$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/c4d0d21f-1690-36d6-8c24-202cfa311060.roa File: c4d0d21f-1690-36d6-8c24-202cfa311060.roa (raw, json) Hash identifier: OiYlZox249DJoaLq8++kh57bTNwbr0nrpOvmmnex2Rs= Subject key identifier: 4F:5D:44:D8:52:6B:9D:98:4D:B8:A9:D1:CB:C6:65:04:9F:25:A8:10 Certificate issuer: /CN=3a000633-c1ee-492c-b730-12e113ab8bd2 Certificate serial: 010D0C9F43285848D7A657BABC375E4266DF0700 Authority key identifier: 14:65:71:08:C5:BE:34:EE:A3:C6:27:F4:F6:6D:04:52:CF:CF:23:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/c4d0d21f-1690-36d6-8c24-202cfa311060.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 394710 IP address blocks: 209.216.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:57:ba:bc:37:5e:42:66:df:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a000633-c1ee-492c-b730-12e113ab8bd2 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=d12b8195-fc20-42da-b10f-89f529a9bb97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d9:1b:4e:fb:01:d5:20:b6:f9:e8:51:d2:40: 69:33:11:e2:1f:a4:83:d0:08:16:31:67:4f:fc:e7: 84:35:95:27:4d:2a:08:20:d1:31:47:65:8d:54:9c: f4:2c:e0:61:30:c2:be:bb:99:95:c1:cc:64:ab:a2: 69:d2:0a:7d:08:ca:18:e7:fd:24:c2:7b:2c:31:64: 23:d4:0e:2f:4f:76:43:b5:80:50:b8:9d:ef:47:2b: 14:45:98:f0:29:81:f1:07:7f:58:92:d0:05:f3:e9: a8:d6:03:61:30:90:13:ac:bb:b7:fa:7b:c1:97:88: 7e:9f:4e:31:4f:07:ee:af:db:ed:c9:9d:2a:a8:5c: c6:b7:02:a4:e6:61:4c:80:a1:22:6e:4a:71:aa:42: 98:85:59:38:d5:bc:1f:68:df:42:c9:ec:57:76:93: e0:0c:98:bf:cc:b5:d3:62:9a:9b:00:a5:ff:68:fe: 9d:8e:39:03:62:7f:a8:50:31:31:6c:65:b8:f8:c4: cb:4f:e8:53:55:87:2b:37:c0:d0:be:28:0b:d1:42: a6:6e:7c:25:ea:0e:d5:a2:54:d4:7d:3d:98:46:c7: 3e:c1:4d:0c:81:12:29:5f:3e:fc:f7:e2:dc:97:b5: 05:78:19:bf:22:b3:0e:91:d1:49:32:30:1a:6a:6c: 3b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:5D:44:D8:52:6B:9D:98:4D:B8:A9:D1:CB:C6:65:04:9F:25:A8:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/c4d0d21f-1690-36d6-8c24-202cfa311060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.crl X509v3 Authority Key Identifier: keyid:14:65:71:08:C5:BE:34:EE:A3:C6:27:F4:F6:6D:04:52:CF:CF:23:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer sbgp-ipAddrBlock: critical IPv4: 209.216.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:1e:ce:4e:d0:dc:f1:a5:ec:1f:ca:e4:98:2c:7a:e7:a1:c8: d6:21:03:96:6a:1f:03:9e:e2:a8:b7:e9:c2:01:2f:1d:49:62: d7:96:7b:1d:16:5d:6f:ff:a5:26:ee:c9:b7:aa:d6:7b:f8:90: 89:69:05:1d:af:f5:ed:c6:dd:f4:8b:54:b0:6e:fe:ee:50:b8: ee:a2:4b:86:06:e5:fe:e9:b8:a3:f2:a3:05:1f:8e:93:1e:51: 48:79:3f:39:0f:a8:bc:32:04:2f:4e:62:2f:dd:a7:71:76:c9: 55:d5:bb:4e:9e:49:2f:ed:bd:b7:d5:2c:eb:f1:5c:74:b5:ba: 4f:d3:c2:4d:f0:76:64:d8:bc:f9:64:bb:54:af:f2:1e:9f:78: a7:48:07:74:ac:12:06:03:16:5d:33:44:6f:a8:86:9a:0a:71: 29:bc:4f:aa:cc:e9:a8:e0:23:6f:a9:5d:bb:54:1e:86:77:7e: f7:9b:31:ca:8d:4e:60:1e:15:4e:2f:36:8a:c4:bd:39:1f:d9: d6:ec:1b:f7:e0:92:b9:86:eb:cb:28:95:de:6c:9d:5d:47:14: 83:c3:31:fc:18:1f:8d:a8:59:99:34:5d:c5:00:96:79:e7:fa: 29:a1:c0:5a:7f:d5:c1:b9:8f:8c:9c:8d:60:86:a2:d1:b3:a1: 59:58:86:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXple6vDdeQmbfBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2EwMDA2MzMtYzFlZS00OTJjLWI3MzAtMTJlMTEzYWI4 YmQyMB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk ZDEyYjgxOTUtZmMyMC00MmRhLWIxMGYtODlmNTI5YTliYjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltkbTvsB1SC2+ehR0kBpMxHiH6SD0AgWMWdP /OeENZUnTSoIINExR2WNVJz0LOBhMMK+u5mVwcxkq6Jp0gp9CMoY5/0kwnssMWQj 1A4vT3ZDtYBQuJ3vRysURZjwKYHxB39YktAF8+mo1gNhMJATrLu3+nvBl4h+n04x Twfur9vtyZ0qqFzGtwKk5mFMgKEibkpxqkKYhVk41bwfaN9CyexXdpPgDJi/zLXT YpqbAKX/aP6djjkDYn+oUDExbGW4+MTLT+hTVYcrN8DQvigL0UKmbnwl6g7VolTU fT2YRsc+wU0MgRIpXz789+Lcl7UFeBm/IrMOkdFJMjAaamw7MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9dRNhSa52YTbip0cvGZQSfJagQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYTAw MDYzMy1jMWVlLTQ5MmMtYjczMC0xMmUxMTNhYjhiZDIvYzRkMGQyMWYtMTY5MC0z NmQ2LThjMjQtMjAyY2ZhMzExMDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2EwMDA2MzMtYzFlZS00OTJjLWI3 MzAtMTJlMTEzYWI4YmQyLzNhMDAwNjMzLWMxZWUtNDkyYy1iNzMwLTEyZTExM2Fi OGJkMi5jcmwwHwYDVR0jBBgwFoAUFGVxCMW+NO6jxif09m0EUs/PIyAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYTAwMDYzMy1jMWVlLTQ5MmMtYjczMC0xMmUx MTNhYjhiZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0dhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIezk7Q3PGl7B/K5JgseuehyNYhA5ZqHwOe4qi36cIBLx1JYteWex0W XW//pSbuybeq1nv4kIlpBR2v9e3G3fSLVLBu/u5QuO6iS4YG5f7puKPyowUfjpMe UUh5PzkPqLwyBC9OYi/dp3F2yVXVu06eSS/tvbfVLOvxXHS1uk/Twk3wdmTYvPlk u1Sv8h6feKdIB3SsEgYDFl0zRG+ohpoKcSm8T6rM6ajgI2+pXbtUHoZ3fvebMcqN TmAeFU4vNorEvTkf2dbsG/fgkrmG68sold5snV1HFIPDMfwYH42oWZk0XcUAlnnn +imhwFp/1cG5j4ycjWCGotGzoVlYhgw= -----END CERTIFICATE-----Generated at Sat Apr 5 04:42:36 2025 by rpki-client