$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/efd48fea-fbb1-3268-a9a1-4f9caa081aa8.roa File: efd48fea-fbb1-3268-a9a1-4f9caa081aa8.roa (raw, json) Hash identifier: XpKx4iDXKZBIzY9s8chIwIAf4N/5U0kQJUSuK7F2Lw4= Subject key identifier: DD:74:FB:3C:1D:8F:5D:EE:67:7A:FF:94:3D:44:F4:BE:4F:82:8E:E8 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F432858498CFF0EFA915F3D8DA86B6880 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/efd48fea-fbb1-3268-a9a1-4f9caa081aa8.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 40836 IP address blocks: 209.114.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:0e:fa:91:5f:3d:8d:a8:6b:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=473854c3-69b1-486b-9f08-0a4e73428508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:36:95:87:b8:49:28:a0:64:c4:ed:9b:33:b3: 04:92:9a:eb:bb:6f:60:4e:9a:73:b3:94:7b:dd:7f: 02:c0:4d:fc:f6:df:f9:0c:67:4d:33:e5:d4:89:52: 0b:02:2e:db:12:07:de:0d:12:b7:ef:96:ed:10:61: a8:28:6c:93:49:34:0f:7e:a6:ca:97:02:8c:40:44: 5e:e4:1d:5d:74:47:a8:b4:94:eb:ee:4f:6b:01:57: ab:ba:9b:90:a0:9d:cb:62:d1:fc:c4:1c:92:ec:6f: cb:d9:0d:a2:f6:1d:47:2f:50:8d:b0:8c:8f:ef:41: 23:1e:0b:1e:c8:6c:45:9a:a1:8c:64:a3:47:8a:60: b6:08:d1:66:29:3f:be:13:43:5f:94:2f:db:6a:7c: f2:10:8f:03:1a:03:9c:0d:98:2c:ef:53:7b:a1:1b: 16:83:f0:7b:62:48:ae:90:71:f9:e2:96:91:58:92: 92:f9:a2:6d:dc:2d:5b:60:ef:51:0a:e1:00:08:9c: 29:29:b0:04:a9:d0:21:27:b2:8a:04:00:38:4d:ac: 5d:36:f6:5a:1d:ab:2b:1f:19:42:e4:96:a5:3c:32: 03:e2:ee:10:f6:5b:44:d4:d1:34:95:6a:9c:2f:49: 82:7e:0f:49:95:39:18:58:ac:8c:b9:da:9c:62:f7: d4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:74:FB:3C:1D:8F:5D:EE:67:7A:FF:94:3D:44:F4:BE:4F:82:8E:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/efd48fea-fbb1-3268-a9a1-4f9caa081aa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.114.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:7b:02:fa:a0:a8:a4:05:66:31:0a:9c:1c:47:da:0b:a1:14: 82:ca:00:28:5d:e3:b1:f3:a2:88:fa:09:a2:3b:e0:30:b9:46: f3:c1:46:94:94:4d:6a:35:9e:d2:38:7a:22:b7:a1:ef:e6:66: c1:29:ad:0a:a7:b5:66:36:43:4c:3a:a1:d9:b5:ef:fb:e5:1b: 58:f9:7d:79:99:7e:6e:f7:7a:f1:f5:16:cb:15:cf:93:53:d4: 31:f5:91:38:02:44:7c:c5:13:ed:c0:9f:a5:a6:75:b2:0d:80: b0:30:e4:c7:e6:8e:ea:c9:8a:1a:9f:52:d7:13:eb:de:0e:fa: 9c:05:69:34:b3:a4:a7:a1:60:3f:e4:5e:c1:81:d9:a7:5e:b4: 6c:95:00:24:66:65:ad:e7:30:1f:03:7d:a3:4f:19:7d:c7:aa: bb:2d:9d:14:1a:ad:08:b9:ac:e9:a4:83:88:f5:68:f2:5f:a3: 0e:50:e4:23:3a:6c:02:b1:e7:a8:de:95:60:be:b2:1b:14:26: 0f:e5:a6:98:ff:0e:46:23:be:e3:27:b7:e0:b3:d6:18:d9:d7: 60:47:5b:7c:85:c8:cc:29:3e:79:5a:5c:58:1b:fe:21:63:f2: 37:ac:b4:3a:59:5e:18:17:9d:97:45:a0:24:f0:61:96:09:84: f6:df:43:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/w76kV89jahraIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk NDczODU0YzMtNjliMS00ODZiLTlmMDgtMGE0ZTczNDI4NTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTaVh7hJKKBkxO2bM7MEkprru29gTppzs5R7 3X8CwE389t/5DGdNM+XUiVILAi7bEgfeDRK375btEGGoKGyTSTQPfqbKlwKMQERe 5B1ddEeotJTr7k9rAVerupuQoJ3LYtH8xByS7G/L2Q2i9h1HL1CNsIyP70EjHgse yGxFmqGMZKNHimC2CNFmKT++E0NflC/banzyEI8DGgOcDZgs71N7oRsWg/B7Ykiu kHH54paRWJKS+aJt3C1bYO9RCuEACJwpKbAEqdAhJ7KKBAA4TaxdNvZaHasrHxlC 5JalPDID4u4Q9ltE1NE0lWqcL0mCfg9JlTkYWKyMudqcYvfUtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN10+zwdj13uZ3r/lD1E9L5Pgo7oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvZWZkNDhmZWEtZmJiMS0z MjY4LWE5YTEtNGY5Y2FhMDgxYWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XK6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB17AvqgqKQFZjEKnBxH2guhFILKAChd47Hzooj6CaI74DC5RvPBRpSU TWo1ntI4eiK3oe/mZsEprQqntWY2Q0w6odm17/vlG1j5fXmZfm73evH1FssVz5NT 1DH1kTgCRHzFE+3An6WmdbINgLAw5MfmjurJihqfUtcT694O+pwFaTSzpKehYD/k XsGB2adetGyVACRmZa3nMB8DfaNPGX3HqrstnRQarQi5rOmkg4j1aPJfow5Q5CM6 bAKx56jelWC+shsUJg/lppj/DkYjvuMnt+Cz1hjZ12BHW3yFyMwpPnlaXFgb/iFj 8jestDpZXhgXnZdFoCTwYZYJhPbfQ50= -----END CERTIFICATE-----Generated at Tue Apr 29 17:39:49 2025 by rpki-client