$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8632bc95-7658-4e4c-9f14-f09825fa8883/0484f77f-4545-3485-aefb-d1f932693879.roa File: 0484f77f-4545-3485-aefb-d1f932693879.roa (raw, json) Hash identifier: X7bU3zI8HEYvDrmrGN+QNNDbfNSH7moOil/8aLEXo4g= Subject key identifier: D5:73:33:20:21:23:C3:66:C9:0D:E9:CB:30:82:66:28:FD:92:D8:C1 Certificate issuer: /CN=8632bc95-7658-4e4c-9f14-f09825fa8883 Certificate serial: 010D0C9F432858489BA0B42FA156008C006E5000 Authority key identifier: 60:83:D4:D3:5D:6A:DB:6D:3A:F1:ED:83:CF:10:DD:48:49:6E:63:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8632bc95-7658-4e4c-9f14-f09825fa8883.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8632bc95-7658-4e4c-9f14-f09825fa8883/0484f77f-4545-3485-aefb-d1f932693879.roa Signing time: Mon 20 Jan 2025 14:00:51 +0000 ROA not before: Mon 20 Jan 2025 14:00:51 +0000 ROA not after: Sun 20 Apr 2025 13:00:51 +0000 asID: 14947 IP address blocks: 209.46.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8632bc95-7658-4e4c-9f14-f09825fa8883/8632bc95-7658-4e4c-9f14-f09825fa8883.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8632bc95-7658-4e4c-9f14-f09825fa8883/8632bc95-7658-4e4c-9f14-f09825fa8883.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8632bc95-7658-4e4c-9f14-f09825fa8883.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9b:a0:b4:2f:a1:56:00:8c:00:6e:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8632bc95-7658-4e4c-9f14-f09825fa8883 Validity Not Before: Jan 20 14:00:51 2025 GMT Not After : Apr 20 13:00:51 2025 GMT Subject: CN=7bb6717d-678e-4f7a-a4e6-947cac90e07b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ac:b9:03:4d:0c:4d:fe:cd:5f:47:f1:63:f4: b8:29:94:f5:28:f8:c9:d7:8e:30:b0:2d:22:b2:46: 38:20:e6:7c:4d:51:83:3b:d1:1a:f0:93:43:d4:6b: 0c:eb:06:0e:ea:c3:67:40:83:e9:dd:38:11:5d:29: f9:ca:39:10:a0:c6:4b:81:6e:60:a3:55:01:1a:bc: cd:cd:15:d8:9b:62:ef:90:48:ca:7e:a3:3e:f5:80: 34:3b:d9:d3:0e:ef:98:27:d9:c1:f3:26:26:b9:14: 89:a0:39:aa:4e:f6:b3:16:e5:35:3e:6d:7c:7c:43: 96:3a:f8:9d:0d:d9:18:ad:42:74:f1:b0:31:c6:04: b2:75:5a:43:d4:cc:64:d8:5d:b9:a7:a8:bd:9c:7e: 34:4f:88:10:90:ef:7b:98:ed:29:07:98:45:40:cf: 26:65:a8:56:29:e5:69:1b:8e:f5:7e:56:59:b5:30: eb:64:ae:53:6d:ed:67:59:3e:97:42:c1:41:98:78: 81:9e:39:0b:ef:79:f6:d6:94:83:19:05:01:3c:1b: 6b:2a:c1:95:c0:5b:1f:01:89:c3:d5:46:41:ab:9a: 61:c2:dc:6c:00:8d:1f:18:65:d5:e8:48:d8:dd:16: 20:1d:c9:df:e9:ce:85:2f:83:12:07:0a:a7:7d:3f: 96:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:73:33:20:21:23:C3:66:C9:0D:E9:CB:30:82:66:28:FD:92:D8:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8632bc95-7658-4e4c-9f14-f09825fa8883/0484f77f-4545-3485-aefb-d1f932693879.