$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/4e0b695e-86aa-3073-82c5-b060be522691.roa File: 4e0b695e-86aa-3073-82c5-b060be522691.roa (raw, json) Hash identifier: DqkDKbJykKaY/PCFhasOmzrkVRvRqXJwOHydEKhzkPo= Subject key identifier: 27:51:F1:82:09:68:9E:2D:92:81:83:EE:A6:AD:E2:E6:5C:4E:D0:B8 Certificate issuer: /CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279 Certificate serial: 010D0C9F43285848CC7B9F87AD0F79C4201BB380 Authority key identifier: 0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/4e0b695e-86aa-3073-82c5-b060be522691.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 13760 IP address blocks: 206.251.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:9f:87:ad:0f:79:c4:20:1b:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=7d39dcc4-ffcb-4d00-8bd5-7ac0c50cedbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3a:0b:a8:ed:d5:b1:30:98:17:3c:0e:f0:99: 3a:cd:3f:98:8c:0a:5c:6e:ba:0e:32:58:05:21:d2: f3:63:d5:90:8e:19:1b:e3:98:64:20:f5:33:75:6c: cc:54:03:33:67:54:93:66:7b:f3:c0:59:dd:b5:6c: 9c:58:32:1a:40:fc:b9:6d:39:46:e5:c9:e6:e8:e6: cc:f9:54:ba:15:65:25:85:a2:f2:ff:68:76:18:7d: 1e:f8:c0:99:26:1a:aa:23:fb:c5:5c:14:81:ed:27: 6a:fc:68:af:09:fd:93:4c:9c:5f:2d:29:7b:cb:7f: 20:05:65:38:bb:e5:3d:13:46:bb:1d:8a:c7:8c:06: a0:0d:50:1f:1e:52:23:36:da:1d:e1:87:f0:bd:8a: ad:5f:10:b3:26:6f:e6:dc:6b:0d:c6:cf:49:52:9c: 94:07:64:97:e0:32:88:1b:57:be:22:cc:70:e5:0c: 9e:bc:a8:d6:b0:58:5d:7c:e4:ce:52:14:13:32:8f: 56:07:3c:2d:07:47:4c:6f:b9:2e:01:fc:d1:db:b7: 1f:96:d9:d7:0e:1b:b5:62:1e:ca:d4:71:0d:24:64: d9:9c:a2:1f:dd:76:a8:90:b0:0e:a0:e6:ec:49:40: a9:62:60:68:fc:cf:f4:83:82:69:c6:5a:96:3b:81: a7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:51:F1:82:09:68:9E:2D:92:81:83:EE:A6:AD:E2:E6:5C:4E:D0:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/4e0b695e-86aa-3073-82c5-b060be522691.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.crl X509v3 Authority Key Identifier: keyid:0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer sbgp-ipAddrBlock: critical IPv4: 206.251.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:68:e9:77:56:16:a8:09:8c:49:cd:42:cd:a7:ba:07:d2:61: 25:49:55:9f:3c:37:8a:3b:c0:4e:b9:fc:2d:3b:5c:fb:e5:cb: 96:a5:80:ce:cb:96:f2:7e:0e:63:5b:f6:92:35:01:be:04:6b: 20:13:6f:84:a5:dd:42:c7:0d:1a:38:a3:e2:ea:0e:a4:1d:04: 80:7c:b2:6e:88:51:56:cb:3e:43:7a:af:f6:16:6c:a1:90:35: 43:b0:d5:d0:56:54:0d:f2:30:02:f2:7b:61:66:f7:a2:9b:ce: e4:b7:7c:51:27:d4:65:33:5b:97:8c:fb:f6:61:f1:79:6e:39: ee:fb:09:79:18:cc:7f:48:11:a8:2e:b9:85:f2:c1:77:07:eb: 6e:a4:fd:c5:60:c9:bd:24:01:24:8c:27:81:8d:3c:fa:d6:21: 2d:3c:b8:64:ef:5a:e5:19:68:d8:99:65:8a:40:1d:ce:a5:8a: e9:db:49:6c:8b:cb:c3:8f:ba:38:c6:ae:b3:83:db:b3:1a:6e: 33:cc:a1:8f:9a:66:b6:d2:64:b9:42:94:30:2c:cf:a5:f9:67: bb:76:c9:3c:02:47:a4:f7:1f:1f:74:21:2a:37:85:ab:de:2a: ad:b1:70:4f:79:f1:d4:0c:1b:6f:83:91:9f:79:74:45:c0:20: 0b:3f:d6:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe5+HrQ95xCAbs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM4YTFkZGUtYjdmYi00YmZjLTlmM2MtY2Q4NDAwM2Iw Mjc5MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk N2QzOWRjYzQtZmZjYi00ZDAwLThiZDUtN2FjMGM1MGNlZGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnToLqO3VsTCYFzwO8Jk6zT+YjApcbroOMlgF IdLzY9WQjhkb45hkIPUzdWzMVAMzZ1STZnvzwFndtWycWDIaQPy5bTlG5cnm6ObM +VS6FWUlhaLy/2h2GH0e+MCZJhqqI/vFXBSB7Sdq/GivCf2TTJxfLSl7y38gBWU4 u+U9E0a7HYrHjAagDVAfHlIjNtod4YfwvYqtXxCzJm/m3GsNxs9JUpyUB2SX4DKI G1e+Isxw5QyevKjWsFhdfOTOUhQTMo9WBzwtB0dMb7kuAfzR27cfltnXDhu1Yh7K 1HENJGTZnKIf3XaokLAOoObsSUCpYmBo/M/0g4JpxlqWO4GngQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdR8YIJaJ4tkoGD7qat4uZcTtC4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMzhh MWRkZS1iN2ZiLTRiZmMtOWYzYy1jZDg0MDAzYjAyNzkvNGUwYjY5NWUtODZhYS0z MDczLTgyYzUtYjA2MGJlNTIyNjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTM4YTFkZGUtYjdmYi00YmZjLTlm M2MtY2Q4NDAwM2IwMjc5L2EzOGExZGRlLWI3ZmItNGJmYy05ZjNjLWNkODQwMDNi MDI3OS5jcmwwHwYDVR0jBBgwFoAUDfE36maClMPXvqaAW70dht0U4YMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMzhhMWRkZS1iN2ZiLTRiZmMtOWYzYy1jZDg0 MDAzYjAyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzvsUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpo6XdWFqgJjEnNQs2nugfSYSVJVZ88N4o7wE65/C07XPvly5algM7L lvJ+DmNb9pI1Ab4EayATb4Sl3ULHDRo4o+LqDqQdBIB8sm6IUVbLPkN6r/YWbKGQ NUOw1dBWVA3yMALye2Fm96KbzuS3fFEn1GUzW5eM+/Zh8XluOe77CXkYzH9IEagu uYXywXcH626k/cVgyb0kASSMJ4GNPPrWIS08uGTvWuUZaNiZZYpAHc6liunbSWyL y8OPujjGrrOD27MabjPMoY+aZrbSZLlClDAsz6X5Z7t2yTwCR6T3Hx90ISo3have Kq2xcE958dQMG2+DkZ95dEXAIAs/1jg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:54 2025 by rpki-client