$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c930d291-9406-3b4d-9d79-662290d58625.roa File: c930d291-9406-3b4d-9d79-662290d58625.roa (raw, json) Hash identifier: 4rVCBgS/YuTdXcwFT7IKHAnv7Sw6DjP5bcNWVX82tuw= Subject key identifier: F1:CE:9D:AE:56:C0:E6:AB:93:06:84:64:87:23:16:5D:F5:AC:D8:29 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848BE86265F830510CE9C505CC0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c930d291-9406-3b4d-9d79-662290d58625.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 852 IP address blocks: 209.29.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:26:5f:83:05:10:ce:9c:50:5c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=86c0180d-1c16-41bc-b971-3d1b8d1aa0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:45:ad:30:d5:50:8e:e8:54:4a:6e:bd:9e:42: 72:ee:40:9d:6d:2d:0f:15:4a:b1:32:59:12:da:49: ba:10:c0:fc:b0:f5:2e:65:fd:48:a8:43:2f:d4:88: 3c:82:17:ba:f1:42:43:e9:74:08:c4:9d:4f:6e:97: 57:f6:3e:f9:98:89:69:ea:5f:21:91:da:cd:83:21: 54:7e:b5:4d:04:28:34:a1:b9:e1:bb:1f:d2:55:9d: 7f:fb:69:6a:fd:10:3b:76:c7:f0:da:b5:2c:ee:ee: 21:c4:51:95:47:32:76:84:51:1b:56:b6:11:b4:48: 42:fd:5d:38:ee:a4:05:8b:39:9f:e7:1e:2d:c1:d6: 35:5a:c8:fc:21:d2:0a:85:0e:f7:74:1f:e1:2b:00: 4a:a8:39:15:21:b5:7c:90:19:42:04:03:43:3a:bb: 41:79:f1:a2:33:cb:d9:c8:86:80:10:a2:29:4e:2a: ef:a4:b4:ee:be:19:27:ef:1c:77:c0:f0:6c:e3:ec: 0d:1f:43:86:db:3e:3b:40:c8:13:73:f6:d3:68:c1: 36:47:f4:b5:48:89:53:44:8f:86:d8:ed:49:37:e3: b2:41:cf:57:b6:28:29:7a:1b:96:f7:ad:70:a9:60: 16:e7:cc:94:c0:36:06:83:78:0c:b2:ba:a5:05:80: de:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CE:9D:AE:56:C0:E6:AB:93:06:84:64:87:23:16:5D:F5:AC:D8:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c930d291-9406-3b4d-9d79-662290d58625.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:85:5b:e2:fa:35:0a:d1:58:90:51:a2:c1:d4:57:50:2c:b8: 25:ae:e0:66:5f:fe:25:fd:10:b4:f5:df:a6:48:2f:08:21:77: 0f:10:90:b7:df:4a:c5:56:38:75:53:34:b4:7c:13:70:91:fc: 67:5e:9b:d2:9d:04:a2:d0:1e:ee:d7:7d:7e:fc:62:22:7d:69: de:75:28:98:30:9a:cd:40:04:75:5b:c6:dd:58:0e:68:55:44: fa:e6:38:f2:eb:b9:be:68:07:d2:d9:42:da:75:9b:ce:a2:a5: 4f:d4:8c:73:52:f3:d1:0f:af:b9:ac:6c:ce:fe:9f:93:6b:96: be:6a:c5:56:e5:88:cf:94:6b:49:ff:dc:9d:71:47:94:53:a5: 89:a5:49:f5:bd:2c:2a:4a:83:71:c4:c7:c1:1c:4a:d5:12:20: c3:3e:11:97:69:ba:e6:ab:97:3e:38:39:91:ee:31:3e:e7:c6: 1b:2b:63:15:82:1b:7e:47:63:45:99:8a:7b:93:ec:f8:6c:d2: ab:09:06:bb:02:cd:48:b9:e5:35:59:92:89:41:fa:dc:07:e6: 18:7b:11:04:8f:16:1d:8d:a6:80:e4:b0:be:19:eb:ff:60:bd: 92:c2:70:63:e0:2d:cb:f3:ba:ed:04:7a:18:82:46:59:a1:16: cc:bf:df:56 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEi+hiZfgwUQzpxQXMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk ODZjMDE4MGQtMWMxNi00MWJjLWI5NzEtM2QxYjhkMWFhMGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEWtMNVQjuhUSm69nkJy7kCdbS0PFUqxMlkS 2km6EMD8sPUuZf1IqEMv1Ig8ghe68UJD6XQIxJ1PbpdX9j75mIlp6l8hkdrNgyFU frVNBCg0obnhux/SVZ1/+2lq/RA7dsfw2rUs7u4hxFGVRzJ2hFEbVrYRtEhC/V04 7qQFizmf5x4twdY1Wsj8IdIKhQ73dB/hKwBKqDkVIbV8kBlCBANDOrtBefGiM8vZ yIaAEKIpTirvpLTuvhkn7xx3wPBs4+wNH0OG2z47QMgTc/bTaME2R/S1SIlTRI+G 2O1JN+OyQc9XtigpehuW961wqWAW58yUwDYGg3gMsrqlBYDezwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPHOna5WwOarkwaEZIcjFl31rNgpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzkzMGQyOTEtOTQwNi0z YjRkLTlkNzktNjYyMjkwZDU4NjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0R0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAf4Vb4vo1CtFYkFGiwdRXUCy4Ja7gZl/+Jf0QtPXfpkgvCCF3DxCQt99K xVY4dVM0tHwTcJH8Z16b0p0EotAe7td9fvxiIn1p3nUomDCazUAEdVvG3VgOaFVE +uY48uu5vmgH0tlC2nWbzqKlT9SMc1Lz0Q+vuaxszv6fk2uWvmrFVuWIz5RrSf/c nXFHlFOliaVJ9b0sKkqDccTHwRxK1RIgwz4Rl2m65quXPjg5ke4xPufGGytjFYIb fkdjRZmKe5Ps+GzSqwkGuwLNSLnlNVmSiUH63AfmGHsRBI8WHY2mgOSwvhnr/2C9 ksJwY+Aty/O67QR6GIJGWaEWzL/fVg== -----END CERTIFICATE-----Generated at Sun Feb 16 20:42:52 2025 by rpki-client