$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/61affa44-9569-3cc0-bf04-c5d3038eb594.roa File: 61affa44-9569-3cc0-bf04-c5d3038eb594.roa (raw, json) Hash identifier: c2VnS8lIU2kHc2HTdFKe5QYpFac18WM4ESvoZWOPhq0= Subject key identifier: 6B:C2:69:AE:BE:BE:ED:8A:3E:25:AA:62:89:B5:E2:4F:36:CB:13:E6 Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F43285848DEA1124DFA7F3AD75BE58280 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/61affa44-9569-3cc0-bf04-c5d3038eb594.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 139309 IP address blocks: 209.58.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:12:4d:fa:7f:3a:d7:5b:e5:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=28df4dce-078e-4a32-be5f-32e36db024b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f5:9c:d3:84:4b:c8:de:09:1f:5b:ca:22:15: 8a:97:00:8c:98:3f:5c:00:68:5b:4a:d4:6a:fa:77: e6:62:04:02:d3:f7:b8:2a:9d:dc:32:f3:7b:51:be: b9:27:f1:d0:12:e2:b4:1f:26:d5:3e:6f:80:17:df: ee:c7:7b:1f:3d:63:ac:d1:dc:da:da:e2:87:5b:42: 37:e5:1f:f6:24:c1:e2:2d:b9:52:f3:11:52:ab:3b: 77:77:f7:c9:dc:3c:1c:18:2b:df:a1:fb:28:4b:ec: d5:a6:8c:81:58:f5:97:51:fa:ed:18:4a:12:aa:8c: 92:64:52:2a:c7:4b:6e:e8:3e:e1:af:00:6c:7b:f6: a6:21:ee:fb:cc:2b:a4:92:a1:d5:cf:2b:62:48:4f: f3:84:ef:3b:11:2c:61:68:26:2b:43:9b:2e:52:13: 1b:c4:01:1c:b2:98:12:5d:0f:98:68:16:e2:0b:4b: 31:91:b3:01:b4:e8:7a:cd:b1:ca:0c:37:c8:7d:33: 53:f2:64:63:1d:c5:28:80:19:81:f2:36:7d:b7:67: e9:f0:1e:13:eb:62:a1:00:26:1b:0e:1b:61:48:72: 33:34:47:59:8c:2c:c6:fe:8c:06:60:2c:f3:e3:7c: 13:ec:b9:14:7f:53:fc:e7:8b:a9:4d:e2:aa:50:a4: ac:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C2:69:AE:BE:BE:ED:8A:3E:25:AA:62:89:B5:E2:4F:36:CB:13:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/61affa44-9569-3cc0-bf04-c5d3038eb594.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 209.58.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:04:ae:2f:ce:66:d5:e5:f0:13:30:68:f2:40:60:90:7b:5e: dc:ac:99:b5:2e:a5:a3:2e:6e:f5:83:7b:aa:2c:6b:88:a2:a9: b5:1b:a4:fc:79:14:1a:c8:51:c7:6b:3d:47:24:bf:9f:82:28: 9c:36:b4:cd:06:0b:19:d7:45:13:76:16:3b:1d:74:04:8f:39: 38:6d:e2:b0:cb:d6:59:db:71:5c:51:e7:6f:fc:a0:70:36:88: c1:f0:32:21:a3:ad:de:32:2f:06:b0:e7:7b:68:4b:99:5f:1e: 11:63:22:30:4a:88:c6:e1:10:f3:39:89:2d:a7:d5:72:f8:ea: d5:e1:c6:ec:b6:3f:44:c2:b8:05:80:11:2b:c1:6c:d2:dd:5b: 49:f7:44:39:f1:1f:9d:41:73:2e:03:5b:8e:37:c3:be:cf:cd: 53:c6:e7:9e:ac:42:dd:fe:82:a4:de:ac:e4:7a:ae:a1:bd:d9: 27:b6:97:c1:82:74:e2:89:0e:ca:99:dd:f8:30:49:7e:41:d2: 78:29:f0:35:a5:5a:a2:50:db:7a:dc:a1:16:38:d9:af:6a:40: fa:72:5c:11:5a:7c:66:0f:1c:0d:9e:a6:27:de:f9:eb:24:eb: 40:7c:1c:79:a2:e1:26:ea:a8:72:ab:74:e1:1c:4e:d8:ab:ea: f0:16:6f:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoRJN+n8611vlgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk MjhkZjRkY2UtMDc4ZS00YTMyLWJlNWYtMzJlMzZkYjAyNGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfWc04RLyN4JH1vKIhWKlwCMmD9cAGhbStRq +nfmYgQC0/e4Kp3cMvN7Ub65J/HQEuK0HybVPm+AF9/ux3sfPWOs0dza2uKHW0I3 5R/2JMHiLblS8xFSqzt3d/fJ3DwcGCvfofsoS+zVpoyBWPWXUfrtGEoSqoySZFIq x0tu6D7hrwBse/amIe77zCukkqHVzytiSE/zhO87ESxhaCYrQ5suUhMbxAEcspgS XQ+YaBbiC0sxkbMBtOh6zbHKDDfIfTNT8mRjHcUogBmB8jZ9t2fp8B4T62KhACYb DhthSHIzNEdZjCzG/owGYCzz43wT7LkUf1P854upTeKqUKSsbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvCaa6+vu2KPiWqYom14k82yxPmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvNjFhZmZhNDQtOTU2OS0z Y2MwLWJmMDQtYzVkMzAzOGViNTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIEri/OZtXl8BMwaPJAYJB7XtysmbUupaMubvWDe6osa4iiqbUbpPx5 FBrIUcdrPUckv5+CKJw2tM0GCxnXRRN2FjsddASPOTht4rDL1lnbcVxR52/8oHA2 iMHwMiGjrd4yLwaw53toS5lfHhFjIjBKiMbhEPM5iS2n1XL46tXhxuy2P0TCuAWA ESvBbNLdW0n3RDnxH51Bcy4DW443w77PzVPG556sQt3+gqTerOR6rqG92Se2l8GC dOKJDsqZ3fgwSX5B0ngp8DWlWqJQ23rcoRY42a9qQPpyXBFafGYPHA2epife+esk 60B8HHmi4SbqqHKrdOEcTtir6vAWb7c= -----END CERTIFICATE-----Generated at Fri Apr 11 21:44:37 2025 by rpki-client