$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/af04d1ea-2b61-30e8-9a48-0300a4f75436.roa File: af04d1ea-2b61-30e8-9a48-0300a4f75436.roa (raw, json) Hash identifier: 0SePndVw4RjDsBWC7mCShaBSdfqS47DRC9qY4sjgdhg= Subject key identifier: E2:E1:6B:32:92:F4:C2:86:EB:18:6F:97:33:CE:3A:B2:9B:DD:B3:01 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F43285848A830CAAA3C69ED6F0E203880 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/af04d1ea-2b61-30e8-9a48-0300a4f75436.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 10753 IP address blocks: 209.211.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:ca:aa:3c:69:ed:6f:0e:20:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=9858b21b-4cc8-4b77-a931-47479058ddf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d4:8e:a0:7b:78:43:59:f2:44:bb:86:1a:3e: 90:71:1a:5f:ec:34:1e:30:af:a8:3a:8a:ce:d1:da: 0d:5d:32:c3:3b:0c:47:0e:9d:37:c7:a8:6b:15:b7: bb:3b:11:98:bf:67:ee:49:9c:ec:68:1c:ff:5c:45: 60:ac:ad:4a:73:fc:37:03:a4:9b:45:ff:21:55:46: 6b:61:7d:0e:e0:1b:f5:73:c2:31:5a:d9:33:ac:a8: bf:9d:f6:ac:fc:54:8f:11:3f:41:62:28:fe:4a:d1: e3:97:84:be:7c:8a:f8:3d:c2:3b:ee:c1:d9:0c:b5: fb:a5:04:2e:85:86:70:3c:48:e7:e1:91:8e:ae:fe: 4d:5f:5f:b0:bf:70:1d:47:ba:56:df:12:b9:0d:20: 50:9a:db:d0:24:01:4c:7c:9b:7f:44:b0:35:24:81: be:a1:99:c8:1b:b6:bc:86:cd:4e:ae:ef:12:85:a2: 8b:6a:c2:d8:8b:9d:a7:8f:ba:3e:ab:e3:b5:4a:a2: 49:15:67:92:c2:f3:4e:85:29:af:4e:e3:73:e3:b8: f8:d3:b9:48:45:e2:85:a8:94:0a:09:0b:2c:4f:e6: 78:75:3c:04:b7:58:86:d5:81:81:57:5c:5a:66:9a: 79:e1:0d:ef:0b:eb:d9:2d:c5:d3:24:3f:81:a7:90: 50:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E1:6B:32:92:F4:C2:86:EB:18:6F:97:33:CE:3A:B2:9B:DD:B3:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/af04d1ea-2b61-30e8-9a48-0300a4f75436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:a6:c3:09:3b:5e:69:a5:3b:f2:19:5f:79:97:44:29:ab:5b: a8:88:f8:16:c2:82:68:1c:01:76:5b:c9:2b:04:d2:53:37:08: 70:a1:32:3a:2c:ad:f4:77:30:fc:f4:7b:3f:f8:eb:3c:a4:10: c4:1b:2a:48:3a:0f:1a:66:15:a2:f9:e8:0a:c1:93:bb:c6:fb: 44:1f:b9:e8:a7:3d:8b:10:84:e9:9b:b2:54:1c:97:02:69:2e: 20:16:26:21:b4:ef:5c:28:91:62:9a:a7:47:28:4e:b0:35:f9: d1:35:42:32:5d:e2:7f:92:6a:e1:ce:ef:09:51:3e:06:58:9f: c1:67:58:59:12:4e:79:9e:0e:dd:24:0b:42:4b:d7:2d:d3:2e: d9:a5:ed:c2:02:22:2b:e5:ab:ed:a0:23:68:e0:be:b1:53:7e: c7:43:ad:45:2a:e5:d1:da:4b:48:69:a9:65:42:44:b5:f2:1e: ec:3a:71:4e:a5:66:ee:96:7d:0f:ed:d5:07:0c:1e:48:9c:38: d9:16:81:b1:ff:90:99:69:99:b1:98:e0:ff:44:a9:82:2e:a6: a6:e4:f4:6c:19:ac:ca:64:3f:f0:dd:58:8f:57:06:6a:85:12: 08:0c:72:a3:50:e5:0b:20:17:0d:ae:28:e1:90:06:a6:cc:0c: 18:77:77:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMMqqPGntbw4gOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk OTg1OGIyMWItNGNjOC00Yjc3LWE5MzEtNDc0NzkwNThkZGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdSOoHt4Q1nyRLuGGj6QcRpf7DQeMK+oOorO 0doNXTLDOwxHDp03x6hrFbe7OxGYv2fuSZzsaBz/XEVgrK1Kc/w3A6SbRf8hVUZr YX0O4Bv1c8IxWtkzrKi/nfas/FSPET9BYij+StHjl4S+fIr4PcI77sHZDLX7pQQu hYZwPEjn4ZGOrv5NX1+wv3AdR7pW3xK5DSBQmtvQJAFMfJt/RLA1JIG+oZnIG7a8 hs1Oru8ShaKLasLYi52nj7o+q+O1SqJJFWeSwvNOhSmvTuNz47j407lIReKFqJQK CQssT+Z4dTwEt1iG1YGBV1xaZpp54Q3vC+vZLcXTJD+Bp5BQOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLhazKS9MKG6xhvlzPOOrKb3bMBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvYWYwNGQxZWEtMmI2MS0z MGU4LTlhNDgtMDMwMGE0Zjc1NDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dPNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJymwwk7XmmlO/IZX3mXRCmrW6iI+BbCgmgcAXZbySsE0lM3CHChMjos rfR3MPz0ez/46zykEMQbKkg6DxpmFaL56ArBk7vG+0QfueinPYsQhOmbslQclwJp LiAWJiG071wokWKap0coTrA1+dE1QjJd4n+SauHO7wlRPgZYn8FnWFkSTnmeDt0k C0JL1y3TLtml7cICIivlq+2gI2jgvrFTfsdDrUUq5dHaS0hpqWVCRLXyHuw6cU6l Zu6WfQ/t1QcMHkicONkWgbH/kJlpmbGY4P9EqYIupqbk9GwZrMpkP/DdWI9XBmqF EggMcqNQ5QsgFw2uKOGQBqbMDBh3d+M= -----END CERTIFICATE-----Generated at Sat Apr 5 14:25:00 2025 by rpki-client