$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/f7377074-79a9-3c65-893e-e173c83478cf.roa File: f7377074-79a9-3c65-893e-e173c83478cf.roa (raw, json) Hash identifier: Tt8jtfLkEjXXubpvQBJECWfN+w2nSfqtFEDYJIbpHfU= Subject key identifier: D1:EF:8E:51:96:05:E4:8A:2F:86:C1:A2:09:5B:8A:F4:67:51:06:F6 Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Certificate serial: 010D0C9F4328584858A0442B794F68000EF0FD80 Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/f7377074-79a9-3c65-893e-e173c83478cf.roa Signing time: Fri 27 Dec 2024 14:00:52 +0000 ROA not before: Fri 27 Dec 2024 14:00:52 +0000 ROA not after: Thu 27 Mar 2025 13:00:52 +0000 asID: 13213 IP address blocks: 209.236.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:58:a0:44:2b:79:4f:68:00:0e:f0:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Validity Not Before: Dec 27 14:00:52 2024 GMT Not After : Mar 27 13:00:52 2025 GMT Subject: CN=a3d9507a-7a6e-4fa0-a89b-be8f0cecb12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a3:22:f0:51:10:f5:eb:db:2f:6f:d9:c9:6b: 6a:85:2c:97:87:23:2a:97:67:7a:4b:2c:81:3e:25: a9:0c:ce:6f:8e:64:d0:0f:06:5b:7e:2d:76:a7:aa: 5f:35:03:2d:31:b4:9e:fc:dd:e2:98:47:5a:c8:8e: e9:ea:c3:ff:c3:53:11:87:29:c5:08:51:dd:c4:1f: 38:27:8c:80:b3:20:6d:87:95:a1:76:ee:10:80:76: 44:2f:42:38:ad:c0:2a:08:f0:70:63:d9:8f:ef:3d: 1e:90:7d:34:35:8f:55:67:18:28:c5:b7:5d:57:8e: 21:b4:0a:99:14:a7:8e:49:12:5e:e8:72:ff:da:59: 0a:eb:73:4c:00:8a:70:1e:d3:2a:5e:02:39:eb:b7: 6c:ba:28:ea:ff:b6:af:55:2a:6e:f5:38:b0:47:eb: b2:3c:be:52:ae:29:2a:c1:56:f9:ef:65:1f:a5:f3: 09:4c:c1:33:6f:71:0a:2a:99:2c:96:32:43:52:ba: 61:c9:15:81:42:c9:c5:7e:42:59:66:2f:52:ec:a7: 74:1a:05:5c:13:ab:2f:42:18:25:a7:92:5c:05:14: 67:4e:9e:29:59:cc:c3:58:e4:50:a1:13:a9:59:44: 6e:79:04:bd:d5:46:d5:bd:ce:4d:74:18:31:01:f6: 1d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:EF:8E:51:96:05:E4:8A:2F:86:C1:A2:09:5B:8A:F4:67:51:06:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/f7377074-79a9-3c65-893e-e173c83478cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl X509v3 Authority Key Identifier: keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer sbgp-ipAddrBlock: critical IPv4: 209.236.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:57:fb:a4:14:44:2c:c9:34:95:f0:13:32:62:da:59:e8:e1: a8:41:9c:25:fc:41:fc:72:0a:ec:ae:28:16:5d:f9:26:2a:eb: 14:93:e6:10:39:7a:92:b5:82:42:06:69:ee:96:be:2a:8d:9e: 25:a5:cd:98:33:24:6b:50:b1:2f:74:7e:62:2f:f6:02:7e:a3: 63:c8:5c:90:4d:66:83:db:d6:00:eb:74:92:1d:59:20:8f:86: 88:3f:23:93:b7:e6:f4:0a:fe:e6:d9:d6:71:f2:5c:76:ee:23: ac:11:28:d8:48:47:1c:3b:78:43:12:02:20:94:67:6d:69:7b: 3b:f4:f5:4a:40:c3:da:90:10:93:2e:41:82:9f:d3:60:b5:9d: 39:18:16:74:36:f1:e6:b8:f6:af:26:81:d4:f4:1e:c6:db:29: 16:b5:81:c6:7e:b4:d9:8b:d0:9b:65:b5:01:ac:ea:d0:e8:40: bb:6a:ff:cf:9c:10:c6:e4:ee:72:f7:51:52:22:e5:5f:da:d3: 4b:c9:d4:80:ec:00:ab:61:c0:bc:1c:30:b7:5f:b6:ed:ab:7c: 16:40:6e:75:96:1f:76:f5:b2:2e:9d:67:9a:84:08:cc:0d:0d: e5:72:72:be:ac:60:85:e0:bd:f2:7d:33:b3:9e:00:44:1e:8b: 9d:73:0f:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoEQreU9oAA7w/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5 YWFlMB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk YTNkOTUwN2EtN2E2ZS00ZmEwLWE4OWItYmU4ZjBjZWNiMTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKMi8FEQ9evbL2/ZyWtqhSyXhyMql2d6SyyB PiWpDM5vjmTQDwZbfi12p6pfNQMtMbSe/N3imEdayI7p6sP/w1MRhynFCFHdxB84 J4yAsyBth5Whdu4QgHZEL0I4rcAqCPBwY9mP7z0ekH00NY9VZxgoxbddV44htAqZ FKeOSRJe6HL/2lkK63NMAIpwHtMqXgI567dsuijq/7avVSpu9TiwR+uyPL5Srikq wVb572UfpfMJTMEzb3EKKpksljJDUrphyRWBQsnFfkJZZi9S7Kd0GgVcE6svQhgl p5JcBRRnTp4pWczDWORQoROpWURueQS91UbVvc5NdBgxAfYdoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHvjlGWBeSKL4bBoglbivRnUQb2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Njdh OThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvZjczNzcwNzQtNzlhOS0z YzY1LTg5M2UtZTE3M2M4MzQ3OGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTY3YTk4YjAtMTAwZi00ZTY5LThh OWYtYmNlYWRiN2U5YWFlLzk2N2E5OGIwLTEwMGYtNGU2OS04YTlmLWJjZWFkYjdl OWFhZS5jcmwwHwYDVR0jBBgwFoAU11g4vsgJB/HhoBW3h78hrABJOTswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2Vh ZGI3ZTlhYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0exAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZX+6QURCzJNJXwEzJi2lno4ahBnCX8QfxyCuyuKBZd+SYq6xST5hA5 epK1gkIGae6WviqNniWlzZgzJGtQsS90fmIv9gJ+o2PIXJBNZoPb1gDrdJIdWSCP hog/I5O35vQK/ubZ1nHyXHbuI6wRKNhIRxw7eEMSAiCUZ21pezv09UpAw9qQEJMu QYKf02C1nTkYFnQ28ea49q8mgdT0HsbbKRa1gcZ+tNmL0JtltQGs6tDoQLtq/8+c EMbk7nL3UVIi5V/a00vJ1IDsAKthwLwcMLdftu2rfBZAbnWWH3b1si6dZ5qECMwN DeVycr6sYIXgvfJ9M7OeAEQei51zD8k= -----END CERTIFICATE-----Generated at Fri Mar 14 11:04:00 2025 by rpki-client