$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/6326754f-fb2e-3c8f-b430-f0e8b4107969.roa File: 6326754f-fb2e-3c8f-b430-f0e8b4107969.roa (raw, json) Hash identifier: oEwG1iAE5pMgxWZeRihvhn+4Uj2R/StcPSgrJLVveDQ= Subject key identifier: 4C:2F:81:70:5B:41:C6:5A:F3:40:C1:AE:C3:E6:8F:FB:97:6E:61:71 Certificate issuer: /CN=5b640257-7947-43c1-997a-0af58a465bdc Certificate serial: 010D0C9F4328584812D52DB3B8C1899C78E453C0 Authority key identifier: E5:30:3C:9A:AD:0F:44:F7:1E:E3:C1:3C:2D:1B:1C:51:F5:1C:34:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/6326754f-fb2e-3c8f-b430-f0e8b4107969.roa Signing time: Mon 02 Dec 2024 14:00:51 +0000 ROA not before: Mon 02 Dec 2024 14:00:51 +0000 ROA not after: Sun 02 Mar 2025 14:00:51 +0000 asID: 16509 IP address blocks: 209.209.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/5b640257-7947-43c1-997a-0af58a465bdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/5b640257-7947-43c1-997a-0af58a465bdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:12:d5:2d:b3:b8:c1:89:9c:78:e4:53:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b640257-7947-43c1-997a-0af58a465bdc Validity Not Before: Dec 2 14:00:51 2024 GMT Not After : Mar 2 14:00:51 2025 GMT Subject: CN=a114e806-9886-4bf5-b471-7e15c4e004f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:be:11:0d:cb:9e:86:e1:51:b4:c3:f9:6b:f9: a8:af:4a:db:8e:c7:9a:ed:b6:a7:c1:b2:26:28:46: b6:a0:2c:f7:88:f4:16:7d:91:66:e6:01:9d:1c:74: c6:64:fe:d9:34:ef:0d:29:f3:75:57:78:82:41:68: f2:74:06:a4:38:c7:6a:07:00:31:f1:61:80:e3:25: 94:7f:b5:f5:a9:6c:25:7f:51:84:10:62:7c:4e:9e: 3f:ef:ca:df:84:e8:90:b9:1c:94:07:46:dc:ed:df: 80:19:ec:ec:0e:f8:7a:a1:2f:17:31:63:07:d8:df: c7:da:6e:4d:65:f9:8d:1a:3e:31:a6:b1:89:02:1d: a7:4b:55:10:9d:93:28:5a:ac:03:86:05:60:47:c1: 28:1d:b9:b2:ac:95:13:6e:b3:e5:2b:25:ba:30:7b: b2:f5:89:e5:18:3a:dc:12:8a:9b:f9:be:25:89:10: e1:46:5a:63:e4:fb:5b:b6:e6:ce:39:2b:6a:16:1a: df:0b:0a:5f:d4:41:4b:e0:c6:d1:fe:21:f2:ac:54: d9:87:f7:ef:78:2f:e3:48:57:73:c1:1d:91:2a:6b: 9f:c1:14:a6:97:fb:49:29:0d:9c:05:26:f5:a4:24: 22:35:67:9b:de:69:6f:ea:1d:aa:96:69:44:d0:7a: f6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2F:81:70:5B:41:C6:5A:F3:40:C1:AE:C3:E6:8F:FB:97:6E:61:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/6326754f-fb2e-3c8f-b430-f0e8b4107969.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/5b640257-7947-43c1-997a-0af58a465bdc.crl X509v3 Authority Key Identifier: keyid:E5:30:3C:9A:AD:0F:44:F7:1E:E3:C1:3C:2D:1B:1C:51:F5:1C:34:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc.cer sbgp-ipAddrBlock: critical IPv4: 209.209.