$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/da1badaf-a81a-3e30-a837-19d39181a3ec.roa File: da1badaf-a81a-3e30-a837-19d39181a3ec.roa (raw, json) Hash identifier: VTfZx9x68xaegT+MqxpUgBTDM8cDzfp87icg35pFGY8= Subject key identifier: AF:33:AB:2F:E1:73:90:AE:1D:24:7A:50:16:40:11:21:4B:DF:BD:62 Certificate issuer: /CN=d578f033-7588-487c-9d67-16453bc5710a Certificate serial: 010D0C9F43285848A400B91B104450341203CB60 Authority key identifier: 01:EC:38:FE:98:BE:12:4B:D8:6C:E5:E5:D0:83:C2:AB:ED:62:77:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/da1badaf-a81a-3e30-a837-19d39181a3ec.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 14618 IP address blocks: 209.142.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/d578f033-7588-487c-9d67-16453bc5710a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/d578f033-7588-487c-9d67-16453bc5710a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:b9:1b:10:44:50:34:12:03:cb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d578f033-7588-487c-9d67-16453bc5710a Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=9068010b-8f8d-47fa-a56e-1c9979d2d36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:69:60:51:00:ec:60:a7:bf:2d:53:29:8c:8c: 52:c9:f5:24:1c:f5:a3:33:b2:c9:1c:4f:dc:2a:e0: bd:c5:84:ad:4a:0f:61:f9:1a:d4:1a:fa:23:fd:71: 38:0e:a6:92:54:a2:a3:30:c1:ed:27:1b:87:a0:e7: dc:98:87:32:84:5d:d5:c6:b4:6a:d7:81:35:95:b3: 41:72:6f:cc:9e:03:82:13:25:3f:8f:0a:b3:5c:47: 1e:15:0a:9d:f5:12:ed:98:e1:bd:6a:0d:4a:83:aa: b2:db:b5:21:c9:13:39:76:62:7a:c5:f0:3a:9b:bf: 81:9e:71:6d:b3:21:21:80:d0:02:54:06:53:f6:b8: ac:b1:b6:fd:32:0d:19:bf:34:48:63:fc:88:1c:8e: 32:fd:a7:8d:1c:b7:73:dd:a2:de:c7:ba:5b:4f:5e: 1f:c7:08:75:47:b2:6a:0b:74:28:bb:40:b2:35:f4: a3:3b:ca:d4:3c:31:bd:94:1f:38:5d:68:03:ca:29: a3:b0:dc:94:a8:97:fd:1b:b3:40:90:ec:de:6c:a4: fc:88:29:4f:98:0c:bc:93:22:56:d1:3b:42:04:fc: 76:ba:6c:b8:4b:07:a4:d9:d5:1f:2b:c1:69:d4:b7: 82:48:7a:1c:25:6d:a0:3c:9c:d2:57:ab:6f:4b:f8: 2a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:33:AB:2F:E1:73:90:AE:1D:24:7A:50:16:40:11:21:4B:DF:BD:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/da1badaf-a81a-3e30-a837-19d39181a3ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/d578f033-7588-487c-9d67-16453bc5710a.crl X509v3 Authority Key Identifier: keyid:01:EC:38:FE:98:BE:12:4B:D8:6C:E5:E5:D0:83:C2:AB:ED:62:77:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a.cer sbgp-ipAddrBlock: critical IPv4: 209.142.