$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/7d358525-81a2-39e6-a6da-366bb0e4ba5d.roa File: 7d358525-81a2-39e6-a6da-366bb0e4ba5d.roa (raw, json) Hash identifier: KiBmcmfar1Ecrb+4mPlJ3xZBfqWB2KglaNZITxhdiYY= Subject key identifier: C4:48:C6:A1:72:7E:12:9D:71:4A:D2:29:72:40:B9:A2:E5:F9:05:16 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F43285848A565F516C81B882A2923AC80 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/7d358525-81a2-39e6-a6da-366bb0e4ba5d.roa Signing time: Fri 24 Jan 2025 02:00:39 +0000 ROA not before: Fri 24 Jan 2025 02:00:39 +0000 ROA not after: Thu 24 Apr 2025 01:00:39 +0000 asID: 11233 IP address blocks: 209.237.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a5:65:f5:16:c8:1b:88:2a:29:23:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Jan 24 02:00:39 2025 GMT Not After : Apr 24 01:00:39 2025 GMT Subject: CN=db9726a8-feb0-467d-acff-4889e0ade5bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:da:d2:9a:59:9f:f3:51:62:d9:11:6a:cf:c4: c2:17:14:0e:bd:a4:d5:4e:70:a6:34:67:64:d4:da: 47:46:79:44:02:1d:36:f4:e5:ce:10:a4:0e:73:4b: 10:2e:7d:45:45:2d:60:bb:4c:97:c1:ec:55:a5:8c: 77:b1:cd:4d:a1:20:7c:dd:e9:85:c0:c3:b2:9f:3d: 70:30:a6:33:03:c4:f4:2e:ed:eb:aa:b0:5e:57:7e: 72:26:1b:44:e0:43:da:ed:bf:22:2a:5b:95:a9:b6: 83:c7:c7:5a:30:98:45:69:21:ef:57:d0:37:c5:59: be:65:b1:aa:92:e2:96:a1:81:72:fb:4a:15:bc:77: f7:1f:2a:4e:de:ad:f5:9a:22:28:df:7e:60:df:ac: 66:84:1f:d0:d3:4e:14:bd:a8:76:c6:6a:10:f4:cc: 39:20:93:d7:8e:d2:26:41:43:3e:13:c7:96:3c:61: 1a:da:40:66:04:01:6a:e7:91:25:7f:ee:21:45:b5: 0c:53:e0:bd:c2:c8:f1:2b:7f:0c:dd:d2:53:02:96: a2:13:ba:1f:a4:81:30:13:06:d8:f8:e4:7a:00:44: cb:4f:13:d9:75:b5:45:f6:30:e5:45:14:fa:31:97: be:88:a2:b1:c8:ad:c8:2c:fc:23:05:f0:f0:8e:22: 8b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:48:C6:A1:72:7E:12:9D:71:4A:D2:29:72:40:B9:A2:E5:F9:05:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/7d358525-81a2-39e6-a6da-366bb0e4ba5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:9b:2f:00:f8:9e:6f:dc:66:2f:a5:db:ae:3e:1b:f5:f3:e7: 60:2d:30:b5:66:c5:de:b3:7b:05:35:5b:99:5e:b2:6a:0c:9f: 69:06:e7:03:1e:65:2f:b2:70:07:fc:88:1a:39:cf:65:63:e9: dd:44:1f:f2:c4:01:33:31:89:84:a8:eb:c0:9b:39:0a:3c:f9: bd:a2:1c:ea:ec:11:74:ee:ef:ea:ea:ef:65:01:24:d4:82:15: 91:3c:8d:65:b5:52:49:43:75:84:b3:f4:9b:73:2d:ac:df:1d: 34:9e:99:c3:e4:07:35:78:88:a0:b3:09:4e:13:00:d1:3f:34: f5:13:31:33:78:71:16:20:3a:5f:bb:25:fc:4d:9c:ba:e7:b3: 70:2e:65:aa:eb:73:3c:56:73:26:a5:d9:d1:30:58:25:5c:cb: fc:a2:e6:57:af:a6:f6:f3:13:3a:cd:b8:73:6a:ec:4c:75:f8: 56:41:d8:5f:ae:a8:92:2d:32:c9:82:f5:dd:f6:c9:e6:e4:4a: ba:14:55:a1:4b:c0:f0:ce:36:26:14:24:3f:ea:91:9a:a2:9b: a4:ac:a2:49:ee:e7:5f:65:3d:30:f4:06:6f:35:19:20:58:05: 91:25:a7:98:73:fe:77:eb:72:f2:80:0a:b2:ea:af:3b:dc:8b: b6:a4:12:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEilZfUWyBuIKikjrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDEyNDAyMDAzOVoXDTI1MDQyNDAxMDAzOVowLzEtMCsGA1UEAxMk ZGI5NzI2YTgtZmViMC00NjdkLWFjZmYtNDg4OWUwYWRlNWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9rSmlmf81Fi2RFqz8TCFxQOvaTVTnCmNGdk 1NpHRnlEAh029OXOEKQOc0sQLn1FRS1gu0yXwexVpYx3sc1NoSB83emFwMOynz1w MKYzA8T0Lu3rqrBeV35yJhtE4EPa7b8iKluVqbaDx8daMJhFaSHvV9A3xVm+ZbGq kuKWoYFy+0oVvHf3HypO3q31miIo335g36xmhB/Q004Uvah2xmoQ9Mw5IJPXjtIm QUM+E8eWPGEa2kBmBAFq55Elf+4hRbUMU+C9wsjxK38M3dJTApaiE7ofpIEwEwbY +OR6AETLTxPZdbVF9jDlRRT6MZe+iKKxyK3ILPwjBfDwjiKL+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRIxqFyfhKdcUrSKXJAuaLl+QUWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvN2QzNTg1MjUtODFhMi0z OWU2LWE2ZGEtMzY2YmIwZTRiYTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGbLwD4nm/cZi+l264+G/Xz52AtMLVmxd6zewU1W5lesmoMn2kG5wMe ZS+ycAf8iBo5z2Vj6d1EH/LEATMxiYSo68CbOQo8+b2iHOrsEXTu7+rq72UBJNSC FZE8jWW1UklDdYSz9JtzLazfHTSemcPkBzV4iKCzCU4TANE/NPUTMTN4cRYgOl+7 JfxNnLrns3AuZarrczxWcyal2dEwWCVcy/yi5levpvbzEzrNuHNq7Ex1+FZB2F+u qJItMsmC9d32yebkSroUVaFLwPDONiYUJD/qkZqim6Ssoknu519lPTD0Bm81GSBY BZElp5hz/nfrcvKACrLqrzvci7akEik= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:25 2025 by rpki-client