$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/b168a7d9-fee4-3f17-986b-6bb7bbfc5f7c.roa File: b168a7d9-fee4-3f17-986b-6bb7bbfc5f7c.roa (raw, json) Hash identifier: x63qTbz8f9HWDqddxZa3x55VpKCNTQ6lcsHE0SEaFXs= Subject key identifier: 2D:BE:F3:D0:19:E8:DF:01:6C:31:83:50:93:4D:D2:B4:8C:12:7D:46 Certificate issuer: /CN=f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46 Certificate serial: 010D0C9F432858491D717C3A69188E2883CE78A0 Authority key identifier: 0D:44:BD:AB:7C:21:FB:0B:72:23:7C:72:55:45:47:A7:E9:EF:40:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/b168a7d9-fee4-3f17-986b-6bb7bbfc5f7c.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 142.9.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:7c:3a:69:18:8e:28:83:ce:78:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=7ac0e2c3-fd55-4c02-8872-57a06735f89a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f3:27:a0:d0:ca:76:fa:f2:4f:04:9a:58:aa: 83:61:2c:8c:b3:9a:ab:70:1d:ca:7d:9e:d0:f5:67: 29:eb:de:75:bb:ce:30:e4:b6:dc:da:ca:8d:cd:29: 5f:6b:72:b1:2e:cf:89:9d:84:df:0d:58:46:78:c0: 7c:a4:26:71:6e:9e:f3:c4:d3:c8:fd:27:45:2d:16: f5:ca:39:a9:f9:c2:1a:65:e2:52:0f:83:93:f9:ea: 3a:9c:98:38:b6:ea:6f:1f:bb:5d:c4:1b:40:0e:b6: 9a:d8:1b:20:74:74:3d:e1:56:ec:0d:89:2e:e7:5a: b5:1a:11:01:fd:0f:16:30:bd:ab:3f:86:10:ee:66: 75:62:ca:58:f9:47:53:5d:05:1c:da:37:43:19:52: 03:4a:52:1a:87:64:4c:5c:a5:e4:1a:b5:4b:56:61: fc:b0:f8:8d:a8:4e:df:75:cd:39:df:3b:09:ff:21: 00:f8:4e:17:2e:e2:bc:59:5f:c2:54:bf:0d:1f:dc: 00:20:b8:1b:39:ae:0b:9a:ac:df:be:46:3f:b1:51: ac:1b:b1:36:cf:7e:82:94:28:4a:94:eb:6d:d0:6a: b2:79:63:0e:f1:a7:2f:2e:1b:9d:67:b9:44:c1:46: 1d:88:90:03:06:d5:77:ca:1b:9d:0c:25:7a:26:52: 25:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BE:F3:D0:19:E8:DF:01:6C:31:83:50:93:4D:D2:B4:8C:12:7D:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/b168a7d9-fee4-3f17-986b-6bb7bbfc5f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.crl X509v3 Authority Key Identifier: keyid:0D:44:BD:AB:7C:21:FB:0B:72:23:7C:72:55:45:47:A7:E9:EF:40:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.cer sbgp-ipAddrBlock: critical IPv4: 142.9.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ef:67:ec:bf:95:8f:aa:e2:c5:41:df:0f:93:f8:ac:df:37: 14:72:5e:54:61:75:a9:7b:75:d5:9a:d9:20:57:f1:15:9e:af: 9d:9e:48:d5:3c:99:e8:58:32:80:4e:8a:73:2b:c8:41:10:09: 2f:92:25:e3:ce:c2:96:0b:fb:4a:7b:a0:1b:0f:0f:e1:6a:37: 68:a4:db:b4:53:06:1d:6f:e7:56:24:a5:a6:a1:d6:e4:76:e8: 61:82:3d:da:2c:94:54:c9:30:f2:3e:5f:11:38:0d:50:eb:18: 95:c3:fc:b7:7e:37:37:30:f2:e0:3f:9d:44:68:77:80:2c:d0: 89:31:a6:25:e6:ee:64:88:79:65:e1:f5:e3:84:7a:28:eb:31: 2e:a5:22:c1:83:2f:11:19:24:ae:1d:6b:1e:ea:1f:50:f7:f3: 6d:10:a1:bd:14:4f:05:07:d1:27:b5:20:d9:e9:f8:b6:49:22: 5a:10:9c:81:e3:19:51:00:6e:01:a3:43:e0:35:94:e1:40:33: f4:fb:f8:50:b0:b7:ee:d8:63:72:fa:11:67:75:af:27:50:96: 52:1a:ab:8e:a1:05:76:15:c6:a8:63:f6:94:0e:8e:14:44:d9: 54:5d:0c:a7:1d:56:1a:8b:51:c8:e1:8e:25:c1:b3:35:15:c4: 68:75:56:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcXw6aRiOKIPOeKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjc4YzFhN2QtMWNkYi00ZTYzLWJhMzgtYWM1MGQxYTRk ZDQ2MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk N2FjMGUyYzMtZmQ1NS00YzAyLTg4NzItNTdhMDY3MzVmODlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPMnoNDKdvryTwSaWKqDYSyMs5qrcB3KfZ7Q 9Wcp6951u84w5Lbc2sqNzSlfa3KxLs+JnYTfDVhGeMB8pCZxbp7zxNPI/SdFLRb1 yjmp+cIaZeJSD4OT+eo6nJg4tupvH7tdxBtADraa2BsgdHQ94VbsDYku51q1GhEB /Q8WML2rP4YQ7mZ1YspY+UdTXQUc2jdDGVIDSlIah2RMXKXkGrVLVmH8sPiNqE7f dc053zsJ/yEA+E4XLuK8WV/CVL8NH9wAILgbOa4LmqzfvkY/sVGsG7E2z36ClChK lOtt0GqyeWMO8acvLhudZ7lEwUYdiJADBtV3yhudDCV6JlIlsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2+89AZ6N8BbDGDUJNN0rSMEn1GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNzhj MWE3ZC0xY2RiLTRlNjMtYmEzOC1hYzUwZDFhNGRkNDYvYjE2OGE3ZDktZmVlNC0z ZjE3LTk4NmItNmJiN2JiZmM1ZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjc4YzFhN2QtMWNkYi00ZTYzLWJh MzgtYWM1MGQxYTRkZDQ2L2Y3OGMxYTdkLTFjZGItNGU2My1iYTM4LWFjNTBkMWE0 ZGQ0Ni5jcmwwHwYDVR0jBBgwFoAUDUS9q3wh+wtyI3xyVUVHp+nvQKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNzhjMWE3ZC0xY2RiLTRlNjMtYmEzOC1hYzUw ZDFhNGRkNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjgn/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7vZ+y/lY+q4sVB3w+T+KzfNxRyXlRhdal7ddWa2SBX8RWer52eSNU8 mehYMoBOinMryEEQCS+SJePOwpYL+0p7oBsPD+FqN2ik27RTBh1v51Ykpaah1uR2 6GGCPdoslFTJMPI+XxE4DVDrGJXD/Ld+Nzcw8uA/nURod4As0IkxpiXm7mSIeWXh 9eOEeijrMS6lIsGDLxEZJK4dax7qH1D3820Qob0UTwUH0Se1INnp+LZJIloQnIHj GVEAbgGjQ+A1lOFAM/T7+FCwt+7YY3L6EWd1rydQllIaq46hBXYVxqhj9pQOjhRE 2VRdDKcdVhqLUcjhjiXBszUVxGh1Vi8= -----END CERTIFICATE-----Generated at Mon May 5 11:36:42 2025 by rpki-client