$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/e66dc8cd-af7d-3fa3-813a-0f73788964d7.roa File: e66dc8cd-af7d-3fa3-813a-0f73788964d7.roa (raw, json) Hash identifier: u9WoDyFS/ia0GzL5XIEOoRQL81xQfFGGnfRxEJ8IHME= Subject key identifier: E3:B3:8C:CA:F4:56:19:43:D4:BD:11:B5:3B:84:5F:B9:66:94:1C:3C Certificate issuer: /CN=a278da28-82b3-48fe-bc76-7859a82f5651 Certificate serial: 010D0C9F43285848292A9F27CF1358F9B5C8E990 Authority key identifier: F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/e66dc8cd-af7d-3fa3-813a-0f73788964d7.roa Signing time: Tue 10 Dec 2024 14:00:52 +0000 ROA not before: Tue 10 Dec 2024 14:00:52 +0000 ROA not after: Mon 10 Mar 2025 13:00:52 +0000 asID: 38082 IP address blocks: 209.209.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:29:2a:9f:27:cf:13:58:f9:b5:c8:e9:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a278da28-82b3-48fe-bc76-7859a82f5651 Validity Not Before: Dec 10 14:00:52 2024 GMT Not After : Mar 10 13:00:52 2025 GMT Subject: CN=1c7efee1-badd-4c9e-9c7e-9b0bb00e5545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b9:0d:cb:7b:32:cb:cf:5b:cf:fa:97:34:2a: 9d:3b:5a:94:a9:22:d1:d0:25:af:b3:e9:fe:63:42: ad:96:4e:36:a5:9b:43:90:a7:cb:65:df:a0:96:c0: 96:c3:49:16:2b:3c:7c:d6:bd:70:34:3d:b4:a0:79: 2b:bc:f1:89:95:34:e9:dd:11:9b:35:0c:0d:b2:a3: 20:01:40:a4:02:df:16:e0:e2:99:77:5a:0d:4f:48: 2f:b5:c6:a4:92:11:e3:9a:fd:a0:37:e6:48:59:05: 28:0c:51:eb:5a:14:ac:0e:3b:6a:21:2f:d5:80:49: ca:61:d3:33:0b:7f:2d:0a:79:19:1c:ce:cf:d5:1a: 74:97:85:5d:a9:46:80:19:b8:d7:75:48:fe:e7:cd: 43:0b:a7:c5:4e:c6:65:e3:0e:89:79:68:74:54:6a: 6b:54:e2:c6:5c:8d:06:1f:e5:66:ec:67:b6:50:52: b3:74:8b:09:f4:48:e9:22:42:da:0b:54:6d:52:81: dd:3e:b5:7d:5a:94:f6:28:07:ad:35:dd:2f:d0:92: 00:26:35:7b:45:23:40:b1:b4:51:97:56:83:a2:38: 13:b5:38:ad:98:35:f2:b8:e1:c0:00:7c:7d:da:c8: d5:23:06:0f:6b:e2:6e:ef:49:56:a0:1f:12:94:71: 27:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B3:8C:CA:F4:56:19:43:D4:BD:11:B5:3B:84:5F:B9:66:94:1C:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/e66dc8cd-af7d-3fa3-813a-0f73788964d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl X509v3 Authority Key Identifier: keyid:F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer sbgp-ipAddrBlock: critical IPv4: 209.209.