$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/a00e1f15-edb2-3c13-b022-338fbe6d0327.roa File: a00e1f15-edb2-3c13-b022-338fbe6d0327.roa (raw, json) Hash identifier: cPXVHtiZnEA1oYBYwnuGjMz3YJJdygWNA7GWmRSq7IU= Subject key identifier: 35:0C:14:C6:ED:F2:4C:DE:C9:7A:68:81:6F:A8:7D:FF:87:9B:C5:6B Certificate issuer: /CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Certificate serial: 010D0C9F4328584921840CCEB4F625C3CA0D8740 Authority key identifier: 60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/a00e1f15-edb2-3c13-b022-338fbe6d0327.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 8075 IP address blocks: 209.143.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:0c:ce:b4:f6:25:c3:ca:0d:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=c91c9811-6c02-48c1-9f5b-a73310d4345f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:66:1e:58:ea:ec:cb:3e:39:69:aa:a4:aa:57: a4:24:9e:2d:de:f8:58:71:13:29:10:6c:ea:1f:b6: 03:85:a1:9d:8e:3d:96:f4:ca:eb:99:79:18:26:c2: 3b:cc:f4:1a:cc:23:55:a9:f9:cb:95:1f:29:23:ea: 55:02:cb:49:9a:eb:6b:41:5b:45:26:33:3c:61:7b: c1:d3:e7:d3:e6:bb:04:3d:c0:da:cc:b4:65:71:c8: 59:e5:b3:61:35:5b:70:a3:d7:f6:3e:96:77:ac:d5: f8:7d:52:50:e5:b1:a7:ab:e1:32:09:f1:fc:af:cc: fd:7b:57:37:5e:74:5a:2b:e2:cc:53:27:05:33:dc: 6b:3f:69:01:2a:87:11:42:11:01:11:f5:28:75:02: 89:c5:1d:ea:88:46:61:69:50:56:75:55:ae:51:ac: 9b:af:62:05:a7:09:68:a2:0b:c0:cc:4a:96:43:05: 71:1a:d3:f9:41:aa:b8:71:19:c1:b2:b6:36:b1:17: 44:9c:7e:10:61:bb:82:60:73:ac:ad:a5:55:2c:b7: 54:e1:57:ea:e1:be:ed:40:d0:9a:e3:3d:ed:2b:49: f9:6c:6e:6c:c9:01:ba:33:c9:a7:84:27:a2:94:ab: 12:b0:d8:21:50:a5:01:29:d9:af:14:10:3d:b7:d0: 05:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0C:14:C6:ED:F2:4C:DE:C9:7A:68:81:6F:A8:7D:FF:87:9B:C5:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/a00e1f15-edb2-3c13-b022-338fbe6d0327.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl X509v3 Authority Key Identifier: keyid:60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer sbgp-ipAddrBlock: critical IPv4: 209.143.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:13:c0:e3:9f:a9:75:8c:55:0d:d7:f0:e3:42:e3:64:23:ff: 87:a5:b3:b2:43:47:9d:11:0d:4f:e3:28:67:34:1b:c4:32:05: 41:39:56:db:d4:79:db:ec:3e:3c:8a:59:31:80:53:71:32:30: 16:19:a6:f3:21:d0:fe:b4:f2:b8:26:47:b0:80:be:1d:22:68: 4e:6a:27:45:97:72:5b:17:2a:8f:cc:42:d3:00:59:e6:fc:1f: 87:8a:e3:d5:d8:b5:37:f2:da:27:14:a4:8f:3c:28:6a:55:64: e2:6c:f1:ec:4a:b4:d3:21:15:cb:03:b7:ae:27:66:5e:ae:dd: 75:e7:da:26:d7:0e:63:e5:36:32:1e:26:7c:95:d2:91:50:0b: 94:f7:ea:2d:60:8b:28:ea:89:ac:f1:61:24:71:06:4b:82:8e: 75:59:fa:a2:b8:12:7f:e2:c7:89:1e:e0:35:5e:f0:b0:fd:18: 5e:7c:d3:d5:a4:a8:9f:25:e1:26:b0:43:c1:81:c6:96:84:29: 5c:81:81:90:21:a1:d9:17:c7:9e:20:99:cc:d8:f2:f9:a9:20: 13:9c:43:39:9a:22:48:38:37:c7:7b:4f:d1:d8:7e:08:d1:27: 2f:46:01:20:66:05:fc:69:2c:64:33:0e:a8:5e:70:6e:e7:1e: 7d:94:e2:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhAzOtPYlw8oNh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwZjRhNGEtOGYzMS00N2Y4LTg1MjktMWVjYjExYTRl NjYzMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk YzkxYzk4MTEtNmMwMi00OGMxLTlmNWItYTczMzEwZDQzNDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2YeWOrsyz45aaqkqlekJJ4t3vhYcRMpEGzq H7YDhaGdjj2W9MrrmXkYJsI7zPQazCNVqfnLlR8pI+pVAstJmutrQVtFJjM8YXvB 0+fT5rsEPcDazLRlcchZ5bNhNVtwo9f2PpZ3rNX4fVJQ5bGnq+EyCfH8r8z9e1c3 XnRaK+LMUycFM9xrP2kBKocRQhEBEfUodQKJxR3qiEZhaVBWdVWuUaybr2IFpwlo ogvAzEqWQwVxGtP5Qaq4cRnBsrY2sRdEnH4QYbuCYHOsraVVLLdU4Vfq4b7tQNCa 4z3tK0n5bG5syQG6M8mnhCeilKsSsNghUKUBKdmvFBA9t9AFfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUMFMbt8kzeyXpogW+off+Hm8VrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBm NGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNiMTFhNGU2NjMvYTAwZTFmMTUtZWRiMi0z YzEzLWIwMjItMzM4ZmJlNmQwMzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDQwZjRhNGEtOGYzMS00N2Y4LTg1 MjktMWVjYjExYTRlNjYzLzA0MGY0YTRhLThmMzEtNDdmOC04NTI5LTFlY2IxMWE0 ZTY2My5jcmwwHwYDVR0jBBgwFoAUYBryhPLVze+SLIFZvhWKznYxnRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBmNGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNi MTFhNGU2NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Y/SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwTwOOfqXWMVQ3X8ONC42Qj/4els7JDR50RDU/jKGc0G8QyBUE5VtvU edvsPjyKWTGAU3EyMBYZpvMh0P608rgmR7CAvh0iaE5qJ0WXclsXKo/MQtMAWeb8 H4eK49XYtTfy2icUpI88KGpVZOJs8exKtNMhFcsDt64nZl6u3XXn2ibXDmPlNjIe JnyV0pFQC5T36i1giyjqiazxYSRxBkuCjnVZ+qK4En/ix4ke4DVe8LD9GF5809Wk qJ8l4SawQ8GBxpaEKVyBgZAhodkXx54gmczY8vmpIBOcQzmaIkg4N8d7T9HYfgjR Jy9GASBmBfxpLGQzDqhecG7nHn2U4pw= -----END CERTIFICATE-----Generated at Sat May 10 10:23:08 2025 by rpki-client