$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/f0b33ea1-45a2-39dd-8b27-754e4b5f6cf2.roa File: f0b33ea1-45a2-39dd-8b27-754e4b5f6cf2.roa (raw, json) Hash identifier: myzU+X6fjEQaRYuneDKuk5C2Hf7wqZ/6nlg0yANX4iM= Subject key identifier: 1A:8A:16:36:15:E8:E9:9F:87:86:FA:41:A4:8A:7A:C0:D2:32:BC:43 Certificate issuer: /CN=28ab384d-3018-413f-b253-d2f3ef552ffa Certificate serial: 010D0C9F43285848960B5A347A6134EDFF456680 Authority key identifier: 6E:B7:78:CA:90:AF:24:79:73:34:BF:74:58:8A:65:6A:6A:5F:28:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/f0b33ea1-45a2-39dd-8b27-754e4b5f6cf2.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 399253 IP address blocks: 209.209.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:5a:34:7a:61:34:ed:ff:45:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ab384d-3018-413f-b253-d2f3ef552ffa Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=1e3bfdc5-f405-4d8b-91cf-e0bdab81ae5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:77:c0:68:4b:8a:b0:eb:fb:fe:08:c4:98:9e: fc:10:e2:dd:8f:46:ab:73:fd:f0:5a:fc:50:0d:56: cc:29:86:f1:21:9d:0a:a7:ac:07:34:1a:8e:62:31: 72:72:01:00:39:6b:05:80:96:24:51:55:b2:18:1a: 6b:c5:f8:68:2c:6d:22:bb:98:48:15:36:fe:37:95: 85:43:6e:c4:54:58:67:68:95:b0:ac:b3:32:5a:13: ef:b9:a0:14:5d:fc:4c:85:da:a5:ed:20:95:03:93: 43:c8:a0:49:ee:36:23:42:b2:ca:ee:eb:21:4f:6a: e1:d0:56:2a:85:91:9e:c8:0b:b3:64:d5:30:16:a6: cf:42:dc:e1:bc:ed:91:78:09:7d:ca:42:a4:07:6d: f1:9f:0f:78:e4:55:bb:6e:c9:ef:b0:b7:bb:f5:c9: 31:14:f1:45:fe:c2:24:b3:ac:a5:3a:95:7c:dd:50: c0:85:2b:34:c2:ef:1b:51:2a:42:8f:38:1a:e1:41: 8b:b8:86:cc:55:2f:49:23:2f:79:5b:65:bc:71:53: 44:b6:64:a8:5f:b6:0d:15:ec:94:b2:0e:fa:54:68: 28:6f:3b:f0:35:43:6c:19:71:2c:10:02:c3:70:65: f4:6f:9a:28:c5:3e:aa:cc:8e:f5:84:bf:92:97:c9: 67:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:8A:16:36:15:E8:E9:9F:87:86:FA:41:A4:8A:7A:C0:D2:32:BC:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/f0b33ea1-45a2-39dd-8b27-754e4b5f6cf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.crl X509v3 Authority Key Identifier: keyid:6E:B7:78:CA:90:AF:24:79:73:34:BF:74:58:8A:65:6A:6A:5F:28:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa.cer sbgp-ipAddrBlock: critical IPv4: 209.209.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:6a:60:f2:47:e3:76:27:40:66:f0:66:fb:fe:bc:69:b3:85: d0:05:3d:6a:ea:83:45:78:8f:80:19:85:6b:7a:8f:74:13:0c: 62:06:3e:1e:1b:2a:bd:fb:46:9b:e2:dc:9e:d5:25:6a:be:31: 8a:67:bc:db:2a:36:e9:2c:ce:48:27:e9:c3:ae:f6:c4:70:b0: cd:18:dd:bf:74:6e:25:a9:6f:f3:30:ed:c1:5b:66:85:e8:3f: 3a:20:79:bb:c5:c0:42:6e:1b:13:29:61:57:05:b8:6c:e3:00: a1:3f:2c:06:f5:66:14:90:90:0e:13:86:d2:23:37:98:fc:d9: 87:43:b3:06:32:58:61:37:0a:dd:60:54:40:3f:07:c2:7f:ac: 52:af:ee:42:8c:09:2a:bb:e1:76:3b:41:2b:8f:3d:fd:f7:1e: 4a:e2:52:ab:04:50:2a:c5:36:f9:ee:cc:f9:cd:22:1d:ee:cf: 95:05:bd:a3:91:24:7b:4b:f6:79:44:32:24:39:d1:2e:54:b0: c5:55:8e:64:01:85:ca:53:3c:f2:41:e4:00:fe:dc:3e:83:4f: ec:c8:99:22:2c:d1:97:7c:7e:b9:01:58:04:80:f7:4e:b4:29: ad:5b:2f:b3:2a:4d:7b:ae:90:51:87:22:09:7c:13:ff:d7:36: 72:92:5c:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC1o0emE07f9FZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhYjM4NGQtMzAxOC00MTNmLWIyNTMtZDJmM2VmNTUy ZmZhMB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk MWUzYmZkYzUtZjQwNS00ZDhiLTkxY2YtZTBiZGFiODFhZTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHfAaEuKsOv7/gjEmJ78EOLdj0arc/3wWvxQ DVbMKYbxIZ0Kp6wHNBqOYjFycgEAOWsFgJYkUVWyGBprxfhoLG0iu5hIFTb+N5WF Q27EVFhnaJWwrLMyWhPvuaAUXfxMhdql7SCVA5NDyKBJ7jYjQrLK7ushT2rh0FYq hZGeyAuzZNUwFqbPQtzhvO2ReAl9ykKkB23xnw945FW7bsnvsLe79ckxFPFF/sIk s6ylOpV83VDAhSs0wu8bUSpCjzga4UGLuIbMVS9JIy95W2W8cVNEtmSoX7YNFeyU sg76VGgobzvwNUNsGXEsEALDcGX0b5ooxT6qzI71hL+Sl8lnPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqKFjYV6Omfh4b6QaSKesDSMrxDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOGFi Mzg0ZC0zMDE4LTQxM2YtYjI1My1kMmYzZWY1NTJmZmEvZjBiMzNlYTEtNDVhMi0z OWRkLThiMjctNzU0ZTRiNWY2Y2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjhhYjM4NGQtMzAxOC00MTNmLWIy NTMtZDJmM2VmNTUyZmZhLzI4YWIzODRkLTMwMTgtNDEzZi1iMjUzLWQyZjNlZjU1 MmZmYS5jcmwwHwYDVR0jBBgwFoAUbrd4ypCvJHlzNL90WIplampfKGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yOGFiMzg0ZC0zMDE4LTQxM2YtYjI1My1kMmYz ZWY1NTJmZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dF+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJqYPJH43YnQGbwZvv+vGmzhdAFPWrqg0V4j4AZhWt6j3QTDGIGPh4b Kr37Rpvi3J7VJWq+MYpnvNsqNukszkgn6cOu9sRwsM0Y3b90biWpb/Mw7cFbZoXo PzogebvFwEJuGxMpYVcFuGzjAKE/LAb1ZhSQkA4ThtIjN5j82YdDswYyWGE3Ct1g VEA/B8J/rFKv7kKMCSq74XY7QSuPPf33HkriUqsEUCrFNvnuzPnNIh3uz5UFvaOR JHtL9nlEMiQ50S5UsMVVjmQBhcpTPPJB5AD+3D6DT+zImSIs0Zd8frkBWASA9060 Ka1bL7MqTXuukFGHIgl8E//XNnKSXHg= -----END CERTIFICATE-----Generated at Fri Mar 14 10:59:07 2025 by rpki-client