$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa File: 3a315f55-20c2-37ff-b50f-af30c5811ce0.roa (raw, json) Hash identifier: fxn25m1m3NTS4aoKoJSJNjtecgCSwhVNNgig3LADxZ8= Subject key identifier: A4:76:B1:5D:E7:B1:05:CA:54:A6:FF:B1:17:CD:BF:F6:1E:A6:03:42 Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F432858499DBF29C4F0EEE4566F9B6C00 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 7018 IP address blocks: 209.114.4.0/22 maxlen: 24 209.114.8.0/21 maxlen: 24 209.114.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:29:c4:f0:ee:e4:56:6f:9b:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=543c4488-e739-49f2-9f7a-864b2b2f6cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:88:34:ef:cb:d4:a2:25:3a:73:c1:75:f1:95: c1:32:99:9f:3c:c5:8b:20:f2:fc:40:fe:87:19:1c: 35:c4:90:5e:72:d1:a6:21:60:51:3f:e5:dd:f1:0f: 1a:84:c7:48:74:5a:28:cd:9a:28:f1:f5:5b:68:3e: 86:2e:fa:cb:e1:06:5d:e5:a0:09:da:7c:dc:d1:7e: f2:9a:4a:ff:29:10:a2:a7:f0:1e:b4:dd:c7:c7:31: 1a:d0:47:64:f7:56:87:bb:41:d4:fb:7f:e7:eb:78: a1:f6:cc:e6:cf:48:7a:d7:e8:98:4c:97:b3:d2:8f: d1:1c:91:99:9c:5f:6c:76:5d:a1:49:78:c0:28:07: d2:2e:98:d2:93:48:02:3c:d4:cc:30:0f:ac:7e:5c: 08:0c:e4:02:d0:09:3a:66:86:03:bf:86:33:78:f7: b2:2e:2a:4e:3f:c9:94:37:22:e6:2e:d4:42:21:9a: a3:98:8a:00:38:34:2f:15:86:d4:5e:20:ed:0a:09: 40:5c:ff:ee:a2:24:e9:00:cb:93:5e:c3:a7:1d:fa: 6a:f3:05:3b:64:dc:45:7b:ea:c9:48:f6:d8:26:52: 24:12:99:17:0a:e8:3d:1a:c9:7e:bc:52:a0:12:76: 0d:bf:66:84:f9:2b:60:1c:21:37:40:f3:4f:3d:41: 69:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:76:B1:5D:E7:B1:05:CA:54:A6:FF:B1:17:CD:BF:F6:1E:A6:03:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.4.0-209.114.31.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:f6:23:b5:6d:8d:04:d8:8a:2d:7f:23:f2:fb:72:7b:c3:50: bd:dd:7e:e4:8d:b2:5f:64:9b:72:1c:82:61:98:f2:79:37:58: 54:ef:38:49:c1:97:05:ba:43:df:03:7d:cb:e7:c4:1c:62:4e: 10:5f:4e:6e:36:0b:01:cf:22:ae:fd:e7:25:e0:b1:0c:cc:9f: cc:4a:37:0a:55:c8:74:79:60:a6:dd:8a:f5:61:e0:4a:32:d8: e7:0c:f6:bd:ad:62:fc:cd:02:12:96:bd:95:c9:c7:25:54:06: 2a:09:c1:51:27:98:89:b1:8d:47:d9:41:21:6a:07:0d:37:17: bf:b9:ef:5d:7d:16:0a:90:19:2b:1b:28:66:1a:23:9b:80:a6: fb:9b:3b:58:3e:00:c8:5c:56:bb:45:ea:b6:7e:62:8a:53:83: c4:de:b0:86:ef:5f:90:30:fe:9e:ac:bf:07:63:fb:55:11:04: c2:71:7f:33:b2:5b:ce:19:96:b2:2b:8d:08:57:d2:f1:78:db: 11:d8:85:3f:3e:d7:2a:09:3a:42:46:27:09:7a:01:da:96:48: 94:00:71:7d:df:d1:d9:67:1a:10:61:ae:f1:d9:79:20:01:1d: 35:2a:ff:fa:d0:54:42:e2:13:8b:ae:68:67:01:91:63:80:38: 03:7f:75:f1 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEmdvynE8O7kVm+bbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk NTQzYzQ0ODgtZTczOS00OWYyLTlmN2EtODY0YjJiMmY2Y2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4g078vUoiU6c8F18ZXBMpmfPMWLIPL8QP6H GRw1xJBectGmIWBRP+Xd8Q8ahMdIdFoozZoo8fVbaD6GLvrL4QZd5aAJ2nzc0X7y mkr/KRCip/AetN3HxzEa0Edk91aHu0HU+3/n63ih9szmz0h61+iYTJez0o/RHJGZ nF9sdl2hSXjAKAfSLpjSk0gCPNTMMA+sflwIDOQC0Ak6ZoYDv4YzePeyLipOP8mU NyLmLtRCIZqjmIoAODQvFYbUXiDtCglAXP/uoiTpAMuTXsOnHfpq8wU7ZNxFe+rJ SPbYJlIkEpkXCug9Gsl+vFKgEnYNv2aE+StgHCE3QPNPPUFpdQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFKR2sV3nsQXKVKb/sRfNv/YepgNCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvM2EzMTVmNTUtMjBjMi0z N2ZmLWI1MGYtYWYzMGM1ODExY2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALRcgQD BAXRcgAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAp/YjtW2NBNiKLX8j8vtye8NQvd1+5I2yX2SbchyCYZjy eTdYVO84ScGXBbpD3wN9y+fEHGJOEF9ObjYLAc8irv3nJeCxDMyfzEo3ClXIdHlg pt2K9WHgSjLY5wz2va1i/M0CEpa9lcnHJVQGKgnBUSeYibGNR9lBIWoHDTcXv7nv XX0WCpAZKxsoZhojm4Cm+5s7WD4AyFxWu0Xqtn5iilODxN6whu9fkDD+nqy/B2P7 VREEwnF/M7JbzhmWsiuNCFfS8XjbEdiFPz7XKgk6QkYnCXoB2pZIlABxfd/R2Wca EGGu8dl5IAEdNSr/+tBUQuITi65oZwGRY4A4A3918Q== -----END CERTIFICATE-----Generated at Sat Apr 26 16:50:54 2025 by rpki-client