$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bdb11f5b-1b73-33ef-ae70-e3383df12340.roa File: bdb11f5b-1b73-33ef-ae70-e3383df12340.roa (raw, json) Hash identifier: Xp9bDiXJaGEJVSMPybzrbJ7HH5U+qZuXbcIed9KZLeE= Subject key identifier: E0:5F:4A:AA:C2:E0:D8:AD:82:92:D5:91:C9:9D:14:1C:59:CB:8B:4D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246E3EEA57445B6AFA0C660 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bdb11f5b-1b73-33ef-ae70-e3383df12340.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397242 IP address blocks: 209.173.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:e3:ee:a5:74:45:b6:af:a0:c6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=bd75db84-23eb-4918-bb7c-23325cef5dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5d:1a:14:90:83:88:84:df:c2:ee:84:f4:17: 74:f9:94:7b:09:22:21:37:e4:a9:47:71:04:09:27: a8:b6:4c:aa:db:06:42:34:d2:51:ab:4c:c8:35:7a: 8c:1d:93:d6:90:7b:dd:3f:10:ca:c3:fa:66:68:10: 5c:6e:29:97:38:af:ec:e6:11:6e:cd:94:06:d5:2a: 6b:39:79:05:b4:50:eb:ef:46:18:9c:d2:a1:47:b0: 76:46:3c:ef:3d:b7:96:ea:fc:9a:75:8d:65:b3:e2: c7:83:1b:62:bd:ec:97:5e:67:86:a3:d9:87:1e:c8: bd:26:ac:94:bc:95:b2:0e:41:84:24:7a:5b:d8:4d: cf:9c:7b:a6:8e:4d:84:cd:8e:4e:98:a1:99:d2:21: 05:fc:26:2c:f9:1e:a6:2c:82:31:81:c1:d1:de:2b: 64:98:c6:65:4f:15:28:30:81:5b:96:bb:a8:d6:e6: 42:f5:0f:4e:ba:31:41:ab:7d:89:83:8b:a1:b2:69: 9e:60:13:e5:15:be:b1:95:79:c7:57:d1:2d:f9:10: a1:d5:ef:c0:97:29:ad:09:52:d5:97:af:6c:b8:4c: bf:14:c8:9e:1b:34:4d:e5:30:60:b5:3d:1b:7c:a1: 3d:73:67:44:0c:b3:4c:75:62:7d:16:bb:69:08:82: 3b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5F:4A:AA:C2:E0:D8:AD:82:92:D5:91:C9:9D:14:1C:59:CB:8B:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bdb11f5b-1b73-33ef-ae70-e3383df12340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 209.173.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:f4:9b:6c:f9:70:f4:4e:00:07:84:50:3e:fc:21:37:9f:1d: 9e:14:61:7a:ce:d3:bc:10:42:32:8c:fb:6a:79:5d:a6:28:2c: 4a:e9:bf:7e:89:e8:15:a2:d3:c7:dc:27:59:36:ec:1d:0f:9f: da:44:2d:46:9f:90:39:9d:cc:75:ca:13:42:29:39:31:c3:2b: e1:b5:4b:62:86:5d:3c:a5:e0:0d:bd:da:0e:68:a4:26:b2:be: 89:10:22:fd:a0:60:95:6d:6a:7b:d0:7c:8a:96:ea:87:ef:13: d9:47:46:86:63:4d:29:c3:db:e4:c2:bc:76:45:27:f9:47:56: b1:d6:b7:e4:a5:69:47:20:f0:23:0c:dd:1b:19:51:8f:bf:2a: 2e:9e:61:81:51:56:06:40:b8:4d:28:6d:c1:7b:86:9b:a7:18: a4:80:33:7e:5d:8c:6d:25:24:08:c7:20:5a:5e:5a:27:b6:bc: 53:28:f0:ba:19:ad:6f:88:dc:78:93:8a:ec:76:f4:6a:57:61: 3d:c4:b8:4c:9b:a7:9f:00:75:39:c4:52:00:65:de:e4:8d:79: 94:21:a3:fd:05:91:a5:03:51:5e:81:63:08:d1:35:5a:8f:9c: d4:73:23:e1:d6:1b:a7:35:c3:54:3c:ce:9f:42:19:25:ec:a2: a4:40:aa:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRuPupXRFtq+gxmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YmQ3NWRiODQtMjNlYi00OTE4LWJiN2MtMjMzMjVjZWY1ZGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll0aFJCDiITfwu6E9Bd0+ZR7CSIhN+SpR3EE CSeotkyq2wZCNNJRq0zINXqMHZPWkHvdPxDKw/pmaBBcbimXOK/s5hFuzZQG1Spr OXkFtFDr70YYnNKhR7B2RjzvPbeW6vyadY1ls+LHgxtiveyXXmeGo9mHHsi9JqyU vJWyDkGEJHpb2E3PnHumjk2EzY5OmKGZ0iEF/CYs+R6mLIIxgcHR3itkmMZlTxUo MIFblruo1uZC9Q9OujFBq32Jg4uhsmmeYBPlFb6xlXnHV9Et+RCh1e/AlymtCVLV l69suEy/FMieGzRN5TBgtT0bfKE9c2dEDLNMdWJ9FrtpCII74QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBfSqrC4NitgpLVkcmdFBxZy4tNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmRiMTFmNWItMWI3My0z M2VmLWFlNzAtZTMzODNkZjEyMzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a06MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADv0m2z5cPROAAeEUD78ITefHZ4UYXrO07wQQjKM+2p5XaYoLErpv36J 6BWi08fcJ1k27B0Pn9pELUafkDmdzHXKE0IpOTHDK+G1S2KGXTyl4A292g5opCay vokQIv2gYJVtanvQfIqW6ofvE9lHRoZjTSnD2+TCvHZFJ/lHVrHWt+SlaUcg8CMM 3RsZUY+/Ki6eYYFRVgZAuE0obcF7hpunGKSAM35djG0lJAjHIFpeWie2vFMo8LoZ rW+I3HiTiux29GpXYT3EuEybp58AdTnEUgBl3uSNeZQho/0FkaUDUV6BYwjRNVqP nNRzI+HWG6c1w1Q8zp9CGSXsoqRAqvM= -----END CERTIFICATE-----Generated at Sun Apr 27 13:10:43 2025 by rpki-client