$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8bfd3889-63d5-3959-8000-59f311cd0e60.roa File: 8bfd3889-63d5-3959-8000-59f311cd0e60.roa (raw, json) Hash identifier: 4cxNeFgzheCz5HnUJ9slUGfjIsC0d5rmtfLP/sTXnp4= Subject key identifier: E9:EE:C2:7D:B8:58:A1:9E:57:CB:C6:D4:3F:39:36:74:4E:B2:D1:16 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849898673FFA68C08CBDDE93650 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8bfd3889-63d5-3959-8000-59f311cd0e60.roa Signing time: Tue 15 Apr 2025 19:10:28 +0000 ROA not before: Tue 15 Apr 2025 19:10:28 +0000 ROA not after: Mon 14 Jul 2025 19:10:28 +0000 asID: 17119 IP address blocks: 209.4.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:89:86:73:ff:a6:8c:08:cb:dd:e9:36:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 15 19:10:28 2025 GMT Not After : Jul 14 19:10:28 2025 GMT Subject: CN=f744dc1b-a68b-470c-b6d5-882f4d07f160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3b:92:95:a7:de:29:9f:24:89:1f:4e:b0:ed: 7f:e2:f0:83:e2:c0:f1:b2:d0:63:01:53:ef:4d:14: 6f:0b:85:47:2b:e6:e7:75:bd:55:91:5f:df:78:89: a7:20:cd:95:74:be:e5:9e:f0:df:08:02:ca:4a:d3: 4c:34:ed:4e:15:e5:e4:5d:ee:15:a2:35:f6:cc:53: 73:93:a5:6d:84:51:cb:a4:db:de:30:d9:ab:ee:ea: 6e:40:a2:c7:e4:4a:e6:a5:c1:01:e8:f8:26:98:80: 9a:43:d0:95:ad:9a:b7:af:56:89:f1:f4:f5:64:db: 58:75:26:e8:9d:d8:a1:c5:70:d6:3a:7f:9a:03:3a: 24:57:8a:27:a7:24:a2:d5:1c:ee:eb:bf:98:30:d0: c0:79:ab:e3:61:4b:7b:a2:2e:a3:ef:58:0b:cb:d9: fb:cd:dc:4e:f7:e6:d9:e9:8d:a3:c4:2b:1e:e1:71: 9f:37:d1:98:65:e2:ef:8c:16:c5:dc:31:f6:8e:4f: 60:be:76:57:b5:80:d7:75:10:70:3e:f4:8c:67:3a: 30:0c:d9:da:c3:e5:f0:cc:68:75:b5:23:d8:83:cc: 21:1c:d4:e6:4a:f8:5d:01:2a:53:62:58:5c:71:d9: 61:d7:f5:54:21:f5:85:01:b4:78:94:df:75:3c:4c: 5d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:EE:C2:7D:B8:58:A1:9E:57:CB:C6:D4:3F:39:36:74:4E:B2:D1:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8bfd3889-63d5-3959-8000-59f311cd0e60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 209.4.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:7d:a1:2d:d3:b7:95:46:a0:d7:32:88:a2:53:3c:93:46:27: 41:9c:70:f8:73:3f:61:30:5b:c6:17:82:c5:7c:d2:05:f9:32: bb:a0:6e:7c:65:81:a9:9c:75:48:f1:c4:c8:70:34:c4:ef:5c: 84:35:b4:07:58:5e:9f:22:b2:a6:f9:98:43:f5:31:da:7e:cd: 5d:9f:82:47:b6:e6:85:0f:06:af:1f:f8:d2:78:f2:68:00:a7: 22:64:23:f5:a2:a4:89:b5:1f:85:a0:b8:9d:4e:8d:42:65:f5: d2:52:e3:ce:cb:a0:11:99:12:84:43:28:64:6e:e0:f4:49:bc: b1:0d:ba:75:71:0e:55:2b:71:91:cb:66:74:fa:10:7f:74:1c: 1c:bd:bc:49:2b:b9:0d:d8:ca:4b:7f:80:34:3d:c9:3b:b3:51: 4e:81:49:6b:12:ff:a0:9b:f3:b2:0d:a9:20:79:df:3a:90:6d: 60:ee:c1:f2:20:3c:3d:1d:ab:8d:2a:77:87:7a:9b:26:21:af: 8f:e5:e7:f8:fd:1b:e5:9d:98:b3:a9:2d:16:55:2e:78:93:59: 8e:a6:70:22:4b:b6:cc:8d:d2:5f:bd:a8:8e:9e:9a:4a:73:cf: 3d:d4:87:ff:e4:dd:d7:fe:ff:29:0c:a8:df:9c:7c:ee:ab:76: b2:28:4b:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmJhnP/powIy93pNlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQxNTE5MTAyOFoXDTI1MDcxNDE5MTAyOFowLzEtMCsGA1UEAxMk Zjc0NGRjMWItYTY4Yi00NzBjLWI2ZDUtODgyZjRkMDdmMTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDuSlafeKZ8kiR9OsO1/4vCD4sDxstBjAVPv TRRvC4VHK+bndb1VkV/feImnIM2VdL7lnvDfCALKStNMNO1OFeXkXe4VojX2zFNz k6VthFHLpNveMNmr7upuQKLH5ErmpcEB6PgmmICaQ9CVrZq3r1aJ8fT1ZNtYdSbo ndihxXDWOn+aAzokV4onpySi1Rzu67+YMNDAeavjYUt7oi6j71gLy9n7zdxO9+bZ 6Y2jxCse4XGfN9GYZeLvjBbF3DH2jk9gvnZXtYDXdRBwPvSMZzowDNnaw+XwzGh1 tSPYg8whHNTmSvhdASpTYlhccdlh1/VUIfWFAbR4lN91PExdJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnuwn24WKGeV8vG1D85NnROstEWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGJmZDM4ODktNjNkNS0z OTU5LTgwMDAtNTlmMzExY2QwZTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0QS6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAER9oS3Tt5VGoNcyiKJTPJNGJ0GccPhzP2EwW8YXgsV80gX5Mrugbnxl gamcdUjxxMhwNMTvXIQ1tAdYXp8isqb5mEP1Mdp+zV2fgke25oUPBq8f+NJ48mgA pyJkI/WipIm1H4WguJ1OjUJl9dJS487LoBGZEoRDKGRu4PRJvLENunVxDlUrcZHL ZnT6EH90HBy9vEkruQ3Yykt/gDQ9yTuzUU6BSWsS/6Cb87INqSB53zqQbWDuwfIg PD0dq40qd4d6myYhr4/l5/j9G+WdmLOpLRZVLniTWY6mcCJLtsyN0l+9qI6emkpz zz3Uh//k3df+/ykMqN+cfO6rdrIoS68= -----END CERTIFICATE-----Generated at Thu May 1 20:23:24 2025 by rpki-client