$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/66b4a2d8-966a-3fbe-8312-e69e1b795cac.roa File: 66b4a2d8-966a-3fbe-8312-e69e1b795cac.roa (raw, json) Hash identifier: HHkVE71Lf/oysUJ0lMLBTyPMCyMgfm2iVQ6JruLUDzU= Subject key identifier: 71:43:9A:07:94:10:D0:B4:92:44:92:85:98:58:48:D0:82:C3:CC:3B Certificate issuer: /CN=4cbd1783-5272-4e33-b882-bdd928a5e339 Certificate serial: 010D0C9F43285848B35B6ABA7A31B6CA0B115700 Authority key identifier: 04:7C:80:53:0E:B8:46:12:A9:2C:71:B3:A8:DC:CA:6D:5A:DC:59:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/66b4a2d8-966a-3fbe-8312-e69e1b795cac.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 212238 IP address blocks: 209.198.10.0/24 maxlen: 24 209.198.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:6a:ba:7a:31:b6:ca:0b:11:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cbd1783-5272-4e33-b882-bdd928a5e339 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=8c37b23d-8498-478b-8efb-3791d439ba40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3f:2a:5e:82:86:c8:29:3d:07:7f:cc:a3:de: 7e:6d:bb:fc:fa:d6:41:93:08:ea:06:d0:99:7c:54: e7:3a:de:54:ce:e9:36:be:6a:9a:25:fc:ec:26:ee: cb:81:5a:40:bd:c8:9f:47:5a:c1:e0:13:84:54:a4: c2:ff:7d:7d:2a:9d:9c:7c:6d:ec:bc:77:25:d7:1a: 66:c4:27:b2:99:49:c1:7d:95:80:2f:15:11:59:31: 49:7d:59:f7:dc:76:0f:02:17:1f:3f:ef:76:43:4d: fc:50:a7:d3:31:a5:72:9d:9d:3b:32:72:9b:f2:4b: 9a:e5:ff:bf:94:e0:66:83:f7:1e:0b:6a:c2:de:5b: 61:12:d5:13:b7:da:2a:0d:94:49:7e:f0:b5:02:85: 92:f5:28:bd:de:e5:5b:ce:64:11:7c:ec:32:d6:70: 21:ba:4a:c2:c1:8c:21:84:89:75:96:34:53:6d:19: b3:1b:8e:66:10:27:0b:49:be:75:e0:5f:35:9f:1f: 84:93:94:86:81:0d:94:2f:06:99:7d:66:0a:7e:0f: 5d:8f:f1:a5:4f:e4:ff:47:39:63:1d:3e:a6:0d:5a: e4:9b:7e:69:3a:63:63:50:f8:ef:3d:e6:1d:5a:82: bf:dd:8e:ae:4d:65:51:05:ca:b7:bc:27:99:0c:e7: a0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:43:9A:07:94:10:D0:B4:92:44:92:85:98:58:48:D0:82:C3:CC:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/66b4a2d8-966a-3fbe-8312-e69e1b795cac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.crl X509v3 Authority Key Identifier: keyid:04:7C:80:53:0E:B8:46:12:A9:2C:71:B3:A8:DC:CA:6D:5A:DC:59:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer sbgp-ipAddrBlock: critical IPv4: 209.198.