$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/dc63ef57-7d1f-36c1-9423-1a47bf6abb0a.roa File: dc63ef57-7d1f-36c1-9423-1a47bf6abb0a.roa (raw, json) Hash identifier: PJVe1fEfbF26FG9wVYEkDmByb4B7KQQ9Pk7OjfQre6c= Subject key identifier: 0C:AE:D8:F7:2A:8D:A2:18:66:F3:1F:01:D8:FD:FC:5F:7A:72:06:D1 Certificate issuer: /CN=c0094aab-7ad1-4889-853f-ce946552206b Certificate serial: 010D0C9F432858488AE0A7413E98E0DB2E4133F0 Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/dc63ef57-7d1f-36c1-9423-1a47bf6abb0a.roa Signing time: Tue 14 Jan 2025 14:00:51 +0000 ROA not before: Tue 14 Jan 2025 14:00:51 +0000 ROA not after: Mon 14 Apr 2025 13:00:51 +0000 asID: 109 IP address blocks: 204.69.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8a:e0:a7:41:3e:98:e0:db:2e:41:33:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b Validity Not Before: Jan 14 14:00:51 2025 GMT Not After : Apr 14 13:00:51 2025 GMT Subject: CN=6688fdb2-b6c9-4b23-80c8-e7224b4936e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a7:3d:e1:4e:7b:07:16:d4:c0:bd:f0:27:52: a2:a2:97:d6:c2:c7:d1:1a:fc:20:a9:27:23:e3:e6: 64:40:f3:52:5f:8b:3a:a3:0a:e8:f6:0f:12:1f:f0: fb:84:34:7d:5a:07:92:2b:cc:86:ba:df:83:c1:4f: 5a:33:38:79:55:f4:30:23:2b:ae:94:af:cc:f7:71: 49:6e:82:c7:c4:dc:21:e7:7d:e2:2d:13:5d:47:7c: d2:e2:59:40:c8:6d:f5:f9:70:77:4c:85:fd:0a:ea: 34:89:64:74:48:dd:2e:87:ed:74:ad:e2:08:2d:33: 8e:1e:c6:63:35:5e:4a:25:df:69:f6:c8:16:6b:11: c6:7c:d9:ea:84:80:54:e7:70:4f:df:4b:92:85:0d: d6:b1:b7:b5:b8:04:7c:fe:5e:92:51:03:69:6f:00: 58:a5:55:9d:55:de:ed:e2:18:bc:f2:73:e5:b0:7d: 98:d7:85:2d:e1:f5:b2:1d:7c:2e:cc:bf:39:cb:f8: cd:dd:3c:75:bd:5d:c3:b1:9e:5e:f2:c4:49:9d:b2: 3a:8e:bc:91:42:46:31:8f:c2:93:44:54:aa:3e:5a: 09:c7:c1:f7:d4:d1:c4:4f:28:da:f0:34:fa:11:63: ba:ad:1c:8b:f3:6c:f8:3f:7b:31:8b:15:48:af:2e: f5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AE:D8:F7:2A:8D:A2:18:66:F3:1F:01:D8:FD:FC:5F:7A:72:06:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/dc63ef57-7d1f-36c1-9423-1a47bf6abb0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl X509v3 Authority Key Identifier: keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer sbgp-ipAddrBlock: critical IPv4: 204.69.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:06:9a:69:ae:b7:17:4b:5f:98:9b:3f:2a:bd:ba:5a:d2:3b: 1a:3e:9e:5c:22:42:b4:42:8e:12:6d:36:59:13:77:ca:d4:6b: 11:98:b8:d6:cd:b3:87:ee:03:f4:3e:5d:14:85:48:3d:0f:1a: f4:8c:00:be:73:8c:21:c5:48:c6:26:11:47:29:0f:7f:dd:27: 9e:3f:41:18:20:f3:b1:9c:48:2a:a6:e8:79:91:06:46:55:1a: 93:bc:93:50:0a:4a:3e:eb:58:62:44:36:86:9c:af:bc:e4:de: 02:86:53:a5:18:fd:c5:43:e0:eb:bd:e5:11:13:35:d2:ad:1e: 35:e0:10:ab:79:e2:dd:1e:d4:de:e6:ca:4d:04:5d:1d:d5:e1: 62:57:24:ec:53:2e:fb:87:4b:a7:5a:7d:6d:8d:37:9c:c8:3b: 17:d9:5f:bd:5d:dd:cd:17:13:33:92:8e:87:ec:60:bd:09:db: ab:12:ef:49:a0:48:92:fc:50:0b:6c:56:4e:ba:f2:35:2f:37: 61:32:e4:36:6d:5a:0c:ec:aa:51:bb:6d:4d:cb:13:33:94:9a: 00:ce:59:ce:55:52:fb:a1:fe:af:3d:df:c2:07:09:d9:3d:b4: ff:f9:f4:7d:5d:09:7f:c8:b6:29:ea:9b:d3:cf:24:65:c0:be: 81:08:f2:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4KdBPpjg2y5BM/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAwOTRhYWItN2FkMS00ODg5LTg1M2YtY2U5NDY1NTIy MDZiMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk NjY4OGZkYjItYjZjOS00YjIzLTgwYzgtZTcyMjRiNDkzNmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqac94U57BxbUwL3wJ1KiopfWwsfRGvwgqScj 4+ZkQPNSX4s6owro9g8SH/D7hDR9WgeSK8yGut+DwU9aMzh5VfQwIyuulK/M93FJ boLHxNwh533iLRNdR3zS4llAyG31+XB3TIX9Cuo0iWR0SN0uh+10reIILTOOHsZj NV5KJd9p9sgWaxHGfNnqhIBU53BP30uShQ3Wsbe1uAR8/l6SUQNpbwBYpVWdVd7t 4hi88nPlsH2Y14Ut4fWyHXwuzL85y/jN3Tx1vV3DsZ5e8sRJnbI6jryRQkYxj8KT RFSqPloJx8H31NHETyja8DT6EWO6rRyL82z4P3sxixVIry71QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyu2PcqjaIYZvMfAdj9/F96cgbRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5 NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0NjU1MjIwNmIvZGM2M2VmNTctN2QxZi0z NmMxLTk0MjMtMWE0N2JmNmFiYjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzAwOTRhYWItN2FkMS00ODg5LTg1 M2YtY2U5NDY1NTIyMDZiL2MwMDk0YWFiLTdhZDEtNDg4OS04NTNmLWNlOTQ2NTUy MjA2Yi5jcmwwHwYDVR0jBBgwFoAUj3vgUXfanU4hkDXXgc3toQDHub4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0 NjU1MjIwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzEXGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcGmmmutxdLX5ibPyq9ulrSOxo+nlwiQrRCjhJtNlkTd8rUaxGYuNbN s4fuA/Q+XRSFSD0PGvSMAL5zjCHFSMYmEUcpD3/dJ54/QRgg87GcSCqm6HmRBkZV GpO8k1AKSj7rWGJENoacr7zk3gKGU6UY/cVD4Ou95RETNdKtHjXgEKt54t0e1N7m yk0EXR3V4WJXJOxTLvuHS6dafW2NN5zIOxfZX71d3c0XEzOSjofsYL0J26sS70mg SJL8UAtsVk668jUvN2Ey5DZtWgzsqlG7bU3LEzOUmgDOWc5VUvuh/q8938IHCdk9 tP/59H1dCX/Itinqm9PPJGXAvoEI8is= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:28 2025 by rpki-client