$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/301685f9-eb30-346d-a98c-6f6531412033.roa File: 301685f9-eb30-346d-a98c-6f6531412033.roa (raw, json) Hash identifier: IUy48ycRwEk/je9Wm0p+ifmYBfqiodTn9fWSTYl3E9c= Subject key identifier: 45:E1:20:1B:44:66:FD:6D:0D:0E:87:8A:BD:DA:D1:BE:8E:AA:06:13 Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F43285849C904F071C791E943769D0D80 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/301685f9-eb30-346d-a98c-6f6531412033.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 14618 IP address blocks: 209.114.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:f0:71:c7:91:e9:43:76:9d:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=05a1acc3-4157-4aa0-b0b3-c344f6736270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:da:00:55:36:d5:72:cd:e6:e8:c3:69:08:38: e2:d5:69:7f:6f:7e:ed:9d:86:33:d9:6a:af:df:1e: 2f:83:4e:5c:8a:4c:d3:a5:48:d8:2b:3f:75:43:7b: 55:61:a6:6d:7d:b6:27:0d:f5:f3:f3:75:30:55:01: 68:f5:13:13:d7:5f:27:da:8a:90:b3:75:27:b7:db: 8c:42:ac:21:0e:5f:c3:6c:a5:1e:1a:bb:e7:1a:1d: 14:13:5b:eb:ee:4c:fb:8e:34:7a:cf:12:2a:9b:24: 3c:e4:de:1b:52:9f:ce:e7:30:b1:6b:68:a9:36:d4: b7:8d:94:ed:54:7b:a3:70:9c:a8:25:bd:04:5e:76: 35:fc:f6:d8:6d:70:c8:57:86:13:e1:08:b4:b8:a5: a1:08:df:42:d1:92:23:88:84:65:dd:d5:ea:f5:41: 8f:49:80:26:b0:c9:c3:01:45:82:17:5c:d0:7f:d4: 80:f3:20:47:c5:e3:c5:5a:b6:49:a0:1d:30:8e:d3: 13:53:f9:8a:41:d5:81:85:20:d2:6e:88:b0:13:36: d3:7d:06:49:0c:cf:3e:48:c9:36:f6:28:73:9e:38: 22:e4:e5:e4:9f:f5:21:93:d0:04:12:6a:b0:32:61: 5f:a9:e9:00:28:a8:53:57:ec:62:25:a7:a7:91:77: 07:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E1:20:1B:44:66:FD:6D:0D:0E:87:8A:BD:DA:D1:BE:8E:AA:06:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/301685f9-eb30-346d-a98c-6f6531412033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:bb:75:8b:34:6b:21:ae:7d:22:34:a1:2c:2e:4d:a6:ff:cc: 63:88:47:5e:1c:d5:6c:5b:ad:7f:0b:5b:65:06:70:6a:76:57: d2:9e:40:3d:0e:f2:64:eb:df:fb:1c:09:4d:ae:b4:a2:e8:44: 0a:7a:78:a4:e4:25:f9:d5:da:83:3f:79:45:30:79:81:72:81: c2:2f:80:c0:10:ae:71:57:1f:3e:f0:b2:de:ae:74:92:ce:00: 82:bb:80:22:be:96:3f:c7:d9:2c:11:3b:03:47:99:98:6d:07: 49:d3:cf:5c:d8:f8:2b:63:60:b0:de:43:87:5b:af:5d:59:06: 63:71:dc:27:5f:66:be:ad:e0:66:49:fd:9f:53:95:06:e0:ca: 77:25:b8:2f:14:eb:43:67:cb:31:0d:9f:3b:65:c4:19:2a:1a: 8b:70:f4:6d:ff:88:be:27:ca:64:13:7b:43:e4:68:d3:c7:31: 99:75:4a:82:14:e0:b9:95:10:ac:f8:36:af:3e:1f:69:70:1d: 43:c7:51:b8:cd:3a:0c:dc:6f:06:50:0e:f2:e6:ed:0a:8e:f8: 1c:b8:67:b3:7f:3e:22:2c:06:1d:54:dc:04:7e:b4:e5:91:8e: c2:c2:a8:3d:b0:60:1f:13:a9:9c:f5:6d:2a:0f:2f:2e:28:e2: 53:2f:e0:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBPBxx5HpQ3adDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk MDVhMWFjYzMtNDE1Ny00YWEwLWIwYjMtYzM0NGY2NzM2MjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdoAVTbVcs3m6MNpCDji1Wl/b37tnYYz2Wqv 3x4vg05cikzTpUjYKz91Q3tVYaZtfbYnDfXz83UwVQFo9RMT118n2oqQs3Unt9uM QqwhDl/DbKUeGrvnGh0UE1vr7kz7jjR6zxIqmyQ85N4bUp/O5zCxa2ipNtS3jZTt VHujcJyoJb0EXnY1/PbYbXDIV4YT4Qi0uKWhCN9C0ZIjiIRl3dXq9UGPSYAmsMnD AUWCF1zQf9SA8yBHxePFWrZJoB0wjtMTU/mKQdWBhSDSboiwEzbTfQZJDM8+SMk2 9ihznjgi5OXkn/Uhk9AEEmqwMmFfqekAKKhTV+xiJaenkXcH0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXhIBtEZv1tDQ6Hir3a0b6OqgYTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvMzAxNjg1ZjktZWIzMC0z NDZkLWE5OGMtNmY2NTMxNDEyMDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XIDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL67dYs0ayGufSI0oSwuTab/zGOIR14c1WxbrX8LW2UGcGp2V9KeQD0O 8mTr3/scCU2utKLoRAp6eKTkJfnV2oM/eUUweYFygcIvgMAQrnFXHz7wst6udJLO AIK7gCK+lj/H2SwROwNHmZhtB0nTz1zY+CtjYLDeQ4dbr11ZBmNx3CdfZr6t4GZJ /Z9TlQbgyncluC8U60NnyzENnztlxBkqGotw9G3/iL4nymQTe0PkaNPHMZl1SoIU 4LmVEKz4Nq8+H2lwHUPHUbjNOgzcbwZQDvLm7QqO+By4Z7N/PiIsBh1U3AR+tOWR jsLCqD2wYB8TqZz1bSoPLy4o4lMv4NE= -----END CERTIFICATE-----Generated at Tue May 13 12:09:59 2025 by rpki-client