$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/5d04eb3d-82fd-3250-9bf3-54aa2b719b46.roa File: 5d04eb3d-82fd-3250-9bf3-54aa2b719b46.roa (raw, json) Hash identifier: /3YCYBIEZON/k+I297zlXtuPeEgCJhqZ3PLwi6fAj7w= Subject key identifier: 8D:51:27:78:EB:CD:52:0C:CE:32:4C:76:86:1C:E4:7C:96:01:2E:CD Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285848FD56B4734808A4780BBEAF80 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/5d04eb3d-82fd-3250-9bf3-54aa2b719b46.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 31713 IP address blocks: 209.9.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:b4:73:48:08:a4:78:0b:be:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=1cdc6da7-922f-4f40-8b9c-4571ce431c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7e:dd:fd:8b:52:be:51:4a:b5:f4:0e:12:d4: 6c:16:87:11:95:8f:bc:49:22:2c:65:55:48:db:49: 86:ff:d0:e0:ee:69:df:20:9a:ea:a8:1c:6f:35:74: ff:ff:12:b8:14:61:c2:28:de:1f:a7:4f:92:e0:e2: d0:ff:5c:c8:c5:f2:b4:0d:98:8b:0d:a7:7c:4c:67: 98:70:55:55:b6:32:40:a2:d7:4d:85:a0:c7:f5:2f: 8f:47:b3:14:70:8e:0d:ca:eb:f4:13:9b:7a:e4:91: 5c:75:36:6d:fa:de:4f:95:b4:0f:2e:5d:e6:b2:51: 46:0c:78:ab:12:8c:3b:e0:42:9a:db:1f:d4:d5:18: 27:3e:6b:5f:f3:6b:b4:ba:d6:8f:19:74:e7:9a:ae: 39:49:06:b0:49:2f:8d:d5:53:02:45:d0:c7:24:f1: 5e:20:98:26:22:e3:5c:b9:f4:73:a5:e2:07:92:52: 31:7f:90:72:2d:a3:33:2e:15:ed:1c:c5:29:7a:7d: 78:1f:76:86:2f:cd:72:d5:d7:c1:f6:00:f1:dc:f4: 01:42:c8:34:02:00:59:eb:24:ed:20:46:87:43:8d: 66:ba:31:5b:7a:a1:f2:03:fb:52:a8:05:c6:39:a1: 35:68:1b:86:d8:95:b5:d3:a1:91:58:9e:34:31:1b: bc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:51:27:78:EB:CD:52:0C:CE:32:4C:76:86:1C:E4:7C:96:01:2E:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/5d04eb3d-82fd-3250-9bf3-54aa2b719b46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.9.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:82:e4:ce:9a:00:80:cd:54:0b:fa:a5:a9:47:34:cd:78:6b: 17:ea:c9:4a:98:34:87:ca:67:b8:c5:cf:87:4d:89:bb:76:d1: 48:34:f7:b0:5f:f0:1e:9b:eb:32:0a:cd:75:4e:2e:56:73:3f: cd:cb:52:5c:e5:32:3f:3c:09:1a:2f:88:d3:70:3d:c8:0b:e0: 25:de:57:a9:9c:2f:f7:f4:c8:1b:b1:75:ed:f8:0b:db:9b:d8: 33:35:48:ab:00:72:64:d2:93:80:9a:b2:b2:68:25:73:8c:a8: 20:a9:b6:f5:f6:3a:d5:b3:e4:a4:54:fc:69:15:66:67:1f:3e: c5:9b:bd:ed:61:9d:0a:45:24:b3:f9:19:f9:7b:99:b0:52:22: 85:f2:04:25:e1:8a:91:ce:b7:f9:9d:12:5e:68:f3:52:93:17: 34:7c:b1:22:ec:c0:d9:c0:bd:67:3e:9a:31:ca:05:51:94:de: 03:57:48:fb:06:87:08:40:fb:0d:6f:ad:87:f7:e6:e8:8e:5b: 7e:bb:6a:ed:4a:6d:43:0b:45:77:37:08:27:43:4f:fc:d3:8f: a9:96:c5:26:ac:24:0c:67:3d:11:0d:1b:cb:4d:d7:7c:3a:e5: d8:4e:a2:e7:31:52:a0:6e:8c:ba:15:77:d8:25:ef:2a:49:d6: 4d:38:c0:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VrRzSAikeAu+r4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk MWNkYzZkYTctOTIyZi00ZjQwLThiOWMtNDU3MWNlNDMxYzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX7d/YtSvlFKtfQOEtRsFocRlY+8SSIsZVVI 20mG/9Dg7mnfIJrqqBxvNXT//xK4FGHCKN4fp0+S4OLQ/1zIxfK0DZiLDad8TGeY cFVVtjJAotdNhaDH9S+PR7MUcI4Nyuv0E5t65JFcdTZt+t5PlbQPLl3mslFGDHir Eow74EKa2x/U1RgnPmtf82u0utaPGXTnmq45SQawSS+N1VMCRdDHJPFeIJgmIuNc ufRzpeIHklIxf5ByLaMzLhXtHMUpen14H3aGL81y1dfB9gDx3PQBQsg0AgBZ6yTt IEaHQ41mujFbeqHyA/tSqAXGOaE1aBuG2JW106GRWJ40MRu8AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1RJ3jrzVIMzjJMdoYc5HyWAS7NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvNWQwNGViM2QtODJmZC0z MjUwLTliZjMtNTRhYTJiNzE5YjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0QkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6C5M6aAIDNVAv6palHNM14axfqyUqYNIfKZ7jFz4dNibt20Ug097Bf 8B6b6zIKzXVOLlZzP83LUlzlMj88CRoviNNwPcgL4CXeV6mcL/f0yBuxde34C9ub 2DM1SKsAcmTSk4CasrJoJXOMqCCptvX2OtWz5KRU/GkVZmcfPsWbve1hnQpFJLP5 Gfl7mbBSIoXyBCXhipHOt/mdEl5o81KTFzR8sSLswNnAvWc+mjHKBVGU3gNXSPsG hwhA+w1vrYf35uiOW367au1KbUMLRXc3CCdDT/zTj6mWxSasJAxnPRENG8tN13w6 5dhOoucxUqBujLoVd9gl7ypJ1k04wJA= -----END CERTIFICATE-----Generated at Sun Apr 27 15:11:04 2025 by rpki-client