$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b262d7d9-ee60-40b6-9dc2-a6317bece901/3648636d-84da-3434-a4d6-3bd3282c160e.roa File: 3648636d-84da-3434-a4d6-3bd3282c160e.roa (raw, json) Hash identifier: 2Q4hHRpjoiOhY1EIOOzy4/T8pSy/VSZc8zrh5rRM5/s= Subject key identifier: D6:E1:C4:E5:16:D0:58:0E:BC:73:50:FF:78:86:2E:24:F2:A1:1F:37 Certificate issuer: /CN=b262d7d9-ee60-40b6-9dc2-a6317bece901 Certificate serial: 010D0C9F4328584882809EB6D06D523440A68F00 Authority key identifier: D5:41:47:B3:C0:F7:E4:8E:7B:A2:D4:0C:B9:E3:12:F7:59:1D:6D:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b262d7d9-ee60-40b6-9dc2-a6317bece901.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b262d7d9-ee60-40b6-9dc2-a6317bece901/3648636d-84da-3434-a4d6-3bd3282c160e.roa Signing time: Sat 11 Jan 2025 14:00:52 +0000 ROA not before: Sat 11 Jan 2025 14:00:52 +0000 ROA not after: Fri 11 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 209.71.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b262d7d9-ee60-40b6-9dc2-a6317bece901/b262d7d9-ee60-40b6-9dc2-a6317bece901.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b262d7d9-ee60-40b6-9dc2-a6317bece901/b262d7d9-ee60-40b6-9dc2-a6317bece901.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b262d7d9-ee60-40b6-9dc2-a6317bece901.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:82:80:9e:b6:d0:6d:52:34:40:a6:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b262d7d9-ee60-40b6-9dc2-a6317bece901 Validity Not Before: Jan 11 14:00:52 2025 GMT Not After : Apr 11 13:00:52 2025 GMT Subject: CN=a8c2dfdd-20f9-4606-bb7c-3085a36de813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:93:90:71:23:3a:7d:57:5d:e3:87:d9:f9:40: 12:4e:b6:fc:b1:91:2c:39:52:8d:51:77:bb:34:ef: 80:49:66:4d:4e:cc:fb:79:db:a2:96:c2:1b:4c:e6: a8:68:1c:ff:ed:25:e2:42:29:80:2b:2e:9f:9c:89: 78:22:9a:93:45:90:bf:2f:76:a0:8d:3f:bb:73:fe: 14:a5:8a:e8:c0:5e:3b:b4:58:f8:ed:bc:1e:f5:45: 89:c1:f6:5b:e9:da:cc:8e:31:36:0f:b1:48:3d:ad: cf:3c:96:45:97:eb:f8:81:4c:a5:91:93:44:3f:44: 5b:63:4c:b0:92:72:df:d5:46:79:54:72:a1:a1:b2: e7:d4:f5:18:58:f9:e3:44:34:8f:27:7c:e8:82:ad: e4:89:ef:d8:1f:2a:50:20:46:e4:45:6d:1a:86:a5: 61:59:77:e8:c4:6f:d1:01:36:5a:87:08:67:81:9d: cb:e5:51:85:71:1f:a5:41:f8:b0:3d:66:0e:b1:6b: 02:3b:62:e5:5f:63:d5:96:79:8e:31:ea:16:f7:31: 80:bd:c7:81:11:07:e5:f8:1c:40:49:e8:d6:2f:10: ad:34:87:30:64:b0:3f:f0:01:2e:0d:c4:fb:f4:e5: 7c:22:45:0f:93:3a:66:d8:be:21:2d:85:41:b4:1a: ec:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E1:C4:E5:16:D0:58:0E:BC:73:50:FF:78:86:2E:24:F2:A1:1F:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b262d7d9-ee60-40b6-9dc2-a6317bece901/3648636d-84da-3434-a4d6-3bd3282c160e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b262d7d9-ee60-40b6-9dc2-a6317bece901/b262d7d9-ee60-40b6-9dc2-a6317bece901.crl X509v3 Authority Key Identifier: keyid:D5:41:47:B3:C0:F7:E4:8E:7B:A2:D4:0C:B9:E3:12:F7:59:1D:6D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b262d7d9-ee60-40b6-9dc2-a6317bece901.cer sbgp-ipAddrBlock: critical IPv4: 209.71.