$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/fd142f82-06f7-3937-9314-8f3c2d7275aa.roa File: fd142f82-06f7-3937-9314-8f3c2d7275aa.roa (raw, json) Hash identifier: 9FHDk0We9MP8TNhklD3y5NgHVfvTR9wHdM5cX9henQo= Subject key identifier: E6:38:E5:C5:35:71:9A:19:FA:74:71:9A:32:DF:0A:74:BB:CD:74:E5 Certificate issuer: /CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Certificate serial: 010D0C9F43285848A1361189CF1FDC4CF40995E0 Authority key identifier: EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/fd142f82-06f7-3937-9314-8f3c2d7275aa.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 207645 IP address blocks: 209.240.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:11:89:cf:1f:dc:4c:f4:09:95:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=d72816b2-85c2-4edf-9630-8fd635612483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7a:98:6a:99:b5:84:5a:8e:46:55:68:9b:d5: b2:fe:97:ee:3b:2b:27:3f:2b:55:94:e6:7f:85:b5: 3d:2b:6c:d2:c5:7b:7c:ef:02:d0:3c:8c:76:e4:44: 0e:d2:78:57:a5:2b:1a:ac:98:d5:a6:6b:6f:8b:c5: df:0a:35:68:7d:b3:96:12:8a:57:66:5e:24:06:2c: 7d:41:1a:89:3f:97:7c:5c:e3:7b:1d:e8:4d:0e:8e: 0e:bb:8b:48:1f:5f:32:06:c1:a3:c6:67:88:65:fb: 5a:36:b0:f5:92:1c:2b:0c:75:57:6b:8e:74:50:a7: bd:54:e7:cc:23:30:08:2e:e8:d6:88:da:03:47:76: e9:21:ba:ee:c3:e9:0b:cc:27:17:8a:74:1e:71:3d: be:3f:d3:d5:40:e1:2d:02:b0:df:f7:ea:05:33:46: 57:79:51:da:95:d1:94:92:33:62:67:e8:6f:64:55: ec:6c:fa:5e:73:83:b0:c2:1a:ed:4b:e9:c8:a9:9d: 42:68:c3:be:43:ec:17:d0:0e:1a:c2:3d:1c:3a:05: 70:c8:cb:99:c8:d4:72:32:df:06:c8:5f:a6:13:d6: 17:8b:53:f8:16:12:96:be:ce:1e:7e:37:e6:cc:50: 00:10:9e:99:a9:dc:92:62:b7:c1:98:a0:5a:1a:87: 16:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:38:E5:C5:35:71:9A:19:FA:74:71:9A:32:DF:0A:74:BB:CD:74:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/fd142f82-06f7-3937-9314-8f3c2d7275aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl X509v3 Authority Key Identifier: keyid:EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer sbgp-ipAddrBlock: critical IPv4: 209.240.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:c3:ff:33:5b:7d:cc:6b:49:a5:e8:b8:b9:d6:35:ee:36:fe: 88:71:62:38:38:3a:04:1b:b7:58:21:31:a0:4d:71:4f:72:81: 7f:aa:07:7a:eb:52:25:f7:48:1e:b8:0d:8d:6c:9a:fa:bc:30: 8e:44:ef:c7:f7:d5:32:51:b8:28:ae:95:45:4d:03:2d:bd:31: 78:a0:ce:d1:04:8b:29:6e:21:0e:9d:c8:51:5e:0b:f5:b4:39: 9d:f0:3b:c1:9a:41:c6:e7:28:1d:8d:f5:3c:5e:c3:bd:fa:c7: bb:f8:b0:2e:58:af:ad:dc:f4:68:67:77:c4:09:e6:e8:fb:99: 30:c2:6e:6e:d4:fe:49:27:da:7a:07:76:f8:bf:b7:b2:18:f2: f2:d2:6e:65:66:f7:5a:2b:cf:5a:a1:b4:44:f8:b7:02:b3:97: 55:10:82:d9:7a:ba:ad:02:0c:8b:55:1b:c1:d2:8f:20:06:6a: 22:67:63:e0:c1:56:79:1b:72:1d:f9:c9:6f:bb:a4:5b:32:1f: 06:8e:c9:2c:14:33:8c:ce:ae:08:cc:db:e0:0a:b2:65:7a:f0: de:e2:c1:82:3b:59:84:b0:79:cb:4b:fe:5a:44:66:01:49:39: ba:74:7f:8a:52:43:3b:48:3d:9a:b2:59:10:ab:cd:30:1f:e9: 6f:fb:94:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNhGJzx/cTPQJleAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZlOTg5MTItNTFmYy00OTBlLWI1MmYtMGY2ZGI5YTI4 NDdlMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk ZDcyODE2YjItODVjMi00ZWRmLTk2MzAtOGZkNjM1NjEyNDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHqYapm1hFqORlVom9Wy/pfuOysnPytVlOZ/ hbU9K2zSxXt87wLQPIx25EQO0nhXpSsarJjVpmtvi8XfCjVofbOWEopXZl4kBix9 QRqJP5d8XON7HehNDo4Ou4tIH18yBsGjxmeIZftaNrD1khwrDHVXa450UKe9VOfM IzAILujWiNoDR3bpIbruw+kLzCcXinQecT2+P9PVQOEtArDf9+oFM0ZXeVHaldGU kjNiZ+hvZFXsbPpec4OwwhrtS+nIqZ1CaMO+Q+wX0A4awj0cOgVwyMuZyNRyMt8G yF+mE9YXi1P4FhKWvs4efjfmzFAAEJ6ZqdySYrfBmKBaGocWVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOY45cU1cZoZ+nRxmjLfCnS7zXTlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5 ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZkYjlhMjg0N2UvZmQxNDJmODItMDZmNy0z OTM3LTkzMTQtOGYzYzJkNzI3NWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZlOTg5MTItNTFmYy00OTBlLWI1 MmYtMGY2ZGI5YTI4NDdlL2RmZTk4OTEyLTUxZmMtNDkwZS1iNTJmLTBmNmRiOWEy ODQ3ZS5jcmwwHwYDVR0jBBgwFoAU7IFTNMBbGPl+30NKbxqXz6CvV2kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZk YjlhMjg0N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0fAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHD/zNbfcxrSaXouLnWNe42/ohxYjg4OgQbt1ghMaBNcU9ygX+qB3rr UiX3SB64DY1smvq8MI5E78f31TJRuCiulUVNAy29MXigztEEiyluIQ6dyFFeC/W0 OZ3wO8GaQcbnKB2N9Txew736x7v4sC5Yr63c9Ghnd8QJ5uj7mTDCbm7U/kkn2noH dvi/t7IY8vLSbmVm91orz1qhtET4twKzl1UQgtl6uq0CDItVG8HSjyAGaiJnY+DB Vnkbch35yW+7pFsyHwaOySwUM4zOrgjM2+AKsmV68N7iwYI7WYSwectL/lpEZgFJ Obp0f4pSQztIPZqyWRCrzTAf6W/7lHg= -----END CERTIFICATE-----Generated at Sat Apr 5 13:24:48 2025 by rpki-client