$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/b84609ff-6d72-31a6-be19-12752acfbdb9.roa File: b84609ff-6d72-31a6-be19-12752acfbdb9.roa (raw, json) Hash identifier: rziTkTdAyucT60BSEoUC8/I7TzEy8CPdHiiI8cyof0A= Subject key identifier: 43:35:39:30:35:EF:44:B2:71:85:B3:68:62:F2:55:14:94:31:73:85 Certificate issuer: /CN=829d195a-d541-4371-970d-5be56cd489a8 Certificate serial: 010D0C9F432858489075ECAC12A9C73C5C984F00 Authority key identifier: C7:71:2A:18:24:84:EF:6E:8E:F0:83:87:1C:48:6E:34:B1:E9:98:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/b84609ff-6d72-31a6-be19-12752acfbdb9.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 46892 IP address blocks: 209.35.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:75:ec:ac:12:a9:c7:3c:5c:98:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=829d195a-d541-4371-970d-5be56cd489a8 Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=d6960c5b-2ac5-4ec2-94cb-1ac32d6eddfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:be:ff:b6:a9:2e:1e:dd:76:3e:d5:40:84:2e: 08:85:ff:3e:93:28:2e:de:aa:f6:da:88:d7:8f:4d: 45:80:61:32:42:05:2d:56:f9:21:96:63:48:8a:13: 93:b7:5f:90:07:33:f8:f6:de:4a:59:5b:92:c9:84: 09:f6:38:51:22:a0:9c:49:06:9b:47:53:c7:b1:61: 77:9e:e0:a8:9d:f5:ff:f0:b4:6d:d2:e9:b5:49:99: c3:53:17:63:eb:0c:06:83:35:9d:91:d0:ee:b1:df: d3:cf:a9:0b:f0:9e:87:9e:21:7c:fa:0a:ea:0a:35: 2d:5a:90:0f:12:a2:30:cb:e5:f2:f2:df:c6:18:70: ba:16:91:2d:81:21:5a:e5:1f:9a:d2:c4:53:29:12: 6a:e9:87:82:96:ff:5e:34:f9:4e:d8:f6:fd:ab:39: bd:f4:e0:14:f8:f5:b6:63:bf:3e:2f:07:84:82:bb: 76:9c:c0:41:e4:d4:50:08:8a:6a:a3:85:24:ce:1b: 8f:90:70:14:be:46:93:af:b9:06:35:dd:ae:b5:dd: dc:3a:3e:fe:30:34:fc:a9:57:71:33:84:c6:74:c1: cf:1e:7a:f4:5e:a4:b0:99:b2:a4:85:18:17:75:4c: 34:20:32:fd:24:d3:b8:fa:16:d9:f3:f1:09:41:ed: c2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:35:39:30:35:EF:44:B2:71:85:B3:68:62:F2:55:14:94:31:73:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/b84609ff-6d72-31a6-be19-12752acfbdb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.crl X509v3 Authority Key Identifier: keyid:C7:71:2A:18:24:84:EF:6E:8E:F0:83:87:1C:48:6E:34:B1:E9:98:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer sbgp-ipAddrBlock: critical IPv4: 209.35.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:54:60:9d:1d:a1:ce:94:be:f7:c0:99:ff:4b:bd:21:6f:bd: 99:9f:ac:fe:de:ae:91:07:36:6c:6c:b1:a0:81:f5:de:73:9f: 5a:91:58:f4:a4:07:d0:84:6a:97:51:02:55:47:48:99:a4:6a: f7:62:70:a4:03:d3:41:0c:0b:e4:02:0c:87:6f:ba:4a:91:5b: 57:e4:36:9b:66:08:00:25:fa:00:dc:bd:db:7c:83:7d:e0:86: ba:c9:2e:25:88:fa:00:e1:17:d6:0c:62:c1:91:f5:bf:8b:5d: 26:c0:25:52:d2:e0:29:44:71:e0:ba:a5:3a:e7:3c:7b:96:e7: a3:7c:48:4b:b9:0e:4c:31:81:d0:1a:02:45:0c:51:e4:e1:91: e2:3b:a5:f7:00:1a:cd:b7:20:19:91:fb:a6:b7:e1:e1:3e:c6: 4e:ab:38:b3:5a:7e:11:30:57:38:16:53:85:0e:11:a1:88:6e: ba:5e:1f:cc:b5:97:5d:ad:24:e2:38:0b:49:6c:4a:87:8d:54: 2d:81:2d:50:80:ec:e0:06:85:a1:f4:c8:66:90:75:f2:b4:7a: b4:1f:d7:43:21:d4:d5:a8:64:bc:ce:c0:13:73:26:aa:01:dc: 29:a6:08:02:28:07:44:82:70:86:9e:23:01:ae:c0:8c:99:be: ed:38:18:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdeysEqnHPFyYTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI5ZDE5NWEtZDU0MS00MzcxLTk3MGQtNWJlNTZjZDQ4 OWE4MB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk ZDY5NjBjNWItMmFjNS00ZWMyLTk0Y2ItMWFjMzJkNmVkZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq77/tqkuHt12PtVAhC4Ihf8+kygu3qr22ojX j01FgGEyQgUtVvkhlmNIihOTt1+QBzP49t5KWVuSyYQJ9jhRIqCcSQabR1PHsWF3 nuConfX/8LRt0um1SZnDUxdj6wwGgzWdkdDusd/Tz6kL8J6HniF8+grqCjUtWpAP EqIwy+Xy8t/GGHC6FpEtgSFa5R+a0sRTKRJq6YeClv9eNPlO2Pb9qzm99OAU+PW2 Y78+LweEgrt2nMBB5NRQCIpqo4UkzhuPkHAUvkaTr7kGNd2utd3cOj7+MDT8qVdx M4TGdMHPHnr0XqSwmbKkhRgXdUw0IDL9JNO4+hbZ8/EJQe3CgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEM1OTA170SycYWzaGLyVRSUMXOFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84Mjlk MTk1YS1kNTQxLTQzNzEtOTcwZC01YmU1NmNkNDg5YTgvYjg0NjA5ZmYtNmQ3Mi0z MWE2LWJlMTktMTI3NTJhY2ZiZGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODI5ZDE5NWEtZDU0MS00MzcxLTk3 MGQtNWJlNTZjZDQ4OWE4LzgyOWQxOTVhLWQ1NDEtNDM3MS05NzBkLTViZTU2Y2Q0 ODlhOC5jcmwwHwYDVR0jBBgwFoAUx3EqGCSE726O8IOHHEhuNLHpmBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MjlkMTk1YS1kNTQxLTQzNzEtOTcwZC01YmU1 NmNkNDg5YTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0SPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtUYJ0doc6UvvfAmf9LvSFvvZmfrP7erpEHNmxssaCB9d5zn1qRWPSk B9CEapdRAlVHSJmkavdicKQD00EMC+QCDIdvukqRW1fkNptmCAAl+gDcvdt8g33g hrrJLiWI+gDhF9YMYsGR9b+LXSbAJVLS4ClEceC6pTrnPHuW56N8SEu5DkwxgdAa AkUMUeThkeI7pfcAGs23IBmR+6a34eE+xk6rOLNafhEwVzgWU4UOEaGIbrpeH8y1 l12tJOI4C0lsSoeNVC2BLVCA7OAGhaH0yGaQdfK0erQf10Mh1NWoZLzOwBNzJqoB 3CmmCAIoB0SCcIaeIwGuwIyZvu04GGw= -----END CERTIFICATE-----Generated at Fri Mar 14 10:53:25 2025 by rpki-client