$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/81a2323d-f9d4-3b36-9d0b-0baf160211f4.roa File: 81a2323d-f9d4-3b36-9d0b-0baf160211f4.roa (raw, json) Hash identifier: FVEQQOQRTGgdIoElMjZAgBJwLm1fOM0rlkSX/TaknNc= Subject key identifier: 90:24:DF:1C:57:A9:F7:05:06:57:1D:09:B3:FB:66:12:82:93:7D:33 Certificate issuer: /CN=21e0730d-65d0-4a7c-9717-adf401d3e5d6 Certificate serial: 010D0C9F43285848573AD2D0A389DB347433D1B0 Authority key identifier: 0A:37:C0:4C:F6:BF:1E:4F:FC:8B:AD:57:5A:16:FE:97:5D:C0:20:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/81a2323d-f9d4-3b36-9d0b-0baf160211f4.roa Signing time: Fri 27 Dec 2024 02:00:40 +0000 ROA not before: Fri 27 Dec 2024 02:00:40 +0000 ROA not after: Thu 27 Mar 2025 01:00:40 +0000 asID: 14618 IP address blocks: 209.51.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:57:3a:d2:d0:a3:89:db:34:74:33:d1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e0730d-65d0-4a7c-9717-adf401d3e5d6 Validity Not Before: Dec 27 02:00:40 2024 GMT Not After : Mar 27 01:00:40 2025 GMT Subject: CN=4010ac33-3a67-4796-a382-4628a9c80b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6f:ef:53:8e:57:47:36:34:c2:0b:b1:fb:45: 2f:58:c9:1c:45:63:8c:59:b0:2a:4b:89:ef:be:a5: 80:41:79:f6:f2:39:78:36:5a:d7:2b:46:42:8a:a5: 16:13:66:e2:4a:f3:5c:57:08:d3:49:03:13:1f:9c: 82:6a:b2:f0:94:d8:4a:51:ea:fc:3b:2e:34:33:df: 0c:1d:cc:95:10:d2:0b:41:98:1b:4d:7d:dc:80:83: 8a:02:60:95:85:fa:f6:d3:a3:0d:60:92:e1:77:98: 88:70:3c:30:aa:f6:43:a2:99:a9:eb:17:d9:7f:79: 58:b9:6e:35:c2:91:cc:7d:77:12:74:69:d5:49:2b: 91:ad:6d:ea:ac:c1:c5:ea:d1:b6:52:76:f2:33:d2: ba:ad:ac:13:5f:64:83:5c:22:f8:28:b7:85:e1:da: 78:22:93:c3:7c:ca:6a:ca:16:8d:f3:90:fe:2a:c2: c4:06:b2:fa:01:16:b1:4e:db:36:2c:db:35:70:70: 2d:f1:fe:12:0f:e9:19:3f:56:d4:aa:23:4a:20:a2: e1:ba:10:cc:48:4f:1e:c5:95:bf:a5:e7:17:a2:43: 4a:1e:d4:23:08:3f:2c:ba:ac:b2:0d:d6:80:da:0d: 13:49:e2:d8:b2:4e:f9:fc:41:1a:fc:9b:37:c9:f3: f7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:24:DF:1C:57:A9:F7:05:06:57:1D:09:B3:FB:66:12:82:93:7D:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/81a2323d-f9d4-3b36-9d0b-0baf160211f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.crl X509v3 Authority Key Identifier: keyid:0A:37:C0:4C:F6:BF:1E:4F:FC:8B:AD:57:5A:16:FE:97:5D:C0:20:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer sbgp-ipAddrBlock: critical IPv4: 209.51.