$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e5980411-174b-477f-83d7-607e6bdd6922/5562d195-b8f9-37e5-aab2-56038d9c2a9e.roa File: 5562d195-b8f9-37e5-aab2-56038d9c2a9e.roa (raw, json) Hash identifier: i7Cz0Y/GuKImVdOXGm0xUqvNrLGYXn51qMuysLcEvWU= Subject key identifier: 1A:EA:31:18:AF:F0:E5:A7:8D:9F:7D:03:35:0E:D5:A1:86:7F:FB:47 Certificate issuer: /CN=e5980411-174b-477f-83d7-607e6bdd6922 Certificate serial: 010D0C9F43285848467ABF05DE147B3CE809BFE0 Authority key identifier: 40:FD:5A:CB:DD:94:63:EB:3F:A1:C3:D2:B3:DD:20:54:77:83:1B:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e5980411-174b-477f-83d7-607e6bdd6922.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e5980411-174b-477f-83d7-607e6bdd6922/5562d195-b8f9-37e5-aab2-56038d9c2a9e.roa Signing time: Sat 21 Dec 2024 02:00:39 +0000 ROA not before: Sat 21 Dec 2024 02:00:39 +0000 ROA not after: Fri 21 Mar 2025 01:00:39 +0000 asID: 40463 IP address blocks: 209.178.216.0/21 maxlen: 24 2602:f9fd::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e5980411-174b-477f-83d7-607e6bdd6922/e5980411-174b-477f-83d7-607e6bdd6922.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e5980411-174b-477f-83d7-607e6bdd6922/e5980411-174b-477f-83d7-607e6bdd6922.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e5980411-174b-477f-83d7-607e6bdd6922.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:46:7a:bf:05:de:14:7b:3c:e8:09:bf:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5980411-174b-477f-83d7-607e6bdd6922 Validity Not Before: Dec 21 02:00:39 2024 GMT Not After : Mar 21 01:00:39 2025 GMT Subject: CN=e2a8d7c4-6579-4ee2-8496-9c3f678c70db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:93:7d:16:8c:cd:1d:54:d3:cd:de:39:4a:03: b4:56:40:57:4e:48:34:24:ff:30:89:60:8c:79:3a: 45:c0:c5:13:e3:12:06:ef:c6:ab:41:30:57:eb:eb: 9d:f1:29:dd:33:3f:19:b9:f1:9e:41:9a:f2:5c:db: e8:80:09:e4:f3:b5:c2:0d:be:a5:92:2b:e0:89:65: 80:82:59:ea:93:50:7a:23:ca:f4:5d:43:9b:e2:0c: 72:1b:76:57:18:ee:bc:01:00:41:f3:aa:a7:a3:e5: 59:a4:04:97:b1:9c:97:61:26:8a:81:4b:56:29:f7: 7d:18:3d:3b:94:0f:89:6a:4f:a4:03:3e:d0:69:2e: 4e:bc:f2:5d:b6:1e:3b:b8:01:56:42:7f:27:2c:fc: f5:f5:18:bd:1a:ba:0d:6c:cd:53:d9:1d:da:42:95: ef:e3:c4:5f:06:3d:bc:0f:4f:37:f8:9a:a9:3e:2f: 26:6b:dc:d3:60:63:ca:c4:82:21:67:da:57:7c:ee: 7d:1e:bc:a5:4e:33:54:31:34:c0:87:08:fb:24:4c: a7:38:52:24:ca:1e:0e:7f:eb:b9:02:95:3b:60:9b: eb:ab:3e:ad:04:0b:5a:1f:1b:e8:64:b9:9b:d3:e2: 76:08:c8:a0:72:16:17:83:0e:0c:89:77:24:60:a2: 24:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EA:31:18:AF:F0:E5:A7:8D:9F:7D:03:35:0E:D5:A1:86:7F:FB:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e5980411-174b-477f-83d7-607e6bdd6922/5562d195-b8f9-37e5-aab2-56038d9c2a9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e5980411-174b-477f-83d7-607e6bdd6922/e5980411-174b-477f-83d7-607e6bdd6922.crl X509v3 Authority Key