$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/2744b9df-6b90-37a0-ad0e-89af24e611e0.roa File: 2744b9df-6b90-37a0-ad0e-89af24e611e0.roa (raw, json) Hash identifier: 3B5ZkvxDDe99ibDyZJ/dD6x/i4jvZ17UmnEsVvuWGck= Subject key identifier: 91:D8:17:05:84:C5:C9:1D:E6:70:64:C6:CE:4A:99:03:26:D4:15:A8 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F432858485B6B03918940233030D5A900 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/2744b9df-6b90-37a0-ad0e-89af24e611e0.roa Signing time: Sat 28 Dec 2024 14:00:52 +0000 ROA not before: Sat 28 Dec 2024 14:00:52 +0000 ROA not after: Fri 28 Mar 2025 13:00:52 +0000 asID: 4213 IP address blocks: 209.11.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5b:6b:03:91:89:40:23:30:30:d5:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Dec 28 14:00:52 2024 GMT Not After : Mar 28 13:00:52 2025 GMT Subject: CN=4e3f32a4-24fd-4708-bac7-8520c9c68424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fa:39:54:71:de:a1:b6:79:f7:6f:a7:e4:70: 2f:68:fd:46:83:2d:15:a3:45:eb:b7:60:aa:33:28: 2d:ed:72:8f:ce:ca:6d:34:5b:1b:21:98:e0:fa:bc: 36:2b:26:57:eb:52:c5:c9:66:7c:42:e2:45:c3:d6: 92:2f:f1:88:4b:75:77:9a:52:5b:9f:74:87:37:10: 0f:b4:60:72:83:60:e7:4e:60:fa:0b:22:80:2c:23: eb:4b:4b:71:ec:3e:2e:c2:93:0a:e5:37:3e:fd:52: 8c:4a:37:83:32:ca:db:b8:f7:81:14:37:ef:73:50: 6a:a6:2f:98:4a:b3:95:dd:4c:f0:70:a6:eb:a5:50: 47:43:0a:34:f1:cc:b6:dc:ea:82:ef:30:2e:f6:6e: ce:95:07:c3:62:9b:6a:8a:15:32:98:37:9d:77:64: 95:92:36:a1:31:d9:d3:52:c3:5a:b6:5a:7e:96:3e: 95:72:fc:0c:3f:d3:d9:3f:9b:1d:0c:56:12:8d:ba: f5:18:79:9a:40:b6:6f:a4:53:74:67:4a:8b:53:74: c5:ad:78:e0:0b:79:09:83:c8:3c:a2:77:0c:fb:bc: 0b:1b:75:b7:da:d9:ef:a2:e4:3d:07:51:e3:71:c7: 72:96:7f:f8:2c:05:ce:b5:55:18:d8:df:1b:4d:eb: 04:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D8:17:05:84:C5:C9:1D:E6:70:64:C6:CE:4A:99:03:26:D4:15:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/2744b9df-6b90-37a0-ad0e-89af24e611e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 209.11.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:a0:6b:65:5b:79:4b:e6:25:f5:bd:8a:d9:b8:8f:12:0c:c4: a7:73:79:d2:25:20:c3:00:ad:b6:2f:60:8c:2a:8d:b4:91:bd: 0c:bf:ad:6f:a9:b9:0f:16:26:54:f7:dd:1e:f4:26:5e:1b:bd: fc:ef:e0:c9:5b:11:2e:6d:7c:8d:8b:11:5b:47:e9:55:57:7e: f4:05:90:b6:7e:75:cc:cb:99:da:c8:a4:58:bf:1b:52:ff:b6: 47:19:99:1d:58:66:5c:a5:26:f0:6a:63:c5:7b:c0:8c:da:3f: 1e:ff:a9:f8:84:28:17:c8:97:f6:4d:71:74:0e:56:fa:b3:57: 65:0d:d7:b9:8b:e8:0e:60:85:1c:ca:93:24:50:38:32:63:2f: 0a:b2:46:48:ee:db:21:b6:36:24:3c:7a:1b:b7:d3:9f:f7:d4: 6f:82:cc:22:b5:f4:ce:8b:b5:37:ef:fa:8a:78:7a:d6:86:92: cc:46:85:c6:d9:d6:e7:cc:ac:46:fa:d1:f1:f9:e3:e9:46:d5: 54:ee:98:60:88:a9:12:19:c3:c8:e5:f7:cf:fc:5b:07:5e:11: 8a:70:ed:b4:e0:29:1c:ad:95:ad:f1:d8:27:f7:56:fc:a4:9a: 89:85:8d:1a:65:d3:ea:70:82:b7:81:9b:a6:f9:00:1c:d7:12: a4:44:8e:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbawORiUAjMDDVqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk NGUzZjMyYTQtMjRmZC00NzA4LWJhYzctODUyMGM5YzY4NDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofo5VHHeobZ592+n5HAvaP1Ggy0Vo0Xrt2Cq Mygt7XKPzsptNFsbIZjg+rw2KyZX61LFyWZ8QuJFw9aSL/GIS3V3mlJbn3SHNxAP tGByg2DnTmD6CyKALCPrS0tx7D4uwpMK5Tc+/VKMSjeDMsrbuPeBFDfvc1Bqpi+Y SrOV3UzwcKbrpVBHQwo08cy23OqC7zAu9m7OlQfDYptqihUymDedd2SVkjahMdnT UsNatlp+lj6VcvwMP9PZP5sdDFYSjbr1GHmaQLZvpFN0Z0qLU3TFrXjgC3kJg8g8 oncM+7wLG3W32tnvouQ9B1Hjccdyln/4LAXOtVUY2N8bTesEBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHYFwWExckd5nBkxs5KmQMm1BWoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvMjc0NGI5ZGYtNmI5MC0z N2EwLWFkMGUtODlhZjI0ZTYxMWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Qv5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOga2VbeUvmJfW9itm4jxIMxKdzedIlIMMArbYvYIwqjbSRvQy/rW+p uQ8WJlT33R70Jl4bvfzv4MlbES5tfI2LEVtH6VVXfvQFkLZ+dczLmdrIpFi/G1L/ tkcZmR1YZlylJvBqY8V7wIzaPx7/qfiEKBfIl/ZNcXQOVvqzV2UN17mL6A5ghRzK kyRQODJjLwqyRkju2yG2NiQ8ehu305/31G+CzCK19M6LtTfv+op4etaGksxGhcbZ 1ufMrEb60fH54+lG1VTumGCIqRIZw8jl98/8WwdeEYpw7bTgKRytla3x2Cf3Vvyk momFjRpl0+pwgreBm6b5ABzXEqREjjU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:17 2025 by rpki-client