$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4d3c3e2d-3f38-3d06-944a-3e44a2bd99ff.roa File: 4d3c3e2d-3f38-3d06-944a-3e44a2bd99ff.roa (raw, json) Hash identifier: 9GHmX0JSd6ZyqpgJxtU3s7BEwm+OU+K//UemEqc0OG8= Subject key identifier: D1:CD:D6:51:CC:4E:4A:5C:76:3B:4B:DD:D6:BA:0E:55:5F:E9:83:B4 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F432858482C461B884B5076FC5158F94E Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4d3c3e2d-3f38-3d06-944a-3e44a2bd99ff.roa Signing time: Wed 11 Dec 2024 16:43:43 +0000 ROA not before: Wed 11 Dec 2024 16:43:43 +0000 ROA not after: Tue 11 Mar 2025 15:43:43 +0000 asID: 29802 IP address blocks: 200.229.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2c:46:1b:88:4b:50:76:fc:51:58:f9:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Dec 11 16:43:43 2024 GMT Not After : Mar 11 15:43:43 2025 GMT Subject: CN=e64d9601-42dd-4936-b835-a0a3f30b84e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5c:cf:29:9b:6b:37:86:1d:4f:54:b7:e6:81: 10:bb:17:40:02:dd:df:7f:ee:40:70:ba:85:23:fa: 2e:10:88:4f:6f:11:0d:3d:d4:4d:13:12:7b:46:83: 94:4e:57:f4:ab:15:b1:52:1c:01:e4:54:03:4e:19: e2:01:7d:8a:e3:74:4f:8c:05:2e:77:33:de:8c:4f: a8:a4:8a:79:87:7a:6e:09:38:1b:ba:bc:bc:a8:84: 61:67:58:56:f5:ed:43:56:97:eb:ae:f0:cd:64:75: b6:f7:3d:42:23:b4:2c:f4:bb:34:36:2d:68:72:d6: d8:f0:3f:f8:4b:f8:28:70:b0:3c:15:94:41:98:3b: aa:cf:5f:45:a6:eb:78:27:1f:af:29:a9:b8:db:8f: 8e:1e:f8:3e:b4:d2:1e:a4:b2:2f:a9:00:f6:94:04: 44:fe:a2:9c:34:a8:d1:e5:0c:67:16:20:ea:fd:ba: e5:0f:ce:7e:43:d4:d7:09:bc:6f:78:62:92:9d:b5: 33:a3:1d:e1:ae:2a:23:61:1d:cb:1d:2d:ce:d9:5b: 70:7d:b2:8a:7f:97:8b:7c:e8:dc:1d:f6:c5:cd:34: 41:eb:6d:53:54:ea:70:c2:23:ae:eb:1b:6b:88:88: 16:3b:21:64:c1:4a:42:e1:03:d6:ba:40:c0:fe:d2: e2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CD:D6:51:CC:4E:4A:5C:76:3B:4B:DD:D6:BA:0E:55:5F:E9:83:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4d3c3e2d-3f38-3d06-944a-3e44a2bd99ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 200.229.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:5b:cf:a9:a2:ef:24:32:ee:66:81:c7:6e:17:14:4c:33:ea: 29:95:25:a8:63:da:9c:fe:2e:51:99:8e:45:cf:41:4b:3b:92: 26:c3:f0:13:d9:dc:c6:d2:bd:cd:6e:c1:8b:15:39:d9:0f:8d: a0:c9:cc:1f:1e:a1:ca:98:2f:5a:42:b4:06:e7:29:b5:32:56: 15:97:11:6a:fe:83:4d:ab:8e:98:a5:c6:66:e6:de:33:3a:62: 1e:f8:d9:33:2d:94:66:33:af:d6:af:17:ce:b4:d5:fe:f2:b8: 7e:bf:4d:01:e4:82:ce:c8:42:26:74:10:83:e7:53:c9:f0:3a: f9:1f:17:be:02:87:7d:5b:b5:39:07:d0:66:1f:49:08:85:bd: 35:a8:c8:71:14:37:71:2b:67:0b:d7:fe:ea:4e:f8:50:73:1c: 78:cc:f3:47:16:1e:9f:ad:73:4d:9f:0e:81:fd:45:5e:b1:91: 87:9a:24:44:24:21:da:87:8e:5c:9d:2b:d2:cf:b1:41:ab:51: 31:61:fe:d4:bb:f1:24:3d:5c:0f:dc:33:a7:59:b1:94:9d:48: dc:73:8d:76:b2:6d:7c:26:0d:e9:37:be:e1:0e:7c:8b:e2:26: 30:93:e1:f7:35:a7:3a:53:98:51:27:fb:2b:10:d1:6a:06:1d: c6:d8:02:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgsRhuIS1B2/FFY+U4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI0MTIxMTE2NDM0M1oXDTI1MDMxMTE1NDM0M1owLzEtMCsGA1UEAxMk ZTY0ZDk2MDEtNDJkZC00OTM2LWI4MzUtYTBhM2YzMGI4NGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVzPKZtrN4YdT1S35oEQuxdAAt3ff+5AcLqF I/ouEIhPbxENPdRNExJ7RoOUTlf0qxWxUhwB5FQDThniAX2K43RPjAUudzPejE+o pIp5h3puCTgbury8qIRhZ1hW9e1DVpfrrvDNZHW29z1CI7Qs9Ls0Ni1octbY8D/4 S/gocLA8FZRBmDuqz19Fput4Jx+vKam424+OHvg+tNIepLIvqQD2lARE/qKcNKjR 5QxnFiDq/brlD85+Q9TXCbxveGKSnbUzox3hriojYR3LHS3O2VtwfbKKf5eLfOjc HfbFzTRB621TVOpwwiOu6xtriIgWOyFkwUpC4QPWukDA/tLinwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHN1lHMTkpcdjtL3da6DlVf6YO0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNGQzYzNlMmQtM2YzOC0z ZDA2LTk0NGEtM2U0NGEyYmQ5OWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyOUZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFbz6mi7yQy7maBx24XFEwz6imVJahj2pz+LlGZjkXPQUs7kibD8BPZ 3MbSvc1uwYsVOdkPjaDJzB8eocqYL1pCtAbnKbUyVhWXEWr+g02rjpilxmbm3jM6 Yh742TMtlGYzr9avF8601f7yuH6/TQHkgs7IQiZ0EIPnU8nwOvkfF74Ch31btTkH 0GYfSQiFvTWoyHEUN3ErZwvX/upO+FBzHHjM80cWHp+tc02fDoH9RV6xkYeaJEQk IdqHjlydK9LPsUGrUTFh/tS78SQ9XA/cM6dZsZSdSNxzjXaybXwmDek3vuEOfIvi JjCT4fc1pzpTmFEn+ysQ0WoGHcbYAic= -----END CERTIFICATE-----Generated at Wed Feb 19 20:37:49 2025 by rpki-client