$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/929941d8-be63-3be5-89d7-62a997289367.roa File: 929941d8-be63-3be5-89d7-62a997289367.roa (raw, json) Hash identifier: UZKyDNB2EkbW+iY4OhCvZ9Ff32Hj0/EXhPY5HlPCvFY= Subject key identifier: 15:55:34:B4:1E:88:E5:1F:9F:DF:E5:A5:72:D0:C3:B1:45:01:55:E6 Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F43285849B14A0E9CC5AF19C060CD1680 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/929941d8-be63-3be5-89d7-62a997289367.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 14618 IP address blocks: 208.71.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:0e:9c:c5:af:19:c0:60:cd:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=9051dc1d-b18d-41a8-9c73-a71a31c432ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8f:15:2b:be:b8:43:48:83:5d:e2:9f:f2:34: 23:07:78:8f:5e:f3:40:fd:37:33:fb:3a:a2:47:b5: 4c:d9:f9:73:77:ff:7c:76:a6:fe:82:e0:60:47:fc: a8:9a:d3:9b:f2:ef:41:6c:d5:64:68:1d:88:0b:8f: 45:ef:c6:18:c3:e6:28:79:e7:8b:d0:77:22:a2:3e: 22:0d:fb:bf:e8:00:92:66:51:1e:48:b3:88:b0:c0: 3f:88:dd:9e:a7:12:b7:ea:d8:18:e7:f3:02:da:f0: 0a:f5:96:2c:6d:0c:a6:7f:44:ed:b2:46:26:7a:bb: f6:43:da:07:10:95:ca:79:98:b8:46:9d:32:d4:53: 89:7a:8f:dd:62:1a:2a:09:cc:fa:7e:a5:17:ed:c4: 09:8e:34:ab:15:05:b4:e5:ea:15:a9:d5:96:19:1b: ea:d9:29:82:a5:5a:46:bd:8b:eb:07:59:0a:1d:1e: 9c:ac:8e:ff:7a:86:26:9e:ab:61:7e:cf:89:ee:0e: b1:8e:a9:95:51:98:1a:b2:01:11:f9:ef:76:c4:6f: 51:ea:b8:14:93:28:87:52:16:e5:0c:a7:15:74:aa: 55:a8:88:20:4f:ab:c6:b2:45:c1:23:ab:c2:4f:59: 4e:2c:e7:7a:2f:ba:f4:30:8b:27:07:c6:c1:df:fd: 9e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:55:34:B4:1E:88:E5:1F:9F:DF:E5:A5:72:D0:C3:B1:45:01:55:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/929941d8-be63-3be5-89d7-62a997289367.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:35:b0:79:cd:d1:c9:31:5b:e1:e0:d8:af:40:56:95:d9:d7: b4:c8:7d:ac:3f:3c:e1:4e:59:78:b9:45:4e:3f:ad:1b:f7:4b: 92:54:1e:a5:c1:c1:be:98:1f:4e:32:69:74:9e:3d:83:77:3e: 85:cf:13:6d:7e:26:92:99:c2:d2:11:34:8f:1e:2e:8a:f2:a7: 99:3d:49:4f:65:b9:d4:21:01:1d:ab:2d:1a:30:ce:0a:0c:34: ee:5e:f2:68:10:41:02:6c:96:94:d2:5b:db:8a:02:8f:ee:18: 60:be:f6:66:a1:10:19:9c:54:b8:f4:11:7e:77:9a:72:1e:74: c7:d4:6f:1b:2e:39:5b:c6:f7:9d:56:7b:a3:d5:38:c9:03:79: 6d:0e:c7:84:df:6d:24:82:b8:37:a5:fb:16:2e:d7:50:5f:88: d0:6e:e1:5c:91:ac:4e:d6:fb:1b:88:cd:46:fb:b4:a9:89:26: a6:98:28:fa:71:a9:a1:6d:3f:23:31:1e:76:fd:6f:e2:ed:d8: 17:8c:38:16:b5:4c:4e:32:71:1c:54:1c:6e:d9:36:cb:5f:c1: ac:28:d9:60:0f:a6:e8:34:6e:bb:0a:88:6a:91:31:d8:31:d0: be:af:52:8c:d4:9f:8c:59:3c:00:78:76:88:7a:45:db:ed:e7: 2a:19:04:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSg6cxa8ZwGDNFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk OTA1MWRjMWQtYjE4ZC00MWE4LTljNzMtYTcxYTMxYzQzMmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI8VK764Q0iDXeKf8jQjB3iPXvNA/Tcz+zqi R7VM2flzd/98dqb+guBgR/yomtOb8u9BbNVkaB2IC49F78YYw+YoeeeL0Hcioj4i Dfu/6ACSZlEeSLOIsMA/iN2epxK36tgY5/MC2vAK9ZYsbQymf0TtskYmerv2Q9oH EJXKeZi4Rp0y1FOJeo/dYhoqCcz6fqUX7cQJjjSrFQW05eoVqdWWGRvq2SmCpVpG vYvrB1kKHR6crI7/eoYmnqthfs+J7g6xjqmVUZgasgER+e92xG9R6rgUkyiHUhbl DKcVdKpVqIggT6vGskXBI6vCT1lOLOd6L7r0MIsnB8bB3/2e5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVVNLQeiOUfn9/lpXLQw7FFAVXmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvOTI5OTQxZDgtYmU2My0z YmU1LTg5ZDctNjJhOTk3Mjg5MzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EfyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC81sHnN0ckxW+Hg2K9AVpXZ17TIfaw/POFOWXi5RU4/rRv3S5JUHqXB wb6YH04yaXSePYN3PoXPE21+JpKZwtIRNI8eLoryp5k9SU9ludQhAR2rLRowzgoM NO5e8mgQQQJslpTSW9uKAo/uGGC+9mahEBmcVLj0EX53mnIedMfUbxsuOVvG951W e6PVOMkDeW0Ox4TfbSSCuDel+xYu11BfiNBu4VyRrE7W+xuIzUb7tKmJJqaYKPpx qaFtPyMxHnb9b+Lt2BeMOBa1TE4ycRxUHG7ZNstfwawo2WAPpug0brsKiGqRMdgx 0L6vUozUn4xZPAB4doh6Rdvt5yoZBHM= -----END CERTIFICATE-----Generated at Sun May 11 10:22:13 2025 by rpki-client