$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/35fefc44-ddc5-3699-b205-35ecd350481d.roa File: 35fefc44-ddc5-3699-b205-35ecd350481d.roa (raw, json) Hash identifier: C65YabS57C/UclbAwpTy7Wbc1mZODlHSofRy6E3eTYc= Subject key identifier: F0:85:FF:FD:F6:29:54:11:81:04:79:46:7F:97:C6:F0:C6:FB:B0:B8 Certificate issuer: /CN=7ede7b70-d745-425d-975b-bb0eb6368430 Certificate serial: 010D0C9F43285848222FD999D12A4F402EA10080 Authority key identifier: 42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/35fefc44-ddc5-3699-b205-35ecd350481d.roa Signing time: Sun 08 Dec 2024 02:00:39 +0000 ROA not before: Sun 08 Dec 2024 02:00:39 +0000 ROA not after: Sat 08 Mar 2025 02:00:39 +0000 asID: 22697 IP address blocks: 209.206.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:22:2f:d9:99:d1:2a:4f:40:2e:a1:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ede7b70-d745-425d-975b-bb0eb6368430 Validity Not Before: Dec 8 02:00:39 2024 GMT Not After : Mar 8 02:00:39 2025 GMT Subject: CN=32453fc6-0ba5-4445-8625-a0a600a00fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:27:17:d5:c7:f6:71:1e:6f:49:43:8b:33:47: 67:b2:54:5a:cf:00:dd:d9:f8:61:69:06:a4:f2:9b: 22:b2:61:6c:b6:d7:9e:38:b7:49:90:4f:46:b7:70: 7b:64:f3:f2:d6:f5:be:a3:48:76:cc:03:ee:db:86: 10:53:fb:5b:87:b1:f0:0e:44:2d:d9:7a:c5:13:92: 64:3c:34:e2:61:64:3e:1e:f3:14:87:dd:1d:3a:9b: 59:61:38:0f:46:65:05:42:66:4d:5e:0b:4f:36:fc: 86:86:91:42:d7:de:e9:75:72:dd:5d:7e:c9:27:fe: 7f:ef:c5:2e:e4:42:89:e3:99:94:1e:09:57:1e:3f: 0e:17:3f:db:1c:f2:c7:79:5b:ac:7f:fa:44:f1:28: 6b:6b:ec:88:05:1f:a5:2b:c7:0f:6b:5f:59:5e:c9: 33:6e:ea:24:ce:6f:77:1e:3b:c2:08:23:32:d7:d5: 17:d1:73:c0:6b:2b:88:3d:58:ee:48:4c:f1:25:38: 69:92:b2:bf:76:65:4e:e3:51:a4:17:9c:f8:59:eb: 8d:c2:d8:95:f9:67:9f:ff:17:f2:1c:03:56:82:2f: 0f:93:46:b9:27:ca:e9:d8:ef:c7:9b:ae:19:6b:e0: e0:5f:ef:05:c7:9b:b7:b1:9a:de:9e:aa:68:63:67: cb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:85:FF:FD:F6:29:54:11:81:04:79:46:7F:97:C6:F0:C6:FB:B0:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/35fefc44-ddc5-3699-b205-35ecd350481d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl X509v3 Authority Key Identifier: keyid:42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer sbgp-ipAddrBlock: critical IPv4: 209.206.