$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/7e0aac9c-6af5-3f46-8053-87b3ecc24d33.roa File: 7e0aac9c-6af5-3f46-8053-87b3ecc24d33.roa (raw, json) Hash identifier: V/lY+89nWUBtcsptGSr4N4yjjTCn9GYnQws3XbD2PQs= Subject key identifier: 26:75:64:CA:34:C1:18:75:57:DE:13:C3:93:CB:7A:2D:DA:AA:05:24 Certificate issuer: /CN=405ae070-e9e9-4d3c-b449-868426ff2303 Certificate serial: 010D0C9F432858480BDA65A2C6CB3B4471BE4700 Authority key identifier: F9:21:3A:33:01:EF:02:BE:09:BE:9D:FF:C2:08:E4:BD:BD:36:E4:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/7e0aac9c-6af5-3f46-8053-87b3ecc24d33.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 15296 IP address blocks: 204.209.76.0/22 maxlen: 22 204.209.76.0/24 maxlen: 24 204.209.77.0/24 maxlen: 24 204.209.78.0/24 maxlen: 24 204.209.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:65:a2:c6:cb:3b:44:71:be:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=405ae070-e9e9-4d3c-b449-868426ff2303 Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=c93167d1-24bd-43f1-919b-8d89757cfef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0e:39:e3:28:53:86:79:ed:36:98:75:40:a7: 0d:e5:6f:15:a3:ba:32:7a:ab:d0:93:d7:10:9a:0b: 34:50:e3:09:55:60:74:04:5e:f5:37:a4:be:1a:44: 31:7f:45:97:25:c1:26:ed:ff:76:70:62:31:6e:d5: f8:11:c0:65:ed:93:b6:1d:9e:bf:53:42:4b:3d:82: 52:3b:8b:82:c9:a7:12:21:7b:35:6e:6c:09:07:95: 4b:a5:ed:30:92:3b:e2:9e:36:58:15:1b:3f:b5:94: 0a:7c:fb:5d:e5:14:c0:ba:d8:56:9f:25:db:d0:71: 33:a6:df:77:50:74:48:88:a5:a2:e4:8c:37:4c:8f: 24:c4:5c:98:28:0f:b2:f2:42:48:da:1f:57:e1:2e: b5:48:07:20:47:2d:03:4f:64:fb:9d:61:53:31:f1: 56:fd:69:10:5a:8e:a6:0c:12:04:60:17:0e:87:17: 2a:86:76:a5:93:cc:0d:87:c2:6d:3e:eb:96:75:34: 5d:56:eb:e2:56:93:27:ec:50:1e:13:6d:04:d4:09: 3d:20:56:14:6c:c5:4c:e1:03:84:a7:be:5c:e7:a2: 3c:63:65:fe:00:6a:8c:63:17:67:3f:79:79:1f:4e: 92:e8:09:08:1d:1b:c8:4a:b3:96:63:2d:eb:f0:b5: 47:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:75:64:CA:34:C1:18:75:57:DE:13:C3:93:CB:7A:2D:DA:AA:05:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/7e0aac9c-6af5-3f46-8053-87b3ecc24d33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.crl X509v3 Authority Key Identifier: keyid:F9:21:3A:33:01:EF:02:BE:09:BE:9D:FF:C2:08:E4:BD:BD:36:E4:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer sbgp-ipAddrBlock: critical IPv4: 204.209.