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:9f:4a:04:f0:67:eb:81:73:fa:84:2b:6c:01:55:c9:60:30: 3b:3e:30:b3:fa:65:6c:22:cc:30:ca:43:35:e3:cd:f5:a7:48: ff:0d:98:7e:e0:c1:1e:ea:a8:a5:a1:92:9f:67:5f:de:c7:0e: f1:13:7d:da:4b:38:d9:34:d0:9e:34:c6:12:9f:e4:0e:0b:18: f4:06:26:ba:da:ac:7e:69:5b:f7:2b:bc:92:bf:0c:a3:d1:99: 0f:a8:c1:77:68:24:c1:37:6e:b7:41:51:4e:36:72:f7:2a:77: 9f:d0:bb:a9:a0:94:4d:48:88:ac:2a:96:92:e2:61:8d:f5:84: d2:60:a9:85:94:11:c4:d3:70:70:16:74:32:e2:f3:ca:04:c0: 08:bd:a0:7b:bb:f3:85:2c:d6:71:2e:43:29:db:ae:36:35:4b: 7e:3d:e4:b1:76:81:f1:fe:fc:6e:65:ae:22:48:87:bd:7d:08: 10:c6:4c:6e:55:f0:40:fe:b8:61:84:49:28:c2:19:48:97:a7: 81:2b:44:ac:4d:65:ec:bc:1b:65:e0:8e:9f:12:79:fd:17:85: ef:a7:a4:4a:f1:16:4c:97:56:65:f0:4f:38:41:66:f0:02:53: 65:e6:78:52:0a:82:6a:5c:41:18:0b:18:a7:55:9d:cf:ac:1a: e9:6c:c8:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgS1S2zuMGJnHjkU8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI2NDAyNTctNzk0Ny00M2MxLTk5N2EtMGFmNThhNDY1 YmRjMB4XDTI0MTIwMjE0MDA1MVoXDTI1MDMwMjE0MDA1MVowLzEtMCsGA1UEAxMk YTExNGU4MDYtOTg4Ni00YmY1LWI0NzEtN2UxNWM0ZTAwNGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr4RDcuehuFRtMP5a/mor0rbjsea7banwbIm KEa2oCz3iPQWfZFm5gGdHHTGZP7ZNO8NKfN1V3iCQWjydAakOMdqBwAx8WGA4yWU f7X1qWwlf1GEEGJ8Tp4/78rfhOiQuRyUB0bc7d+AGezsDvh6oS8XMWMH2N/H2m5N ZfmNGj4xprGJAh2nS1UQnZMoWqwDhgVgR8EoHbmyrJUTbrPlKyW6MHuy9YnlGDrc Eoqb+b4liRDhRlpj5PtbtubOOStqFhrfCwpf1EFL4MbR/iHyrFTZh/fveC/jSFdz wR2RKmufwRSml/tJKQ2cBSb1pCQiNWeb3mlv6h2qlmlE0Hr2KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwvgXBbQcZa80DBrsPmj/uXbmFxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81YjY0 MDI1Ny03OTQ3LTQzYzEtOTk3YS0wYWY1OGE0NjViZGMvNjMyNjc1NGYtZmIyZS0z YzhmLWI0MzAtZjBlOGI0MTA3OTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWI2NDAyNTctNzk0Ny00M2MxLTk5 N2EtMGFmNThhNDY1YmRjLzViNjQwMjU3LTc5NDctNDNjMS05OTdhLTBhZjU4YTQ2 NWJkYy5jcmwwHwYDVR0jBBgwFoAU5TA8mq0PRPce48E8LRscUfUcNMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81YjY0MDI1Ny03OTQ3LTQzYzEtOTk3YS0wYWY1 OGE0NjViZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dEZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGafSgTwZ+uBc/qEK2wBVclgMDs+MLP6ZWwizDDKQzXjzfWnSP8NmH7g wR7qqKWhkp9nX97HDvETfdpLONk00J40xhKf5A4LGPQGJrrarH5pW/crvJK/DKPR mQ+owXdoJME3brdBUU42cvcqd5/Qu6mglE1IiKwqlpLiYY31hNJgqYWUEcTTcHAW dDLi88oEwAi9oHu784Us1nEuQynbrjY1S3495LF2gfH+/G5lriJIh719CBDGTG5V 8ED+uGGESSjCGUiXp4ErRKxNZey8G2Xgjp8Sef0Xhe+npErxFkyXVmXwTzhBZvAC U2XmeFIKgmpcQRgLGKdVnc+sGulsyDA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:27 2025 by rpki-client