$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/22b799e7-838e-498b-86a0-ef624326159f/e1d40578-98d1-3e6e-8a23-0232e8a2dfa7.roa File: e1d40578-98d1-3e6e-8a23-0232e8a2dfa7.roa (raw, json) Hash identifier: iKeQj6ZcWugUo2oIYIEJAmSn3pQP7iLk5dAm0K309t0= Subject key identifier: CB:86:3E:E6:EB:A6:A2:2D:67:03:C3:F9:2A:64:19:39:2A:C4:7F:D2 Certificate issuer: /CN=22b799e7-838e-498b-86a0-ef624326159f Certificate serial: 010D0C9F43285848C2B64D4239B51D90E4F53E00 Authority key identifier: 3F:FD:CE:37:9D:79:67:DE:45:32:CD:CE:5B:C8:AE:3B:61:4D:9C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/22b799e7-838e-498b-86a0-ef624326159f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/22b799e7-838e-498b-86a0-ef624326159f/e1d40578-98d1-3e6e-8a23-0232e8a2dfa7.roa Signing time: Mon 03 Feb 2025 14:00:52 +0000 ROA not before: Mon 03 Feb 2025 14:00:52 +0000 ROA not after: Sun 04 May 2025 13:00:52 +0000 asID: 19212 IP address blocks: 209.213.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/22b799e7-838e-498b-86a0-ef624326159f/22b799e7-838e-498b-86a0-ef624326159f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/22b799e7-838e-498b-86a0-ef624326159f/22b799e7-838e-498b-86a0-ef624326159f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/22b799e7-838e-498b-86a0-ef624326159f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:b6:4d:42:39:b5:1d:90:e4:f5:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22b799e7-838e-498b-86a0-ef624326159f Validity Not Before: Feb 3 14:00:52 2025 GMT Not After : May 4 13:00:52 2025 GMT Subject: CN=2b1a866a-5f85-43f3-892c-81729d5227e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f0:ad:5d:3a:88:c9:61:68:b7:9c:aa:74:79: ba:cc:19:f1:c8:3c:af:5a:e0:4c:06:b5:4f:1a:d4: cb:43:2a:d2:1d:54:50:b8:c4:0e:38:16:6a:27:39: 52:8f:d5:ec:61:98:d6:b7:42:c8:ee:9c:49:c1:b7: d1:f2:8a:a4:79:08:b8:12:58:81:ba:7d:57:cc:dd: 63:77:cc:c1:f1:70:e7:1f:65:9f:39:cc:d1:98:c2: 1f:36:7c:4f:f3:50:9a:53:a8:df:ce:46:e0:e3:12: 1d:e5:21:01:e1:65:48:90:00:52:c3:c0:44:a2:66: 63:19:21:06:e5:a0:a1:c9:55:88:58:49:82:92:54: 4d:80:ac:73:15:d0:43:62:64:86:81:a3:b0:b5:85: 16:c3:3e:99:11:9b:38:dd:27:36:33:2d:85:aa:33: 7e:8d:cc:17:30:a8:23:53:1c:b0:b4:5a:76:a2:18: c8:8d:04:ea:bc:f5:9c:84:5c:96:98:c9:ce:65:85: b1:1c:00:1b:c7:6e:75:ed:b9:ab:31:4c:1a:b3:b3: d0:09:f4:07:dc:f6:07:57:90:78:d9:8b:65:f4:37: c9:ca:71:00:47:bc:15:df:0e:20:e0:ba:a4:9b:97: 33:ce:dd:e2:97:9d:de:18:7c:1f:8c:fc:ed:fb:50: 49:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:86:3E:E6:EB:A6:A2:2D:67:03:C3:F9:2A:64:19:39:2A:C4:7F:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/22b799e7-838e-498b-86a0-ef624326159f/e1d40578-98d1-3e6e-8a23-0232e8a2dfa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/22b799e7-838e-498b-86a0-ef624326159f/22b799e7-838e-498b-86a0-ef624326159f.crl X509v3 Authority Key Identifier: keyid:3F:FD:CE:37:9D:79:67:DE:45:32:CD:CE:5B:C8:AE:3B:61:4D:9C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/22b799e7-838e-498b-86a0-ef624326159f.cer sbgp-ipAddrBlock: critical IPv4: 209.213.