$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/f1f615a7-b544-390a-b957-864e92a670f9.roa File: f1f615a7-b544-390a-b957-864e92a670f9.roa (raw, json) Hash identifier: QfPqw+aTIgLLNJUeE6NEQdSToRwZlPxbeVDFOFcn40k= Subject key identifier: 17:8A:56:FD:1E:92:7A:5D:3A:DD:9B:2A:B2:0A:B2:0C:A9:D4:58:4B Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584913AC211C9D0ACDB86DF0C780 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/f1f615a7-b544-390a-b957-864e92a670f9.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 32181 IP address blocks: 209.212.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:21:1c:9d:0a:cd:b8:6d:f0:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=24bd03e1-2a32-4fc6-85d5-594aa9b04b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:53:44:76:92:90:e0:63:56:2a:a3:0f:b7:31: 1c:18:2d:98:8c:33:06:66:ee:54:e9:77:e7:88:8e: 17:14:5e:7b:e6:64:80:88:ba:7c:f8:1d:c1:09:e9: c2:46:24:e2:86:4a:1c:62:d1:46:50:76:98:30:25: cf:5a:32:c9:bf:eb:9d:f4:91:14:66:cf:d3:e1:aa: 94:1d:e6:45:a0:0c:f7:7c:9f:73:87:47:27:16:2c: 51:94:0d:1f:5c:a6:bb:31:ac:24:d3:a0:64:d1:b6: e4:7d:10:7a:da:b1:61:76:f4:2e:db:5e:bc:98:6a: d8:44:8f:46:97:c8:88:81:69:7f:02:9c:7e:e7:87: fc:15:ff:5f:76:09:7c:06:62:79:83:31:a7:78:9d: 45:49:86:5d:a6:33:a7:d5:47:9c:c5:aa:82:6b:8d: cb:e3:32:13:09:3c:80:47:39:3e:af:79:dd:b5:cd: d2:45:f7:fd:b5:24:39:27:8f:a8:37:a7:94:89:97: 0c:ab:0f:5e:d2:54:de:d8:a6:02:d9:6f:37:c9:d1: d9:18:35:17:3b:05:07:c7:d3:63:b4:3a:be:40:e8: bf:3b:56:92:6a:a7:7b:c1:ad:b9:8e:c2:5d:bc:7d: 79:16:59:76:9f:44:b2:6c:87:4a:49:19:17:a3:0f: 3e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8A:56:FD:1E:92:7A:5D:3A:DD:9B:2A:B2:0A:B2:0C:A9:D4:58:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/f1f615a7-b544-390a-b957-864e92a670f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 209.212.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:ab:55:3c:70:c3:1c:87:73:16:b1:a4:59:56:b5:5e:c3:55: 8a:f0:6d:6d:b9:1a:25:82:33:e9:39:01:6d:9b:38:7c:63:42: b2:63:0d:fd:8d:25:c1:5b:a4:7e:48:27:8a:94:4f:7c:71:7a: 0d:2b:73:b9:89:84:64:0a:5a:e0:42:96:8b:63:e3:2a:b8:60: 23:a1:33:ac:81:1e:5f:4c:54:52:0a:58:96:ab:4d:04:22:c3: cf:c2:a6:e6:f8:6c:68:94:86:8b:0f:58:f9:bb:29:b0:3a:ca: b0:d5:e4:74:5e:31:f2:78:a0:ea:bd:f3:a6:75:0d:85:6d:4f: 17:20:a7:86:6b:ea:d2:ae:ac:4e:f0:ae:12:fe:ea:ec:1a:87: f8:8f:4b:df:bc:32:ed:cd:0b:c0:79:dd:20:07:14:a0:99:3f: c0:ff:8d:a8:25:4f:61:62:5b:ef:50:9d:61:45:ae:2e:93:93: b9:d3:67:44:f7:92:df:d7:92:ad:58:e6:e8:fa:d7:40:a6:d9: 4c:d7:34:f6:d4:c7:9f:e4:ea:39:77:19:8c:00:4c:fb:9b:b2: ac:99:e7:3f:29:b0:c7:8e:ca:bf:c7:b9:38:29:ba:14:39:05: 8c:62:9e:a4:a8:65:ca:1d:cb:56:a3:7f:03:c3:f1:10:0e:fd: 3d:31:a8:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrCEcnQrNuG3wx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk MjRiZDAzZTEtMmEzMi00ZmM2LTg1ZDUtNTk0YWE5YjA0YjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilNEdpKQ4GNWKqMPtzEcGC2YjDMGZu5U6Xfn iI4XFF575mSAiLp8+B3BCenCRiTihkocYtFGUHaYMCXPWjLJv+ud9JEUZs/T4aqU HeZFoAz3fJ9zh0cnFixRlA0fXKa7Mawk06Bk0bbkfRB62rFhdvQu2168mGrYRI9G l8iIgWl/Apx+54f8Ff9fdgl8BmJ5gzGneJ1FSYZdpjOn1UecxaqCa43L4zITCTyA Rzk+r3ndtc3SRff9tSQ5J4+oN6eUiZcMqw9e0lTe2KYC2W83ydHZGDUXOwUHx9Nj tDq+QOi/O1aSaqd7wa25jsJdvH15Fll2n0SybIdKSRkXow8+KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeKVv0eknpdOt2bKrIKsgyp1FhLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvZjFmNjE1YTctYjU0NC0z OTBhLWI5NTctODY0ZTkyYTY3MGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0dSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyrVTxwwxyHcxaxpFlWtV7DVYrwbW25GiWCM+k5AW2bOHxjQrJjDf2N JcFbpH5IJ4qUT3xxeg0rc7mJhGQKWuBClotj4yq4YCOhM6yBHl9MVFIKWJarTQQi w8/Cpub4bGiUhosPWPm7KbA6yrDV5HReMfJ4oOq986Z1DYVtTxcgp4Zr6tKurE7w rhL+6uwah/iPS9+8Mu3NC8B53SAHFKCZP8D/jaglT2FiW+9QnWFFri6Tk7nTZ0T3 kt/Xkq1Y5uj610Cm2UzXNPbUx5/k6jl3GYwATPubsqyZ5z8psMeOyr/HuTgpuhQ5 BYxinqSoZcody1ajfwPD8RAO/T0xqAc= -----END CERTIFICATE-----Generated at Sat Apr 5 12:10:09 2025 by rpki-client