$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ab8e301-8ff3-38c7-ac4f-9c49cd02e1ad.roa File: 2ab8e301-8ff3-38c7-ac4f-9c49cd02e1ad.roa (raw, json) Hash identifier: sqAK1ZFfpqCub+hsMX8PPU7Ai9gF61qMMzH6n22XSx8= Subject key identifier: EA:E6:6A:98:11:55:5B:25:EA:D3:11:82:FB:D8:19:FE:C4:D2:C6:C8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858490E16CECB59D9988DD3B3E480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ab8e301-8ff3-38c7-ac4f-9c49cd02e1ad.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 7342 IP address blocks: 209.131.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:ce:cb:59:d9:98:8d:d3:b3:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=5b287757-b639-43d9-93be-d50203679ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:20:35:76:86:ed:07:fa:1f:06:b4:d9:c3:38: 2e:f2:e2:60:fc:eb:a3:36:27:38:51:a2:8c:b6:82: ad:16:82:a2:73:7e:80:75:a0:72:96:cb:c6:13:62: 00:8f:c6:75:2d:7b:65:bb:4e:93:e2:cf:e5:bd:0e: d7:17:c7:24:08:4b:df:7b:f5:b9:ae:1e:24:1e:35: fe:4c:45:82:ff:43:be:00:05:4a:d8:3b:e0:19:08: 0f:3f:d2:e4:b7:a6:19:99:55:9f:3c:65:86:1a:1b: e2:5f:09:5b:fe:d4:6b:15:6a:69:8b:de:ce:b2:bd: 95:06:49:d2:2d:e4:b1:fd:fe:84:51:98:f1:4a:eb: 00:70:82:66:51:03:a9:38:79:91:66:42:02:16:58: 01:38:7f:1e:3d:7d:94:ba:f0:20:25:40:ca:05:f6: 8c:5c:8c:5b:15:7e:69:fc:0d:7d:da:79:33:7b:f9: 41:0f:6a:3c:af:ac:25:64:3e:9e:49:10:f0:31:89: f1:cf:e1:8a:05:16:12:ea:ff:fb:9b:c2:41:93:48: aa:05:cb:13:03:c6:63:7d:5f:f5:3d:85:7b:25:b6: 8a:a9:dc:22:2d:b3:5c:ec:0b:44:4a:74:be:46:8a: 79:1c:73:58:9f:95:9e:73:ab:59:7c:da:cf:04:78: d3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E6:6A:98:11:55:5B:25:EA:D3:11:82:FB:D8:19:FE:C4:D2:C6:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ab8e301-8ff3-38c7-ac4f-9c49cd02e1ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:33:4f:b9:5c:18:a3:83:d3:e1:a8:6a:34:8e:46:21:f7:e2: 4a:fc:5a:48:ab:70:ac:0c:60:fb:2d:ab:1e:0a:1f:5b:5b:b9: 66:07:e6:b9:e2:5c:1d:7e:55:39:c3:c4:c7:76:27:05:09:34: 90:bf:1b:14:9b:4c:22:31:23:2a:5f:b4:92:39:1e:e7:b8:18: 4a:34:73:6b:ec:ee:cc:f9:51:da:77:ce:69:96:cf:ea:74:18: 9f:6a:99:7e:18:c6:5b:14:b2:17:e0:45:9b:df:d6:16:cd:e2: 5d:f3:5f:b8:ca:89:00:7d:e8:c9:00:17:1d:0f:ce:dd:37:54: aa:d4:0a:ea:a5:95:68:fa:42:c1:01:cf:82:d7:a2:70:c3:e0: e8:3c:8d:37:ba:2b:74:1a:a2:07:01:b0:a2:94:d8:28:6d:aa: 75:8c:99:0c:81:ef:ad:a3:52:b8:2a:ce:30:fb:0c:4b:49:1d: 16:40:c2:d5:38:5f:c2:6b:32:ea:be:f2:c3:9d:bb:b0:98:a0: 6a:f3:2f:fe:23:13:f1:eb:34:f4:4a:d7:42:13:12:ac:7a:6a: d7:b0:ff:1e:fc:38:03:18:67:e6:a4:88:5f:e2:f0:db:7d:fa: 03:f7:9a:8f:d6:8c:6e:a6:7e:b4:af:b4:1d:a5:3c:18:11:e8: 0c:e0:0e:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFs7LWdmYjdOz5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk NWIyODc3NTctYjYzOS00M2Q5LTkzYmUtZDUwMjAzNjc5ZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSA1dobtB/ofBrTZwzgu8uJg/OujNic4UaKM toKtFoKic36AdaBylsvGE2IAj8Z1LXtlu06T4s/lvQ7XF8ckCEvfe/W5rh4kHjX+ TEWC/0O+AAVK2DvgGQgPP9Lkt6YZmVWfPGWGGhviXwlb/tRrFWppi97Osr2VBknS LeSx/f6EUZjxSusAcIJmUQOpOHmRZkICFlgBOH8ePX2UuvAgJUDKBfaMXIxbFX5p /A192nkze/lBD2o8r6wlZD6eSRDwMYnxz+GKBRYS6v/7m8JBk0iqBcsTA8ZjfV/1 PYV7JbaKqdwiLbNc7AtESnS+Rop5HHNYn5Wec6tZfNrPBHjTuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrmapgRVVsl6tMRgvvYGf7E0sbIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmFiOGUzMDEtOGZmMy0z OGM3LWFjNGYtOWM0OWNkMDJlMWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEzT7lcGKOD0+GoajSORiH34kr8WkircKwMYPstqx4KH1tbuWYH5rni XB1+VTnDxMd2JwUJNJC/GxSbTCIxIypftJI5Hue4GEo0c2vs7sz5Udp3zmmWz+p0 GJ9qmX4YxlsUshfgRZvf1hbN4l3zX7jKiQB96MkAFx0Pzt03VKrUCuqllWj6QsEB z4LXonDD4Og8jTe6K3QaogcBsKKU2ChtqnWMmQyB762jUrgqzjD7DEtJHRZAwtU4 X8JrMuq+8sOdu7CYoGrzL/4jE/HrNPRK10ITEqx6atew/x78OAMYZ+akiF/i8Nt9 +gP3mo/WjG6mfrSvtB2lPBgR6AzgDlE= -----END CERTIFICATE-----Generated at Wed Apr 9 01:07:42 2025 by rpki-client