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:7c:5b:a5:56:23:42:1e:78:52:d3:2b:d3:29:cf:34:83:a5: 71:b8:97:46:77:9c:86:d3:6b:71:e3:29:8e:1e:0b:d7:ae:e6: 4b:bd:05:6f:e5:02:cf:30:d6:b3:e1:4e:2a:77:e9:4f:d1:09: 74:46:32:9c:13:3a:cc:2a:ad:52:0a:68:99:61:99:42:1b:f5: aa:70:b2:4e:ca:32:5e:09:93:5d:50:1e:6d:a9:ed:d2:25:02: b0:d7:0f:3b:df:60:7a:03:c2:08:d1:fb:21:e6:0f:42:02:f6: 11:b8:68:59:29:0e:ee:ec:ab:3f:e1:f8:60:06:81:cf:21:22: c7:f5:6e:b7:ce:14:4a:0c:1d:ef:42:99:46:f3:ba:e7:42:ff: 96:4a:c2:bd:00:54:b9:62:ad:e4:98:36:a6:d9:6e:cd:92:8e: 76:05:a6:42:2f:52:bb:ff:8e:e6:50:56:7a:89:41:0b:44:3b: 37:11:6a:e2:e4:98:4f:54:b9:e5:ad:1e:56:f6:57:9b:1a:c2: be:56:4c:67:a6:9f:9e:64:dc:37:c6:9f:e8:73:ce:72:8f:fa: 0c:6a:5f:ff:11:93:ed:b2:0d:0b:24:c3:eb:ac:90:67:a4:f5: 12:c5:d1:1e:c6:c9:54:60:fe:20:4e:15:63:d8:e3:d0:53:b0: 63:a0:6c:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgJ620G1SNECmjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI2MmQ3ZDktZWU2MC00MGI2LTlkYzItYTYzMTdiZWNl OTAxMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk YThjMmRmZGQtMjBmOS00NjA2LWJiN2MtMzA4NWEzNmRlODEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypOQcSM6fVdd44fZ+UASTrb8sZEsOVKNUXe7 NO+ASWZNTsz7eduilsIbTOaoaBz/7SXiQimAKy6fnIl4IpqTRZC/L3agjT+7c/4U pYrowF47tFj47bwe9UWJwfZb6drMjjE2D7FIPa3PPJZFl+v4gUylkZNEP0RbY0yw knLf1UZ5VHKhobLn1PUYWPnjRDSPJ3zogq3kie/YHypQIEbkRW0ahqVhWXfoxG/R ATZahwhngZ3L5VGFcR+lQfiwPWYOsWsCO2LlX2PVlnmOMeoW9zGAvceBEQfl+BxA SejWLxCtNIcwZLA/8AEuDcT79OV8IkUPkzpm2L4hLYVBtBrs+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbhxOUW0FgOvHNQ/3iGLiTyoR83MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iMjYy ZDdkOS1lZTYwLTQwYjYtOWRjMi1hNjMxN2JlY2U5MDEvMzY0ODYzNmQtODRkYS0z NDM0LWE0ZDYtM2JkMzI4MmMxNjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjI2MmQ3ZDktZWU2MC00MGI2LTlk YzItYTYzMTdiZWNlOTAxL2IyNjJkN2Q5LWVlNjAtNDBiNi05ZGMyLWE2MzE3YmVj ZTkwMS5jcmwwHwYDVR0jBBgwFoAU1UFHs8D35I57otQMueMS91kdbcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iMjYyZDdkOS1lZTYwLTQwYjYtOWRjMi1hNjMx N2JlY2U5MDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0UcsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKV8W6VWI0IeeFLTK9MpzzSDpXG4l0Z3nIbTa3HjKY4eC9eu5ku9BW/l As8w1rPhTip36U/RCXRGMpwTOswqrVIKaJlhmUIb9apwsk7KMl4Jk11QHm2p7dIl ArDXDzvfYHoDwgjR+yHmD0IC9hG4aFkpDu7sqz/h+GAGgc8hIsf1brfOFEoMHe9C mUbzuudC/5ZKwr0AVLlireSYNqbZbs2SjnYFpkIvUrv/juZQVnqJQQtEOzcRauLk mE9UueWtHlb2V5sawr5WTGemn55k3DfGn+hzznKP+gxqX/8Rk+2yDQskw+uskGek 9RLF0R7GyVRg/iBOFWPY49BTsGOgbF4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:53 2025 by rpki-client