$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/5166ee8e-831f-340d-ab66-9b4dfc59fe37.roa File: 5166ee8e-831f-340d-ab66-9b4dfc59fe37.roa (raw, json) Hash identifier: lD1ei+h1BEeoBcccHEwhCRw8cqb6IFjirZ3kmwRpw6w= Subject key identifier: BC:0E:1F:96:14:71:3A:C8:30:E4:CD:A2:F9:BB:26:43:4B:F8:5B:89 Certificate issuer: /CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Certificate serial: 010D0C9F43285848B34EB411E5182A54CC9373C0 Authority key identifier: EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/5166ee8e-831f-340d-ab66-9b4dfc59fe37.roa Signing time: Wed 29 Jan 2025 01:35:10 +0000 ROA not before: Wed 29 Jan 2025 01:35:10 +0000 ROA not after: Tue 29 Apr 2025 00:35:10 +0000 asID: 54004 IP address blocks: 209.240.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:4e:b4:11:e5:18:2a:54:cc:93:73:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Validity Not Before: Jan 29 01:35:10 2025 GMT Not After : Apr 29 00:35:10 2025 GMT Subject: CN=ddda1bb2-b1c5-483a-9ba4-05e06c369cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7c:83:bc:ed:4f:c5:e5:41:68:77:05:61:83: 9c:df:81:ab:ca:f0:52:df:c7:30:9e:f1:a4:de:57: 5f:10:e7:48:f0:be:50:06:4d:b0:8e:88:93:d3:3e: 02:1f:3b:5e:4d:db:5f:d3:26:a1:97:f3:8f:67:9e: 53:04:d0:59:59:7a:ed:a5:d7:c7:b5:91:e9:97:31: 52:79:47:d7:48:50:bb:53:0f:05:20:f3:85:9d:28: 3b:fa:ba:2e:ea:3f:56:50:70:10:c7:99:0c:b4:b7: 6b:6e:55:36:a0:97:b8:45:51:2c:56:4e:40:39:90: a6:4f:9a:d8:e7:05:9c:92:ff:ef:05:42:c6:2c:19: 59:44:3a:dc:6e:28:69:7c:f6:7d:fb:39:4b:13:5c: fb:ea:6a:4d:a5:d1:c8:df:7e:96:27:c2:50:bb:c3: 43:45:a6:63:49:38:b9:22:99:f9:12:01:b7:e4:d0: ea:31:86:62:91:48:06:fc:97:93:d6:51:79:6c:c1: 43:46:56:60:18:e4:3b:aa:3f:b6:60:a1:ac:05:c9: 81:31:41:d0:41:14:37:09:9c:5a:c1:b7:a8:84:1d: b1:40:ef:ab:3b:e1:00:02:e2:90:7b:dd:9b:da:eb: b1:df:88:b5:f6:f6:f3:d1:32:03:4e:2f:38:53:b8: 2d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:0E:1F:96:14:71:3A:C8:30:E4:CD:A2:F9:BB:26:43:4B:F8:5B:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/5166ee8e-831f-340d-ab66-9b4dfc59fe37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl X509v3 Authority Key Identifier: keyid:EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer sbgp-ipAddrBlock: critical IPv4: 209.240.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:28:85:11:b7:86:49:49:94:44:24:3a:74:03:ac:3b:b2:9d: fb:28:af:1f:38:77:0a:99:1a:23:21:07:45:c6:2d:94:97:04: e4:08:74:ed:74:50:dd:be:32:e1:a4:39:35:01:7b:fa:f2:99: f2:96:6a:69:f7:22:b2:a1:15:c3:8e:51:9e:ef:4c:41:63:50: a8:2d:5a:86:a4:95:2e:23:64:dc:b6:fe:46:65:2e:cc:38:50: 96:5f:26:ea:f4:84:ab:13:01:1a:0b:f2:49:ed:4a:f1:29:f9: 1f:32:37:92:6c:65:91:40:17:60:87:19:99:c2:e8:e3:09:60: 75:fd:c0:c3:74:d3:b2:ba:e2:3f:29:91:fd:33:12:1d:fc:2d: 49:fb:4b:57:76:fc:7d:c7:a1:6c:61:66:02:74:09:7c:c3:9d: 76:2b:0a:96:70:61:78:76:a1:4c:f2:06:53:65:f6:bd:4c:1a: e9:0d:05:56:72:e2:4b:8b:a5:28:40:cb:a4:a9:80:ac:a3:eb: 36:c5:9a:f7:20:df:b7:8e:ca:a7:fc:95:c8:5d:52:9d:d3:7e: d4:94:05:94:61:f9:d6:26:ba:fa:57:cf:75:9e:e8:7b:bb:c8: d7:a4:72:97:ad:7b:28:b6:c6:2e:7b:a1:7b:5e:61:74:8c:89: b8:f8:7a:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizTrQR5RgqVMyTc8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZlOTg5MTItNTFmYy00OTBlLWI1MmYtMGY2ZGI5YTI4 NDdlMB4XDTI1MDEyOTAxMzUxMFoXDTI1MDQyOTAwMzUxMFowLzEtMCsGA1UEAxMk ZGRkYTFiYjItYjFjNS00ODNhLTliYTQtMDVlMDZjMzY5Y2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XyDvO1PxeVBaHcFYYOc34GryvBS38cwnvGk 3ldfEOdI8L5QBk2wjoiT0z4CHzteTdtf0yahl/OPZ55TBNBZWXrtpdfHtZHplzFS eUfXSFC7Uw8FIPOFnSg7+rou6j9WUHAQx5kMtLdrblU2oJe4RVEsVk5AOZCmT5rY 5wWckv/vBULGLBlZRDrcbihpfPZ9+zlLE1z76mpNpdHI336WJ8JQu8NDRaZjSTi5 Ipn5EgG35NDqMYZikUgG/JeT1lF5bMFDRlZgGOQ7qj+2YKGsBcmBMUHQQRQ3CZxa wbeohB2xQO+rO+EAAuKQe92b2uux34i19vbz0TIDTi84U7gtzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwOH5YUcTrIMOTNovm7JkNL+FuJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5 ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZkYjlhMjg0N2UvNTE2NmVlOGUtODMxZi0z NDBkLWFiNjYtOWI0ZGZjNTlmZTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZlOTg5MTItNTFmYy00OTBlLWI1 MmYtMGY2ZGI5YTI4NDdlL2RmZTk4OTEyLTUxZmMtNDkwZS1iNTJmLTBmNmRiOWEy ODQ3ZS5jcmwwHwYDVR0jBBgwFoAU7IFTNMBbGPl+30NKbxqXz6CvV2kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZk YjlhMjg0N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0fAYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIohRG3hklJlEQkOnQDrDuynfsorx84dwqZGiMhB0XGLZSXBOQIdO10 UN2+MuGkOTUBe/rymfKWamn3IrKhFcOOUZ7vTEFjUKgtWoaklS4jZNy2/kZlLsw4 UJZfJur0hKsTARoL8kntSvEp+R8yN5JsZZFAF2CHGZnC6OMJYHX9wMN007K64j8p kf0zEh38LUn7S1d2/H3HoWxhZgJ0CXzDnXYrCpZwYXh2oUzyBlNl9r1MGukNBVZy 4kuLpShAy6SpgKyj6zbFmvcg37eOyqf8lchdUp3TftSUBZRh+dYmuvpXz3We6Hu7 yNekcpeteyi2xi57oXteYXSMibj4evE= -----END CERTIFICATE-----Generated at Sat Apr 5 13:20:00 2025 by rpki-client