$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/16c1adea-21bb-3ce7-bb45-01a28751187c.roa File: 16c1adea-21bb-3ce7-bb45-01a28751187c.roa (raw, json) Hash identifier: XPujZvkljl0OYo+r4bsnRJD7dxgzM+ogiZKYcOhlpxM= Subject key identifier: C5:CF:20:E0:86:1F:88:F0:3D:65:F1:AB:19:29:FD:AE:BA:7A:24:52 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F43285848A830B5FB064DCA4B87BA6100 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/16c1adea-21bb-3ce7-bb45-01a28751187c.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 11273 IP address blocks: 209.211.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:b5:fb:06:4d:ca:4b:87:ba:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=a133afe7-dbc2-4376-a6a5-0ec926043f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e1:d5:b2:62:85:cc:4f:dc:87:95:b0:a8:01: 83:c5:4e:ca:15:ef:46:aa:0d:f8:cb:93:2c:07:25: 8b:3e:5e:80:85:03:63:d9:fb:85:6c:de:63:25:a8: fa:3b:a5:46:6b:58:b0:56:33:83:89:92:e0:5c:2b: 08:ed:8b:09:d7:28:1f:f2:a3:fb:6e:e4:68:fe:66: 8a:20:93:0d:e9:ab:05:a0:59:cd:0b:6a:50:96:9b: c9:01:05:f8:0d:89:aa:6f:c9:fc:38:ef:a2:5f:95: f3:d9:60:49:0d:8c:3e:97:3a:16:ff:27:b5:d5:fb: 4f:da:14:1a:a7:c7:0b:30:50:72:41:35:29:6c:f4: e0:0b:15:ba:ed:1d:cd:94:e0:e1:6f:23:ed:7c:12: 80:7c:70:17:43:93:0f:2d:1f:a2:2c:c8:54:96:13: 19:d3:2e:b6:74:d6:b0:dc:00:39:40:cd:59:84:6f: 5d:2a:64:d9:44:29:4a:ac:8b:a9:13:f2:0e:5b:a8: c9:d4:d9:ce:7c:6e:09:7e:d8:ac:a1:cd:9e:59:40: 59:67:41:1a:63:9b:59:fa:5f:24:91:50:20:97:1f: 1e:9a:ac:29:22:37:e1:ea:91:7a:91:87:ea:9d:d8: 6e:a7:af:45:41:88:fa:20:ee:c4:10:e1:63:68:9d: 8a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CF:20:E0:86:1F:88:F0:3D:65:F1:AB:19:29:FD:AE:BA:7A:24:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/16c1adea-21bb-3ce7-bb45-01a28751187c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:d8:7d:b0:30:c6:9a:d3:fc:72:8e:74:bf:bb:99:e5:a3:aa: 89:92:b3:5c:5b:ca:94:df:92:90:89:1c:40:48:c7:ea:63:62: 7c:61:d6:de:01:b6:25:28:0c:d2:9c:a2:99:43:49:a2:e2:b5: 26:ef:a0:93:76:8e:9b:8e:11:c0:f8:15:12:7a:5d:67:09:f4: 98:e9:38:f9:56:a3:e1:f0:30:14:24:74:a0:3c:c7:75:d4:5d: b5:37:e3:a9:3e:9b:1d:14:6e:7d:ce:0f:34:56:2c:82:da:38: 7e:12:3c:8d:2e:ae:89:e7:a4:da:2a:cb:ff:17:0d:23:29:fc: fe:ef:6a:bf:8c:8d:82:5c:83:f9:83:af:bc:1c:17:2e:69:24: 17:5e:bc:e9:7f:29:43:67:b0:2d:61:59:ca:70:e9:08:c4:cb: 0b:43:98:c2:95:12:20:b9:31:11:2c:d7:65:94:ae:89:6f:3b: c6:7f:1e:7c:d4:1b:e2:d1:96:cf:b2:1c:03:d7:b8:40:40:c4: 30:b3:bf:c8:21:9e:b9:14:c1:e1:3c:96:ed:a7:d8:07:0e:57: 87:19:da:83:05:23:99:21:52:af:b5:96:0e:df:16:b0:77:0d: 91:34:b0:a9:01:09:5f:6c:21:e3:b2:9b:c5:44:5a:ce:c6:53: ba:18:f5:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMLX7Bk3KS4e6YQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk YTEzM2FmZTctZGJjMi00Mzc2LWE2YTUtMGVjOTI2MDQzZjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquHVsmKFzE/ch5WwqAGDxU7KFe9Gqg34y5Ms ByWLPl6AhQNj2fuFbN5jJaj6O6VGa1iwVjODiZLgXCsI7YsJ1ygf8qP7buRo/maK IJMN6asFoFnNC2pQlpvJAQX4DYmqb8n8OO+iX5Xz2WBJDYw+lzoW/ye11ftP2hQa p8cLMFByQTUpbPTgCxW67R3NlODhbyPtfBKAfHAXQ5MPLR+iLMhUlhMZ0y62dNaw 3AA5QM1ZhG9dKmTZRClKrIupE/IOW6jJ1NnOfG4Jftisoc2eWUBZZ0EaY5tZ+l8k kVAglx8emqwpIjfh6pF6kYfqndhup69FQYj6IO7EEOFjaJ2KvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXPIOCGH4jwPWXxqxkp/a66eiRSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvMTZjMWFkZWEtMjFiYi0z Y2U3LWJiNDUtMDFhMjg3NTExODdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dMzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTYfbAwxprT/HKOdL+7meWjqomSs1xbypTfkpCJHEBIx+pjYnxh1t4B tiUoDNKcoplDSaLitSbvoJN2jpuOEcD4FRJ6XWcJ9JjpOPlWo+HwMBQkdKA8x3XU XbU346k+mx0Ubn3ODzRWLILaOH4SPI0uronnpNoqy/8XDSMp/P7var+MjYJcg/mD r7wcFy5pJBdevOl/KUNnsC1hWcpw6QjEywtDmMKVEiC5MREs12WUrolvO8Z/HnzU G+LRls+yHAPXuEBAxDCzv8ghnrkUweE8lu2n2AcOV4cZ2oMFI5khUq+1lg7fFrB3 DZE0sKkBCV9sIeOym8VEWs7GU7oY9YM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:47 2025 by rpki-client