$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f/e3e497f1-f8f5-352b-996e-ccd1a70e9442.roa File: e3e497f1-f8f5-352b-996e-ccd1a70e9442.roa (raw, json) Hash identifier: QS0DVerXH9GyjSrbRJUike0lfhx8ioRJc8hXHS0C5wY= Subject key identifier: F0:A3:E3:A0:EC:FC:26:44:E4:FE:C5:FC:A8:ED:86:9A:F3:20:F9:1C Certificate issuer: /CN=a8b4c7d3-7599-471e-a1ea-6de7b1582c5f Certificate serial: 010D0C9F432858492CAE9CE66151483880106F80 Authority key identifier: B1:A7:B0:B8:45:1E:15:59:C1:1E:B0:2A:5D:77:5D:C5:3B:24:EE:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f/e3e497f1-f8f5-352b-996e-ccd1a70e9442.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 400914 IP address blocks: 209.178.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:9c:e6:61:51:48:38:80:10:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b4c7d3-7599-471e-a1ea-6de7b1582c5f Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=a0ff0d21-9fc3-4f11-a1cd-8bf3802a6870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:96:53:49:45:e4:29:68:6d:c5:f3:e5:ae:5d: 6c:81:99:ab:01:58:fc:52:3d:3f:8c:e1:d3:d7:4f: 96:95:d7:a6:33:a8:f5:bb:46:0a:e2:6a:d0:a5:07: 3c:00:92:af:60:63:d0:a2:85:04:d1:a1:8a:cc:b5: 03:b3:b0:43:aa:92:ff:04:16:eb:58:f7:a5:2e:28: 1c:20:bb:23:ad:7e:8d:c8:4b:48:51:bf:7f:6a:59: 84:87:67:30:ea:27:57:05:f2:bc:5e:86:40:88:45: 47:5d:cd:b1:e4:d3:c3:9a:d4:80:e2:2d:94:00:d0: 17:4a:53:d9:bc:5d:ae:60:05:9a:22:81:6a:64:3c: 1f:1c:03:db:34:68:31:94:8f:f7:04:91:40:5c:81: c2:fe:a8:70:f9:14:41:a0:e1:09:41:71:9a:af:bb: 2a:45:04:ad:3b:ca:77:b0:c6:2b:25:da:ac:a2:5b: 59:68:67:8e:2b:86:2f:3d:f5:7f:ec:d0:87:a6:22: 88:74:a3:2b:62:a7:4c:eb:ef:d2:83:4d:cb:bd:ad: 81:90:73:5b:b3:42:93:59:bb:5c:92:cc:73:40:8e: 62:76:09:8f:e8:88:05:87:6a:ab:8e:ea:4e:cc:9a: c5:68:90:83:af:ea:c0:d2:30:b8:b6:fd:eb:74:0d: e3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A3:E3:A0:EC:FC:26:44:E4:FE:C5:FC:A8:ED:86:9A:F3:20:F9:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f/e3e497f1-f8f5-352b-996e-ccd1a70e9442.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.crl X509v3 Authority Key Identifier: keyid:B1:A7:B0:B8:45:1E:15:59:C1:1E:B0:2A:5D:77:5D:C5:3B:24:EE:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.cer sbgp-ipAddrBlock: critical IPv4: 209.178.