$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/7d8ad61a-3568-305d-b11c-06347f5b968c.roa File: 7d8ad61a-3568-305d-b11c-06347f5b968c.roa (raw, json) Hash identifier: Xn77cSdnqMwWYL6EyNK7wj/EEeaBZKX2ov2WI9oGt0s= Subject key identifier: 59:35:8C:47:85:7E:0D:1B:E0:ED:A4:D8:21:D3:D0:89:D0:9B:56:B9 Certificate issuer: /CN=85ab0b8f-e87f-4660-83cc-46c357202ed9 Certificate serial: 010D0C9F43285848E2D10A4B48441DA9CBEF4100 Authority key identifier: 9D:E5:D3:16:6B:18:97:A4:4E:55:F8:BE:7B:71:30:25:AF:77:9B:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/7d8ad61a-3568-305d-b11c-06347f5b968c.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 14618 IP address blocks: 209.222.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/85ab0b8f-e87f-4660-83cc-46c357202ed9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/85ab0b8f-e87f-4660-83cc-46c357202ed9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:0a:4b:48:44:1d:a9:cb:ef:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85ab0b8f-e87f-4660-83cc-46c357202ed9 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=b2053cc9-5d32-4251-a8fc-e2eb445edc66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d0:c8:7a:34:c9:b9:14:46:57:a2:4c:e3:1d: 94:09:b7:3d:a3:36:e3:33:eb:7c:4c:37:be:54:3c: 08:13:1f:34:7d:e1:75:b5:58:19:95:b8:81:d1:b5: 75:6e:c3:35:38:7a:21:a6:fa:9b:1a:ed:60:87:26: 3d:09:d3:8f:f1:53:ad:05:5a:e3:54:87:bc:9b:b3: c8:c9:aa:b7:eb:bb:e9:91:f6:4f:2f:0b:de:2f:c0: 17:b8:f7:db:a8:c3:67:92:31:54:9e:6a:0e:9a:6a: 4d:f6:b8:15:5f:a9:b0:b4:96:2d:78:e0:b0:b8:d4: 02:5b:d1:98:77:b6:f9:28:52:f9:e0:f9:7c:2d:5a: be:71:b6:97:4a:e9:24:43:cf:cf:de:b9:9b:8e:21: 03:04:31:58:78:2b:63:bc:4a:ba:6e:71:6b:ca:e5: 45:34:ed:d3:8f:5f:1d:c4:b0:ef:bb:52:9a:16:66: e5:12:14:36:3f:38:b9:89:9e:5f:e9:fe:97:3c:b9: db:00:55:3d:96:fe:1f:da:61:48:62:f8:d5:fa:25: 3e:5e:4b:78:c5:3c:f9:f7:d4:5b:ae:99:37:bf:a0: 9a:05:65:ba:b4:83:2e:49:98:1a:9a:22:25:b3:bb: ca:b3:3d:66:86:83:30:8e:55:d4:13:c2:9d:a2:2c: 41:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:35:8C:47:85:7E:0D:1B:E0:ED:A4:D8:21:D3:D0:89:D0:9B:56:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/7d8ad61a-3568-305d-b11c-06347f5b968c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/85ab0b8f-e87f-4660-83cc-46c357202ed9.crl X509v3 Authority Key Identifier: keyid:9D:E5:D3:16:6B:18:97:A4:4E:55:F8:BE:7B:71:30:25:AF:77:9B:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9.cer sbgp-ipAddrBlock: critical IPv4: 209.222.