDZzCBrmijoe0B+nS1L BwfCXed5Kg4r5dd4vPAgFr+rvNEpDLqDxpSu6PnakcFbUa2xgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWSbEnz47OyC4QOlRU4QWCVsIYGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvYjViMmQxMDItZDIzMS0z M2NmLWIyOGItMWJlZGMxY2Q2NDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y9OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyTAROAUktyHdOFwsgce0FxoL3xLDkZDy1bmU0WprvUZZna919LHe9N zUiaswQG1O4IzY/0LiuGB3PM3FRyZ529nHneknqPfcggKuH/lNSeOYT4wLZMmk6e 6lmGijHr8UNJVDGjEho8kLmGVLhNKNzmdtx3G5+7DIfspcKko8/aKN6V4dTAArIe 12yqyf+aO/2wBStRi8NMjn7aHmu0VCSH3AQ0Zw0bZzWxH8ezwFvk8yACqYF0i2yX 4xPDgb+f4mR8dk4wt0B5HlGHNHyu4HhL0hfOlLkWxC/eQda4rKXsgTHwqU0xttMV 1NaRjKiMrygjd/T8j2MleX/r/BjmraM= -----END CERTIFICATE-----Generated at Tue Apr 29 20:32:19 2025 by rpki-client