$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/40a445a0-c71d-3db6-9909-8be2612ff8f9.roa File: 40a445a0-c71d-3db6-9909-8be2612ff8f9.roa (raw, json) Hash identifier: fIbsCSutABTW+5/3pINzIvSdvJhSLcK4DKXM9N3O+zc= Subject key identifier: 7A:29:24:53:A1:A4:39:8B:68:89:C9:E2:42:EE:7E:78:9B:93:F2:03 Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F43285849C904F0828CA2E90A2B68EC40 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/40a445a0-c71d-3db6-9909-8be2612ff8f9.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 16509 IP address blocks: 209.114.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:f0:82:8c:a2:e9:0a:2b:68:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=e9aed8ff-f859-44e1-ab9c-c0ee0af6eaa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:92:89:83:ed:06:be:4d:5d:04:a8:35:ca:76: 70:3e:3c:87:4e:16:32:b6:ee:1b:2a:78:82:c6:b4: 4a:ef:5a:65:90:0b:d9:f4:fa:47:28:cf:d6:af:ab: 94:68:31:9c:3e:c7:d3:05:59:f2:65:ab:55:c0:74: de:70:1a:3f:80:09:a1:73:db:de:71:0f:90:d9:4e: dd:b9:64:83:73:b7:51:e2:3b:a6:96:d7:ab:83:28: cb:d9:ab:f2:56:b5:40:87:40:c2:eb:55:dc:77:66: 93:4a:29:03:14:87:b1:4d:7e:25:50:31:e1:4c:9e: 55:6c:e0:66:be:4f:6b:3f:ee:5c:95:94:bb:b1:10: 3f:a8:b7:66:9c:93:d5:23:cc:13:db:6e:97:e0:aa: 1c:94:40:27:b8:c1:9e:36:c6:fd:39:1f:1d:1b:89: ee:bf:1b:6a:50:9e:13:b3:d9:e6:fa:4d:b8:0b:21: a5:94:7e:b5:ef:52:0a:6c:fa:c7:0e:7b:bd:f2:76: 5b:2f:89:38:5f:d7:ef:1a:bb:27:10:c5:b1:c0:57: 7c:71:c8:74:7a:ee:46:bb:35:0e:ab:33:d7:71:ec: f6:cd:e4:3f:8f:75:e9:e6:47:2f:c5:95:0c:bb:fb: e9:e9:ca:22:16:7b:4f:1d:54:b1:10:65:6c:79:e2: da:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:29:24:53:A1:A4:39:8B:68:89:C9:E2:42:EE:7E:78:9B:93:F2:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/40a445a0-c71d-3db6-9909-8be2612ff8f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:27:fe:59:5a:0a:79:79:1b:65:88:2c:d3:66:86:d1:21:06: ca:78:fd:25:c1:95:9a:04:d1:e3:a8:b0:ef:d9:bf:f8:ae:eb: ef:c6:6d:01:97:4d:80:82:78:1f:77:ac:e9:26:1a:8e:71:05: f3:89:b7:2e:2f:29:98:70:c2:a8:8f:48:3d:1d:cf:dc:28:09: 50:b7:46:de:a1:2e:10:34:9b:15:77:82:c0:da:f5:32:f1:4b: 16:23:83:2c:1c:62:41:0a:92:93:cb:4b:a8:8e:23:7d:b8:6d: 78:42:69:c0:8d:8a:c6:9f:bb:ee:2c:4e:54:4c:b9:76:16:cc: 6f:b9:67:27:4e:2c:11:34:76:d6:21:f6:de:e9:43:7a:f9:91: 1d:75:23:06:71:14:af:a7:a1:e4:8b:78:1b:88:5a:f9:61:16: f5:49:19:b0:54:37:c5:59:87:cf:1c:31:c8:6f:3c:a7:93:d4: 5a:ac:ee:c0:dc:69:a5:ea:66:7e:d7:1a:5b:75:52:1c:d2:9c: 8c:e8:d3:cd:ba:94:fe:bf:c3:43:7e:21:61:82:40:a0:ab:49: e0:03:66:89:ce:cc:30:53:21:cf:44:6c:18:61:39:72:7b:29: a8:b3:9d:eb:97:97:37:90:07:c7:97:78:3f:44:d9:85:6a:c1: 77:ea:42:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBPCCjKLpCito7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk ZTlhZWQ4ZmYtZjg1OS00NGUxLWFiOWMtYzBlZTBhZjZlYWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ZKJg+0Gvk1dBKg1ynZwPjyHThYytu4bKniC xrRK71plkAvZ9PpHKM/Wr6uUaDGcPsfTBVnyZatVwHTecBo/gAmhc9vecQ+Q2U7d uWSDc7dR4jumltergyjL2avyVrVAh0DC61Xcd2aTSikDFIexTX4lUDHhTJ5VbOBm vk9rP+5clZS7sRA/qLdmnJPVI8wT226X4KoclEAnuMGeNsb9OR8dG4nuvxtqUJ4T s9nm+k24CyGllH6171IKbPrHDnu98nZbL4k4X9fvGrsnEMWxwFd8cch0eu5GuzUO qzPXcez2zeQ/j3Xp5kcvxZUMu/vp6coiFntPHVSxEGVseeLa0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHopJFOhpDmLaInJ4kLufnibk/IDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvNDBhNDQ1YTAtYzcxZC0z ZGI2LTk5MDktOGJlMjYxMmZmOGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XIDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsn/llaCnl5G2WILNNmhtEhBsp4/SXBlZoE0eOosO/Zv/iu6+/GbQGX TYCCeB93rOkmGo5xBfOJty4vKZhwwqiPSD0dz9woCVC3Rt6hLhA0mxV3gsDa9TLx SxYjgywcYkEKkpPLS6iOI324bXhCacCNisafu+4sTlRMuXYWzG+5ZydOLBE0dtYh 9t7pQ3r5kR11IwZxFK+noeSLeBuIWvlhFvVJGbBUN8VZh88cMchvPKeT1Fqs7sDc aaXqZn7XGlt1UhzSnIzo0826lP6/w0N+IWGCQKCrSeADZonOzDBTIc9EbBhhOXJ7 KaizneuXlzeQB8eXeD9E2YVqwXfqQhQ= -----END CERTIFICATE-----Generated at Sun May 11 10:38:29 2025 by rpki-client