$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/09380b62-b7dc-3667-a521-e245ac0f3815.roa File: 09380b62-b7dc-3667-a521-e245ac0f3815.roa (raw, json) Hash identifier: ksLCTAGiqp4ebIYFBAvYT002S42Xa/t5jBNIHcJ627g= Subject key identifier: 53:82:C8:CC:18:26:EA:74:7B:92:09:AF:0D:A5:FB:C1:0F:92:20:26 Certificate issuer: /CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279 Certificate serial: 010D0C9F432858489075F8B92E7707AF8EBB4140 Authority key identifier: 0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/09380b62-b7dc-3667-a521-e245ac0f3815.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 20001 IP address blocks: 206.251.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:75:f8:b9:2e:77:07:af:8e:bb:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279 Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=7fded797-e894-43dd-a925-b0027f38ea26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:35:b3:89:e0:85:71:37:80:e7:5b:c3:64:3f: 4a:e9:68:8f:15:7f:73:9c:f6:fe:51:d4:54:84:10: b3:e6:60:ad:e9:10:04:db:78:e2:60:a5:f7:f8:c5: 55:51:87:d0:66:0a:51:78:15:61:64:17:93:6d:1d: 35:17:60:69:fe:5a:4d:cd:33:1b:c4:7b:db:96:38: c7:2b:09:09:ac:28:2b:7b:69:94:45:61:f4:b6:23: 07:de:08:df:5c:f0:6c:0c:b6:6c:73:d4:12:bd:f9: 92:a1:44:9f:e0:cf:ef:1c:f9:1d:0f:35:73:d1:93: 25:36:94:81:19:93:18:fd:b4:4f:94:ef:da:b5:09: 97:9f:8a:99:f1:29:e0:6b:6c:44:a1:22:c5:6e:42: e5:65:1c:e9:20:4b:0c:af:3d:c5:f1:e8:03:da:17: 2d:a3:37:0b:62:a3:f8:41:b7:76:e5:fd:01:76:2d: 37:48:75:21:5f:e0:20:3d:ea:a1:d3:1e:c3:86:c7: b8:e4:fa:4a:b6:1b:3a:6a:63:8f:d0:89:99:67:52: 05:9a:a3:d0:54:b4:34:a8:f1:72:19:61:4e:7d:70: d6:0e:7c:dd:c6:cf:de:e0:12:50:3e:b7:c9:35:3f: 52:7e:a3:1b:79:98:4e:da:cf:9d:c7:7f:43:5e:8f: a8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:82:C8:CC:18:26:EA:74:7B:92:09:AF:0D:A5:FB:C1:0F:92:20:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/09380b62-b7dc-3667-a521-e245ac0f3815.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.crl X509v3 Authority Key Identifier: keyid:0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer sbgp-ipAddrBlock: critical IPv4: 206.251.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:2f:16:31:76:0e:13:99:52:42:7e:9e:b7:93:ee:dd:83:d4: 92:23:3e:d2:45:08:63:4c:ef:e1:9f:45:e1:78:e9:6f:20:10: ec:c5:d6:e1:6d:4f:02:72:0d:1f:58:ba:12:5d:8d:f2:6f:4a: 60:b4:ce:6b:e5:71:1a:85:82:18:b0:bb:0a:82:15:af:e2:7b: 59:0c:ab:6b:c4:f5:40:a8:87:63:ba:67:15:ba:5a:e3:94:d5: 21:41:5c:ca:dd:5e:bc:20:a1:05:23:a3:a8:72:9c:cb:f1:e3: 7b:ee:77:c8:22:b5:d6:1b:79:ea:03:ac:f7:f5:25:90:e4:dc: 20:ed:64:57:65:c9:91:53:9b:1a:4c:11:f3:41:b9:e0:f6:9c: 1d:a9:7f:46:9d:9e:57:55:51:46:aa:1c:1e:bf:67:6b:19:25: d7:98:3a:3f:d4:ee:5f:85:1a:d4:7f:ca:52:95:c3:4a:a3:c9: 1d:d3:04:e6:b5:5b:f9:65:75:32:ad:ce:09:78:6e:b6:42:6a: 87:90:a0:a7:d6:81:ac:fc:fd:3c:34:45:f8:89:6e:1c:2e:2e: 8e:8b:27:74:ac:b5:a8:9e:85:8a:26:cc:5e:3e:97:9f:dc:cf: 6f:f6:ee:6c:1b:2e:d6:69:fa:d3:34:4d:80:ba:63:eb:0e:ee: 38:df:04:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdfi5LncHr467QUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM4YTFkZGUtYjdmYi00YmZjLTlmM2MtY2Q4NDAwM2Iw Mjc5MB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk N2ZkZWQ3OTctZTg5NC00M2RkLWE5MjUtYjAwMjdmMzhlYTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzWzieCFcTeA51vDZD9K6WiPFX9znPb+UdRU hBCz5mCt6RAE23jiYKX3+MVVUYfQZgpReBVhZBeTbR01F2Bp/lpNzTMbxHvbljjH KwkJrCgre2mURWH0tiMH3gjfXPBsDLZsc9QSvfmSoUSf4M/vHPkdDzVz0ZMlNpSB GZMY/bRPlO/atQmXn4qZ8Snga2xEoSLFbkLlZRzpIEsMrz3F8egD2hctozcLYqP4 Qbd25f0Bdi03SHUhX+AgPeqh0x7Dhse45PpKths6amOP0ImZZ1IFmqPQVLQ0qPFy GWFOfXDWDnzdxs/e4BJQPrfJNT9SfqMbeZhO2s+dx39DXo+o+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOCyMwYJup0e5IJrw2l+8EPkiAmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMzhh MWRkZS1iN2ZiLTRiZmMtOWYzYy1jZDg0MDAzYjAyNzkvMDkzODBiNjItYjdkYy0z NjY3LWE1MjEtZTI0NWFjMGYzODE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTM4YTFkZGUtYjdmYi00YmZjLTlm M2MtY2Q4NDAwM2IwMjc5L2EzOGExZGRlLWI3ZmItNGJmYy05ZjNjLWNkODQwMDNi MDI3OS5jcmwwHwYDVR0jBBgwFoAUDfE36maClMPXvqaAW70dht0U4YMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMzhhMWRkZS1iN2ZiLTRiZmMtOWYzYy1jZDg0 MDAzYjAyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzvsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAvFjF2DhOZUkJ+nreT7t2D1JIjPtJFCGNM7+GfReF46W8gEOzF1uFt TwJyDR9YuhJdjfJvSmC0zmvlcRqFghiwuwqCFa/ie1kMq2vE9UCoh2O6ZxW6WuOU 1SFBXMrdXrwgoQUjo6hynMvx43vud8gitdYbeeoDrPf1JZDk3CDtZFdlyZFTmxpM EfNBueD2nB2pf0adnldVUUaqHB6/Z2sZJdeYOj/U7l+FGtR/ylKVw0qjyR3TBOa1 W/lldTKtzgl4brZCaoeQoKfWgaz8/Tw0RfiJbhwuLo6LJ3SstaiehYomzF4+l5/c z2/27mwbLtZp+tM0TYC6Y+sO7jjfBEA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:09 2025 by rpki-client