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:56:bb:41:44:cc:2c:11:f0:86:35:17:81:28:22:e5:c5:b4: b7:ce:f1:1a:07:2e:71:5e:48:c0:a3:52:5f:79:19:44:00:c5: 69:5d:1b:6e:d5:9b:df:26:54:4e:d2:4b:45:9f:b3:8a:28:6e: 54:60:17:a2:62:99:06:a6:74:f7:5d:26:4c:1a:57:8c:96:ee: 5c:b3:24:e3:c3:1b:c5:28:9f:cc:74:ae:80:b2:30:2d:28:8d: 31:85:69:b5:c1:b9:07:69:a3:b5:e9:8e:b7:c2:f1:df:52:ac: 23:60:b5:28:26:2b:11:8e:1a:14:00:0d:35:75:a6:46:92:8f: 3a:ff:3a:3c:24:87:85:cb:ce:db:a3:cf:a7:88:87:86:bf:42: 94:bc:17:98:22:39:12:90:4b:1a:69:d8:b5:87:ea:92:c9:fd: e8:15:8d:2c:b8:75:d6:bc:67:d4:7c:09:60:da:3b:12:0d:6d: 66:d9:19:51:23:a0:a9:b8:61:70:de:66:e1:22:a2:02:78:99: a4:32:2a:05:76:8c:72:48:86:86:93:16:e5:4c:be:a6:5d:e3: 26:25:d1:1f:9b:8e:aa:01:0d:a7:e6:14:42:16:0b:45:cc:d2: b3:be:0b:e1:cd:b0:ed:f4:ca:60:6a:3e:1b:81:02:e7:53:64: 8e:c1:8c:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgiL9mZ0SpPQC6hAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VkZTdiNzAtZDc0NS00MjVkLTk3NWItYmIwZWI2MzY4 NDMwMB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk MzI0NTNmYzYtMGJhNS00NDQ1LTg2MjUtYTBhNjAwYTAwZmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiycX1cf2cR5vSUOLM0dnslRazwDd2fhhaQak 8psismFstteeOLdJkE9Gt3B7ZPPy1vW+o0h2zAPu24YQU/tbh7HwDkQt2XrFE5Jk PDTiYWQ+HvMUh90dOptZYTgPRmUFQmZNXgtPNvyGhpFC197pdXLdXX7JJ/5/78Uu 5EKJ45mUHglXHj8OFz/bHPLHeVusf/pE8Shra+yIBR+lK8cPa19ZXskzbuokzm93 HjvCCCMy19UX0XPAayuIPVjuSEzxJThpkrK/dmVO41GkF5z4WeuNwtiV+Wef/xfy HANWgi8Pk0a5J8rp2O/Hm64Za+DgX+8Fx5u3sZrenqpoY2fLDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCF//32KVQRgQR5Rn+XxvDG+7C4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83ZWRl N2I3MC1kNzQ1LTQyNWQtOTc1Yi1iYjBlYjYzNjg0MzAvMzVmZWZjNDQtZGRjNS0z Njk5LWIyMDUtMzVlY2QzNTA0ODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2VkZTdiNzAtZDc0NS00MjVkLTk3 NWItYmIwZWI2MzY4NDMwLzdlZGU3YjcwLWQ3NDUtNDI1ZC05NzViLWJiMGViNjM2 ODQzMC5jcmwwHwYDVR0jBBgwFoAUQm/5Jh3Xg3bHmZYIdEhEiRGXyggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83ZWRlN2I3MC1kNzQ1LTQyNWQtOTc1Yi1iYjBl YjYzNjg0MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0c4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdWu0FEzCwR8IY1F4EoIuXFtLfO8RoHLnFeSMCjUl95GUQAxWldG27V m98mVE7SS0Wfs4ooblRgF6JimQamdPddJkwaV4yW7lyzJOPDG8Uon8x0roCyMC0o jTGFabXBuQdpo7XpjrfC8d9SrCNgtSgmKxGOGhQADTV1pkaSjzr/Ojwkh4XLztuj z6eIh4a/QpS8F5giORKQSxpp2LWH6pLJ/egVjSy4dda8Z9R8CWDaOxINbWbZGVEj oKm4YXDeZuEiogJ4maQyKgV2jHJIhoaTFuVMvqZd4yYl0R+bjqoBDafmFEIWC0XM 0rO+C+HNsO30ymBqPhuBAudTZI7BjJE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:53 2025 by rpki-client