$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0def88de-7904-3498-ae64-f09bd667030d.roa File: 0def88de-7904-3498-ae64-f09bd667030d.roa (raw, json) Hash identifier: to8CXEy2n/SFQYPWgP2/Glgj5IEjwC4b7v3Y7tADpKI= Subject key identifier: 91:3D:A7:7C:0D:CD:96:CA:AD:2A:48:A7:C1:19:8A:BC:0B:6B:80:78 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F432858489A3B47B291C9302C0E88CBC0 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0def88de-7904-3498-ae64-f09bd667030d.roa Signing time: Mon 20 Jan 2025 02:00:40 +0000 ROA not before: Mon 20 Jan 2025 02:00:40 +0000 ROA not after: Sun 20 Apr 2025 01:00:40 +0000 asID: 13536 IP address blocks: 209.198.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9a:3b:47:b2:91:c9:30:2c:0e:88:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jan 20 02:00:40 2025 GMT Not After : Apr 20 01:00:40 2025 GMT Subject: CN=25fc8875-d201-4511-af57-12b565fe95c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f2:4e:0d:1c:66:0d:ee:ec:5c:1f:2c:c0:75: f0:eb:a1:e5:c3:45:f8:8f:09:c1:ac:0c:0f:74:54: e6:19:28:d8:2c:51:b9:ae:7e:bb:21:00:fe:fd:2f: 02:9d:1f:e3:db:dd:8a:88:f6:0d:d2:89:75:ed:17: 4d:1b:91:19:29:51:2a:ab:59:a1:f2:03:e7:8b:cb: 4d:d2:1b:a1:16:ca:1f:64:51:82:fc:44:31:38:b1: 2b:8e:02:e6:bf:49:23:bd:f1:5f:9e:b1:de:66:65: 68:6f:3b:ab:60:a5:94:01:d9:48:f3:62:93:64:58: 0a:5d:b2:92:84:1b:c1:55:61:cb:38:06:fe:03:fc: da:e9:54:91:20:58:4b:f3:9a:36:ec:af:19:85:ac: 79:46:a4:c6:3c:af:6a:4b:12:b9:53:4d:f6:af:e3: 26:8d:02:1c:62:c6:e8:27:d5:5d:ef:70:0c:96:dc: 49:d2:0a:48:e2:1c:ba:c0:21:2b:51:63:54:eb:b7: bf:7f:b8:54:2e:51:66:68:d2:f0:56:e4:e5:e5:e9: 0b:a1:41:b9:af:9b:25:da:d3:45:84:21:26:55:4b: d3:c5:b7:0b:ab:44:42:ae:7b:38:97:b8:05:2e:a3: 58:cc:2a:8e:cd:85:94:5f:34:79:d2:8b:b0:3b:23: b8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3D:A7:7C:0D:CD:96:CA:AD:2A:48:A7:C1:19:8A:BC:0B:6B:80:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0def88de-7904-3498-ae64-f09bd667030d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 209.198.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:9b:3a:a5:92:64:f2:fe:56:c1:cf:85:ee:0a:7c:07:c3:e0: b2:48:7e:0d:98:8e:7b:ac:68:79:64:dd:0d:f6:94:67:f9:b1: ee:6f:f6:6f:ff:33:f2:7d:81:1c:40:df:12:15:04:ec:72:8f: ce:8b:3e:4e:17:a3:1d:cc:a0:5e:ff:4a:db:27:40:ae:4a:d9: 6e:d8:3a:24:02:f7:15:11:cf:36:5a:45:0c:3b:24:24:ee:33: c4:00:45:6e:cf:d6:69:d7:59:94:e5:ac:5f:16:c3:fb:34:08: c6:67:c9:e3:4c:9b:61:1e:d5:ac:0c:8a:90:4e:b5:1b:60:fa: c4:58:5e:ff:e4:d5:38:f5:80:e3:9f:b3:77:00:ce:59:93:30: a6:48:12:2a:50:a1:4c:87:65:0b:96:a7:84:39:15:c0:3b:a0: e4:d9:89:80:ec:b2:c5:ae:da:26:39:b9:b5:5d:8e:8e:c3:b5: 28:31:a8:46:d2:23:6d:f3:ce:28:a5:94:96:9b:89:c4:fd:32: 55:7b:81:06:e5:34:8d:0b:8f:19:8b:1e:f6:67:54:98:c4:a2: a2:2f:7e:ed:94:91:3d:e6:f2:ae:5e:52:c4:2b:30:ba:2d:9b: e6:a8:b5:56:c3:e7:07:f4:46:b9:3c:22:4b:2c:52:43:f9:41: d6:f5:0f:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiaO0eykckwLA6Iy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk MjVmYzg4NzUtZDIwMS00NTExLWFmNTctMTJiNTY1ZmU5NWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fJODRxmDe7sXB8swHXw66Hlw0X4jwnBrAwP dFTmGSjYLFG5rn67IQD+/S8CnR/j292KiPYN0ol17RdNG5EZKVEqq1mh8gPni8tN 0huhFsofZFGC/EQxOLErjgLmv0kjvfFfnrHeZmVobzurYKWUAdlI82KTZFgKXbKS hBvBVWHLOAb+A/za6VSRIFhL85o27K8Zhax5RqTGPK9qSxK5U032r+MmjQIcYsbo J9Vd73AMltxJ0gpI4hy6wCErUWNU67e/f7hULlFmaNLwVuTl5ekLoUG5r5sl2tNF hCEmVUvTxbcLq0RCrns4l7gFLqNYzCqOzYWUXzR50ouwOyO4hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJE9p3wNzZbKrSpIp8EZirwLa4B4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMGRlZjg4ZGUtNzkwNC0z NDk4LWFlNjQtZjA5YmQ2NjcwMzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cZCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqbOqWSZPL+VsHPhe4KfAfD4LJIfg2YjnusaHlk3Q32lGf5se5v9m// M/J9gRxA3xIVBOxyj86LPk4Xox3MoF7/StsnQK5K2W7YOiQC9xURzzZaRQw7JCTu M8QARW7P1mnXWZTlrF8Ww/s0CMZnyeNMm2Ee1awMipBOtRtg+sRYXv/k1Tj1gOOf s3cAzlmTMKZIEipQoUyHZQuWp4Q5FcA7oOTZiYDsssWu2iY5ubVdjo7DtSgxqEbS I23zziillJabicT9MlV7gQblNI0LjxmLHvZnVJjEoqIvfu2UkT3m8q5eUsQrMLot m+aotVbD5wf0Rrk8IkssUkP5Qdb1D6U= -----END CERTIFICATE-----Generated at Tue Apr 8 18:25:55 2025 by rpki-client