$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f18747e6-7bea-32fa-877d-0db804fae88a.roa File: f18747e6-7bea-32fa-877d-0db804fae88a.roa (raw, json) Hash identifier: YQknNP9xASla/z5DeO2l6PdJo8BXYzNsuienMfbGzKM= Subject key identifier: A8:72:6D:4F:3A:53:46:F5:01:10:2E:79:1A:01:4C:45:C6:74:CD:25 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F43285848AF2B7C7F2229476FD5D059B0 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f18747e6-7bea-32fa-877d-0db804fae88a.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 10397 IP address blocks: 209.209.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:7c:7f:22:29:47:6f:d5:d0:59:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=e06d9ae6-d560-4b5e-8250-79503fb77330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0d:a9:c2:ab:bb:eb:5c:23:f5:bf:89:82:82: 0b:63:8f:64:9a:9b:74:32:f2:d6:bf:9f:b4:98:62: c6:99:81:4e:45:51:7e:16:e1:8b:95:26:d5:3b:05: c5:d3:fb:48:06:f0:2e:b7:9a:64:6d:37:f3:9f:3e: 65:a3:10:2c:37:dd:8a:8c:44:11:c4:7e:8a:ac:59: d3:c8:36:30:00:b4:48:43:7a:82:29:40:b5:5d:0f: f6:d4:30:92:f8:ac:e8:76:dd:63:56:5a:e7:79:17: 2a:d7:f6:64:5e:c7:b8:a7:af:57:2f:ab:3c:60:aa: a2:b9:7b:36:da:ea:f6:d1:05:80:e4:7c:26:34:10: c5:8d:2b:28:38:65:6e:91:40:80:77:0a:85:f7:1a: 73:1d:e6:2f:71:d9:b7:c2:e2:30:68:8d:28:12:74: 8d:e1:33:f8:a4:fe:9a:f0:5b:08:69:94:5c:bd:b6: 14:23:fc:dd:1d:61:cb:8e:a8:5d:c5:e1:25:12:c1: 9d:95:30:25:f9:86:6d:60:f2:e7:39:78:b3:b8:d7: f5:81:7c:43:25:39:b7:8c:f9:7f:1c:ad:ec:88:c4: 1e:52:cf:e6:92:69:2d:fa:06:8a:49:0a:8b:34:ee: b8:24:fe:c7:76:5f:dc:90:18:af:1b:6f:0c:31:bd: 38:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:72:6D:4F:3A:53:46:F5:01:10:2E:79:1A:01:4C:45:C6:74:CD:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f18747e6-7bea-32fa-877d-0db804fae88a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.209.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:23:81:db:ee:f8:c5:59:da:11:19:39:63:7c:00:23:9b:61: 87:cd:75:49:80:05:38:fd:8d:81:6b:44:93:f7:7d:eb:3c:18: 02:82:85:cb:f0:4e:b3:c4:d5:57:a3:49:44:ba:6f:7b:bd:38: 03:bd:0f:1d:80:05:ab:77:06:c8:20:2e:9f:09:78:f0:be:31: 00:f1:c2:73:01:4e:7e:c7:93:8d:04:77:bf:c2:47:2c:2e:ca: e1:22:66:9c:c7:de:87:95:8a:15:67:d0:1b:f8:80:20:52:7f: c3:1a:11:04:5b:2e:30:c7:bc:94:11:aa:f2:53:d3:7c:89:ce: 91:db:14:5a:13:7e:1f:60:da:bf:77:ba:fe:2b:e5:cd:5f:5d: e0:99:d5:2f:fe:29:c2:08:44:24:64:2b:8c:86:94:ca:12:86: 8d:c8:cc:e8:13:e3:bd:95:60:d0:35:50:96:d3:4a:06:07:c1: 35:b5:e1:22:bd:e4:2d:f2:25:ba:05:4e:98:54:99:29:57:8f: 53:12:14:ea:e6:0e:6c:f3:db:0b:c3:c4:c2:25:be:0c:8a:5e: 77:c1:98:11:10:48:14:b4:19:10:ff:61:a2:62:72:f2:41:3e: 80:81:5e:86:8a:12:74:31:f0:33:2a:1a:7c:d0:6c:8f:c5:b0: 85:9b:4a:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK3x/IilHb9XQWbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk ZTA2ZDlhZTYtZDU2MC00YjVlLTgyNTAtNzk1MDNmYjc3MzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ2pwqu761wj9b+JgoILY49kmpt0MvLWv5+0 mGLGmYFORVF+FuGLlSbVOwXF0/tIBvAut5pkbTfznz5loxAsN92KjEQRxH6KrFnT yDYwALRIQ3qCKUC1XQ/21DCS+Kzodt1jVlrneRcq1/ZkXse4p69XL6s8YKqiuXs2 2ur20QWA5HwmNBDFjSsoOGVukUCAdwqF9xpzHeYvcdm3wuIwaI0oEnSN4TP4pP6a 8FsIaZRcvbYUI/zdHWHLjqhdxeElEsGdlTAl+YZtYPLnOXizuNf1gXxDJTm3jPl/ HK3siMQeUs/mkmkt+gaKSQqLNO64JP7Hdl/ckBivG28MMb04gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhybU86U0b1ARAueRoBTEXGdM0lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZjE4NzQ3ZTYtN2JlYS0z MmZhLTg3N2QtMGRiODA0ZmFlODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFojgdvu+MVZ2hEZOWN8ACObYYfNdUmABTj9jYFrRJP3fes8GAKChcvw TrPE1VejSUS6b3u9OAO9Dx2ABat3BsggLp8JePC+MQDxwnMBTn7Hk40Ed7/CRywu yuEiZpzH3oeVihVn0Bv4gCBSf8MaEQRbLjDHvJQRqvJT03yJzpHbFFoTfh9g2r93 uv4r5c1fXeCZ1S/+KcIIRCRkK4yGlMoSho3IzOgT472VYNA1UJbTSgYHwTW14SK9 5C3yJboFTphUmSlXj1MSFOrmDmzz2wvDxMIlvgyKXnfBmBEQSBS0GRD/YaJicvJB PoCBXoaKEnQx8DMqGnzQbI/FsIWbSgc= -----END CERTIFICATE-----Generated at Sat Apr 12 00:28:08 2025 by rpki-client