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:5a:82:05:25:13:0c:b5:53:c0:5c:47:1a:e6:8e:33:5a:7e: cc:57:a3:0f:91:1f:20:8e:df:dc:01:30:42:6c:16:f2:74:33: 3a:76:f0:3e:64:a0:8b:be:a0:6a:40:c8:9b:dc:23:42:e1:16: 9c:49:e9:4a:d8:11:a6:95:c4:f4:d6:85:5e:99:32:83:d2:9e: 98:b2:58:d7:03:01:3d:0c:26:14:03:3c:45:c3:83:29:b7:35: a0:65:6c:d0:28:e7:1a:e2:f5:24:4f:fe:df:d4:c1:0f:bd:68: cd:ce:97:d2:d4:28:47:bc:47:8d:3a:37:f5:a4:1c:5b:6f:c2: b9:18:86:d6:9f:3a:fa:c3:0a:9b:47:52:e2:fe:7d:48:46:cf: 09:f7:18:c8:5a:57:26:56:19:9d:44:8f:21:21:b9:ff:27:c2: 94:d8:89:3f:96:be:b5:26:86:22:92:cf:1a:76:64:4f:d4:d3: 0a:9a:88:06:c1:01:39:63:d3:00:50:a5:a6:73:1a:20:f3:fb: bc:1d:d5:ea:17:6b:73:72:4b:99:f5:aa:40:38:81:7c:59:f6: ef:49:84:a9:07:90:25:60:e3:4e:f5:b7:24:f4:62:a6:0d:5f: 7f:12:f0:03:35:71:c7:f9:ac:96:a2:fa:c9:f7:03:ad:e6:00: 89:4b:45:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCtk1CObUdkOT1PgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJiNzk5ZTctODM4ZS00OThiLTg2YTAtZWY2MjQzMjYx NTlmMB4XDTI1MDIwMzE0MDA1MloXDTI1MDUwNDEzMDA1MlowLzEtMCsGA1UEAxMk MmIxYTg2NmEtNWY4NS00M2YzLTg5MmMtODE3MjlkNTIyN2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfCtXTqIyWFot5yqdHm6zBnxyDyvWuBMBrVP GtTLQyrSHVRQuMQOOBZqJzlSj9XsYZjWt0LI7pxJwbfR8oqkeQi4EliBun1XzN1j d8zB8XDnH2WfOczRmMIfNnxP81CaU6jfzkbg4xId5SEB4WVIkABSw8BEomZjGSEG 5aChyVWIWEmCklRNgKxzFdBDYmSGgaOwtYUWwz6ZEZs43Sc2My2FqjN+jcwXMKgj UxywtFp2ohjIjQTqvPWchFyWmMnOZYWxHAAbx2517bmrMUwas7PQCfQH3PYHV5B4 2Ytl9DfJynEAR7wV3w4g4Lqkm5czzt3il53eGHwfjPzt+1BJTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuGPubrpqItZwPD+SpkGTkqxH/SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yMmI3 OTllNy04MzhlLTQ5OGItODZhMC1lZjYyNDMyNjE1OWYvZTFkNDA1NzgtOThkMS0z ZTZlLThhMjMtMDIzMmU4YTJkZmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjJiNzk5ZTctODM4ZS00OThiLTg2 YTAtZWY2MjQzMjYxNTlmLzIyYjc5OWU3LTgzOGUtNDk4Yi04NmEwLWVmNjI0MzI2 MTU5Zi5jcmwwHwYDVR0jBBgwFoAUP/3ON515Z95FMs3OW8iuO2FNnHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yMmI3OTllNy04MzhlLTQ5OGItODZhMC1lZjYy NDMyNjE1OWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0dUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5aggUlEwy1U8BcRxrmjjNafsxXow+RHyCO39wBMEJsFvJ0Mzp28D5k oIu+oGpAyJvcI0LhFpxJ6UrYEaaVxPTWhV6ZMoPSnpiyWNcDAT0MJhQDPEXDgym3 NaBlbNAo5xri9SRP/t/UwQ+9aM3Ol9LUKEe8R406N/WkHFtvwrkYhtafOvrDCptH UuL+fUhGzwn3GMhaVyZWGZ1EjyEhuf8nwpTYiT+WvrUmhiKSzxp2ZE/U0wqaiAbB ATlj0wBQpaZzGiDz+7wd1eoXa3NyS5n1qkA4gXxZ9u9JhKkHkCVg4071tyT0YqYN X38S8AM1ccf5rJai+sn3A63mAIlLRVI= -----END CERTIFICATE-----Generated at Sat Apr 5 04:37:59 2025 by rpki-client