$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5f2bee5c-4856-3ed1-af41-7fe69b419937.roa File: 5f2bee5c-4856-3ed1-af41-7fe69b419937.roa (raw, json) Hash identifier: b+gKuDNTP6fTVWFQc2bCE93cjG6JagppXrccEnHj5b4= Subject key identifier: B6:32:4F:23:B0:C0:1F:90:7A:00:F0:7A:32:AC:62:66:CD:80:85:CB Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F432858488815EC8822934DB3DF57D060 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5f2bee5c-4856-3ed1-af41-7fe69b419937.roa Signing time: Mon 13 Jan 2025 14:00:52 +0000 ROA not before: Mon 13 Jan 2025 14:00:52 +0000 ROA not after: Sun 13 Apr 2025 13:00:52 +0000 asID: 7018 IP address blocks: 209.251.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:88:15:ec:88:22:93:4d:b3:df:57:d0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jan 13 14:00:52 2025 GMT Not After : Apr 13 13:00:52 2025 GMT Subject: CN=ea19f71b-a4ed-4dfb-b0b7-6989c6135e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:34:f6:a1:17:0e:ef:c3:79:05:71:90:7d:1f: fe:7d:b4:97:c5:8d:06:32:c1:39:f6:10:42:2a:a7: 52:2e:1e:a7:22:26:85:d3:da:97:0e:a1:07:92:9b: ce:9f:b5:0a:b7:61:54:b8:58:9a:e3:05:d1:a6:49: 7f:95:61:1e:25:5d:32:c3:0b:3e:a9:e5:25:b5:49: ae:10:e0:f5:11:2c:00:99:95:da:fc:00:54:85:72: cc:4c:cd:e1:d8:98:78:1f:6f:b2:10:aa:c4:81:28: 01:0e:36:82:b5:f4:1b:6c:c2:d7:f2:32:9e:48:ee: 05:31:09:52:37:d4:a0:52:2b:2d:a5:6b:80:78:1d: 80:9c:26:b4:bb:b8:91:b7:e5:a3:5f:0e:46:81:ee: bd:5d:90:e4:43:ad:f9:c8:70:94:3f:7c:28:78:d6: ec:a8:2e:0e:88:ec:8c:21:e4:af:39:e9:33:89:01: a0:71:0b:2f:9a:7b:36:19:34:2d:99:ba:a4:7d:91: c2:44:c1:95:13:b9:53:90:58:42:c4:fe:0d:59:50: 6a:ae:f9:15:16:12:9b:56:40:3e:cd:f3:f2:f4:97: f2:07:24:2f:a7:e3:a8:0a:b1:e8:74:1b:5d:7e:41: 65:4d:fe:a6:79:bb:b7:37:a1:bc:40:1b:d7:ab:ce: 9b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:32:4F:23:B0:C0:1F:90:7A:00:F0:7A:32:AC:62:66:CD:80:85:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5f2bee5c-4856-3ed1-af41-7fe69b419937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 209.251.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:7d:f6:b9:33:45:39:6f:d4:18:88:3d:a8:f8:49:d1:82:3a: dc:64:92:5b:57:47:21:38:83:c5:9f:86:40:ad:22:24:dd:ce: 60:1b:f5:6c:31:d8:5a:af:5a:c4:8d:9a:fb:4b:10:d8:75:20: 9e:8f:00:a5:0a:c6:42:a3:5f:aa:8d:02:14:19:cb:90:b2:41: e1:40:b2:04:45:af:9f:35:11:3a:01:e9:af:81:3c:ba:26:f6: 22:37:25:c6:12:8a:35:5e:2a:10:44:2e:7d:d5:0e:8d:8a:d9: 46:6f:4c:ce:10:8e:f5:e2:26:f2:3b:bd:72:c8:bd:39:8c:92: cc:e4:25:e9:30:79:80:44:8e:fc:22:58:d2:ad:fa:70:d1:97: c3:78:76:1b:98:fe:5b:b1:f7:15:4d:5c:c6:ea:99:5b:82:36: 86:a5:40:58:c8:28:75:71:1e:e7:cb:e3:11:59:c2:fd:0b:a4: e5:73:13:52:17:a7:88:19:d8:1b:f5:07:3a:63:5a:ed:54:75: cc:b7:d9:8c:22:49:dc:4b:a5:41:5b:6d:9b:0a:cf:c7:b4:b3: 31:0c:b9:ef:72:99:71:e3:70:56:d8:3d:32:fe:36:4d:f1:76: 9f:6b:c2:51:c5:5b:33:8f:45:5a:94:be:c0:3b:69:5b:36:3a: d2:8d:bb:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiIFeyIIpNNs99X0GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDExMzE0MDA1MloXDTI1MDQxMzEzMDA1MlowLzEtMCsGA1UEAxMk ZWExOWY3MWItYTRlZC00ZGZiLWIwYjctNjk4OWM2MTM1ZTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjT2oRcO78N5BXGQfR/+fbSXxY0GMsE59hBC KqdSLh6nIiaF09qXDqEHkpvOn7UKt2FUuFia4wXRpkl/lWEeJV0ywws+qeUltUmu EOD1ESwAmZXa/ABUhXLMTM3h2Jh4H2+yEKrEgSgBDjaCtfQbbMLX8jKeSO4FMQlS N9SgUistpWuAeB2AnCa0u7iRt+WjXw5Gge69XZDkQ635yHCUP3woeNbsqC4OiOyM IeSvOekziQGgcQsvmns2GTQtmbqkfZHCRMGVE7lTkFhCxP4NWVBqrvkVFhKbVkA+ zfPy9JfyByQvp+OoCrHodBtdfkFlTf6mebu3N6G8QBvXq86b/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYyTyOwwB+QegDwejKsYmbNgIXLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNWYyYmVlNWMtNDg1Ni0z ZWQxLWFmNDEtN2ZlNjliNDE5OTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0fsTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADp99rkzRTlv1BiIPaj4SdGCOtxkkltXRyE4g8WfhkCtIiTdzmAb9Wwx 2FqvWsSNmvtLENh1IJ6PAKUKxkKjX6qNAhQZy5CyQeFAsgRFr581EToB6a+BPLom 9iI3JcYSijVeKhBELn3VDo2K2UZvTM4QjvXiJvI7vXLIvTmMkszkJekweYBEjvwi WNKt+nDRl8N4dhuY/lux9xVNXMbqmVuCNoalQFjIKHVxHufL4xFZwv0LpOVzE1IX p4gZ2Bv1BzpjWu1Udcy32YwiSdxLpUFbbZsKz8e0szEMue9ymXHjcFbYPTL+Nk3x dp9rwlHFWzOPRVqUvsA7aVs2OtKNuwA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:34 2025 by rpki-client