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:04:f5:c3:7a:a6:33:1e:02:8a:d0:71:51:96:1d:e8:c2:4b: e6:18:9e:49:e2:bf:ea:00:c4:07:0f:c9:fb:74:fa:8b:e6:10: fc:72:b5:24:64:3a:60:9c:6e:b9:90:92:3e:67:ab:83:be:0a: 5c:0a:c6:70:85:28:7a:cd:5d:b9:83:1f:d7:b7:fd:cc:79:7f: f6:c0:60:b8:19:2b:26:6e:23:aa:da:df:c3:a6:00:ca:23:76: e1:d6:b0:52:1d:59:41:bf:c6:c3:fb:c5:48:80:73:d5:02:e9: 69:ca:36:b9:0f:96:7f:74:85:75:21:70:1a:96:f5:69:ac:b6: 44:22:32:b1:cb:bb:84:ad:b9:11:85:b9:47:cc:b2:78:09:f7: 3e:de:fb:18:1c:53:07:9e:80:4d:32:88:a6:a8:ef:a6:3b:05: ff:31:3f:5d:9d:ca:60:9e:88:b1:de:fc:f4:0c:d3:c5:95:a8: e6:bc:49:24:89:1f:d3:3d:d6:17:bc:c9:a7:ab:74:1f:ca:19: 3b:98:ba:35:76:e6:17:a5:b4:fe:a1:9b:17:12:24:cb:a3:53: 06:d6:a8:18:85:8a:9a:31:ca:7f:9b:89:cf:e9:33:70:f8:ef: 0c:79:57:5d:4f:a3:ea:1c:42:eb:18:fa:b3:fd:bb:b3:21:1c: df:78:0b:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikALkbEERQNBIDy2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU3OGYwMzMtNzU4OC00ODdjLTlkNjctMTY0NTNiYzU3 MTBhMB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk OTA2ODAxMGItOGY4ZC00N2ZhLWE1NmUtMWM5OTc5ZDJkMzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWlgUQDsYKe/LVMpjIxSyfUkHPWjM7LJHE/c KuC9xYStSg9h+RrUGvoj/XE4DqaSVKKjMMHtJxuHoOfcmIcyhF3VxrRq14E1lbNB cm/MngOCEyU/jwqzXEceFQqd9RLtmOG9ag1Kg6qy27UhyRM5dmJ6xfA6m7+BnnFt syEhgNACVAZT9rissbb9Mg0ZvzRIY/yIHI4y/aeNHLdz3aLex7pbT14fxwh1R7Jq C3Qou0CyNfSjO8rUPDG9lB84XWgDyimjsNyUqJf9G7NAkOzebKT8iClPmAy8kyJW 0TtCBPx2umy4Swek2dUfK8Fp1LeCSHocJW2gPJzSV6tvS/gqeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8zqy/hc5CuHSR6UBZAESFL371iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNTc4 ZjAzMy03NTg4LTQ4N2MtOWQ2Ny0xNjQ1M2JjNTcxMGEvZGExYmFkYWYtYTgxYS0z ZTMwLWE4MzctMTlkMzkxODFhM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDU3OGYwMzMtNzU4OC00ODdjLTlk NjctMTY0NTNiYzU3MTBhL2Q1NzhmMDMzLTc1ODgtNDg3Yy05ZDY3LTE2NDUzYmM1 NzEwYS5jcmwwHwYDVR0jBBgwFoAUAew4/pi+EkvYbOXl0IPCq+1id4owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNTc4ZjAzMy03NTg4LTQ4N2MtOWQ2Ny0xNjQ1 M2JjNTcxMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4E9cN6pjMeAorQcVGWHejCS+YYnkniv+oAxAcPyft0+ovmEPxytSRk OmCcbrmQkj5nq4O+ClwKxnCFKHrNXbmDH9e3/cx5f/bAYLgZKyZuI6ra38OmAMoj duHWsFIdWUG/xsP7xUiAc9UC6WnKNrkPln90hXUhcBqW9WmstkQiMrHLu4StuRGF uUfMsngJ9z7e+xgcUweegE0yiKao76Y7Bf8xP12dymCeiLHe/PQM08WVqOa8SSSJ H9M91he8yaerdB/KGTuYujV25heltP6hmxcSJMujUwbWqBiFipoxyn+bic/pM3D4 7wx5V11Po+ocQusY+rP9u7MhHN94Cw0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:31 2025 by rpki-client