$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa File: 5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa (raw, json) Hash identifier: czlTq8CqkyY0HYC7NiNoYvjtPkFKvY4imaPIwN9KL8s= Subject key identifier: DD:EF:3C:D2:75:D7:35:50:7E:A8:05:02:32:62:19:63:77:E0:22:D6 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F43285848ADC613D41088F4152E473400 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 36298 IP address blocks: 209.166.148.0/24 maxlen: 24 209.166.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:13:d4:10:88:f4:15:2e:47:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=61e22afa-5f7a-4934-83e2-6426014bc1ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2c:42:06:a5:d5:b8:7b:e1:85:4c:9c:ad:4a: b1:f8:0b:e3:f4:91:7a:68:26:71:a8:96:0a:75:4f: 7f:14:dc:8f:44:1a:37:c6:e6:3b:22:ce:bf:61:c8: 98:be:e9:2f:7d:94:80:0e:8a:dc:1c:ca:2c:e9:02: 18:29:e4:bb:d9:cd:20:36:fe:8e:4d:a9:85:3f:36: 7c:b2:42:9d:8c:4a:5a:dd:52:1d:cb:1a:85:5b:e7: d9:ee:2d:5f:6b:78:30:5b:01:75:8d:03:55:f5:2f: 9d:00:15:5b:f2:ec:81:53:e7:b9:73:03:12:02:ec: c4:03:fa:4e:7d:91:af:ac:4b:d8:0c:c7:43:ae:52: 0d:89:7b:f9:e1:f7:34:c3:f3:0c:ff:ed:c1:a6:db: 0e:2f:cb:b3:a8:cd:8d:28:40:9a:c9:c8:82:d5:c7: 93:d8:ba:c3:1d:ac:1a:00:33:2d:76:06:5d:71:e8: b1:9a:23:c5:d5:12:86:b5:57:9c:b3:57:1f:29:01: 72:b0:07:e9:0f:09:ee:3e:05:57:02:e2:a7:5b:7e: be:26:20:48:b2:59:70:e1:18:73:16:94:3e:92:b2: 65:16:e6:98:65:68:87:a6:d9:00:fa:ff:13:c5:b5: 0f:5e:a0:3e:f3:c8:3a:e7:d6:8c:09:51:77:5c:5d: 21:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EF:3C:D2:75:D7:35:50:7E:A8:05:02:32:62:19:63:77:E0:22:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.166.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:56:74:17:e4:63:05:53:63:c1:2b:dc:11:6a:37:af:a1:2e: 18:35:6c:a8:3a:33:38:01:c0:2f:13:5d:b8:e8:b3:f0:ee:c5: 82:19:cf:36:90:65:f9:b2:b9:c6:25:16:9c:53:cc:55:fd:b3: 36:ef:30:36:35:5e:2f:36:d1:36:25:c3:dd:88:c2:7e:f2:aa: f8:5c:b4:14:c3:04:b2:7d:19:c0:bf:cf:11:72:eb:12:80:2c: 4b:85:c6:8d:4c:77:95:da:ad:ff:0b:68:3b:d0:23:68:e0:14: df:fb:ad:26:4a:3e:2e:e7:9a:d1:5d:62:bb:d1:97:47:45:e8: 51:c1:31:33:06:59:d1:22:d0:76:5f:2d:6a:83:7e:36:9e:0c: 73:64:49:52:ab:08:8f:ae:4e:20:86:46:58:4a:34:7d:1d:24: c4:23:f8:21:32:c1:c8:7b:df:b3:6f:72:fa:99:42:b6:ff:70: 2a:be:69:26:8b:7b:36:a8:7f:8d:23:51:3d:79:cb:29:9e:0a: f4:30:ef:b2:bd:3f:74:b3:56:18:fc:8b:42:3a:f0:75:48:93: 73:30:de:d5:6e:58:ac:eb:79:3c:f2:c6:92:e5:3c:1d:2e:81: c6:63:b4:c0:e7:b6:5d:d3:8d:2d:13:a2:aa:eb:fd:01:c1:00: f2:91:8a:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxhPUEIj0FS5HNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk NjFlMjJhZmEtNWY3YS00OTM0LTgzZTItNjQyNjAxNGJjMWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCxCBqXVuHvhhUycrUqx+Avj9JF6aCZxqJYK dU9/FNyPRBo3xuY7Is6/YciYvukvfZSADorcHMos6QIYKeS72c0gNv6OTamFPzZ8 skKdjEpa3VIdyxqFW+fZ7i1fa3gwWwF1jQNV9S+dABVb8uyBU+e5cwMSAuzEA/pO fZGvrEvYDMdDrlINiXv54fc0w/MM/+3BptsOL8uzqM2NKECayciC1ceT2LrDHawa ADMtdgZdceixmiPF1RKGtVecs1cfKQFysAfpDwnuPgVXAuKnW36+JiBIsllw4Rhz FpQ+krJlFuaYZWiHptkA+v8TxbUPXqA+88g659aMCVF3XF0hWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3vPNJ11zVQfqgFAjJiGWN34CLWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvNWNjNGQ2YzEtZWZmMi0z YTQwLTg2MTktNWY2MTZmOGFmMTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0aaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxWdBfkYwVTY8Er3BFqN6+hLhg1bKg6MzgBwC8TXbjos/DuxYIZzzaQ ZfmyucYlFpxTzFX9szbvMDY1Xi820TYlw92Iwn7yqvhctBTDBLJ9GcC/zxFy6xKA LEuFxo1Md5Xarf8LaDvQI2jgFN/7rSZKPi7nmtFdYrvRl0dF6FHBMTMGWdEi0HZf LWqDfjaeDHNkSVKrCI+uTiCGRlhKNH0dJMQj+CEywch737NvcvqZQrb/cCq+aSaL ezaof40jUT15yymeCvQw77K9P3SzVhj8i0I68HVIk3Mw3tVuWKzreTzyxpLlPB0u gcZjtMDntl3TjS0Toqrr/QHBAPKRigI= -----END CERTIFICATE-----Generated at Mon Apr 7 23:53:35 2025 by rpki-client