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:40:20:31:97:bc:0e:37:bb:6b:6b:f3:64:32:f1:81:d2:e2: 2c:3f:1e:de:ea:10:5f:a9:2f:86:4c:ea:05:e7:ff:94:8f:15: 48:90:84:cf:15:4b:ec:84:24:58:00:de:b8:7c:59:91:7e:84: 9c:ce:ac:3f:97:c2:fe:db:91:29:34:43:4a:54:ec:88:e4:07: cb:3b:db:1a:72:50:44:4f:64:34:5c:35:a4:53:6f:7e:58:14: af:b6:37:d2:af:1f:6c:0a:fe:f4:8a:f9:95:f7:e3:06:5f:00: ed:5b:dd:e1:4d:3b:bc:8f:42:8a:08:04:30:f3:65:48:7a:8d: 85:38:7d:b8:2e:f9:21:45:f5:75:19:a4:98:ef:77:cc:a2:cc: 89:37:7d:3d:64:63:ae:23:18:bc:3a:91:e9:ed:aa:bb:36:77: ad:03:b8:fe:d7:97:3e:45:7f:a0:a2:51:77:8a:60:81:bc:e2: be:14:33:a4:de:04:b6:ba:1c:65:56:09:4e:18:6c:7c:79:85: 24:c7:ff:19:06:35:86:f4:c0:4b:a0:e3:00:24:76:a8:d7:5a: cc:40:7d:b1:d3:01:44:e3:49:e7:37:cd:d8:1f:be:a8:fb:80: ad:61:86:5f:26:b8:a8:ee:7b:0c:fe:91:a1:03:71:fb:e6:31: 0b:db:b5:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW2q6ejG2ygsRVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNiZDE3ODMtNTI3Mi00ZTMzLWI4ODItYmRkOTI4YTVl MzM5MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk OGMzN2IyM2QtODQ5OC00NzhiLThlZmItMzc5MWQ0MzliYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz8qXoKGyCk9B3/Mo95+bbv8+tZBkwjqBtCZ fFTnOt5Uzuk2vmqaJfzsJu7LgVpAvcifR1rB4BOEVKTC/319Kp2cfG3svHcl1xpm xCeymUnBfZWALxURWTFJfVn33HYPAhcfP+92Q038UKfTMaVynZ07MnKb8kua5f+/ lOBmg/ceC2rC3lthEtUTt9oqDZRJfvC1AoWS9Si93uVbzmQRfOwy1nAhukrCwYwh hIl1ljRTbRmzG45mECcLSb514F81nx+Ek5SGgQ2ULwaZfWYKfg9dj/GlT+T/Rzlj HT6mDVrkm35pOmNjUPjvPeYdWoK/3Y6uTWVRBcq3vCeZDOegRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFDmgeUENC0kkSShZhYSNCCw8w7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80Y2Jk MTc4My01MjcyLTRlMzMtYjg4Mi1iZGQ5MjhhNWUzMzkvNjZiNGEyZDgtOTY2YS0z ZmJlLTgzMTItZTY5ZTFiNzk1Y2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGNiZDE3ODMtNTI3Mi00ZTMzLWI4 ODItYmRkOTI4YTVlMzM5LzRjYmQxNzgzLTUyNzItNGUzMy1iODgyLWJkZDkyOGE1 ZTMzOS5jcmwwHwYDVR0jBBgwFoAUBHyAUw64RhKpLHGzqNzKbVrcWU4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80Y2JkMTc4My01MjcyLTRlMzMtYjg4Mi1iZGQ5 MjhhNWUzMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0cYKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClAIDGXvA43u2tr82Qy8YHS4iw/Ht7qEF+pL4ZM6gXn/5SPFUiQhM8V S+yEJFgA3rh8WZF+hJzOrD+Xwv7bkSk0Q0pU7IjkB8s72xpyUERPZDRcNaRTb35Y FK+2N9KvH2wK/vSK+ZX34wZfAO1b3eFNO7yPQooIBDDzZUh6jYU4fbgu+SFF9XUZ pJjvd8yizIk3fT1kY64jGLw6kentqrs2d60DuP7Xlz5Ff6CiUXeKYIG84r4UM6Te BLa6HGVWCU4YbHx5hSTH/xkGNYb0wEug4wAkdqjXWsxAfbHTAUTjSec3zdgfvqj7 gK1hhl8muKjuewz+kaEDcfvmMQvbtak= -----END CERTIFICATE-----Generated at Sun Apr 6 03:28:01 2025 by rpki-client