$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/84674b29-ce04-35c0-8a3b-86ebf2b8ff5c.roa File: 84674b29-ce04-35c0-8a3b-86ebf2b8ff5c.roa (raw, json) Hash identifier: RsXK1uTv2wVn6YpqwV/EjBtVovVl/147gyWRkVavs/A= Subject key identifier: 91:84:C4:89:0F:79:16:0F:81:1F:A5:16:C1:BB:7F:BB:C4:BA:4E:57 Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F43285849674EF5AA2799DD46C59B6480 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/84674b29-ce04-35c0-8a3b-86ebf2b8ff5c.roa Signing time: Thu 03 Apr 2025 13:01:02 +0000 ROA not before: Thu 03 Apr 2025 13:01:02 +0000 ROA not after: Wed 02 Jul 2025 13:01:02 +0000 asID: 14618 IP address blocks: 209.114.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:4e:f5:aa:27:99:dd:46:c5:9b:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: Apr 3 13:01:02 2025 GMT Not After : Jul 2 13:01:02 2025 GMT Subject: CN=fa1f87cf-1ae8-4b9f-a874-0f75ef2eb320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e8:60:64:f3:73:3e:9e:43:e7:8d:f8:8f:ef: 2b:3b:21:bb:50:ff:a3:29:6f:52:53:4c:ee:22:06: 07:30:d6:4c:5d:77:de:86:08:c7:e6:67:c8:91:1b: 30:58:7e:d8:07:b3:65:7a:e2:64:07:16:cc:e0:53: a1:95:c7:5a:9b:82:1e:af:c5:02:4f:d9:0e:37:a1: 1e:1c:41:fe:03:f5:18:9c:98:f2:e3:3f:9b:64:ca: a3:4c:f0:8f:2d:1b:28:e0:28:6f:81:f9:be:18:86: 69:e9:65:28:4d:4b:30:a1:fe:45:18:7b:26:6e:b9: 4a:26:2c:d0:d4:8b:b1:0d:f2:33:4f:a9:f4:f9:85: a8:4c:4c:55:8b:17:eb:4d:6f:d7:2f:32:8a:c8:97: cc:d6:89:a5:dc:e5:0d:09:01:56:72:f5:c9:05:61: ad:7b:29:f9:07:3a:82:d8:ea:d4:48:1d:ce:8a:d4: c7:50:ea:39:5d:3a:e8:33:4d:31:29:a6:ec:4b:a3: ad:bd:c6:8e:6c:64:c4:0f:71:df:d8:ae:66:03:c6: 9b:26:5e:c6:04:2b:dd:fc:f6:aa:d3:5f:d6:ff:9d: 53:56:66:6d:99:74:ba:f7:be:22:e1:47:f9:3c:06: 69:53:ca:e0:6f:cc:2e:ed:36:82:80:1c:80:b4:17: 0a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:84:C4:89:0F:79:16:0F:81:1F:A5:16:C1:BB:7F:BB:C4:BA:4E:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/84674b29-ce04-35c0-8a3b-86ebf2b8ff5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:7d:d9:ae:fd:78:12:14:8c:70:36:9d:fd:c8:9f:a7:8b:ad: 0f:90:ce:fe:c4:d4:c0:e6:4b:0c:0a:a6:7e:41:e2:77:ef:aa: 17:b9:04:0d:cd:63:b0:c2:a9:45:6c:f3:d9:5d:cc:06:ec:6c: 9d:68:7a:58:36:42:d5:c3:c4:04:f3:4c:02:9a:14:55:b3:ee: 1f:30:07:46:d5:d4:fb:76:1b:16:fe:bb:66:e2:06:e7:7b:b5: b4:be:30:28:c1:e5:1a:57:cf:a3:65:22:bc:ac:67:13:21:f1: 35:b1:11:02:94:55:ff:06:ac:10:c2:cf:28:b1:64:a2:0a:23: 97:b9:d5:91:e2:ab:bc:27:46:c0:74:dd:81:59:32:a0:0d:28: 63:5a:c1:ae:01:87:6e:94:01:c7:78:6c:39:1b:cc:42:75:17: e4:a4:59:66:df:98:42:6f:cf:e5:64:1f:4e:be:9a:5c:09:dc: ff:95:f7:9c:63:47:bc:8d:11:ab:ce:ec:53:ca:89:3e:e5:a5: ba:7e:b5:78:a2:f3:4b:92:e3:bb:b1:fd:c1:e4:70:72:dd:c1: 2e:e2:d6:c5:fd:9f:ab:0f:f4:e6:4d:2a:fb:cb:17:6d:cd:5a: 9e:a4:b5:74:4d:01:67:59:40:a5:a2:ce:c5:24:88:5a:0e:93: 03:8d:ee:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElnTvWqJ5ndRsWbZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI1MDQwMzEzMDEwMloXDTI1MDcwMjEzMDEwMlowLzEtMCsGA1UEAxMk ZmExZjg3Y2YtMWFlOC00YjlmLWE4NzQtMGY3NWVmMmViMzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuhgZPNzPp5D5434j+8rOyG7UP+jKW9SU0zu IgYHMNZMXXfehgjH5mfIkRswWH7YB7NleuJkBxbM4FOhlcdam4Ier8UCT9kON6Ee HEH+A/UYnJjy4z+bZMqjTPCPLRso4Chvgfm+GIZp6WUoTUswof5FGHsmbrlKJizQ 1IuxDfIzT6n0+YWoTExVixfrTW/XLzKKyJfM1oml3OUNCQFWcvXJBWGteyn5BzqC 2OrUSB3OitTHUOo5XTroM00xKabsS6OtvcaObGTED3Hf2K5mA8abJl7GBCvd/Paq 01/W/51TVmZtmXS6974i4Uf5PAZpU8rgb8wu7TaCgByAtBcKYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGExIkPeRYPgR+lFsG7f7vEuk5XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvODQ2NzRiMjktY2UwNC0z NWMwLThhM2ItODZlYmYyYjhmZjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XICMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJ92a79eBIUjHA2nf3In6eLrQ+Qzv7E1MDmSwwKpn5B4nfvqhe5BA3N Y7DCqUVs89ldzAbsbJ1oelg2QtXDxATzTAKaFFWz7h8wB0bV1Pt2Gxb+u2biBud7 tbS+MCjB5RpXz6NlIrysZxMh8TWxEQKUVf8GrBDCzyixZKIKI5e51ZHiq7wnRsB0 3YFZMqANKGNawa4Bh26UAcd4bDkbzEJ1F+SkWWbfmEJvz+VkH06+mlwJ3P+V95xj R7yNEavO7FPKiT7lpbp+tXii80uS47ux/cHkcHLdwS7i1sX9n6sP9OZNKvvLF23N Wp6ktXRNAWdZQKWizsUkiFoOkwON7tg= -----END CERTIFICATE-----Generated at Sat Apr 26 13:33:41 2025 by rpki-client