$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/efa0bfa3-8943-3fb1-a803-a0f7b010ace9.roa File: efa0bfa3-8943-3fb1-a803-a0f7b010ace9.roa (raw, json) Hash identifier: XNg6WkniaMjIDQkNbab5293oOI1xZfjU19Yqqo+xJ0w= Subject key identifier: E9:4C:7F:7E:B6:37:A7:13:7B:6D:54:93:F4:2A:6E:A6:99:E2:84:C9 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F43285848A830B6077FFD5AFAE97A0F00 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/efa0bfa3-8943-3fb1-a803-a0f7b010ace9.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 30473 IP address blocks: 209.211.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:b6:07:7f:fd:5a:fa:e9:7a:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=c422594e-9da4-4b82-90b5-dd1465704c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b9:82:6c:12:02:5d:67:d1:6b:f9:b1:f9:e5: d1:79:00:ce:90:e2:38:1d:30:3f:23:2b:90:13:cb: 27:bb:bf:7e:76:ec:c4:56:02:68:10:a2:a0:70:a9: 37:06:b4:c1:22:e1:62:cd:d2:35:40:6d:d5:39:e5: fc:f8:3a:c8:bf:31:c0:36:c4:22:a3:b4:59:d8:18: 3c:f1:d0:c1:a0:72:eb:0b:78:31:3f:19:aa:74:64: 5b:ec:e3:cb:46:8e:3f:40:0b:6c:7a:52:2e:47:31: 34:f5:28:d1:27:d3:76:26:58:a1:5e:09:d6:ab:22: 3b:1d:13:ce:19:74:17:16:0a:1a:54:48:7d:16:b0: d1:dc:ab:67:30:1b:0a:48:78:d4:86:aa:e6:8a:e8: 25:28:a6:9e:42:19:34:81:36:53:04:ba:91:d1:da: b5:f0:d2:ed:56:21:78:9b:10:cd:65:58:ae:34:99: 7d:b5:93:1a:06:4c:99:dc:81:88:c2:50:76:a4:a9: 0c:54:ce:ad:d3:f5:72:7e:35:98:5b:15:58:ef:f0: e3:bc:8e:7c:f2:9b:18:c2:f7:f8:fe:90:c8:e7:27: bd:b4:de:0e:33:1a:ad:2a:0b:a9:d8:a5:7f:ba:25: af:5d:6d:c8:08:83:34:e7:f4:04:48:65:25:52:62: 2b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4C:7F:7E:B6:37:A7:13:7B:6D:54:93:F4:2A:6E:A6:99:E2:84:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/efa0bfa3-8943-3fb1-a803-a0f7b010ace9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:87:59:2d:82:6d:e5:96:d4:1e:26:bb:ed:76:22:a3:c0:8a: 64:64:ed:81:fc:f5:e7:7b:54:b5:09:e6:ae:ff:9f:e2:1d:fa: 75:b6:e4:1c:cd:f3:6e:cf:cd:6d:d7:b9:9e:35:8a:d8:8f:4b: 78:75:62:1b:6e:0b:20:32:df:6c:ed:44:11:10:a5:27:e7:1b: ce:22:ce:c6:1f:2d:b8:03:74:9a:90:bc:1e:55:12:0c:66:cc: 4b:62:e3:29:ca:96:7a:dc:6d:dd:c2:a1:21:e2:0e:a9:4d:40: ed:93:7b:9e:24:03:09:fd:26:c5:c2:48:32:c5:3f:8e:88:e0: 09:82:a4:9d:38:30:62:9c:de:e7:c5:37:fe:33:4c:16:5e:94: 0a:87:ca:f2:2e:d3:ee:27:21:44:c1:14:ce:ea:5d:08:7e:00: 5e:3b:2c:97:54:10:34:f5:1d:52:bb:46:99:54:da:4a:f0:2a: 8e:97:d1:0a:88:5a:f7:08:4d:56:bb:77:ad:13:6c:5a:98:02: 62:5f:bc:1e:1a:a4:e3:e6:92:b2:3a:e9:1a:72:ae:33:0a:b5: a5:89:18:3d:7f:e8:97:9c:c5:d6:b9:ce:f6:69:30:ec:14:74: e5:07:f0:82:f0:5a:b1:9c:98:72:44:ae:1f:62:fd:c8:13:9c: f0:88:02:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMLYHf/1a+ul6DwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk YzQyMjU5NGUtOWRhNC00YjgyLTkwYjUtZGQxNDY1NzA0Yzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17mCbBICXWfRa/mx+eXReQDOkOI4HTA/IyuQ E8snu79+duzEVgJoEKKgcKk3BrTBIuFizdI1QG3VOeX8+DrIvzHANsQio7RZ2Bg8 8dDBoHLrC3gxPxmqdGRb7OPLRo4/QAtselIuRzE09SjRJ9N2JlihXgnWqyI7HRPO GXQXFgoaVEh9FrDR3KtnMBsKSHjUhqrmiuglKKaeQhk0gTZTBLqR0dq18NLtViF4 mxDNZViuNJl9tZMaBkyZ3IGIwlB2pKkMVM6t0/VyfjWYWxVY7/DjvI588psYwvf4 /pDI5ye9tN4OMxqtKgup2KV/uiWvXW3ICIM05/QESGUlUmIrVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlMf362N6cTe21Uk/QqbqaZ4oTJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZWZhMGJmYTMtODk0My0z ZmIxLWE4MDMtYTBmN2IwMTBhY2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dNHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCHWS2CbeWW1B4mu+12IqPAimRk7YH89ed7VLUJ5q7/n+Id+nW25BzN 827PzW3XuZ41itiPS3h1YhtuCyAy32ztRBEQpSfnG84izsYfLbgDdJqQvB5VEgxm zEti4ynKlnrcbd3CoSHiDqlNQO2Te54kAwn9JsXCSDLFP46I4AmCpJ04MGKc3ufF N/4zTBZelAqHyvIu0+4nIUTBFM7qXQh+AF47LJdUEDT1HVK7RplU2krwKo6X0QqI WvcITVa7d60TbFqYAmJfvB4apOPmkrI66RpyrjMKtaWJGD1/6Jecxda5zvZpMOwU dOUH8ILwWrGcmHJErh9i/cgTnPCIAro= -----END CERTIFICATE-----Generated at Fri Mar 14 13:30:21 2025 by rpki-client