$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/2c11259a-f9d0-312c-a546-57c810ca6a5b.roa File: 2c11259a-f9d0-312c-a546-57c810ca6a5b.roa (raw, json) Hash identifier: 5u+O0DwHGtP8EDuLcHh+LJ73DSErSAF/Di6Oz0K/0VA= Subject key identifier: 0E:B7:81:55:11:EC:F5:74:B3:52:C7:F8:19:59:86:6F:33:B8:37:C1 Certificate issuer: /CN=4279ddf8-3e66-45cf-8955-452fbe652c0c Certificate serial: 010D0C9F43285848AF2B8251F6205E97E6EBDC80 Authority key identifier: CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/2c11259a-f9d0-312c-a546-57c810ca6a5b.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 27425 IP address blocks: 209.137.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:82:51:f6:20:5e:97:e6:eb:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4279ddf8-3e66-45cf-8955-452fbe652c0c Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=ed1b2ead-b284-4fce-8b2c-c1159823b1da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:cd:1d:32:c5:69:31:76:1a:8c:bd:42:12:30: 21:c3:cb:c5:08:96:39:38:9e:04:cc:e2:50:6c:3b: c1:51:e5:28:c8:83:e6:25:c6:33:ed:77:e5:f1:a8: 9e:06:2b:c5:89:da:36:fb:c6:7c:af:8d:98:16:45: 16:6a:b7:fe:31:06:b8:98:a9:ad:0a:06:16:11:2d: a7:bc:bc:68:9f:7b:ce:5d:c7:a2:34:52:92:fa:13: 08:24:ea:64:18:c7:35:e7:7a:ec:09:1b:ca:e6:10: 39:31:92:8f:49:b3:c9:80:a1:3d:29:c6:74:67:dd: d0:75:09:44:09:7f:e6:27:5a:13:68:ab:29:7e:58: 9e:23:ac:56:df:7e:eb:66:d0:db:e1:2d:d3:b8:a0: 9d:f1:5a:f6:e9:45:83:3b:87:d8:48:4b:ca:4d:99: 67:6e:36:83:cb:c6:70:cc:b8:3f:c3:c4:0a:0a:a2: 6a:fa:92:8f:b0:d9:2e:7c:f1:af:c1:c8:e9:b5:e7: 5c:c9:68:5e:91:78:e8:1e:1c:44:f2:42:02:28:64: 2a:b6:fb:57:bb:79:cf:11:e2:cc:9f:b7:48:73:a1: c7:44:f1:de:fa:dd:e7:6a:d9:96:43:cb:68:f3:26: fa:2e:44:94:40:35:7f:56:28:c2:a2:25:ff:50:cb: de:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B7:81:55:11:EC:F5:74:B3:52:C7:F8:19:59:86:6F:33:B8:37:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/2c11259a-f9d0-312c-a546-57c810ca6a5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.crl X509v3 Authority Key Identifier: keyid:CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer sbgp-ipAddrBlock: critical IPv4: 209.137.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:c2:b8:f8:96:37:a9:76:90:12:86:02:92:f0:3b:a5:61:97: f2:be:44:ee:f1:7d:84:bb:36:18:0b:99:d8:11:4f:cd:f4:1f: df:7e:b5:86:82:e4:5b:b0:9c:1a:62:65:41:62:3b:cc:dd:b9: f3:4c:b1:4e:d0:90:14:47:92:bb:2e:2a:5e:f1:16:7e:81:03: a8:fa:3b:cc:46:4e:1e:ee:cc:c5:03:d0:a0:c0:60:f4:05:9c: b4:b9:52:df:24:79:1d:b9:c0:d5:fd:93:8b:d9:7a:db:f4:ab: 78:69:7b:39:d6:9d:f7:d2:67:e8:e2:a0:a7:1c:ec:92:42:9b: 82:ae:8c:0b:ed:dd:88:dc:43:f0:50:90:28:69:81:17:53:5a: 27:1f:07:54:b9:fa:d8:e2:6c:20:fb:02:fc:e7:82:17:01:00: 20:4e:86:9d:a4:76:d6:e3:8e:eb:97:58:09:1f:be:97:1c:6e: f9:f8:88:b3:84:e2:33:b2:7c:4f:d4:4f:7d:13:48:af:06:fe: b9:01:4d:4c:80:11:02:50:4d:c4:51:0f:2d:5a:4c:87:ff:3a: f9:d3:c8:6d:96:22:e2:44:af:8d:c3:b0:e3:de:b4:40:10:be: e3:a9:9b:8e:40:05:3e:c6:d0:aa:e4:2e:ea:26:3e:ce:b2:13: fd:66:fb:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK4JR9iBel+br3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI3OWRkZjgtM2U2Ni00NWNmLTg5NTUtNDUyZmJlNjUy YzBjMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk ZWQxYjJlYWQtYjI4NC00ZmNlLThiMmMtYzExNTk4MjNiMWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc0dMsVpMXYajL1CEjAhw8vFCJY5OJ4EzOJQ bDvBUeUoyIPmJcYz7Xfl8aieBivFido2+8Z8r42YFkUWarf+MQa4mKmtCgYWES2n vLxon3vOXceiNFKS+hMIJOpkGMc153rsCRvK5hA5MZKPSbPJgKE9KcZ0Z93QdQlE CX/mJ1oTaKspflieI6xW337rZtDb4S3TuKCd8Vr26UWDO4fYSEvKTZlnbjaDy8Zw zLg/w8QKCqJq+pKPsNkufPGvwcjptedcyWhekXjoHhxE8kICKGQqtvtXu3nPEeLM n7dIc6HHRPHe+t3natmWQ8to8yb6LkSUQDV/VijCoiX/UMveowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA63gVUR7PV0s1LH+BlZhm8zuDfBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80Mjc5 ZGRmOC0zZTY2LTQ1Y2YtODk1NS00NTJmYmU2NTJjMGMvMmMxMTI1OWEtZjlkMC0z MTJjLWE1NDYtNTdjODEwY2E2YTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDI3OWRkZjgtM2U2Ni00NWNmLTg5 NTUtNDUyZmJlNjUyYzBjLzQyNzlkZGY4LTNlNjYtNDVjZi04OTU1LTQ1MmZiZTY1 MmMwYy5jcmwwHwYDVR0jBBgwFoAUyqJkG6e3TH6KYINPDkK7eKRQ8IQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80Mjc5ZGRmOC0zZTY2LTQ1Y2YtODk1NS00NTJm YmU2NTJjMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YnRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMPCuPiWN6l2kBKGApLwO6Vhl/K+RO7xfYS7NhgLmdgRT830H99+tYaC 5FuwnBpiZUFiO8zdufNMsU7QkBRHkrsuKl7xFn6BA6j6O8xGTh7uzMUD0KDAYPQF nLS5Ut8keR25wNX9k4vZetv0q3hpeznWnffSZ+jioKcc7JJCm4KujAvt3YjcQ/BQ kChpgRdTWicfB1S5+tjibCD7AvznghcBACBOhp2kdtbjjuuXWAkfvpccbvn4iLOE 4jOyfE/UT30TSK8G/rkBTUyAEQJQTcRRDy1aTIf/OvnTyG2WIuJEr43DsOPetEAQ vuOpm45ABT7G0KrkLuomPs6yE/1m+4E= -----END CERTIFICATE-----Generated at Tue Apr 8 18:23:30 2025 by rpki-client