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8632bc95-7658-4e4c-9f14-f09825fa8883/8632bc95-7658-4e4c-9f14-f09825fa8883.crl X509v3 Authority Key Identifier: keyid:60:83:D4:D3:5D:6A:DB:6D:3A:F1:ED:83:CF:10:DD:48:49:6E:63:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8632bc95-7658-4e4c-9f14-f09825fa8883.cer sbgp-ipAddrBlock: critical IPv4: 209.46.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:4d:d0:5c:bd:01:8b:46:76:95:b4:70:ae:0d:3f:21:4f:02: 75:ae:96:45:72:e1:8a:02:eb:80:ca:09:25:ad:21:79:d6:55: 7a:9f:31:3e:3d:be:2d:ef:a1:07:30:ec:11:36:b5:01:3c:ad: c0:bb:35:9b:8f:a5:db:f5:90:15:a2:d3:76:f2:01:1b:3b:d7: 24:ef:f1:9a:03:4b:c1:37:77:6f:b4:f6:34:22:a9:79:0d:33: 93:e2:d1:9a:f8:3b:41:19:c4:db:db:02:76:6a:f5:7a:93:4e: 31:7d:51:74:e8:a3:93:b2:f7:03:59:76:ec:f0:6f:fd:90:35: 5f:60:3b:38:dc:b2:d3:70:21:10:6e:87:46:90:33:9d:1b:23: 5d:f5:22:83:c2:50:22:aa:2e:5c:46:ec:25:15:dc:45:6e:06: 3b:0c:fc:85:a5:96:4f:4b:13:59:6a:cd:8a:80:80:73:f9:ea: 0f:7b:0d:4b:07:c6:bb:46:6d:b3:ae:1a:48:fc:a3:fb:64:f3: e9:f0:61:1f:14:e1:d9:b0:e7:63:fd:cd:72:52:75:7a:5b:25: c6:fc:47:62:1a:a5:02:c5:b9:ab:80:1e:0a:ba:ba:78:bc:bc: e8:24:5b:de:a6:8a:ea:79:a0:7e:9f:f8:94:bf:73:fa:03:4e: 3b:dc:48:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiboLQvoVYAjABuUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODYzMmJjOTUtNzY1OC00ZTRjLTlmMTQtZjA5ODI1ZmE4 ODgzMB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk N2JiNjcxN2QtNjc4ZS00ZjdhLWE0ZTYtOTQ3Y2FjOTBlMDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6y5A00MTf7NX0fxY/S4KZT1KPjJ144wsC0i skY4IOZ8TVGDO9Ea8JND1GsM6wYO6sNnQIPp3TgRXSn5yjkQoMZLgW5go1UBGrzN zRXYm2LvkEjKfqM+9YA0O9nTDu+YJ9nB8yYmuRSJoDmqTvazFuU1Pm18fEOWOvid DdkYrUJ08bAxxgSydVpD1Mxk2F25p6i9nH40T4gQkO97mO0pB5hFQM8mZahWKeVp G471flZZtTDrZK5Tbe1nWT6XQsFBmHiBnjkL73n21pSDGQUBPBtrKsGVwFsfAYnD 1UZBq5phwtxsAI0fGGXV6EjY3RYgHcnf6c6FL4MSBwqnfT+WvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVzMyAhI8NmyQ3pyzCCZij9ktjBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NjMy YmM5NS03NjU4LTRlNGMtOWYxNC1mMDk4MjVmYTg4ODMvMDQ4NGY3N2YtNDU0NS0z NDg1LWFlZmItZDFmOTMyNjkzODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODYzMmJjOTUtNzY1OC00ZTRjLTlm MTQtZjA5ODI1ZmE4ODgzLzg2MzJiYzk1LTc2NTgtNGU0Yy05ZjE0LWYwOTgyNWZh ODg4My5jcmwwHwYDVR0jBBgwFoAUYIPU011q22068e2DzxDdSEluY+owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NjMyYmM5NS03NjU4LTRlNGMtOWYxNC1mMDk4 MjVmYTg4ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0S4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdN0Fy9AYtGdpW0cK4NPyFPAnWulkVy4YoC64DKCSWtIXnWVXqfMT49 vi3voQcw7BE2tQE8rcC7NZuPpdv1kBWi03byARs71yTv8ZoDS8E3d2+09jQiqXkN M5Pi0Zr4O0EZxNvbAnZq9XqTTjF9UXToo5Oy9wNZduzwb/2QNV9gOzjcstNwIRBu h0aQM50bI131IoPCUCKqLlxG7CUV3EVuBjsM/IWllk9LE1lqzYqAgHP56g97DUsH xrtGbbOuGkj8o/tk8+nwYR8U4dmw52P9zXJSdXpbJcb8R2IapQLFuauAHgq6uni8 vOgkW96miup5oH6f+JS/c/oDTjvcSG8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:55 2025 by rpki-client