$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/24e9780f-da80-3241-86e2-93db72785a5f.roa File: 24e9780f-da80-3241-86e2-93db72785a5f.roa (raw, json) Hash identifier: JmNjsZ/bjWSdRrfN/W2Vucgf5u3Vfve4qL2tR3Uq5fA= Subject key identifier: BB:E5:E8:35:DF:00:55:F7:83:B0:39:51:B7:AE:E7:3E:09:2C:B1:78 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F432858486AC59AF44BC1CBB8AC86C000 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/24e9780f-da80-3241-86e2-93db72785a5f.roa Signing time: Fri 03 Jan 2025 02:00:40 +0000 ROA not before: Fri 03 Jan 2025 02:00:40 +0000 ROA not after: Thu 03 Apr 2025 01:00:40 +0000 asID: 25961 IP address blocks: 209.237.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6a:c5:9a:f4:4b:c1:cb:b8:ac:86:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Jan 3 02:00:40 2025 GMT Not After : Apr 3 01:00:40 2025 GMT Subject: CN=7c597417-8e19-4848-8a30-cba28f0078c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8b:7e:26:e0:f8:8d:98:34:df:1f:20:16:56: c9:c8:a8:c5:2a:54:8a:eb:c1:08:6d:e6:12:b7:72: ef:2e:19:19:24:1a:f6:b5:17:40:6a:24:ea:ec:da: f0:63:d4:0e:e0:b9:50:60:4f:4f:c6:6b:db:3f:31: 97:6a:cb:02:95:ce:92:60:a6:2a:ef:6d:5d:b6:03: 97:4e:b8:78:38:1d:2a:db:53:31:4f:3c:60:ae:5e: f4:1a:2f:84:4d:56:97:27:86:b1:16:fc:21:27:6e: e5:c3:63:17:18:7e:80:52:56:78:f4:07:e4:2c:74: fb:a3:70:fc:63:80:c1:59:a2:af:49:55:d6:ea:60: d3:1f:56:47:d3:3e:bd:97:f7:da:fb:e3:45:1a:d4: 2c:ee:6b:29:a2:9f:38:66:c1:2a:0c:f3:19:23:5a: 38:71:61:5b:f7:86:eb:3f:9e:14:1a:67:a7:3b:ce: 8d:61:3b:64:11:74:39:2d:81:61:05:a9:55:74:67: 73:9b:f5:11:6a:51:54:35:f5:46:58:1d:04:21:cc: 98:00:6a:06:88:f0:3f:61:cf:da:20:78:78:48:22: 0c:39:9e:84:13:7d:58:be:63:d1:d1:d3:14:05:0b: a3:b1:23:04:fa:84:7a:a8:f2:0d:19:71:e5:c7:02: 20:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E5:E8:35:DF:00:55:F7:83:B0:39:51:B7:AE:E7:3E:09:2C:B1:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/24e9780f-da80-3241-86e2-93db72785a5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:2d:d2:23:2e:80:7a:de:64:b3:b8:a2:b6:1c:97:dd:64:09: 8f:84:ee:28:b2:e6:95:3f:8f:33:6c:61:91:7d:08:88:ad:34: ae:f5:fb:16:69:a0:25:6a:d0:96:7d:77:39:2e:3a:0b:8b:d4: 96:65:0f:91:51:04:7a:b7:84:c7:37:ac:c8:d7:a1:fb:8b:92: a9:0a:56:68:07:b7:1f:73:47:4c:07:1b:af:45:85:f4:e8:17: 72:0e:34:11:13:f3:16:43:6a:b7:16:2f:27:bd:1e:fc:bf:b6: 63:be:f8:c9:e7:be:06:d0:bd:a5:fc:2a:28:58:5e:e6:bb:df: 98:f2:44:15:4d:91:41:c4:9d:06:ad:a7:2f:04:95:9f:7d:7c: 88:6c:2b:dd:6b:c4:0a:e5:2b:67:65:7b:fa:0c:e7:a9:cc:3c: 24:2a:80:fc:78:a7:ff:b3:11:b3:e8:9f:36:ea:a2:01:d9:76: f1:95:3e:68:23:d1:00:f1:e3:7d:f9:cf:01:65:dc:f4:65:63: cf:c1:93:a9:b7:ac:d5:38:3d:b3:cf:3b:81:83:7a:0d:8a:60: 5b:02:2c:4a:a6:c9:55:e0:46:37:0b:0e:f5:9a:9f:d4:17:91: da:e5:0a:0e:33:12:da:a3:4c:c2:0b:b1:3a:d0:a2:cd:76:18: 4f:ce:97:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhqxZr0S8HLuKyGwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDEwMzAyMDA0MFoXDTI1MDQwMzAxMDA0MFowLzEtMCsGA1UEAxMk N2M1OTc0MTctOGUxOS00ODQ4LThhMzAtY2JhMjhmMDA3OGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYt+JuD4jZg03x8gFlbJyKjFKlSK68EIbeYS t3LvLhkZJBr2tRdAaiTq7NrwY9QO4LlQYE9PxmvbPzGXassClc6SYKYq721dtgOX Trh4OB0q21MxTzxgrl70Gi+ETVaXJ4axFvwhJ27lw2MXGH6AUlZ49AfkLHT7o3D8 Y4DBWaKvSVXW6mDTH1ZH0z69l/fa++NFGtQs7mspop84ZsEqDPMZI1o4cWFb94br P54UGmenO86NYTtkEXQ5LYFhBalVdGdzm/URalFUNfVGWB0EIcyYAGoGiPA/Yc/a IHh4SCIMOZ6EE31YvmPR0dMUBQujsSME+oR6qPINGXHlxwIgywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvl6DXfAFX3g7A5Ubeu5z4JLLF4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvMjRlOTc4MGYtZGE4MC0z MjQxLTg2ZTItOTNkYjcyNzg1YTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAt0iMugHreZLO4orYcl91kCY+E7iiy5pU/jzNsYZF9CIitNK71+xZp oCVq0JZ9dzkuOguL1JZlD5FRBHq3hMc3rMjXofuLkqkKVmgHtx9zR0wHG69FhfTo F3IONBET8xZDarcWLye9Hvy/tmO++MnnvgbQvaX8KihYXua735jyRBVNkUHEnQat py8ElZ99fIhsK91rxArlK2dle/oM56nMPCQqgPx4p/+zEbPonzbqogHZdvGVPmgj 0QDx4335zwFl3PRlY8/Bk6m3rNU4PbPPO4GDeg2KYFsCLEqmyVXgRjcLDvWan9QX kdrlCg4zEtqjTMILsTrQos12GE/Olw0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:51 2025 by rpki-client