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:0e:ca:0b:50:54:49:c0:9a:4c:51:e5:53:75:e7:10:a9:90: d8:8f:9c:19:41:a3:2d:51:8e:0d:8a:5a:15:6e:87:fe:b6:ad: 9c:d0:65:89:ec:f3:4a:8c:93:13:96:47:e4:e3:48:be:98:f2: ea:75:13:de:5c:19:ea:73:d2:da:a2:71:e2:80:d1:4b:ec:51: 5c:62:4e:69:2e:28:4c:80:b1:5d:b1:83:66:c2:ca:47:ff:67: a6:18:6d:d9:7c:f0:63:61:a4:59:9a:7f:38:58:13:b6:cf:5a: e6:09:02:30:c7:b1:6f:d7:ea:c8:cb:8e:ad:55:33:43:a1:d0: 6b:6c:33:63:46:49:d7:90:06:7f:78:b0:d5:5f:b2:68:58:26: 8c:1f:b9:d2:63:f1:28:63:12:ea:bd:48:66:90:e0:ce:4e:96: 0a:28:0c:34:3a:4c:4e:a8:b5:f5:a5:08:3a:b3:dc:ed:d2:f5: 5b:39:1a:5a:79:d9:a8:89:19:75:70:c8:d7:d0:38:48:a2:7d: 92:53:6f:5e:9a:a3:7b:7d:95:8b:6e:50:2d:41:2a:cf:6c:65: f9:bd:bf:79:d7:7a:60:f7:92:85:96:f4:6f:d5:87:17:2f:56: 5f:b2:59:1f:ae:4e:5e:a2:90:28:72:31:cd:24:87:35:9d:b9: 07:4b:24:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgpKp8nzxNY+bXI6ZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI3OGRhMjgtODJiMy00OGZlLWJjNzYtNzg1OWE4MmY1 NjUxMB4XDTI0MTIxMDE0MDA1MloXDTI1MDMxMDEzMDA1MlowLzEtMCsGA1UEAxMk MWM3ZWZlZTEtYmFkZC00YzllLTljN2UtOWIwYmIwMGU1NTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbkNy3syy89bz/qXNCqdO1qUqSLR0CWvs+n+ Y0Ktlk42pZtDkKfLZd+glsCWw0kWKzx81r1wND20oHkrvPGJlTTp3RGbNQwNsqMg AUCkAt8W4OKZd1oNT0gvtcakkhHjmv2gN+ZIWQUoDFHrWhSsDjtqIS/VgEnKYdMz C38tCnkZHM7P1Rp0l4VdqUaAGbjXdUj+581DC6fFTsZl4w6JeWh0VGprVOLGXI0G H+Vm7Ge2UFKzdIsJ9EjpIkLaC1RtUoHdPrV9WpT2KAetNd0v0JIAJjV7RSNAsbRR l1aDojgTtTitmDXyuOHAAHx92sjVIwYPa+Ju70lWoB8SlHEnwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOzjMr0VhlD1L0RtTuEX7lmlBw8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMjc4 ZGEyOC04MmIzLTQ4ZmUtYmM3Ni03ODU5YTgyZjU2NTEvZTY2ZGM4Y2QtYWY3ZC0z ZmEzLTgxM2EtMGY3Mzc4ODk2NGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTI3OGRhMjgtODJiMy00OGZlLWJj NzYtNzg1OWE4MmY1NjUxL2EyNzhkYTI4LTgyYjMtNDhmZS1iYzc2LTc4NTlhODJm NTY1MS5jcmwwHwYDVR0jBBgwFoAU9ipjPl1+gQsD5F/PfySWru+jWRkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMjc4ZGEyOC04MmIzLTQ4ZmUtYmM3Ni03ODU5 YTgyZjU2NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dFXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0OygtQVEnAmkxR5VN15xCpkNiPnBlBoy1Rjg2KWhVuh/62rZzQZYns 80qMkxOWR+TjSL6Y8up1E95cGepz0tqiceKA0UvsUVxiTmkuKEyAsV2xg2bCykf/ Z6YYbdl88GNhpFmafzhYE7bPWuYJAjDHsW/X6sjLjq1VM0Oh0GtsM2NGSdeQBn94 sNVfsmhYJowfudJj8ShjEuq9SGaQ4M5OlgooDDQ6TE6otfWlCDqz3O3S9Vs5Glp5 2aiJGXVwyNfQOEiifZJTb16ao3t9lYtuUC1BKs9sZfm9v3nXemD3koWW9G/Vhxcv Vl+yWR+uTl6ikChyMc0khzWduQdLJEc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:43 2025 by rpki-client