$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b11f0458-b61c-3e5a-9df7-55e9dc385389.roa File: b11f0458-b61c-3e5a-9df7-55e9dc385389.roa (raw, json) Hash identifier: b4xIaZqLAzr7QtYrkVt7DbIgwrCw4a2uIN17k2arciY= Subject key identifier: 49:38:33:87:5F:47:E7:9A:EB:59:19:E8:3B:96:BD:CC:06:6C:38:63 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F43285848A830CAB6B46D22AC640FFD20 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b11f0458-b61c-3e5a-9df7-55e9dc385389.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 10753 IP address blocks: 209.211.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:ca:b6:b4:6d:22:ac:64:0f:fd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=993b9fed-5b94-4110-93a0-d3d1cd52ecd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2e:88:c7:f3:cc:a6:be:23:70:f2:e4:d5:c4: ce:bc:e5:77:71:3a:d4:8e:5d:d5:63:c1:03:69:0c: 40:30:56:4c:61:e8:8c:df:4e:73:49:8f:46:2a:dd: f5:88:09:85:f5:f1:3b:5e:80:e4:41:eb:64:40:73: a9:cd:59:06:de:dd:11:7b:3c:30:33:52:8c:65:51: 6a:bf:54:12:8a:6b:47:cb:08:46:f1:bb:5e:db:ce: 92:5a:2d:3d:49:3a:1f:21:e8:0a:f5:9d:a1:2c:1c: e5:df:ea:bb:fb:16:3b:8b:6f:21:3c:63:38:ec:76: ff:72:c7:a1:7f:59:87:4b:3c:0c:13:63:9c:bf:b3: 6b:b2:e2:a5:3b:55:e8:43:26:98:2a:0a:ea:28:0e: e3:5f:e6:b9:8c:b7:c2:23:26:29:d4:f7:8d:fa:ff: 4d:90:24:8e:b8:e3:ca:e6:00:c0:8a:ff:1a:1a:78: bd:47:5e:29:f3:3f:31:49:cd:31:ca:cf:38:4c:bf: 65:8a:c0:c8:19:ff:87:05:1f:e4:87:09:f0:7b:f8: 28:a4:08:b7:6c:78:db:df:58:7e:c2:5e:09:75:05: f8:39:b8:b9:31:da:60:ec:28:29:ff:fa:20:89:f2: 92:de:ab:e0:62:0a:57:ee:98:bc:ae:6e:48:12:a9: df:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:38:33:87:5F:47:E7:9A:EB:59:19:E8:3B:96:BD:CC:06:6C:38:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b11f0458-b61c-3e5a-9df7-55e9dc385389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:1c:47:7a:03:0e:9a:95:40:30:06:a8:40:e7:69:38:a0:3d: 04:40:f8:c8:34:da:49:01:ef:0c:20:6f:8e:e3:e6:5a:b8:14: 0c:91:92:6e:2b:fc:2a:3b:6a:3d:66:41:2d:b2:bc:59:7a:ce: 9c:9b:ff:d0:d1:8f:29:bb:45:f3:33:e4:5d:f0:f1:32:bd:7d: 69:62:39:2f:91:42:06:58:e0:38:4b:83:8f:e1:37:be:d7:94: b4:76:b9:56:17:95:05:68:c5:f3:f2:63:22:fa:57:b8:e0:15: 00:f3:64:b5:4b:fe:14:09:3d:c2:fb:b3:cd:36:a6:8e:e1:e2: 3c:e6:a4:25:6b:b6:ee:68:03:ee:1a:e4:e0:a3:e4:a0:a6:8f: e8:98:df:6d:8d:bf:e5:42:e7:8c:85:55:e3:a0:0c:9a:a1:0b: 5e:c7:3c:d2:67:4f:c6:a2:a2:7a:09:42:a8:3a:45:2a:03:88: 1d:53:5b:0a:56:06:6a:2e:fd:a9:4d:5d:d9:81:d3:7d:67:94: b9:8a:de:13:b3:c5:e9:f8:80:ea:0f:34:b7:e4:99:05:3f:09: 7d:28:21:98:40:73:d4:55:ba:4e:db:b5:8c:8e:4a:08:ed:d4: cd:60:3a:cf:e8:a5:39:ea:fe:f7:07:79:99:20:52:34:95:86: 71:4c:56:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMMq2tG0irGQP/SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk OTkzYjlmZWQtNWI5NC00MTEwLTkzYTAtZDNkMWNkNTJlY2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC6Ix/PMpr4jcPLk1cTOvOV3cTrUjl3VY8ED aQxAMFZMYeiM305zSY9GKt31iAmF9fE7XoDkQetkQHOpzVkG3t0RezwwM1KMZVFq v1QSimtHywhG8bte286SWi09STofIegK9Z2hLBzl3+q7+xY7i28hPGM47Hb/cseh f1mHSzwME2Ocv7NrsuKlO1XoQyaYKgrqKA7jX+a5jLfCIyYp1PeN+v9NkCSOuOPK 5gDAiv8aGni9R14p8z8xSc0xys84TL9lisDIGf+HBR/khwnwe/gopAi3bHjb31h+ wl4JdQX4Obi5Mdpg7Cgp//ogifKS3qvgYgpX7pi8rm5IEqnfNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEk4M4dfR+ea61kZ6DuWvcwGbDhjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvYjExZjA0NTgtYjYxYy0z ZTVhLTlkZjctNTVlOWRjMzg1Mzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dPOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8cR3oDDpqVQDAGqEDnaTigPQRA+Mg02kkB7wwgb47j5lq4FAyRkm4r /Co7aj1mQS2yvFl6zpyb/9DRjym7RfMz5F3w8TK9fWliOS+RQgZY4DhLg4/hN77X lLR2uVYXlQVoxfPyYyL6V7jgFQDzZLVL/hQJPcL7s802po7h4jzmpCVrtu5oA+4a 5OCj5KCmj+iY322Nv+VC54yFVeOgDJqhC17HPNJnT8aionoJQqg6RSoDiB1TWwpW Bmou/alNXdmB031nlLmK3hOzxen4gOoPNLfkmQU/CX0oIZhAc9RVuk7btYyOSgjt 1M1gOs/opTnq/vcHeZkgUjSVhnFMVl8= -----END CERTIFICATE-----Generated at Fri Mar 14 11:16:31 2025 by rpki-client