$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/973b87f5-9931-320b-9f50-5352dd3a2bb7.roa File: 973b87f5-9931-320b-9f50-5352dd3a2bb7.roa (raw, json) Hash identifier: 5OmEX8MQBvXnhPn0VShaXvlNLctOPpX6P2VPnNQBmW8= Subject key identifier: FC:F2:2A:AE:C5:E0:67:8B:43:DC:0D:E5:F3:88:F5:E9:3B:E5:EA:91 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858486C2B33CB1D614339BEC56F80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/973b87f5-9931-320b-9f50-5352dd3a2bb7.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 54858 IP address blocks: 209.34.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:33:cb:1d:61:43:39:be:c5:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=3c7997bb-46cb-4aef-9eab-89c44c2c29a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:40:26:6c:a6:56:61:9a:95:ff:c5:29:da:46: 8d:50:70:c2:dc:90:4a:92:ce:a7:7b:3c:01:eb:b9: d3:01:6a:15:4d:4f:75:2e:94:04:6a:9a:eb:2b:10: 78:c4:4b:e5:18:6f:fe:d6:97:63:01:6a:60:ea:98: 6f:4d:4d:37:a5:b8:9d:e1:42:ff:9b:ba:3a:80:ad: 66:0f:ef:67:c0:74:14:c5:f8:a7:bc:84:e8:95:61: 96:58:1f:a5:65:1d:15:e9:3b:d1:61:7b:47:7d:b9: c3:71:17:ce:af:c1:44:bc:1f:fb:10:6a:e5:5e:0c: cb:25:7c:02:ba:c1:f1:d1:c3:4e:d3:8d:7c:f3:39: f1:64:d1:83:4e:0c:b1:18:36:1f:57:b6:f1:fb:3e: 63:f7:5e:fe:9e:af:82:81:d6:da:e6:51:d9:4d:49: e4:6c:38:ef:03:11:04:a4:3f:cd:39:44:6b:18:fe: 2d:b0:cc:cd:32:5d:58:fb:ae:db:1f:84:6c:0b:d2: 84:3d:b2:28:a8:3a:95:27:82:19:9c:c2:a4:68:12: 4d:3b:a1:42:c4:50:ba:e2:b2:79:63:ca:de:5c:dd: 37:bf:29:53:dd:46:ad:5c:50:6f:a2:66:51:ea:7f: 23:c6:d6:40:07:27:6e:51:6b:38:bb:0f:b8:fa:8a: 41:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F2:2A:AE:C5:E0:67:8B:43:DC:0D:E5:F3:88:F5:E9:3B:E5:EA:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/973b87f5-9931-320b-9f50-5352dd3a2bb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 209.34.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:9e:fe:c1:bf:dd:d2:09:7d:db:cf:67:21:b8:f0:44:46:b6: e7:71:8f:ae:e2:04:68:ca:2c:28:2a:92:b1:aa:ab:7d:aa:4b: a7:69:c9:40:85:c4:91:a0:80:4e:8f:ef:f1:3c:ce:db:04:95: d4:8c:b4:4c:18:26:99:48:a6:8b:58:f3:38:b4:1e:5d:46:d5: 23:32:8e:c0:a2:c3:6b:73:d9:a5:ad:ca:ae:e2:00:8f:13:9c: a0:73:f7:07:7e:1a:00:bf:93:93:53:3d:97:56:e1:17:b0:6e: f2:43:a5:eb:a6:d5:74:f3:99:45:0c:cc:17:a8:84:98:84:ac: eb:04:36:b8:68:3a:9e:df:27:57:dd:d5:e7:b3:59:2e:36:ca: 2f:30:71:8b:10:8f:cb:1d:45:2d:c7:22:2e:16:d7:7d:c2:22: d5:6d:4f:74:a5:6f:62:5e:21:0a:8d:e1:56:05:ee:4c:4f:93: fb:ae:c5:3a:3d:78:1d:34:f7:91:17:2c:07:a6:c7:de:19:1a: ff:67:5b:61:6a:28:c1:89:96:b2:11:40:a1:9c:95:5f:f4:a2: 73:27:7a:04:3f:a6:fd:e9:7b:02:04:2d:c5:05:34:2d:73:93: e7:b7:00:89:ee:d8:d9:ec:5b:8c:d7:e7:76:16:57:ab:1d:c7: ee:48:23:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKzPLHWFDOb7Fb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk M2M3OTk3YmItNDZjYi00YWVmLTllYWItODljNDRjMmMyOWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEAmbKZWYZqV/8Up2kaNUHDC3JBKks6nezwB 67nTAWoVTU91LpQEaprrKxB4xEvlGG/+1pdjAWpg6phvTU03pbid4UL/m7o6gK1m D+9nwHQUxfinvITolWGWWB+lZR0V6TvRYXtHfbnDcRfOr8FEvB/7EGrlXgzLJXwC usHx0cNO04188znxZNGDTgyxGDYfV7bx+z5j917+nq+Cgdba5lHZTUnkbDjvAxEE pD/NOURrGP4tsMzNMl1Y+67bH4RsC9KEPbIoqDqVJ4IZnMKkaBJNO6FCxFC64rJ5 Y8reXN03vylT3UatXFBvomZR6n8jxtZAByduUWs4uw+4+opBiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzyKq7F4GeLQ9wN5fOI9ek75eqRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvOTczYjg3ZjUtOTkzMS0z MjBiLTlmNTAtNTM1MmRkM2EyYmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0SKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOe/sG/3dIJfdvPZyG48ERGtudxj67iBGjKLCgqkrGqq32qS6dpyUCF xJGggE6P7/E8ztsEldSMtEwYJplIpotY8zi0Hl1G1SMyjsCiw2tz2aWtyq7iAI8T nKBz9wd+GgC/k5NTPZdW4RewbvJDpeum1XTzmUUMzBeohJiErOsENrhoOp7fJ1fd 1eezWS42yi8wcYsQj8sdRS3HIi4W133CItVtT3Slb2JeIQqN4VYF7kxPk/uuxTo9 eB0095EXLAemx94ZGv9nW2FqKMGJlrIRQKGclV/0onMnegQ/pv3pewIELcUFNC1z k+e3AInu2NnsW4zX53YWV6sdx+5II7o= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:42 2025 by rpki-client