$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/458c055a-0de3-3d6a-973b-f2de96ac8f9a.roa File: 458c055a-0de3-3d6a-973b-f2de96ac8f9a.roa (raw, json) Hash identifier: 3qPlY6e+wu+7pccHTCTIJ6dIhblLoUYrFKcR+3ClG0w= Subject key identifier: 19:F7:ED:4C:3C:1A:21:D3:EC:8E:18:4C:A5:00:16:E4:C5:E4:EA:F7 Certificate issuer: /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Certificate serial: 010D0C9F432858481F652429CB410A55D3ECF300 Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/458c055a-0de3-3d6a-973b-f2de96ac8f9a.roa Signing time: Sat 07 Dec 2024 02:00:39 +0000 ROA not before: Sat 07 Dec 2024 02:00:39 +0000 ROA not after: Fri 07 Mar 2025 02:00:39 +0000 asID: 16904 IP address blocks: 209.237.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1f:65:24:29:cb:41:0a:55:d3:ec:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Validity Not Before: Dec 7 02:00:39 2024 GMT Not After : Mar 7 02:00:39 2025 GMT Subject: CN=e31b28c3-8f1e-4d66-bdfd-18ca4cefa3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:13:85:09:f0:20:d7:84:de:33:c8:c4:87:60: ea:46:f1:41:a5:d1:ae:d9:fd:56:6d:9d:70:66:fc: fa:46:87:0e:8f:e4:d7:ce:14:a7:85:bd:9a:76:37: e5:ec:c8:d7:ef:56:ba:8d:42:54:52:6a:70:ad:5d: 24:39:8c:30:d3:9b:4a:a9:6a:d1:7e:4d:97:4a:06: 3d:27:a5:43:c5:83:dc:db:5f:ae:a6:83:7c:66:1b: 59:79:56:00:ba:39:1d:14:af:ae:18:84:ab:22:ce: b2:4b:96:75:f4:59:42:d9:c0:78:54:bf:85:f7:fd: 80:01:b0:da:eb:97:2f:ee:67:eb:29:8d:fd:ec:5a: 86:82:9c:b1:ec:60:6f:4c:8f:c4:8f:17:1a:29:3f: ba:ce:61:11:17:46:d9:2a:d9:c3:47:63:b5:41:d5: 24:da:cd:f7:bc:17:e3:8c:ff:a2:96:62:a7:4f:16: e0:0a:12:13:2b:9b:0b:81:2e:95:80:77:26:73:8d: 3f:b2:3e:51:42:53:72:e7:18:9b:ba:8c:6e:ef:b5: 87:e7:68:bf:6b:97:ad:4c:17:8a:fe:6c:ae:ad:3d: 0c:fe:91:a7:ba:9c:18:2c:93:8b:3b:ec:38:c1:35: e3:77:57:77:92:75:70:64:34:cd:35:f2:ae:c9:49: 61:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F7:ED:4C:3C:1A:21:D3:EC:8E:18:4C:A5:00:16:E4:C5:E4:EA:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/458c055a-0de3-3d6a-973b-f2de96ac8f9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl X509v3 Authority Key Identifier: keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer sbgp-ipAddrBlock: critical IPv4: 209.237.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:52:67:70:d2:3a:f6:e0:b1:82:9e:83:04:57:1d:8b:12:e8: 1e:5d:0c:f2:93:d6:30:b8:77:e8:7b:a2:b1:5d:e5:d7:e3:bc: 3d:7f:8f:64:18:b6:b9:a6:40:9f:75:a4:e8:07:ac:30:3d:df: 4e:9a:df:36:4e:fe:03:32:55:24:fd:f7:bd:ea:c7:39:89:19: 69:d3:c8:5b:fe:93:0a:db:b6:f9:1c:87:a4:60:18:c1:ef:e8: 1b:ef:ae:35:76:a0:45:b5:a1:4c:d9:23:af:86:59:38:ac:47: 5a:6d:d8:d9:4a:42:14:f2:91:19:80:9b:bc:60:a8:67:f8:4f: f2:5f:98:25:fd:7f:9d:c7:fc:4b:2a:41:8d:d1:e7:19:d4:8a: 42:df:7a:c7:a3:11:14:2d:5e:34:5e:84:74:c0:51:23:23:88: 2e:a9:2b:f9:9a:66:b7:dd:67:b2:64:51:ee:9b:3c:fa:96:f3: cf:22:fd:59:11:9d:9f:3f:69:8d:4e:6d:e9:5e:ce:39:bb:f6: b9:d4:88:64:e4:85:d7:b4:c6:d8:f1:59:dd:87:0a:a3:3e:9b: 2b:35:95:4f:ab:64:3f:26:ad:63:e7:31:20:45:35:bb:9d:30: 6b:51:55:7a:d5:f2:17:3a:e2:61:fa:58:c4:75:40:b2:56:0a: a0:e5:1a:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgfZSQpy0EKVdPs8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx MzFiMB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk ZTMxYjI4YzMtOGYxZS00ZDY2LWJkZmQtMThjYTRjZWZhM2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xOFCfAg14TeM8jEh2DqRvFBpdGu2f1WbZ1w Zvz6RocOj+TXzhSnhb2adjfl7MjX71a6jUJUUmpwrV0kOYww05tKqWrRfk2XSgY9 J6VDxYPc21+upoN8ZhtZeVYAujkdFK+uGISrIs6yS5Z19FlC2cB4VL+F9/2AAbDa 65cv7mfrKY397FqGgpyx7GBvTI/EjxcaKT+6zmERF0bZKtnDR2O1QdUk2s33vBfj jP+ilmKnTxbgChITK5sLgS6VgHcmc40/sj5RQlNy5xibuoxu77WH52i/a5etTBeK /myurT0M/pGnupwYLJOLO+w4wTXjd1d3knVwZDTNNfKuyUlhYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBn37Uw8GiHT7I4YTKUAFuTF5Or3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1 YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvNDU4YzA1NWEtMGRlMy0z ZDZhLTk3M2ItZjJkZTk2YWM4ZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi ZGFiMDEzMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANSZ3DSOvbgsYKegwRXHYsS6B5dDPKT1jC4d+h7orFd5dfjvD1/j2QY trmmQJ91pOgHrDA9306a3zZO/gMyVST9973qxzmJGWnTyFv+kwrbtvkch6RgGMHv 6BvvrjV2oEW1oUzZI6+GWTisR1pt2NlKQhTykRmAm7xgqGf4T/JfmCX9f53H/Esq QY3R5xnUikLfesejERQtXjRehHTAUSMjiC6pK/maZrfdZ7JkUe6bPPqW888i/VkR nZ8/aY1Obelezjm79rnUiGTkhde0xtjxWd2HCqM+mys1lU+rZD8mrWPnMSBFNbud MGtRVXrV8hc64mH6WMR1QLJWCqDlGhU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:08 2025 by rpki-client