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:e1:94:a5:8b:55:95:1a:1a:d2:7f:23:80:7c:d2:6a:2b:03: cd:8f:a2:20:ab:e1:0f:ad:49:94:b3:92:4e:a0:e6:cd:a2:6a: ef:9b:3b:1a:c3:3c:11:ab:7b:89:38:f6:7d:4b:70:9f:25:75: cc:72:72:19:08:8a:ca:86:f8:9d:ab:1f:f7:9f:74:fb:ef:c2: c9:6a:17:f4:19:44:91:21:49:2a:d6:54:c0:87:b8:2a:22:4e: db:59:8c:a7:ab:78:52:c4:f9:b4:f2:e9:66:f3:0f:b3:b4:72: 23:e0:af:bf:ce:c7:38:20:14:a2:8d:2a:a6:a8:f6:e6:d8:2f: 60:d3:93:9d:fb:92:f9:17:bb:e5:8f:ed:b9:9d:2b:09:f2:a2: 1b:b5:d1:80:cd:e9:30:ed:67:cc:f0:9d:f3:10:7b:8d:6f:5d: b6:66:ee:a0:57:e3:3d:5f:1d:c3:f1:68:fd:02:ef:23:ed:9c: df:fc:82:44:1b:0c:c6:65:2b:b5:17:b7:ae:b3:1c:b7:95:62: c9:50:57:4e:32:bf:3f:f3:27:48:d1:5f:8b:56:01:8b:a1:1f: 3a:24:d4:6a:d7:06:7e:aa:cb:52:dd:8d:4c:cf:4e:bf:0c:60: cc:66:78:13:d5:a3:a2:a1:62:2e:4a:87:3f:d2:68:8b:41:5d: 6f:07:b3:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhXOtLQo4nbNHQz0bAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlMDczMGQtNjVkMC00YTdjLTk3MTctYWRmNDAxZDNl NWQ2MB4XDTI0MTIyNzAyMDA0MFoXDTI1MDMyNzAxMDA0MFowLzEtMCsGA1UEAxMk NDAxMGFjMzMtM2E2Ny00Nzk2LWEzODItNDYyOGE5YzgwYjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW/vU45XRzY0wgux+0UvWMkcRWOMWbAqS4nv vqWAQXn28jl4NlrXK0ZCiqUWE2biSvNcVwjTSQMTH5yCarLwlNhKUer8Oy40M98M HcyVENILQZgbTX3cgIOKAmCVhfr206MNYJLhd5iIcDwwqvZDopmp6xfZf3lYuW41 wpHMfXcSdGnVSSuRrW3qrMHF6tG2UnbyM9K6rawTX2SDXCL4KLeF4dp4IpPDfMpq yhaN85D+KsLEBrL6ARaxTts2LNs1cHAt8f4SD+kZP1bUqiNKIKLhuhDMSE8exZW/ pecXokNKHtQjCD8suqyyDdaA2g0TSeLYsk75/EEa/Js3yfP34QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAk3xxXqfcFBlcdCbP7ZhKCk30zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWUw NzMwZC02NWQwLTRhN2MtOTcxNy1hZGY0MDFkM2U1ZDYvODFhMjMyM2QtZjlkNC0z YjM2LTlkMGItMGJhZjE2MDIxMWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFlMDczMGQtNjVkMC00YTdjLTk3 MTctYWRmNDAxZDNlNWQ2LzIxZTA3MzBkLTY1ZDAtNGE3Yy05NzE3LWFkZjQwMWQz ZTVkNi5jcmwwHwYDVR0jBBgwFoAUCjfATPa/Hk/8i61XWhb+l13AIPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWUwNzMwZC02NWQwLTRhN2MtOTcxNy1hZGY0 MDFkM2U1ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TNoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnhlKWLVZUaGtJ/I4B80morA82PoiCr4Q+tSZSzkk6g5s2iau+bOxrD PBGre4k49n1LcJ8ldcxychkIisqG+J2rH/efdPvvwslqF/QZRJEhSSrWVMCHuCoi TttZjKereFLE+bTy6WbzD7O0ciPgr7/OxzggFKKNKqao9ubYL2DTk537kvkXu+WP 7bmdKwnyohu10YDN6TDtZ8zwnfMQe41vXbZm7qBX4z1fHcPxaP0C7yPtnN/8gkQb DMZlK7UXt66zHLeVYslQV04yvz/zJ0jRX4tWAYuhHzok1GrXBn6qy1LdjUzPTr8M YMxmeBPVo6KhYi5Khz/SaItBXW8Hs/g= -----END CERTIFICATE-----Generated at Fri Mar 14 10:28:21 2025 by rpki-client