Identifier: keyid:40:FD:5A:CB:DD:94:63:EB:3F:A1:C3:D2:B3:DD:20:54:77:83:1B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e5980411-174b-477f-83d7-607e6bdd6922.cer sbgp-ipAddrBlock: critical IPv4: 209.178.216.0/21 IPv6: 2602:f9fd::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ea:8b:5e:39:91:05:2f:6c:45:90:97:10:c0:f7:6e:b9:c2: 7f:54:39:de:d8:62:96:19:57:62:d1:32:48:a9:17:37:2f:2d: 3e:6a:f7:56:a7:de:f4:51:b7:b9:96:85:28:73:43:9a:31:42: 24:4d:3a:70:0f:98:07:cf:ec:05:bf:a0:ea:5e:75:d3:a3:b0: 44:30:70:ba:0c:59:fd:6f:4c:a4:34:bf:45:82:c8:5f:90:da: af:9f:cd:df:f5:1a:82:8b:da:44:7a:3b:a6:7c:56:63:11:2c: c9:8d:ab:14:83:1b:ab:68:db:d9:96:e0:1f:14:7d:2a:71:5b: a0:6d:6d:1c:af:86:88:68:b9:0b:96:81:5c:4e:fd:fe:1b:4a: 20:46:d0:a2:fa:9c:c2:f8:72:ec:02:e7:8b:6b:dd:dc:7d:c0: f5:59:22:75:0c:97:c8:ba:7d:39:f9:be:48:30:97:0c:e2:5d: f7:d6:ac:84:b7:81:29:fc:6f:9e:a9:3e:d7:dd:a3:ff:1d:68: 52:4d:cc:28:04:79:7f:93:80:58:fb:e0:f4:23:be:2c:cd:26: e3:79:5a:17:17:b1:ef:87:54:1d:d0:e5:b5:d9:0d:78:ba:97: c5:fe:99:cb:36:b9:21:9a:12:b0:ff:af:61:c5:73:fb:54:6e: f0:67:5b:3b -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEhGer8F3hR7POgJv+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTU5ODA0MTEtMTc0Yi00NzdmLTgzZDctNjA3ZTZiZGQ2 OTIyMB4XDTI0MTIyMTAyMDAzOVoXDTI1MDMyMTAxMDAzOVowLzEtMCsGA1UEAxMk ZTJhOGQ3YzQtNjU3OS00ZWUyLTg0OTYtOWMzZjY3OGM3MGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5N9FozNHVTTzd45SgO0VkBXTkg0JP8wiWCM eTpFwMUT4xIG78arQTBX6+ud8SndMz8ZufGeQZryXNvogAnk87XCDb6lkivgiWWA glnqk1B6I8r0XUOb4gxyG3ZXGO68AQBB86qno+VZpASXsZyXYSaKgUtWKfd9GD07 lA+Jak+kAz7QaS5OvPJdth47uAFWQn8nLPz19Ri9GroNbM1T2R3aQpXv48RfBj28 D083+JqpPi8ma9zTYGPKxIIhZ9pXfO59HrylTjNUMTTAhwj7JEynOFIkyh4Of+u5 ApU7YJvrqz6tBAtaHxvoZLmb0+J2CMigchYXgw4MiXckYKIkGQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFBrqMRiv8OWnjZ99AzUO1aGGf/tHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lNTk4 MDQxMS0xNzRiLTQ3N2YtODNkNy02MDdlNmJkZDY5MjIvNTU2MmQxOTUtYjhmOS0z N2U1LWFhYjItNTYwMzhkOWMyYTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTU5ODA0MTEtMTc0Yi00NzdmLTgz ZDctNjA3ZTZiZGQ2OTIyL2U1OTgwNDExLTE3NGItNDc3Zi04M2Q3LTYwN2U2YmRk NjkyMi5jcmwwHwYDVR0jBBgwFoAUQP1ay92UY+s/ocPSs90gVHeDG4wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9lNTk4MDQxMS0xNzRiLTQ3N2YtODNkNy02MDdl NmJkZDY5MjIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQD0bLYMA0E AgACMAcDBQAmAvn9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBACnqi145kQUvbEWQlxDA9265wn9UOd7YYpYZ V2LRMkipFzcvLT5q91an3vRRt7mWhShzQ5oxQiRNOnAPmAfP7AW/oOpeddOjsEQw cLoMWf1vTKQ0v0WCyF+Q2q+fzd/1GoKL2kR6O6Z8VmMRLMmNqxSDG6to29mW4B8U fSpxW6BtbRyvhohouQuWgVxO/f4bSiBG0KL6nML4cuwC54tr3dx9wPVZInUMl8i6 fTn5vkgwlwziXffWrIS3gSn8b56pPtfdo/8daFJNzCgEeX+TgFj74PQjvizNJuN5 WhcXse+HVB3Q5bXZDXi6l8X+mcs2uSGaErD/r2HFc/tUbvBnWzs= -----END CERTIFICATE-----Generated at Sun Feb 16 20:12:11 2025 by rpki-client