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:e1:2f:a3:d0:10:99:8f:31:c7:34:0c:b8:55:c1:59:25:fe: 7b:75:5a:c4:36:02:8c:74:d8:4a:e1:c4:67:53:a0:c7:24:b0: 7f:05:ac:d8:00:ef:c1:69:78:60:1e:d2:80:08:45:03:a9:b8: 33:65:30:f9:c3:7d:32:d7:77:24:06:b1:ce:64:b9:8f:c4:21: 21:fd:3b:a8:f0:cd:33:99:78:cf:78:47:ee:62:60:be:fd:a9: cf:70:bb:17:fb:23:e6:17:07:e6:20:1d:88:46:03:9d:ec:f2: 60:c8:a4:9e:38:d7:f1:89:37:7e:9e:f0:7c:5c:ca:0e:34:ed: 6a:d5:bf:c4:00:ef:dd:86:d2:d8:de:4f:44:7e:ba:00:a6:76: d0:89:54:2e:de:22:26:a8:8a:9c:e7:80:71:d1:57:ff:cf:01: 11:cf:36:12:79:ab:ba:a6:68:4d:08:fe:12:38:c5:c2:24:23: 00:7b:3f:17:26:f0:31:f6:a6:b5:94:a2:48:b6:02:cb:f2:04: a1:f9:29:ae:97:ec:22:1e:f1:8a:fe:00:25:8f:e5:5e:19:7f: ba:06:68:7f:c5:1a:e1:c4:ed:2b:08:eb:16:cd:e9:55:0a:94: 21:ae:ee:45:61:7d:96:44:f5:03:62:0e:3b:0c:1e:8a:26:0f: d3:71:da:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrpzmYVFIOIAQb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThiNGM3ZDMtNzU5OS00NzFlLWExZWEtNmRlN2IxNTgy YzVmMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YTBmZjBkMjEtOWZjMy00ZjExLWExY2QtOGJmMzgwMmE2ODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipZTSUXkKWhtxfPlrl1sgZmrAVj8Uj0/jOHT 10+WldemM6j1u0YK4mrQpQc8AJKvYGPQooUE0aGKzLUDs7BDqpL/BBbrWPelLigc ILsjrX6NyEtIUb9/almEh2cw6idXBfK8XoZAiEVHXc2x5NPDmtSA4i2UANAXSlPZ vF2uYAWaIoFqZDwfHAPbNGgxlI/3BJFAXIHC/qhw+RRBoOEJQXGar7sqRQStO8p3 sMYrJdqsoltZaGeOK4YvPfV/7NCHpiKIdKMrYqdM6+/Sg03Lva2BkHNbs0KTWbtc ksxzQI5idgmP6IgFh2qrjupOzJrFaJCDr+rA0jC4tv3rdA3jnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCj46Ds/CZE5P7F/KjthprzIPkcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hOGI0 YzdkMy03NTk5LTQ3MWUtYTFlYS02ZGU3YjE1ODJjNWYvZTNlNDk3ZjEtZjhmNS0z NTJiLTk5NmUtY2NkMWE3MGU5NDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYThiNGM3ZDMtNzU5OS00NzFlLWEx ZWEtNmRlN2IxNTgyYzVmL2E4YjRjN2QzLTc1OTktNDcxZS1hMWVhLTZkZTdiMTU4 MmM1Zi5jcmwwHwYDVR0jBBgwFoAUsaewuEUeFVnBHrAqXXddxTsk7skwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hOGI0YzdkMy03NTk5LTQ3MWUtYTFlYS02ZGU3 YjE1ODJjNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bL2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjhL6PQEJmPMcc0DLhVwVkl/nt1WsQ2Aox02ErhxGdToMcksH8FrNgA 78FpeGAe0oAIRQOpuDNlMPnDfTLXdyQGsc5kuY/EISH9O6jwzTOZeM94R+5iYL79 qc9wuxf7I+YXB+YgHYhGA53s8mDIpJ441/GJN36e8Hxcyg407WrVv8QA792G0tje T0R+ugCmdtCJVC7eIiaoipzngHHRV//PARHPNhJ5q7qmaE0I/hI4xcIkIwB7Pxcm 8DH2prWUoki2AsvyBKH5Ka6X7CIe8Yr+ACWP5V4Zf7oGaH/FGuHE7SsI6xbN6VUK lCGu7kVhfZZE9QNiDjsMHoomD9Nx2jk= -----END CERTIFICATE-----Generated at Tue May 6 03:05:44 2025 by rpki-client