$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/1da5043e-166b-3b4e-9f88-d7e917854fc5.roa File: 1da5043e-166b-3b4e-9f88-d7e917854fc5.roa (raw, json) Hash identifier: r3CZbvd0079MmE63kBN3561wgix8MUs18/Q3noQGwNk= Subject key identifier: 52:26:FF:18:04:88:5F:C3:69:3D:ED:C8:7A:DA:D5:42:9C:9E:7B:6A Certificate issuer: /CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e Certificate serial: 010D0C9F43285848E59BCA418C815E6A68BBF800 Authority key identifier: 2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/1da5043e-166b-3b4e-9f88-d7e917854fc5.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 40513 IP address blocks: 167.206.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:ca:41:8c:81:5e:6a:68:bb:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=d03d660c-23ab-4ec9-a70b-d89f1120cddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7f:e5:11:0d:f4:43:1c:55:2d:63:1a:c1:3a: 33:77:56:a1:9c:13:8c:fe:9d:c2:39:51:d6:52:6a: 25:1e:9f:bb:6b:2b:3e:79:04:9a:d2:e9:7f:c0:07: 66:e6:f0:f2:71:8c:b9:50:06:02:bd:4b:23:3f:66: 68:e8:a6:bf:db:31:7c:e8:6e:f3:17:65:af:db:2f: da:be:af:fa:16:2e:bc:85:41:e0:a8:c7:66:fa:59: f9:89:47:7c:fa:db:e9:a2:f4:eb:cf:e4:d5:fd:58: fc:c2:15:f2:01:6a:d4:01:8a:7d:39:cc:02:cb:3b: 07:74:4f:a0:c2:5b:87:20:56:ba:14:0b:dd:b8:bb: 86:3b:5d:02:ce:c7:06:3a:f2:2c:1c:be:5d:00:09: 45:10:36:b6:32:95:68:3e:98:e4:62:ca:17:0a:8f: 2b:cf:1f:e9:15:b6:77:ef:3b:de:a7:b7:e0:02:1b: 0e:82:c1:7c:7b:a2:a3:fc:fb:4f:df:00:01:6c:ce: 7d:75:76:f0:46:7b:e1:15:2f:89:56:fd:25:be:d0: 40:14:40:43:21:9b:c2:a7:9a:fe:2a:d1:66:52:47: 63:5f:3d:e1:44:be:57:83:e3:7f:88:f6:80:43:5e: c6:5a:fe:fa:81:3e:f4:d0:fd:45:cd:6f:86:66:be: fc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:26:FF:18:04:88:5F:C3:69:3D:ED:C8:7A:DA:D5:42:9C:9E:7B:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/1da5043e-166b-3b4e-9f88-d7e917854fc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl X509v3 Authority Key Identifier: keyid:2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer sbgp-ipAddrBlock: critical IPv4: 167.206.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:99:19:83:e4:fd:71:03:95:69:3c:5c:e9:22:a2:54:34:c2: 52:de:3e:e9:1b:e1:ee:6e:f2:75:aa:96:a4:de:9c:5f:bf:b4: e6:47:25:04:58:a6:1a:a5:53:a3:61:85:d4:4c:64:1d:1f:67: 75:29:e5:71:c5:af:1a:e4:a5:9d:94:a2:43:10:97:3d:31:a8: a0:0c:13:f5:62:1b:ce:70:c4:10:16:c2:ea:51:4c:20:03:3a: 34:7b:e5:d7:96:a6:6a:48:9a:da:a8:5e:e0:43:fb:79:cc:7d: 76:e3:cd:b9:a8:c7:8e:0a:b3:09:22:44:cf:25:63:0e:be:be: 14:15:04:e0:0d:0f:a2:f5:5d:97:21:57:f6:4b:84:9b:a4:f6: 9a:de:dc:c4:a2:2a:3b:47:53:a4:69:a3:8c:da:e5:07:07:ce: db:29:09:6d:a1:5e:6c:ea:69:a6:71:85:d9:e5:5b:2f:49:2f: e2:03:b0:56:60:e3:7d:95:af:89:30:d7:94:ba:5f:c1:9e:fd: e3:1d:74:91:2d:e4:b9:74:a5:d8:42:db:f0:0b:f0:ab:0f:56: f9:2c:b5:8a:4c:2a:45:2f:24:e4:bb:62:51:d0:23:08:af:02: d1:2c:e6:69:43:d8:4e:27:20:02:83:93:3b:e4:6f:71:76:1b: 85:20:aa:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm8pBjIFeami7+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmMWM4YzItMTlmOS00ZjYyLWJmZTMtZDE0MjhkMWEw MDVlMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZDAzZDY2MGMtMjNhYi00ZWM5LWE3MGItZDg5ZjExMjBjZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX/lEQ30QxxVLWMawTozd1ahnBOM/p3COVHW UmolHp+7ays+eQSa0ul/wAdm5vDycYy5UAYCvUsjP2Zo6Ka/2zF86G7zF2Wv2y/a vq/6Fi68hUHgqMdm+ln5iUd8+tvpovTrz+TV/Vj8whXyAWrUAYp9OcwCyzsHdE+g wluHIFa6FAvduLuGO10CzscGOvIsHL5dAAlFEDa2MpVoPpjkYsoXCo8rzx/pFbZ3 7zvep7fgAhsOgsF8e6Kj/PtP3wABbM59dXbwRnvhFS+JVv0lvtBAFEBDIZvCp5r+ KtFmUkdjXz3hRL5Xg+N/iPaAQ17GWv76gT700P1FzW+GZr78SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIm/xgEiF/DaT3tyHra1UKcnntqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMWYx YzhjMi0xOWY5LTRmNjItYmZlMy1kMTQyOGQxYTAwNWUvMWRhNTA0M2UtMTY2Yi0z YjRlLTlmODgtZDdlOTE3ODU0ZmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDFmMWM4YzItMTlmOS00ZjYyLWJm ZTMtZDE0MjhkMWEwMDVlL2QxZjFjOGMyLTE5ZjktNGY2Mi1iZmUzLWQxNDI4ZDFh MDA1ZS5jcmwwHwYDVR0jBBgwFoAULSJwcepBQBbOhUU6hlK+/ghcybAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMWYxYzhjMi0xOWY5LTRmNjItYmZlMy1kMTQy OGQxYTAwNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp87RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6ZGYPk/XEDlWk8XOkiolQ0wlLePukb4e5u8nWqlqTenF+/tOZHJQRY phqlU6NhhdRMZB0fZ3Up5XHFrxrkpZ2UokMQlz0xqKAME/ViG85wxBAWwupRTCAD OjR75deWpmpImtqoXuBD+3nMfXbjzbmox44KswkiRM8lYw6+vhQVBOAND6L1XZch V/ZLhJuk9pre3MSiKjtHU6Rpo4za5QcHztspCW2hXmzqaaZxhdnlWy9JL+IDsFZg 432Vr4kw15S6X8Ge/eMddJEt5Ll0pdhC2/AL8KsPVvkstYpMKkUvJOS7YlHQIwiv AtEs5mlD2E4nIAKDkzvkb3F2G4UgqlA= -----END CERTIFICATE-----Generated at Wed Apr 9 01:12:22 2025 by rpki-client