$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/3c424c5d-1d20-3685-9ac3-a16b0a28cebe.roa File: 3c424c5d-1d20-3685-9ac3-a16b0a28cebe.roa (raw, json) Hash identifier: BJ9+M29sijmwziOsU7K0gFFzVl92Ibv0vF3PRtr0mPI= Subject key identifier: A7:3E:DA:3B:29:85:7B:5B:F3:E0:8C:57:B6:A4:AD:31:C2:52:84:B0 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F432858485E35AF4EBA6A7204AF49F0C0 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/3c424c5d-1d20-3685-9ac3-a16b0a28cebe.roa Signing time: Sun 29 Dec 2024 14:00:53 +0000 ROA not before: Sun 29 Dec 2024 14:00:53 +0000 ROA not after: Sat 29 Mar 2025 13:00:53 +0000 asID: 22808 IP address blocks: 206.49.107.64/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5e:35:af:4e:ba:6a:72:04:af:49:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Dec 29 14:00:53 2024 GMT Not After : Mar 29 13:00:53 2025 GMT Subject: CN=34b89f69-c1b3-4d99-943b-6446cfa6f830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bc:3b:83:eb:9e:f2:00:10:78:3a:8e:52:03: 6f:3d:95:36:cf:4b:34:74:0b:28:b4:b9:98:36:ee: c4:4c:4c:5c:1a:20:60:71:96:ab:5b:1e:8e:b8:a7: 40:79:d1:d4:64:d6:2e:d3:a9:c4:08:cc:ce:e4:61: 00:ba:21:26:8d:af:d2:58:54:5f:55:8c:85:ba:52: 2c:8b:c9:0c:e2:d0:ca:6c:00:b4:ad:49:d5:ed:b7: 37:cb:b5:5b:b4:8e:ad:d7:93:2a:64:75:9d:87:ea: 67:69:75:b8:a4:fa:03:75:14:08:7f:d8:08:1a:8b: af:3f:b6:8e:fb:ba:47:8f:cc:10:4a:90:be:52:4a: d8:55:88:87:16:95:c5:5b:5c:6f:da:34:bc:2e:a6: c3:da:86:b8:bc:2c:a5:ca:ab:d5:06:36:92:01:7f: 3d:c7:82:bc:08:43:38:7f:ce:09:41:cb:46:d2:db: c6:c1:ca:9b:85:52:38:4c:85:96:68:2e:45:33:13: fa:e0:d2:11:a7:e8:6b:f1:82:22:f2:5c:3d:1a:5a: d5:f8:4d:e5:b5:97:30:ae:6b:c2:17:8d:6f:0e:f4: 5f:cf:c8:d7:68:fc:94:5f:f6:6a:ef:bc:9a:a2:d7: 08:39:ca:49:8f:e7:71:b9:42:dc:f7:cc:81:9b:82: e6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3E:DA:3B:29:85:7B:5B:F3:E0:8C:57:B6:A4:AD:31:C2:52:84:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/3c424c5d-1d20-3685-9ac3-a16b0a28cebe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 206.49.107.64/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:94:27:dc:2a:e0:49:62:96:2b:6e:17:c4:bd:6f:8f:64:a3: 59:f4:91:22:8e:d2:a3:00:74:2b:42:1c:63:49:61:48:85:f9: 21:bb:ae:d0:05:df:f3:de:4c:50:c9:d3:a2:8a:d2:fb:09:bc: 28:d2:90:b6:5f:c5:5b:df:20:3a:15:19:e0:7d:ae:3f:75:c6: 45:9a:e7:65:64:a4:80:6a:7b:c7:65:85:f5:55:ec:30:cd:19: 74:52:89:d0:25:29:bd:a3:65:36:5d:5a:64:00:98:01:d4:bd: 1e:0a:cc:51:72:5f:a1:54:1c:43:ca:b7:aa:fb:23:aa:ca:c4: 8b:12:9c:de:a3:ef:70:6d:ef:e2:dd:e4:27:4e:e0:c3:bb:c6: 3d:a0:19:79:3d:0f:b9:7a:1e:9a:ff:1f:be:10:79:47:3f:4e: 81:26:b4:6e:4b:ea:cd:69:c8:cf:fa:7c:4d:a4:1a:b8:ff:c6: 15:9c:ac:c1:1f:02:9d:54:22:0e:f2:ff:20:0f:39:9c:d8:0e: f3:bf:c3:e3:03:dd:76:e6:3b:d7:6c:a2:30:d1:c2:a2:06:53: fa:6d:52:25:bf:24:23:5e:83:48:da:b4:af:e2:6b:11:a9:db: b0:5c:a6:08:6d:f9:f3:3f:1c:9b:67:86:79:6d:01:63:5b:9b: 0f:d4:62:a3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEheNa9OumpyBK9J8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI0MTIyOTE0MDA1M1oXDTI1MDMyOTEzMDA1M1owLzEtMCsGA1UEAxMk MzRiODlmNjktYzFiMy00ZDk5LTk0M2ItNjQ0NmNmYTZmODMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7w7g+ue8gAQeDqOUgNvPZU2z0s0dAsotLmY Nu7ETExcGiBgcZarWx6OuKdAedHUZNYu06nECMzO5GEAuiEmja/SWFRfVYyFulIs i8kM4tDKbAC0rUnV7bc3y7VbtI6t15MqZHWdh+pnaXW4pPoDdRQIf9gIGouvP7aO +7pHj8wQSpC+UkrYVYiHFpXFW1xv2jS8LqbD2oa4vCylyqvVBjaSAX89x4K8CEM4 f84JQctG0tvGwcqbhVI4TIWWaC5FMxP64NIRp+hr8YIi8lw9GlrV+E3ltZcwrmvC F41vDvRfz8jXaPyUX/Zq77yaotcIOcpJj+dxuULc98yBm4Lm1QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKc+2jsphXtb8+CMV7akrTHCUoSwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvM2M0MjRjNWQtMWQyMC0z Njg1LTlhYzMtYTE2YjBhMjhjZWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEzjFrQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAmlCfcKuBJYpYrbhfEvW+PZKNZ9JEijtKjAHQrQhxjSWFIhfkhu67Q Bd/z3kxQydOiitL7Cbwo0pC2X8Vb3yA6FRngfa4/dcZFmudlZKSAanvHZYX1Veww zRl0UonQJSm9o2U2XVpkAJgB1L0eCsxRcl+hVBxDyreq+yOqysSLEpzeo+9wbe/i 3eQnTuDDu8Y9oBl5PQ+5eh6a/x++EHlHP06BJrRuS+rNacjP+nxNpBq4/8YVnKzB HwKdVCIO8v8gDzmc2A7zv8PjA9125jvXbKIw0cKiBlP6bVIlvyQjXoNI2rSv4msR qduwXKYIbfnzPxybZ4Z5bQFjW5sP1GKj -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:36 2025 by rpki-client