$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e89af54f-c2c4-33af-9b3f-df8464bb9ec7.roa File: e89af54f-c2c4-33af-9b3f-df8464bb9ec7.roa (raw, json) Hash identifier: cLe92xEn4bPMIXpKqjwbpWKOhDaw+Q9PkF8EObI1D5k= Subject key identifier: AF:E4:6F:D2:52:4C:CC:0F:C2:F3:15:5E:F1:46:FD:F9:D5:C7:0B:8D Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F43285848A830B3EF5A9ACADD58E4E980 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e89af54f-c2c4-33af-9b3f-df8464bb9ec7.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 54196 IP address blocks: 209.211.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:b3:ef:5a:9a:ca:dd:58:e4:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=2ca64487-bec5-406b-938f-aa42ebf61c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:91:7c:df:24:2c:a6:42:5b:15:51:f3:85:59: 28:12:19:99:f0:69:e3:ef:2f:42:aa:78:e1:1d:29: 34:45:e3:41:40:cc:40:f4:b5:ee:5d:28:a5:10:2a: 7f:89:04:86:ed:04:7f:6a:75:f9:5f:f4:c5:4f:2e: 58:04:5f:9e:fc:e1:10:d1:e5:10:fc:d3:a8:6b:7a: 89:f7:a3:b5:65:22:80:84:8c:2b:d5:54:bf:a3:84: d1:23:fd:77:e8:45:85:1c:87:96:31:c7:a4:f3:67: 17:90:8b:0c:2b:f1:47:6d:f8:00:0a:80:11:85:a1: 4b:f0:3c:c4:9c:a2:97:19:9e:85:92:89:64:b2:d6: bc:9c:d5:1c:be:c1:c5:ea:0d:0f:04:97:38:df:43: a9:6e:2a:c4:fb:af:88:f5:60:04:9c:79:50:66:d8: c4:7a:2a:07:3c:86:7a:98:a9:8c:84:f7:f3:f0:60: ca:f2:99:ec:9f:db:87:4d:95:41:db:e8:e1:0a:e9: 16:ab:93:72:82:30:52:32:f0:12:8e:d2:b8:ac:60: 21:a9:3b:27:93:53:e5:84:17:a6:6c:12:5e:15:8e: 21:6b:43:a7:9d:03:bb:dd:c5:91:0f:70:e9:12:92: 09:19:2f:82:72:53:4a:ef:95:eb:84:f2:3d:32:da: b0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E4:6F:D2:52:4C:CC:0F:C2:F3:15:5E:F1:46:FD:F9:D5:C7:0B:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e89af54f-c2c4-33af-9b3f-df8464bb9ec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:51:23:a2:67:02:78:26:2a:8f:76:82:7a:35:17:03:cd:b3: 96:81:f6:bc:f4:cf:b5:4a:8f:bc:a6:f7:95:1e:b8:f2:da:b7: 23:0a:e4:56:7a:5c:cc:79:c3:8d:65:75:3f:bd:50:1b:af:51: 18:0c:ac:d3:b9:31:cd:d1:8f:76:b7:de:91:fe:b2:30:a4:40: 62:c6:fe:e1:b8:55:1f:c9:25:23:4f:13:05:c7:ec:a8:b2:87: d8:c6:a3:4b:aa:ee:97:87:e3:3c:a2:75:9c:d1:4f:b4:5d:15: be:de:5a:53:d7:b4:88:70:42:d2:c8:3c:83:81:e8:b7:45:27: 6d:63:51:cf:10:8e:59:74:06:ff:d7:c9:06:4a:39:e0:ed:d8: cb:70:3e:2a:81:1d:98:56:a5:2b:ec:4c:88:bd:b8:9a:d7:84: 44:80:8a:24:77:d6:08:65:34:1c:b0:55:09:60:2c:c1:a4:86: d2:4b:dd:ba:d9:5f:48:08:94:c8:ae:5d:fc:33:9f:f2:df:74: 13:75:48:bd:c0:8d:87:73:1f:5b:ed:7f:73:a6:a9:57:9c:66: 2a:55:bd:af:b9:ad:b9:81:75:2d:74:97:93:79:41:06:3f:db: 9d:af:e3:38:ba:3f:37:43:61:1a:00:86:23:10:7d:29:b9:45: 5b:54:42:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMLPvWprK3Vjk6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk MmNhNjQ0ODctYmVjNS00MDZiLTkzOGYtYWE0MmViZjYxYzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpF83yQspkJbFVHzhVkoEhmZ8Gnj7y9Cqnjh HSk0ReNBQMxA9LXuXSilECp/iQSG7QR/anX5X/TFTy5YBF+e/OEQ0eUQ/NOoa3qJ 96O1ZSKAhIwr1VS/o4TRI/136EWFHIeWMcek82cXkIsMK/FHbfgACoARhaFL8DzE nKKXGZ6Fkolksta8nNUcvsHF6g0PBJc430OpbirE+6+I9WAEnHlQZtjEeioHPIZ6 mKmMhPfz8GDK8pnsn9uHTZVB2+jhCukWq5NygjBSMvASjtK4rGAhqTsnk1PlhBem bBJeFY4ha0OnnQO73cWRD3DpEpIJGS+CclNK75XrhPI9MtqwAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/kb9JSTMwPwvMVXvFG/fnVxwuNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZTg5YWY1NGYtYzJjNC0z M2FmLTliM2YtZGY4NDY0YmI5ZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dMcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALpRI6JnAngmKo92gno1FwPNs5aB9rz0z7VKj7ym95UeuPLatyMK5FZ6 XMx5w41ldT+9UBuvURgMrNO5Mc3Rj3a33pH+sjCkQGLG/uG4VR/JJSNPEwXH7Kiy h9jGo0uq7peH4zyidZzRT7RdFb7eWlPXtIhwQtLIPIOB6LdFJ21jUc8Qjll0Bv/X yQZKOeDt2MtwPiqBHZhWpSvsTIi9uJrXhESAiiR31ghlNBywVQlgLMGkhtJL3brZ X0gIlMiuXfwzn/LfdBN1SL3AjYdzH1vtf3OmqVecZipVva+5rbmBdS10l5N5QQY/ 252v4zi6PzdDYRoAhiMQfSm5RVtUQsE= -----END CERTIFICATE-----Generated at Fri Mar 14 11:13:42 2025 by rpki-client