$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/938a1a8b-5d4c-3f95-8273-2135590b1d77.roa File: 938a1a8b-5d4c-3f95-8273-2135590b1d77.roa (raw, json) Hash identifier: qxdhW7et04UTU6t3xznHE32uOFyZNU9oIigjblWHFlc= Subject key identifier: 04:15:A9:CE:B5:BC:9F:59:CC:B4:4D:29:B1:FD:CA:94:DE:6E:33:07 Certificate issuer: /CN=3e886672-55f3-450f-ab6e-342c76f256db Certificate serial: 010D0C9F432858499AF48BEEA78FA5D5FF5F6B00 Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/938a1a8b-5d4c-3f95-8273-2135590b1d77.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 0 IP address blocks: 204.9.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:8b:ee:a7:8f:a5:d5:ff:5f:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=d2414d2c-c118-4e85-bd37-6dfa95a73655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c0:d2:36:77:66:01:4f:9d:e0:ce:53:5e:b2: 7a:6d:5f:5b:bf:2c:80:35:85:52:5f:82:04:a5:55: f2:80:17:1f:4d:b2:c2:f0:a2:d8:27:2d:7c:1c:e4: 2b:2b:60:93:79:ad:97:37:e0:d0:74:7c:86:4b:df: 76:bd:b1:63:dc:09:36:ca:e7:4b:ae:ec:90:5b:4b: f7:6a:d2:83:e3:fc:36:e7:ca:10:cb:66:28:e7:0c: 5d:e1:c6:8a:f6:4d:43:7b:b4:b9:5f:50:0e:85:ca: ec:82:53:1e:25:aa:9f:ad:81:08:17:e7:85:bc:9a: 44:60:49:0c:96:fc:19:c4:92:89:f4:b2:c0:48:69: 93:46:01:17:ef:3b:94:ed:c7:6f:f8:2d:4c:76:9c: bc:e3:85:96:cc:7b:66:1f:eb:6d:26:6d:21:9a:16: d0:bc:84:0e:e2:2a:38:87:04:76:6f:b9:ad:32:7a: 5b:c6:2d:28:f1:e7:e5:02:85:aa:27:e8:ed:cc:d9: 73:02:d6:f3:6a:63:57:82:05:0b:92:ff:e4:a5:75: 9d:ee:40:49:c2:ef:b0:d2:7e:2c:f5:d8:ba:13:56: e1:9b:4e:db:79:3a:68:fa:f4:f6:85:45:73:06:88: 51:a9:3c:f3:62:4f:e0:f5:96:e5:42:5e:04:33:a1: 8a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:15:A9:CE:B5:BC:9F:59:CC:B4:4D:29:B1:FD:CA:94:DE:6E:33:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/938a1a8b-5d4c-3f95-8273-2135590b1d77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl X509v3 Authority Key Identifier: keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer sbgp-ipAddrBlock: critical IPv4: 204.9.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:bc:ea:53:cb:4a:38:9d:4f:02:b1:f9:9b:8a:f6:40:1f:4a: 87:db:b5:45:5e:6b:b3:a0:a4:18:be:0b:9e:31:aa:92:a7:78: ab:19:77:2f:d2:03:7b:20:cb:47:51:18:da:74:2f:6c:41:d6: db:8e:29:0a:f7:58:d1:07:95:22:17:e0:81:9a:2a:01:c8:42: c7:df:20:4e:75:36:a0:c1:b1:12:46:04:6b:7e:13:e3:1f:18: 4e:85:2c:05:06:20:17:4e:62:2a:40:45:46:f2:f2:fd:98:05: 1e:26:b3:c7:ef:88:e8:73:b6:e3:d8:53:9e:a9:4a:31:a3:98: b9:6c:fe:b6:d3:91:f2:dc:e1:ab:54:26:fc:3b:ca:be:ef:d0: ff:0f:4c:c4:cf:3d:c5:1b:cc:fc:f9:55:0c:41:74:86:1b:22: f7:f1:fc:ad:0a:e1:78:11:69:66:b9:87:f8:1f:6b:b7:d9:6e: 9e:7c:32:2b:ca:4a:54:ed:1e:c4:63:51:a6:0b:c7:21:17:38: 28:87:62:ab:ff:41:01:95:45:e6:ab:cf:88:05:26:c8:f4:e9: 9f:83:67:1d:f2:a7:49:28:8f:55:b4:2f:73:33:67:4b:25:5f: e0:74:5c:a6:23:85:d6:98:0a:03:30:b8:bc:b5:16:25:1b:ef: 45:4d:45:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9Ivup4+l1f9fawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U4ODY2NzItNTVmMy00NTBmLWFiNmUtMzQyYzc2ZjI1 NmRiMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZDI0MTRkMmMtYzExOC00ZTg1LWJkMzctNmRmYTk1YTczNjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncDSNndmAU+d4M5TXrJ6bV9bvyyANYVSX4IE pVXygBcfTbLC8KLYJy18HOQrK2CTea2XN+DQdHyGS992vbFj3Ak2yudLruyQW0v3 atKD4/w258oQy2Yo5wxd4caK9k1De7S5X1AOhcrsglMeJaqfrYEIF+eFvJpEYEkM lvwZxJKJ9LLASGmTRgEX7zuU7cdv+C1Mdpy844WWzHtmH+ttJm0hmhbQvIQO4io4 hwR2b7mtMnpbxi0o8eflAoWqJ+jtzNlzAtbzamNXggULkv/kpXWd7kBJwu+w0n4s 9di6E1bhm07beTpo+vT2hUVzBohRqTzzYk/g9ZblQl4EM6GKFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQVqc61vJ9ZzLRNKbH9ypTebjMHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4 NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJjNzZmMjU2ZGIvOTM4YTFhOGItNWQ0Yy0z Zjk1LTgyNzMtMjEzNTU5MGIxZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2U4ODY2NzItNTVmMy00NTBmLWFi NmUtMzQyYzc2ZjI1NmRiLzNlODg2NjcyLTU1ZjMtNDUwZi1hYjZlLTM0MmM3NmYy NTZkYi5jcmwwHwYDVR0jBBgwFoAUyffaYgRlgk+Ha8qShuQWCtT5MZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJj NzZmMjU2ZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAknMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAO86lPLSjidTwKx+ZuK9kAfSofbtUVea7OgpBi+C54xqpKneKsZdy/S A3sgy0dRGNp0L2xB1tuOKQr3WNEHlSIX4IGaKgHIQsffIE51NqDBsRJGBGt+E+Mf GE6FLAUGIBdOYipARUby8v2YBR4ms8fviOhztuPYU56pSjGjmLls/rbTkfLc4atU Jvw7yr7v0P8PTMTPPcUbzPz5VQxBdIYbIvfx/K0K4XgRaWa5h/gfa7fZbp58MivK SlTtHsRjUaYLxyEXOCiHYqv/QQGVRearz4gFJsj06Z+DZx3yp0koj1W0L3MzZ0sl X+B0XKYjhdaYCgMwuLy1FiUb70VNRec= -----END CERTIFICATE-----Generated at Sat Apr 26 14:48:01 2025 by rpki-client