$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8ac69690-c3b8-3bba-82fc-102f743b397b.roa File: 8ac69690-c3b8-3bba-82fc-102f743b397b.roa (raw, json) Hash identifier: oUvrVnqh7wkQqC8NIydq+N/Ipuvk89+8tkHtzv6pZZA= Subject key identifier: 58:CF:49:B6:CF:CA:81:9C:BC:8D:12:11:9B:F4:F1:CA:4E:29:54:76 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285848F4F698B8E4B496013987FF00 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8ac69690-c3b8-3bba-82fc-102f743b397b.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 136448 IP address blocks: 209.9.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:98:b8:e4:b4:96:01:39:87:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=fea9149e-3b0e-49d4-8085-9d0d3f2f699e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4c:6a:f2:b9:74:7b:d7:d2:7e:9b:3a:e0:d3: 71:ce:d9:d8:36:04:c4:ae:46:1b:66:2c:66:f6:b7: 65:a7:40:17:78:05:0e:91:9a:3c:66:96:af:47:5b: 38:cb:37:1c:b0:da:84:22:6e:28:e8:df:aa:ec:c8: 67:51:d7:e3:56:d1:72:be:08:ee:11:cb:04:1f:b5: 1a:3a:d8:c4:e0:13:8c:c6:a5:54:08:3d:49:dc:5c: fd:32:b3:87:cd:45:96:f7:07:78:c8:22:8f:79:97: e2:3a:00:a1:f9:fa:21:08:86:74:cf:cf:a9:5f:7a: bf:dd:74:8d:2a:e0:16:73:c7:79:2d:3f:37:32:8c: a2:7a:c1:3f:54:de:c5:01:32:a7:aa:99:0e:ac:ff: 95:21:69:ab:c4:76:46:2e:fa:6f:1a:15:a0:80:d8: 61:f7:23:ac:11:5c:bf:69:bd:de:f0:82:73:f5:0a: a7:92:55:9f:92:a7:f5:48:d1:43:09:ab:71:fe:e0: 6a:09:63:7f:7b:a3:a7:f8:eb:f8:99:62:85:28:a2: 82:cf:e0:ac:6b:9f:fe:f3:8b:df:04:b4:2d:a3:56: c3:df:4d:46:40:5e:bf:3e:e5:ec:6a:7e:a6:94:ae: 28:06:e0:e2:08:bc:5d:e9:14:8b:18:b4:9b:e8:36: 5a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CF:49:B6:CF:CA:81:9C:BC:8D:12:11:9B:F4:F1:CA:4E:29:54:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8ac69690-c3b8-3bba-82fc-102f743b397b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.9.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:75:aa:4f:c3:57:fc:eb:bf:52:4c:02:0a:f3:14:1e:38:5c: a5:2b:29:98:e1:03:b1:ad:8e:a2:a6:f9:9e:3a:7e:1e:dd:65: 8a:b0:13:de:89:b9:69:31:5d:3a:a6:34:e0:68:ab:ee:b0:26: fd:57:d0:de:92:8c:fe:d5:60:a8:d4:1e:ea:9f:64:5c:e8:41: 84:f5:19:44:f1:fb:be:97:7f:c2:be:59:59:af:5b:a9:39:c5: 33:10:08:a1:17:c9:64:e8:7e:9f:cb:c5:b1:aa:01:c4:03:ce: 89:1a:8a:15:f0:6a:ed:44:bc:85:36:5b:b0:ee:e4:54:e8:98: 23:d4:7c:6e:13:b0:6b:eb:34:18:88:d9:0f:ee:ea:ff:78:c5: b3:a0:21:7f:81:09:02:09:e4:a9:69:c4:0b:9d:10:60:ac:ec: 43:e1:89:c3:21:b3:32:e9:19:a1:2f:5f:15:8a:ca:16:ba:e1: 88:87:43:d8:70:8b:90:1e:25:37:44:75:cd:9c:f1:25:6c:3e: 7b:24:5f:6b:65:f7:77:f3:3c:b9:ff:4a:8a:98:5f:fd:ca:2b: aa:b5:16:8b:75:c6:f7:b1:cb:c3:e9:89:a1:eb:f8:a7:33:28: e9:33:91:d3:99:9a:ea:d2:ff:21:52:eb:13:69:aa:66:55:19: fe:74:12:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09pi45LSWATmH/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZmVhOTE0OWUtM2IwZS00OWQ0LTgwODUtOWQwZDNmMmY2OTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUxq8rl0e9fSfps64NNxztnYNgTErkYbZixm 9rdlp0AXeAUOkZo8ZpavR1s4yzccsNqEIm4o6N+q7MhnUdfjVtFyvgjuEcsEH7Ua OtjE4BOMxqVUCD1J3Fz9MrOHzUWW9wd4yCKPeZfiOgCh+fohCIZ0z8+pX3q/3XSN KuAWc8d5LT83MoyiesE/VN7FATKnqpkOrP+VIWmrxHZGLvpvGhWggNhh9yOsEVy/ ab3e8IJz9QqnklWfkqf1SNFDCatx/uBqCWN/e6On+Ov4mWKFKKKCz+Csa5/+84vf BLQto1bD301GQF6/PuXsan6mlK4oBuDiCLxd6RSLGLSb6DZaJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjPSbbPyoGcvI0SEZv08cpOKVR2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvOGFjNjk2OTAtYzNiOC0z YmJhLTgyZmMtMTAyZjc0M2IzOTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0QnUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABp1qk/DV/zrv1JMAgrzFB44XKUrKZjhA7GtjqKm+Z46fh7dZYqwE96J uWkxXTqmNOBoq+6wJv1X0N6SjP7VYKjUHuqfZFzoQYT1GUTx+76Xf8K+WVmvW6k5 xTMQCKEXyWTofp/LxbGqAcQDzokaihXwau1EvIU2W7Du5FTomCPUfG4TsGvrNBiI 2Q/u6v94xbOgIX+BCQIJ5KlpxAudEGCs7EPhicMhszLpGaEvXxWKyha64YiHQ9hw i5AeJTdEdc2c8SVsPnskX2tl93fzPLn/SoqYX/3KK6q1Fot1xvexy8PpiaHr+Kcz KOkzkdOZmurS/yFS6xNpqmZVGf50Evo= -----END CERTIFICATE-----Generated at Sun Apr 27 00:02:21 2025 by rpki-client