$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/900974d7-8989-307f-a8dd-f27fbe573f09.roa File: 900974d7-8989-307f-a8dd-f27fbe573f09.roa (raw, json) Hash identifier: jrxDTLSKiRvZIflrr64NdSrU8hJlId2S3UubQkObyq8= Subject key identifier: 05:E3:7C:90:83:51:95:03:7A:8F:EC:41:04:F6:F7:9E:EE:81:B3:F2 Certificate issuer: /CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Certificate serial: 010D0C9F4328584863CB0703239AC5DA80F51800 Authority key identifier: F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/900974d7-8989-307f-a8dd-f27fbe573f09.roa Signing time: Tue 31 Dec 2024 14:00:53 +0000 ROA not before: Tue 31 Dec 2024 14:00:53 +0000 ROA not after: Mon 31 Mar 2025 13:00:53 +0000 asID: 198949 IP address blocks: 206.209.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:63:cb:07:03:23:9a:c5:da:80:f5:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Validity Not Before: Dec 31 14:00:53 2024 GMT Not After : Mar 31 13:00:53 2025 GMT Subject: CN=627de153-2a9d-4868-a9d6-10856410f311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fc:d5:fe:27:f8:7a:bb:69:0c:5f:44:1b:27: a5:df:44:ed:93:db:d0:d6:2e:cf:fe:e1:76:64:92: 5c:4e:b0:54:7d:76:4d:28:d2:41:a5:ef:13:59:86: dd:00:e5:c5:03:16:85:47:56:cc:14:c3:33:8f:86: 1e:ea:98:68:61:79:db:49:01:c4:f8:69:7a:00:7c: e0:70:14:4e:2c:cf:9b:78:0f:66:99:c0:e3:62:b3: f9:e9:bf:b3:66:03:5a:b9:53:a6:7c:3f:9e:2f:e1: dc:f3:0f:e2:b7:ed:56:f0:0a:90:da:64:ee:d5:7b: 95:29:91:3a:2a:97:c7:69:97:a2:b9:86:e2:0a:40: 98:11:d8:ae:41:10:09:1b:2b:fb:57:6b:7a:d2:f2: 40:92:57:42:e7:d1:49:21:c8:a9:a1:58:70:c5:f6: 25:3e:e5:59:98:84:27:76:c3:ce:08:54:e8:03:19: 16:89:67:00:2c:99:80:16:76:3f:ec:aa:25:a5:df: a7:7a:cd:80:c4:14:5b:b8:91:c0:a2:4b:a1:32:31: 51:ee:80:f2:df:9d:ee:1d:84:4d:e5:40:4d:82:b9: 8b:d3:50:67:3c:8d:fc:24:7d:14:dd:3c:45:f6:66: 8c:01:3a:53:b1:92:99:0e:16:1f:8c:a5:50:49:42: 2b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E3:7C:90:83:51:95:03:7A:8F:EC:41:04:F6:F7:9E:EE:81:B3:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/900974d7-8989-307f-a8dd-f27fbe573f09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl X509v3 Authority Key Identifier: keyid:F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer sbgp-ipAddrBlock: critical IPv4: 206.209.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:42:a1:ac:b5:d0:25:38:f6:1a:01:7a:ee:b3:2a:7c:31:9a: 4c:16:8e:88:a6:83:4e:eb:1a:d0:40:8e:f8:4d:26:45:10:42: d9:80:cc:6c:03:18:eb:37:8f:80:d6:19:05:26:68:1b:57:2c: fd:ad:62:a2:fc:d9:e7:fb:de:fb:f7:d6:a7:ab:13:18:ea:37: e4:ce:ee:c4:fb:81:ac:1d:7d:e4:b7:90:b6:e2:83:02:36:6f: 75:aa:b1:08:5f:0e:74:9d:0a:70:d1:51:06:7f:01:af:95:e4: fd:2e:c9:77:50:bd:fa:b3:42:f9:2d:e5:29:31:52:df:75:3d: 18:21:8e:5d:b1:cd:91:67:3f:a9:14:6a:86:c6:e3:53:2a:bf: fc:b0:3d:d5:ea:a3:66:47:60:05:c6:0b:8b:52:fb:d3:42:42: 22:3b:33:2c:63:b2:78:71:95:cf:c7:9c:d7:da:ae:f0:8d:20: f6:06:a4:8f:9e:9e:07:56:56:37:d8:20:37:e7:78:d8:d9:dd: 28:12:f4:01:5a:e4:75:1a:46:7e:1c:0a:ea:32:17:ce:7f:d4: c6:9c:93:d0:8f:ed:6c:e4:84:18:04:6a:01:ff:de:b8:e3:04: 78:56:5b:87:47:92:c7:0d:ba:f4:32:15:ec:b4:7e:fa:b9:b3: af:b0:62:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhjywcDI5rF2oD1GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y5MDBlNGUtNWYwYS00YjE0LTk4YzAtNjY0N2JmZjVl NjRlMB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk NjI3ZGUxNTMtMmE5ZC00ODY4LWE5ZDYtMTA4NTY0MTBmMzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfzV/if4ertpDF9EGyel30Ttk9vQ1i7P/uF2 ZJJcTrBUfXZNKNJBpe8TWYbdAOXFAxaFR1bMFMMzj4Ye6phoYXnbSQHE+Gl6AHzg cBROLM+beA9mmcDjYrP56b+zZgNauVOmfD+eL+Hc8w/it+1W8AqQ2mTu1XuVKZE6 KpfHaZeiuYbiCkCYEdiuQRAJGyv7V2t60vJAkldC59FJIcipoVhwxfYlPuVZmIQn dsPOCFToAxkWiWcALJmAFnY/7Kolpd+nes2AxBRbuJHAokuhMjFR7oDy353uHYRN 5UBNgrmL01BnPI38JH0U3TxF9maMATpTsZKZDhYfjKVQSUIrmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXjfJCDUZUDeo/sQQT2957ugbPyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Zjkw MGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3YmZmNWU2NGUvOTAwOTc0ZDctODk4OS0z MDdmLWE4ZGQtZjI3ZmJlNTczZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y5MDBlNGUtNWYwYS00YjE0LTk4 YzAtNjY0N2JmZjVlNjRlLzdmOTAwZTRlLTVmMGEtNGIxNC05OGMwLTY2NDdiZmY1 ZTY0ZS5jcmwwHwYDVR0jBBgwFoAU8+WK0rjvh9c+gIgy/nujowv1xKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjkwMGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3 YmZmNWU2NGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEztEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9Coay10CU49hoBeu6zKnwxmkwWjoimg07rGtBAjvhNJkUQQtmAzGwD GOs3j4DWGQUmaBtXLP2tYqL82ef73vv31qerExjqN+TO7sT7gawdfeS3kLbigwI2 b3WqsQhfDnSdCnDRUQZ/Aa+V5P0uyXdQvfqzQvkt5SkxUt91PRghjl2xzZFnP6kU aobG41Mqv/ywPdXqo2ZHYAXGC4tS+9NCQiI7Myxjsnhxlc/HnNfarvCNIPYGpI+e ngdWVjfYIDfneNjZ3SgS9AFa5HUaRn4cCuoyF85/1Mack9CP7WzkhBgEagH/3rjj BHhWW4dHkscNuvQyFey0fvq5s6+wYjU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:05 2025 by rpki-client