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:d1:21:20:ab:b8:de:80:37:d9:b4:ca:e5:83:b5:5f:07:dc: aa:c3:a9:7e:52:72:a4:22:5f:62:dc:98:0d:64:5f:52:87:e1: 05:e6:e6:6e:40:1d:81:15:6e:a6:92:1d:22:59:52:44:2c:61: 8d:69:20:7d:30:9f:75:fb:c6:57:3e:c6:82:14:6d:f9:c9:e6: df:02:4a:8e:eb:bd:c0:21:c5:08:93:01:c3:4f:1d:4a:c7:43: 13:a6:77:3d:e8:43:f2:c6:67:6d:85:e9:87:1c:ab:e9:0c:ef: 51:bc:fd:b4:17:cc:60:6c:52:b5:88:8b:d7:61:bb:48:02:cd: ed:a6:43:01:d6:eb:0b:86:2c:96:fa:a3:73:c6:37:2a:9f:c2: ee:5a:2e:6d:84:63:10:19:5b:f8:88:3e:cb:40:c6:a1:84:b6: 32:57:8c:77:6f:8d:ab:20:94:08:76:8f:c8:c9:50:e8:24:76: 55:d6:61:78:91:a6:54:d0:26:40:23:41:3e:ae:e8:46:6c:4d: 06:25:8b:7b:34:45:d1:10:3e:a4:be:e0:80:d9:a7:08:bf:f7: d8:85:34:f1:17:f0:30:96:b5:bd:e9:da:47:01:1b:ad:47:dd: d3:2f:18:24:fb:ed:26:04:98:21:c5:d4:f3:08:f7:87:ed:a4: 64:80:58:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgL2mWixss7RHG+RwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDA1YWUwNzAtZTllOS00ZDNjLWI0NDktODY4NDI2ZmYy MzAzMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk YzkzMTY3ZDEtMjRiZC00M2YxLTkxOWItOGQ4OTc1N2NmZWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhA454yhThnntNph1QKcN5W8Vo7oyeqvQk9cQ mgs0UOMJVWB0BF71N6S+GkQxf0WXJcEm7f92cGIxbtX4EcBl7ZO2HZ6/U0JLPYJS O4uCyacSIXs1bmwJB5VLpe0wkjvinjZYFRs/tZQKfPtd5RTAuthWnyXb0HEzpt93 UHRIiKWi5Iw3TI8kxFyYKA+y8kJI2h9X4S61SAcgRy0DT2T7nWFTMfFW/WkQWo6m DBIEYBcOhxcqhnalk8wNh8JtPuuWdTRdVuviVpMn7FAeE20E1Ak9IFYUbMVM4QOE p75c56I8Y2X+AGqMYxdnP3l5H06S6AkIHRvISrOWYy3r8LVH3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZ1ZMo0wRh1V94Tw5PLei3aqgUkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MDVh ZTA3MC1lOWU5LTRkM2MtYjQ0OS04Njg0MjZmZjIzMDMvN2UwYWFjOWMtNmFmNS0z ZjQ2LTgwNTMtODdiM2VjYzI0ZDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDA1YWUwNzAtZTllOS00ZDNjLWI0 NDktODY4NDI2ZmYyMzAzLzQwNWFlMDcwLWU5ZTktNGQzYy1iNDQ5LTg2ODQyNmZm MjMwMy5jcmwwHwYDVR0jBBgwFoAU+SE6MwHvAr4Jvp3/wgjkvb025GAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MDVhZTA3MC1lOWU5LTRkM2MtYjQ0OS04Njg0 MjZmZjIzMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzNFMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHRISCruN6AN9m0yuWDtV8H3KrDqX5ScqQiX2LcmA1kX1KH4QXm5m5A HYEVbqaSHSJZUkQsYY1pIH0wn3X7xlc+xoIUbfnJ5t8CSo7rvcAhxQiTAcNPHUrH QxOmdz3oQ/LGZ22F6Yccq+kM71G8/bQXzGBsUrWIi9dhu0gCze2mQwHW6wuGLJb6 o3PGNyqfwu5aLm2EYxAZW/iIPstAxqGEtjJXjHdvjasglAh2j8jJUOgkdlXWYXiR plTQJkAjQT6u6EZsTQYli3s0RdEQPqS+4IDZpwi/99iFNPEX8DCWtb3p2kcBG61H 3dMvGCT77SYEmCHF1PMI94ftpGSAWNo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:56 2025 by rpki-client