$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1b6d3ad5-de90-343b-9f5d-6ac1c4da0d35.roa File: 1b6d3ad5-de90-343b-9f5d-6ac1c4da0d35.roa (raw, json) Hash identifier: UuRSq1geUMIP/W6p4PSdDMps10Oe3MMUHx88nsDqF78= Subject key identifier: 12:A6:71:82:D8:0E:05:F1:44:B4:28:67:16:EA:03:29:FF:69:F4:37 Certificate issuer: /CN=1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162 Certificate serial: 010D0C9F43285848B8F0CFE83BF65B9CB3405410 Authority key identifier: FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1b6d3ad5-de90-343b-9f5d-6ac1c4da0d35.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 399030 IP address blocks: 209.37.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:cf:e8:3b:f6:5b:9c:b3:40:54:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=8e55b195-9381-45a3-9013-6e586d0f3ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4e:68:6e:1a:b6:9a:de:d8:d6:c7:6c:be:0f: 45:23:82:c0:73:7c:9d:2b:af:16:fc:c3:ab:a5:e7: bb:3c:a4:40:95:0f:ec:b3:05:8b:79:d0:60:2a:48: 6e:01:25:8d:18:3a:d9:19:1c:7a:95:39:f1:7a:26: e2:23:8f:45:6b:2a:c3:07:1b:bc:8f:a2:c1:c0:b8: 45:1a:34:28:7f:b6:3b:42:83:e4:87:31:fb:95:d9: e4:13:74:94:53:d7:9b:e8:23:b2:a8:b2:af:39:8a: fd:a6:14:8f:0f:b1:2e:57:5f:3b:68:4a:d5:98:1f: 7a:6c:4d:92:d4:63:49:a4:44:0a:da:fe:59:17:59: 13:10:d5:81:3b:cb:04:10:0f:9c:b9:52:52:30:69: a3:83:3d:f9:d9:a8:71:4f:a0:76:e7:5e:98:78:e6: 48:86:0e:78:93:4e:5f:2c:21:1b:14:21:40:72:0d: 2d:33:ea:a1:bc:85:8f:72:19:5a:48:00:e1:b2:37: 5f:4e:5f:d8:a2:93:ac:30:a5:b0:96:cd:ca:98:99: cb:bc:4c:89:88:80:38:a5:6e:67:ab:fa:87:e5:0b: 0d:d0:7a:07:25:b3:a0:1b:08:00:18:99:70:3a:0a: 5e:ff:e1:59:1d:2b:97:25:95:db:8b:fa:7f:fe:47: d2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A6:71:82:D8:0E:05:F1:44:B4:28:67:16:EA:03:29:FF:69:F4:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1b6d3ad5-de90-343b-9f5d-6ac1c4da0d35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.crl X509v3 Authority Key Identifier: keyid:FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer sbgp-ipAddrBlock: critical IPv4: 209.37.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:d2:a6:39:5d:b8:20:48:73:4a:cd:f6:3c:aa:12:b1:d9:9f: 6d:fd:58:c7:3c:0d:bc:f4:63:72:83:14:8c:b5:85:a1:2a:63: ec:ea:37:1d:4c:48:66:b1:41:67:94:07:4b:f4:66:a2:c5:a7: c6:6d:9f:2c:fd:92:f9:31:da:ec:fe:7f:a4:c3:4f:2e:90:b1: 3e:4d:ae:5e:68:be:0a:44:b3:f7:41:30:02:83:b8:ce:87:ca: 01:57:d8:e1:e1:5f:73:02:06:ff:12:8f:ba:0a:bb:3e:7e:eb: 8c:2b:3e:6c:a0:08:07:e6:a2:b0:5f:d4:dd:64:33:72:77:7a: 36:a6:61:4f:40:60:16:1b:39:b6:b2:1c:15:fb:0a:14:93:54: 81:cd:06:f7:f5:61:85:40:e9:31:b7:f4:4b:5b:be:13:0e:3f: 61:0c:4b:ce:a7:ad:2d:0e:d5:6f:56:94:7b:e6:80:92:11:f3: f0:21:a9:55:a3:ed:40:10:3e:6e:6c:9c:75:a0:0a:7a:b7:8d: 76:b5:8f:67:b8:c1:46:42:b5:f2:7e:47:01:5a:9e:fb:5c:00: 70:c0:4c:ff:94:21:fe:b1:a3:f2:7a:ba:6f:e2:d0:aa:37:6f: 38:89:7a:d1:17:e8:5a:3b:2e:41:e3:75:18:e9:e5:cf:4a:fb: 38:14:bf:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48M/oO/ZbnLNAVBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJkYWFiNWQtOGNjNC00YWQ4LWE3YzQtYTM2YzY0ODhk MTYyMB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk OGU1NWIxOTUtOTM4MS00NWEzLTkwMTMtNmU1ODZkMGYzZWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhE5obhq2mt7Y1sdsvg9FI4LAc3ydK68W/MOr pee7PKRAlQ/sswWLedBgKkhuASWNGDrZGRx6lTnxeibiI49FayrDBxu8j6LBwLhF GjQof7Y7QoPkhzH7ldnkE3SUU9eb6COyqLKvOYr9phSPD7EuV187aErVmB96bE2S 1GNJpEQK2v5ZF1kTENWBO8sEEA+cuVJSMGmjgz352ahxT6B2516YeOZIhg54k05f LCEbFCFAcg0tM+qhvIWPchlaSADhsjdfTl/YopOsMKWwls3KmJnLvEyJiIA4pW5n q/qH5QsN0HoHJbOgGwgAGJlwOgpe/+FZHSuXJZXbi/p//kfS0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKmcYLYDgXxRLQoZxbqAyn/afQ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmRh YWI1ZC04Y2M0LTRhZDgtYTdjNC1hMzZjNjQ4OGQxNjIvMWI2ZDNhZDUtZGU5MC0z NDNiLTlmNWQtNmFjMWM0ZGEwZDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWJkYWFiNWQtOGNjNC00YWQ4LWE3 YzQtYTM2YzY0ODhkMTYyLzFiZGFhYjVkLThjYzQtNGFkOC1hN2M0LWEzNmM2NDg4 ZDE2Mi5jcmwwHwYDVR0jBBgwFoAU/mUxLRIfo7qCgfXHsKzPHcvwB7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmRhYWI1ZC04Y2M0LTRhZDgtYTdjNC1hMzZj NjQ4OGQxNjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SW6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbSpjlduCBIc0rN9jyqErHZn239WMc8Dbz0Y3KDFIy1haEqY+zqNx1M SGaxQWeUB0v0ZqLFp8Ztnyz9kvkx2uz+f6TDTy6QsT5Nrl5ovgpEs/dBMAKDuM6H ygFX2OHhX3MCBv8Sj7oKuz5+64wrPmygCAfmorBf1N1kM3J3ejamYU9AYBYbObay HBX7ChSTVIHNBvf1YYVA6TG39EtbvhMOP2EMS86nrS0O1W9WlHvmgJIR8/AhqVWj 7UAQPm5snHWgCnq3jXa1j2e4wUZCtfJ+RwFanvtcAHDATP+UIf6xo/J6um/i0Ko3 bziJetEX6Fo7LkHjdRjp5c9K+zgUvwA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:09 2025 by rpki-client