$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f5cf0737-e694-32d1-91ba-ed62d37c7354.roa File: f5cf0737-e694-32d1-91ba-ed62d37c7354.roa (raw, json) Hash identifier: cXGka0GkMBQpYuQrt8ciPwq2Wd9eMWS2NBHjeq5r7N0= Subject key identifier: E2:DF:55:C1:B9:22:6E:24:1A:DE:56:3D:5A:3A:42:76:85:45:00:75 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F43285848B8F0C7180EF52E0F5C243A00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f5cf0737-e694-32d1-91ba-ed62d37c7354.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 53813 IP address blocks: 209.55.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:c7:18:0e:f5:2e:0f:5c:24:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=04b86921-ef49-474d-9fcb-2746b625cccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:19:ae:3d:91:31:f5:94:87:49:da:7a:a7:66: 37:4b:c8:e4:92:b8:3d:79:eb:57:8a:9d:88:84:d5: df:fe:33:99:43:72:84:7e:bf:08:15:47:39:69:1b: ad:2c:82:3d:3b:0f:2f:95:2b:1f:d0:0a:8e:39:64: 7b:90:ac:ce:e7:a4:ae:3c:2f:21:20:4e:24:3c:91: 01:52:98:b6:9f:d7:29:da:7b:61:bc:4b:f3:55:05: 62:a9:f4:a4:fc:e0:ee:a7:34:9f:b0:44:09:f3:8f: c3:c8:9e:17:f8:ae:15:f8:0a:36:63:81:02:e4:53: 41:cc:a5:e1:f8:cc:7b:cc:48:d5:9c:a6:09:a3:e1: 60:25:9b:28:b7:95:4c:dd:73:5f:93:86:5e:bc:7e: c2:11:f5:a7:aa:3d:b9:41:61:a5:5a:2a:fd:97:15: eb:31:df:5b:40:14:9d:c3:a4:55:c7:8b:01:41:f7: 2f:59:17:b3:d6:43:c8:51:bf:57:fa:a5:ec:aa:2b: e0:99:84:88:9a:9a:aa:f0:13:a3:5f:ea:6d:75:52: cc:b5:c7:19:6c:2f:79:8d:51:ee:7a:7b:04:cc:4c: 80:dd:5e:5a:03:00:58:de:ca:c9:c8:af:e8:57:b1: 62:65:fb:e4:8a:24:90:9b:85:aa:52:dc:07:d4:7e: 70:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DF:55:C1:B9:22:6E:24:1A:DE:56:3D:5A:3A:42:76:85:45:00:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f5cf0737-e694-32d1-91ba-ed62d37c7354.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:96:1c:49:c3:ad:fb:61:4d:eb:fd:53:e3:11:ca:89:b4:45: 36:b8:0e:e0:a7:ac:d6:0f:63:42:a6:3e:1d:9c:7b:4f:2d:cc: 76:f2:53:be:28:ef:6d:6d:55:56:02:50:ca:4b:15:b6:bf:51: 85:b0:90:5f:66:bb:97:3e:53:ec:16:6c:b2:e2:af:50:23:7e: ca:fd:39:70:57:31:0e:51:82:a1:a4:db:11:9c:b8:c7:0a:d9: 08:84:85:e5:d8:79:4d:36:6f:ec:87:1f:54:59:ac:fb:0d:da: 26:7c:f1:d5:5c:39:01:60:c4:72:19:fd:a5:31:f8:d2:b8:21: b4:64:3b:f0:24:31:19:ce:dd:63:17:9b:68:c9:ed:20:bc:38: fa:a1:5e:45:6e:31:55:87:d0:48:5e:d5:1c:ed:db:36:e0:c2: 55:ec:79:5a:32:9c:0d:3f:b1:1a:58:c9:90:6f:24:17:a9:d1: bc:63:58:3a:0f:e7:1b:7b:ea:91:65:f2:fe:82:db:7c:07:ea: 2e:58:6d:94:12:69:8b:7a:f6:58:71:cf:94:64:8e:4b:76:19: b3:c4:10:12:2f:5a:cc:e4:13:3f:e9:83:a5:55:94:5b:8b:56: cb:4c:e7:29:7e:b2:86:92:a1:01:15:20:50:8b:c6:7d:63:93: 1e:b4:20:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48McYDvUuD1wkOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk MDRiODY5MjEtZWY0OS00NzRkLTlmY2ItMjc0NmI2MjVjY2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxmuPZEx9ZSHSdp6p2Y3S8jkkrg9eetXip2I hNXf/jOZQ3KEfr8IFUc5aRutLII9Ow8vlSsf0AqOOWR7kKzO56SuPC8hIE4kPJEB Upi2n9cp2nthvEvzVQViqfSk/ODupzSfsEQJ84/DyJ4X+K4V+Ao2Y4EC5FNBzKXh +Mx7zEjVnKYJo+FgJZsot5VM3XNfk4ZevH7CEfWnqj25QWGlWir9lxXrMd9bQBSd w6RVx4sBQfcvWRez1kPIUb9X+qXsqivgmYSImpqq8BOjX+ptdVLMtccZbC95jVHu ensEzEyA3V5aAwBY3srJyK/oV7FiZfvkiiSQm4WqUtwH1H5wqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLfVcG5Im4kGt5WPVo6QnaFRQB1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZjVjZjA3MzctZTY5NC0z MmQxLTkxYmEtZWQ2MmQzN2M3MzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJyWHEnDrfthTev9U+MRyom0RTa4DuCnrNYPY0KmPh2ce08tzHbyU74o 721tVVYCUMpLFba/UYWwkF9mu5c+U+wWbLLir1Ajfsr9OXBXMQ5RgqGk2xGcuMcK 2QiEheXYeU02b+yHH1RZrPsN2iZ88dVcOQFgxHIZ/aUx+NK4IbRkO/AkMRnO3WMX m2jJ7SC8OPqhXkVuMVWH0Ehe1Rzt2zbgwlXseVoynA0/sRpYyZBvJBep0bxjWDoP 5xt76pFl8v6C23wH6i5YbZQSaYt69lhxz5Rkjkt2GbPEEBIvWszkEz/pg6VVlFuL VstM5yl+soaSoQEVIFCLxn1jkx60IEc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:51 2025 by rpki-client