$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/02a7113f-414f-366e-ba5e-590e520c170c.roa File: 02a7113f-414f-366e-ba5e-590e520c170c.roa (raw, json) Hash identifier: yGB0hwMumKeFpgZyRLm71MBTs3MFwmjFtPwiu189VRY= Subject key identifier: FF:D5:D9:32:B9:95:94:AF:90:D3:EC:9F:9F:13:5A:50:B8:24:4C:FD Certificate issuer: /CN=829d195a-d541-4371-970d-5be56cd489a8 Certificate serial: 010D0C9F432858489075F3B7A3C194009EB0AB20 Authority key identifier: C7:71:2A:18:24:84:EF:6E:8E:F0:83:87:1C:48:6E:34:B1:E9:98:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/02a7113f-414f-366e-ba5e-590e520c170c.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 46892 IP address blocks: 209.127.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:75:f3:b7:a3:c1:94:00:9e:b0:ab:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=829d195a-d541-4371-970d-5be56cd489a8 Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=3bcc9291-348b-4325-8df6-2fe739bff60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:36:f5:8c:3b:a1:1c:ee:46:3e:a0:ec:a6:7e: 4a:3d:9b:ab:7c:ce:5f:9d:8e:53:ce:2f:36:55:f6: 56:f7:62:22:a6:cf:f2:ad:53:01:29:c1:2b:76:36: db:c2:82:9c:b3:76:f9:92:19:b8:73:a0:a2:69:29: 74:35:3b:76:0c:98:28:e5:f9:f5:ef:30:33:9b:4f: 90:8f:2c:7e:9b:ce:10:02:78:de:b7:26:c3:35:fd: dd:34:f3:27:84:c1:e7:e4:97:6a:78:d8:47:ec:ba: 06:cf:f0:3e:11:72:a6:f4:d7:c5:e9:81:a4:e4:ea: 34:38:a6:b7:48:ce:85:16:2c:10:12:00:b3:99:7d: 87:81:87:44:a8:c0:d0:95:f5:89:a2:cf:54:ad:8b: 99:45:79:e0:96:38:2d:46:62:1a:fe:b7:2a:d6:45: 69:da:07:73:40:b8:54:96:0d:9d:a2:ca:50:95:df: 59:00:86:63:8f:0a:88:e0:4e:f4:85:7e:18:46:f1: e4:b2:66:d5:80:60:10:8f:82:65:a8:36:93:ad:91: 62:3f:90:2b:d4:1b:3f:98:72:99:18:0b:bc:a9:13: c3:1e:49:19:2b:e6:f5:37:4d:d6:21:a6:db:a0:cb: 05:07:a1:ab:85:21:8c:6d:5e:6b:3d:fe:4d:dc:63: 25:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D5:D9:32:B9:95:94:AF:90:D3:EC:9F:9F:13:5A:50:B8:24:4C:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/02a7113f-414f-366e-ba5e-590e520c170c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.crl X509v3 Authority Key Identifier: keyid:C7:71:2A:18:24:84:EF:6E:8E:F0:83:87:1C:48:6E:34:B1:E9:98:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer sbgp-ipAddrBlock: critical IPv4: 209.127.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:68:4e:ad:11:ed:a3:15:42:b8:2b:2b:cb:66:23:92:99:15: 1d:e0:56:29:20:7f:1a:1a:35:cf:ef:2f:62:0c:3f:b9:e1:4f: 6d:00:c1:b5:a7:46:c6:63:07:14:d4:a1:bf:d2:95:9c:18:17: c0:09:60:b2:c5:95:15:6b:d1:75:dc:9b:4a:6d:7e:38:5d:41: 65:d2:13:3a:2c:e7:aa:95:5c:a0:bc:57:24:27:92:18:3f:e8: 2e:13:e8:64:b7:51:8a:8a:ac:f6:4b:47:d5:cf:45:95:52:d6: 48:b1:83:20:c8:f3:77:f0:52:56:86:02:9f:34:ec:66:d8:31: 87:7c:27:19:8f:06:72:f0:82:4e:29:36:b2:39:b6:e8:a0:34: 1a:a5:cc:80:3a:1e:87:74:5b:2c:b7:5d:05:85:46:49:07:fa: 3a:43:0c:50:1d:b3:b7:d8:a4:f5:e6:28:c7:23:3c:8d:55:fc: 63:80:f5:fd:b3:d5:b9:15:cf:6a:d2:71:ff:4d:48:92:64:6e: fc:32:16:c9:88:05:e5:1d:f7:94:d9:3f:7b:52:17:a5:23:4d: 5a:2a:a4:53:32:3b:13:e8:1b:36:a7:8b:13:f3:c5:92:84:36: 29:db:41:42:45:de:72:2c:68:9b:ee:14:d1:a2:e9:81:c0:f0: 66:c7:e3:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdfO3o8GUAJ6wqyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI5ZDE5NWEtZDU0MS00MzcxLTk3MGQtNWJlNTZjZDQ4 OWE4MB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk M2JjYzkyOTEtMzQ4Yi00MzI1LThkZjYtMmZlNzM5YmZmNjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTb1jDuhHO5GPqDspn5KPZurfM5fnY5Tzi82 VfZW92Iips/yrVMBKcErdjbbwoKcs3b5khm4c6CiaSl0NTt2DJgo5fn17zAzm0+Q jyx+m84QAnjetybDNf3dNPMnhMHn5JdqeNhH7LoGz/A+EXKm9NfF6YGk5Oo0OKa3 SM6FFiwQEgCzmX2HgYdEqMDQlfWJos9UrYuZRXngljgtRmIa/rcq1kVp2gdzQLhU lg2dospQld9ZAIZjjwqI4E70hX4YRvHksmbVgGAQj4JlqDaTrZFiP5Ar1Bs/mHKZ GAu8qRPDHkkZK+b1N03WIabboMsFB6GrhSGMbV5rPf5N3GMlBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/V2TK5lZSvkNPsn58TWlC4JEz9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84Mjlk MTk1YS1kNTQxLTQzNzEtOTcwZC01YmU1NmNkNDg5YTgvMDJhNzExM2YtNDE0Zi0z NjZlLWJhNWUtNTkwZTUyMGMxNzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODI5ZDE5NWEtZDU0MS00MzcxLTk3 MGQtNWJlNTZjZDQ4OWE4LzgyOWQxOTVhLWQ1NDEtNDM3MS05NzBkLTViZTU2Y2Q0 ODlhOC5jcmwwHwYDVR0jBBgwFoAUx3EqGCSE726O8IOHHEhuNLHpmBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MjlkMTk1YS1kNTQxLTQzNzEtOTcwZC01YmU1 NmNkNDg5YTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0X/4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABloTq0R7aMVQrgrK8tmI5KZFR3gVikgfxoaNc/vL2IMP7nhT20AwbWn RsZjBxTUob/SlZwYF8AJYLLFlRVr0XXcm0ptfjhdQWXSEzos56qVXKC8VyQnkhg/ 6C4T6GS3UYqKrPZLR9XPRZVS1kixgyDI83fwUlaGAp807GbYMYd8JxmPBnLwgk4p NrI5tuigNBqlzIA6Hod0Wyy3XQWFRkkH+jpDDFAds7fYpPXmKMcjPI1V/GOA9f2z 1bkVz2rScf9NSJJkbvwyFsmIBeUd95TZP3tSF6UjTVoqpFMyOxPoGzanixPzxZKE NinbQUJF3nIsaJvuFNGi6YHA8GbH43M= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:04 2025 by rpki-client