$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/8d515db2-e0fc-39cb-bc70-83f7d1744362.roa File: 8d515db2-e0fc-39cb-bc70-83f7d1744362.roa (raw, json) Hash identifier: Q2tX1LDVo6puEABiHi+Z2HfIg9H4wmgd9era5BzpunY= Subject key identifier: 85:3A:58:CD:FA:0E:54:E8:16:D4:CC:57:E4:9E:AB:E3:B7:16:78:D1 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F43285849B90EB24A7FF7C3A23772D600 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/8d515db2-e0fc-39cb-bc70-83f7d1744362.roa Signing time: Fri 02 May 2025 19:47:59 +0000 ROA not before: Fri 02 May 2025 19:47:59 +0000 ROA not after: Thu 31 Jul 2025 19:47:59 +0000 asID: 31898 IP address blocks: 209.178.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:0e:b2:4a:7f:f7:c3:a2:37:72:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: May 2 19:47:59 2025 GMT Not After : Jul 31 19:47:59 2025 GMT Subject: CN=189010cd-c750-4b2b-8f5b-c042cf16e565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0a:ae:e6:82:f1:7e:e0:7a:6e:60:46:1f:30: bf:8e:e1:50:42:91:2c:aa:74:6e:eb:f4:16:bf:92: 8f:35:46:bc:da:a9:e1:17:c1:95:04:e4:f9:f8:e2: 90:8c:66:4e:b2:2e:e1:65:3c:5a:7c:ca:05:54:93: b3:be:ff:f5:ac:e4:d9:19:65:bd:7b:74:92:ec:51: 23:16:8f:96:6d:86:40:2f:b6:15:a8:ab:5c:8d:1c: 74:8f:a4:38:54:d5:2e:4b:44:e7:5a:21:7e:fa:08: db:98:03:9c:4d:ab:7b:94:09:16:1f:fe:f7:8d:a3: 36:a3:99:91:de:db:5e:6a:37:31:a9:44:61:ea:17: 40:45:52:c6:0f:07:38:35:12:12:35:d7:14:a5:bd: 67:16:f2:c3:5b:84:25:22:c3:a0:95:24:ad:48:f0: 99:e2:56:f4:df:ea:d7:b9:2e:21:ca:a4:88:46:19: cf:52:d6:ed:2d:f4:4f:14:33:e6:9b:17:bc:10:00: cd:5f:1d:c6:e7:03:5b:70:16:cb:f9:34:62:68:a0: 36:00:33:56:8b:be:3d:3b:fe:2d:8d:d4:04:a6:b5: 14:fa:ff:10:a8:04:07:80:25:7a:b5:57:f7:2f:ef: 1c:6c:f2:26:4c:ea:dd:95:00:84:28:5a:ea:e8:bb: 0c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3A:58:CD:FA:0E:54:E8:16:D4:CC:57:E4:9E:AB:E3:B7:16:78:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/8d515db2-e0fc-39cb-bc70-83f7d1744362.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 209.178.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:a5:af:6d:a0:bf:eb:11:ee:bd:e9:16:72:1e:02:68:03:96: 18:e2:5e:e7:ec:65:fd:b0:77:4e:dd:aa:b0:33:33:a8:64:16: 6c:e5:95:ac:8a:29:5c:0d:eb:19:04:f7:90:fe:20:ee:2d:94: 9e:91:6d:1d:58:8e:41:1e:ba:ba:8b:11:00:bf:a8:5c:4d:bc: a4:f0:26:03:d8:31:a7:c2:d6:8d:7e:12:ea:98:e8:d8:ae:0c: f7:78:a6:d7:1e:18:df:9b:dc:39:db:6d:13:db:74:96:2c:25: 0b:ea:de:d7:aa:6b:45:8d:bf:bb:f2:bb:ed:8a:3e:2c:6e:c9: b1:c5:40:50:48:5a:fd:f5:6b:ff:93:54:0b:a6:5c:c8:4d:a5: c7:38:e2:c7:75:e4:c8:3c:5f:57:ef:f2:1c:bf:64:4c:b2:59: df:41:27:68:f9:85:de:5e:bd:b2:34:1c:c8:73:d0:35:73:b0: 8d:14:60:c8:c0:41:1f:1c:1e:07:36:2a:ca:a3:37:b1:e6:f0: f1:ac:a0:ab:65:24:51:d5:77:03:e5:98:91:98:de:f5:f6:f3: c5:4b:7c:5c:85:06:f4:d9:16:1f:bf:e1:af:92:c3:b1:91:3c: 09:fd:d2:af:8f:76:ea:0b:d7:e8:82:f9:a5:31:00:a3:f3:28: fc:f1:12:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5DrJKf/fDojdy1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDUwMjE5NDc1OVoXDTI1MDczMTE5NDc1OVowLzEtMCsGA1UEAxMk MTg5MDEwY2QtYzc1MC00YjJiLThmNWItYzA0MmNmMTZlNTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAqu5oLxfuB6bmBGHzC/juFQQpEsqnRu6/QW v5KPNUa82qnhF8GVBOT5+OKQjGZOsi7hZTxafMoFVJOzvv/1rOTZGWW9e3SS7FEj Fo+WbYZAL7YVqKtcjRx0j6Q4VNUuS0TnWiF++gjbmAOcTat7lAkWH/73jaM2o5mR 3tteajcxqURh6hdARVLGDwc4NRISNdcUpb1nFvLDW4QlIsOglSStSPCZ4lb03+rX uS4hyqSIRhnPUtbtLfRPFDPmmxe8EADNXx3G5wNbcBbL+TRiaKA2ADNWi749O/4t jdQEprUU+v8QqAQHgCV6tVf3L+8cbPImTOrdlQCEKFrq6LsMZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIU6WM36DlToFtTMV+Seq+O3FnjRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvOGQ1MTVkYjItZTBmYy0z OWNiLWJjNzAtODNmN2QxNzQ0MzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bLoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOlr22gv+sR7r3pFnIeAmgDlhjiXufsZf2wd07dqrAzM6hkFmzllayK KVwN6xkE95D+IO4tlJ6RbR1YjkEeurqLEQC/qFxNvKTwJgPYMafC1o1+EuqY6Niu DPd4ptceGN+b3DnbbRPbdJYsJQvq3teqa0WNv7vyu+2KPixuybHFQFBIWv31a/+T VAumXMhNpcc44sd15Mg8X1fv8hy/ZEyyWd9BJ2j5hd5evbI0HMhz0DVzsI0UYMjA QR8cHgc2KsqjN7Hm8PGsoKtlJFHVdwPlmJGY3vX288VLfFyFBvTZFh+/4a+Sw7GR PAn90q+PduoL1+iC+aUxAKPzKPzxEns= -----END CERTIFICATE-----Generated at Mon May 5 20:41:57 2025 by rpki-client