$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/40d3479d-bb5f-3869-8420-fee0194d4e25.roa File: 40d3479d-bb5f-3869-8420-fee0194d4e25.roa (raw, json) Hash identifier: wXOsDQQE5QSa7/+Bcvoj3WoWr85jeCK8oKdJyk4mVRI= Subject key identifier: A6:2D:3C:5A:D5:C7:BA:9C:4A:97:73:06:7F:E9:24:58:69:EF:8F:CC Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F432858498CFF07ED5B3F599C134B0500 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/40d3479d-bb5f-3869-8420-fee0194d4e25.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 30610 IP address blocks: 209.166.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:07:ed:5b:3f:59:9c:13:4b:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=6ea15f9a-0853-432e-b65c-7b147453ad01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cb:2c:5e:2a:c3:d2:17:ba:7b:5f:7c:3c:6b: e7:2c:e6:54:df:57:b0:1c:84:72:56:8e:b8:81:b2: 60:99:5d:fb:15:af:fa:d7:55:79:40:2c:bc:c8:c9: 51:00:3e:15:d4:0f:88:6e:e5:eb:f2:d6:4f:7e:62: 4f:f0:fd:58:6f:8d:1e:5a:0f:35:4b:25:52:aa:f9: 18:8a:3f:4f:8b:46:6f:1f:bd:d3:15:19:ad:2c:65: fa:57:c7:31:76:1f:a3:6e:fe:d3:72:f8:d0:ce:90: 69:a7:f3:01:1d:41:02:04:71:59:62:7e:72:79:7c: bd:d4:63:47:60:b0:41:79:dd:db:a3:42:12:b6:f3: 71:77:6f:87:27:f1:a5:39:23:6b:af:14:a9:5a:e7: ad:e0:2a:4c:d4:9e:88:28:3a:c2:c2:71:c5:b3:c4: 65:17:36:b6:b4:48:48:a4:35:c2:e8:55:24:94:89: 10:10:a3:09:49:19:d5:bb:9f:b2:33:8f:02:e0:20: ea:c0:57:44:20:05:b7:58:ff:a3:5d:7e:c6:0e:fd: 86:1a:ce:f1:d1:e7:a0:e6:1f:fd:25:15:cc:0f:ff: 1d:ca:de:10:f9:10:94:11:87:a8:08:25:e4:03:f0: 03:3b:bf:45:d5:4a:da:1e:3d:58:eb:d4:63:d5:38: b7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:2D:3C:5A:D5:C7:BA:9C:4A:97:73:06:7F:E9:24:58:69:EF:8F:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/40d3479d-bb5f-3869-8420-fee0194d4e25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.166.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:cf:da:00:23:76:35:62:29:a7:cd:0f:b5:ff:91:80:19:89: 66:b3:fb:b9:3f:27:95:ac:dc:3f:c5:f6:29:e6:1a:42:c6:24: 29:12:dd:40:f3:57:f2:34:f5:cc:63:ae:ab:a7:0e:9d:a3:5e: 2c:85:79:92:20:1e:58:c0:29:93:14:b6:a5:ee:54:38:80:27: 22:99:61:8e:97:bd:02:55:56:b2:92:55:66:80:e7:16:ce:ed: ce:59:45:72:da:2e:00:f2:78:89:0d:36:7e:45:99:33:d8:ba: f2:f3:5c:37:e4:64:11:a6:37:33:6d:42:f4:6c:be:cf:cc:75: 50:5f:8f:9c:ef:22:44:5a:70:83:a5:44:dd:13:b0:5c:89:4b: 18:36:84:66:8b:d1:e6:ad:be:21:6d:41:02:39:a4:c9:bb:8c: d4:fb:cb:f3:2d:63:f4:4a:e8:0d:80:72:ff:3e:12:7e:a9:80: d0:42:fe:36:98:93:7b:49:1d:95:4a:c0:50:88:b2:cd:52:1e: b4:a3:32:f3:28:88:c8:cd:f8:3e:b2:5d:f5:77:2c:8e:24:0d: f3:51:7f:72:c9:ca:dc:b9:26:00:bb:8f:1f:51:b7:16:5f:c2: 7c:a1:77:27:2c:05:a0:83:95:5d:97:f9:eb:ca:6e:9d:04:45: c2:68:dd:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/wftWz9ZnBNLBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk NmVhMTVmOWEtMDg1My00MzJlLWI2NWMtN2IxNDc0NTNhZDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsssXirD0he6e198PGvnLOZU31ewHIRyVo64 gbJgmV37Fa/611V5QCy8yMlRAD4V1A+IbuXr8tZPfmJP8P1Yb40eWg81SyVSqvkY ij9Pi0ZvH73TFRmtLGX6V8cxdh+jbv7TcvjQzpBpp/MBHUECBHFZYn5yeXy91GNH YLBBed3bo0IStvNxd2+HJ/GlOSNrrxSpWuet4CpM1J6IKDrCwnHFs8RlFza2tEhI pDXC6FUklIkQEKMJSRnVu5+yM48C4CDqwFdEIAW3WP+jXX7GDv2GGs7x0eeg5h/9 JRXMD/8dyt4Q+RCUEYeoCCXkA/ADO79F1UraHj1Y69Rj1Ti34QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYtPFrVx7qcSpdzBn/pJFhp74/MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvNDBkMzQ3OWQtYmI1Zi0z ODY5LTg0MjAtZmVlMDE5NGQ0ZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aa/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzP2gAjdjViKafND7X/kYAZiWaz+7k/J5Ws3D/F9inmGkLGJCkS3UDz V/I09cxjrqunDp2jXiyFeZIgHljAKZMUtqXuVDiAJyKZYY6XvQJVVrKSVWaA5xbO 7c5ZRXLaLgDyeIkNNn5FmTPYuvLzXDfkZBGmNzNtQvRsvs/MdVBfj5zvIkRacIOl RN0TsFyJSxg2hGaL0eatviFtQQI5pMm7jNT7y/MtY/RK6A2Acv8+En6pgNBC/jaY k3tJHZVKwFCIss1SHrSjMvMoiMjN+D6yXfV3LI4kDfNRf3LJyty5JgC7jx9RtxZf wnyhdycsBaCDlV2X+evKbp0ERcJo3Tk= -----END CERTIFICATE-----Generated at Sun May 11 04:08:22 2025 by rpki-client