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:89:40:e2:39:4e:2c:3d:2c:a4:a5:2f:22:54:f7:26:15:cb: 8d:1f:a4:ea:c7:5d:32:c7:70:d7:18:7f:17:3a:38:d7:40:f4: a0:40:17:dc:f2:a2:6e:f7:46:df:35:26:bb:33:61:06:19:67: 71:96:28:b9:64:4e:62:95:af:a8:8f:c5:22:53:0d:7a:db:7b: 0c:ea:b5:d8:62:46:69:a8:c4:21:fe:fa:8b:f6:56:73:14:2f: 02:6d:29:4a:95:a5:83:ff:80:9d:d4:88:30:2d:24:48:da:21: d4:38:98:28:d0:2f:e4:bf:05:8d:5b:1f:09:f6:3c:31:86:e3: 2a:ef:cf:06:4c:2c:33:78:23:5c:d4:4d:de:a6:c6:96:5f:1c: e7:38:33:dd:b1:ec:85:79:e0:98:57:1a:92:57:bb:f5:af:2e: b9:75:43:7f:d0:d3:ea:ed:aa:44:64:34:3f:f6:5f:55:7a:ee: 6d:bc:14:49:e1:82:a3:5c:5b:04:94:4e:80:27:f9:7a:ba:d3: 46:95:32:77:6f:32:1d:c6:03:af:fa:86:a9:f7:3e:04:02:fd: 3c:d2:b9:60:ca:09:57:d3:1d:cb:ef:51:ed:fe:26:e6:41:69: ef:7b:9f:e4:08:bb:30:8a:7c:88:56:81:e5:26:b6:d1:e7:65: 7c:38:28:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0QpLSEQdqcvvQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVhYjBiOGYtZTg3Zi00NjYwLTgzY2MtNDZjMzU3MjAy ZWQ5MB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk YjIwNTNjYzktNWQzMi00MjUxLWE4ZmMtZTJlYjQ0NWVkYzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtDIejTJuRRGV6JM4x2UCbc9ozbjM+t8TDe+ VDwIEx80feF1tVgZlbiB0bV1bsM1OHohpvqbGu1ghyY9CdOP8VOtBVrjVIe8m7PI yaq367vpkfZPLwveL8AXuPfbqMNnkjFUnmoOmmpN9rgVX6mwtJYteOCwuNQCW9GY d7b5KFL54Pl8LVq+cbaXSukkQ8/P3rmbjiEDBDFYeCtjvEq6bnFryuVFNO3Tj18d xLDvu1KaFmblEhQ2Pzi5iZ5f6f6XPLnbAFU9lv4f2mFIYvjV+iU+Xkt4xTz599Rb rpk3v6CaBWW6tIMuSZgamiIls7vKsz1mhoMwjlXUE8KdoixBFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFk1jEeFfg0b4O2k2CHT0InQm1a5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NWFi MGI4Zi1lODdmLTQ2NjAtODNjYy00NmMzNTcyMDJlZDkvN2Q4YWQ2MWEtMzU2OC0z MDVkLWIxMWMtMDYzNDdmNWI5NjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODVhYjBiOGYtZTg3Zi00NjYwLTgz Y2MtNDZjMzU3MjAyZWQ5Lzg1YWIwYjhmLWU4N2YtNDY2MC04M2NjLTQ2YzM1NzIw MmVkOS5jcmwwHwYDVR0jBBgwFoAUneXTFmsYl6ROVfi+e3EwJa93m+gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NWFiMGI4Zi1lODdmLTQ2NjAtODNjYy00NmMz NTcyMDJlZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d5SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECJQOI5Tiw9LKSlLyJU9yYVy40fpOrHXTLHcNcYfxc6ONdA9KBAF9zy om73Rt81JrszYQYZZ3GWKLlkTmKVr6iPxSJTDXrbewzqtdhiRmmoxCH++ov2VnMU LwJtKUqVpYP/gJ3UiDAtJEjaIdQ4mCjQL+S/BY1bHwn2PDGG4yrvzwZMLDN4I1zU Td6mxpZfHOc4M92x7IV54JhXGpJXu/WvLrl1Q3/Q0+rtqkRkND/2X1V67m28FEnh gqNcWwSUToAn+Xq600aVMndvMh3GA6/6hqn3PgQC/TzSuWDKCVfTHcvvUe3+JuZB ae97n+QIuzCKfIhWgeUmttHnZXw4KNc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:41 2025 by rpki-client