$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/2e6c5e30-a5e1-3b07-afe0-c214631305bf.roa File: 2e6c5e30-a5e1-3b07-afe0-c214631305bf.roa (raw, json) Hash identifier: 6/VIph33bn/Mzz6h8rTXJDzM9sdh8BL28xld3A1GqO8= Subject key identifier: 86:93:A5:D9:1A:21:D7:8E:C5:05:3F:09:4E:FA:14:C8:4E:01:D9:AF Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F432858489E5C5D94078B9AC518120980 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/2e6c5e30-a5e1-3b07-afe0-c214631305bf.roa Signing time: Tue 21 Jan 2025 13:30:43 +0000 ROA not before: Tue 21 Jan 2025 13:30:43 +0000 ROA not after: Mon 21 Apr 2025 12:30:43 +0000 asID: 40509 IP address blocks: 209.198.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Feb 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:5c:5d:94:07:8b:9a:c5:18:12:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Jan 21 13:30:43 2025 GMT Not After : Apr 21 12:30:43 2025 GMT Subject: CN=b593ae6b-5bc7-45eb-a228-25cc0b070581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:db:48:b1:ee:7b:f5:d1:66:41:dc:30:b8:90: 08:58:db:12:3c:59:42:5f:0f:94:f9:c4:94:05:cd: e7:4f:8a:cd:64:73:95:be:c6:e8:92:f0:3e:2f:9a: f1:e7:e3:41:17:0f:b0:9d:30:50:12:e0:85:7e:0b: c4:29:89:4e:c9:74:84:7d:19:38:aa:6e:10:94:b3: cd:ea:1b:dd:11:ec:22:dd:9d:5b:29:fa:8c:fc:38: 0a:cf:08:4f:74:83:24:ba:8d:a3:21:73:f3:12:4e: e8:11:16:61:a6:48:9f:c4:e5:cd:c6:53:ea:1e:13: a1:dc:19:30:41:ba:34:0b:7c:89:44:c4:9d:21:d6: 76:aa:33:eb:87:7f:53:b5:be:da:79:f4:c7:a0:08: 53:f0:44:70:5f:04:f2:cb:bb:02:d1:f5:fb:b0:e4: 94:b9:ad:ef:9a:a1:81:06:6f:51:c5:f9:48:a6:67: 44:b9:2b:7b:69:bc:f0:1a:c3:cd:09:58:94:ce:c9: 4b:e3:18:c8:33:98:35:7d:aa:03:2a:9e:aa:50:c6: 2c:79:9a:86:63:29:5a:c6:f6:da:fa:ac:6b:c1:12: cb:73:55:4a:2e:83:67:eb:69:83:56:ca:b9:c3:fe: 15:2e:fc:8c:05:38:b6:1e:45:35:a0:bd:4e:02:ae: 59:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:93:A5:D9:1A:21:D7:8E:C5:05:3F:09:4E:FA:14:C8:4E:01:D9:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/2e6c5e30-a5e1-3b07-afe0-c214631305bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 209.198.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:1b:2a:86:c6:0f:ff:48:ed:2d:8f:26:94:65:83:64:a4:45: 38:60:b4:df:6e:a5:37:11:29:42:5a:a3:39:0d:d4:2b:73:d4: 4a:09:2d:18:43:9c:b4:3c:28:b4:4b:20:b6:14:20:51:cd:54: c1:c7:de:13:76:51:c7:2e:91:55:bb:4e:d4:e0:d7:83:ba:8a: 44:81:64:7a:eb:83:f8:06:b3:e9:57:87:49:7f:97:93:ad:b8: 3c:cc:ff:e6:74:26:d7:f3:48:9b:84:de:0c:24:5f:34:05:70: c3:a6:4f:d4:a1:50:82:ff:84:fc:48:4d:90:72:8c:f8:23:15: 45:62:48:db:52:d8:29:a8:38:a8:1d:65:58:81:b2:1b:84:aa: df:dd:f4:75:99:a0:52:ec:cc:23:1d:cc:27:05:47:fd:7d:cf: 37:ce:0e:16:14:55:41:b9:7e:bf:48:8a:42:55:f6:64:3f:a7: 21:de:0e:07:97:b9:66:e2:17:8d:b9:7d:46:8b:4b:69:a0:d4: 04:a2:2a:15:7f:16:0d:f0:66:52:68:44:b4:8f:38:73:a9:5b: a5:da:d5:6f:e6:8c:cd:b1:78:90:ab:86:32:78:d7:54:c7:bc: 56:90:b9:33:8d:7f:42:aa:8a:45:43:6c:b3:11:b8:6d:69:35: f3:92:2d:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEieXF2UB4uaxRgSCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI1MDEyMTEzMzA0M1oXDTI1MDQyMTEyMzA0M1owLzEtMCsGA1UEAxMk YjU5M2FlNmItNWJjNy00NWViLWEyMjgtMjVjYzBiMDcwNTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9tIse579dFmQdwwuJAIWNsSPFlCXw+U+cSU Bc3nT4rNZHOVvsbokvA+L5rx5+NBFw+wnTBQEuCFfgvEKYlOyXSEfRk4qm4QlLPN 6hvdEewi3Z1bKfqM/DgKzwhPdIMkuo2jIXPzEk7oERZhpkifxOXNxlPqHhOh3Bkw Qbo0C3yJRMSdIdZ2qjPrh39Ttb7aefTHoAhT8ERwXwTyy7sC0fX7sOSUua3vmqGB Bm9RxflIpmdEuSt7abzwGsPNCViUzslL4xjIM5g1faoDKp6qUMYseZqGYylaxvba +qxrwRLLc1VKLoNn62mDVsq5w/4VLvyMBTi2HkU1oL1OAq5ZIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaTpdkaIdeOxQU/CU76FMhOAdmvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvMmU2YzVlMzAtYTVlMS0z YjA3LWFmZTAtYzIxNDYzMTMwNWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0cbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEbKobGD/9I7S2PJpRlg2SkRThgtN9upTcRKUJaozkN1Ctz1EoJLRhD nLQ8KLRLILYUIFHNVMHH3hN2UccukVW7TtTg14O6ikSBZHrrg/gGs+lXh0l/l5Ot uDzM/+Z0JtfzSJuE3gwkXzQFcMOmT9ShUIL/hPxITZByjPgjFUViSNtS2CmoOKgd ZViBshuEqt/d9HWZoFLszCMdzCcFR/19zzfODhYUVUG5fr9IikJV9mQ/pyHeDgeX uWbiF425fUaLS2mg1ASiKhV/Fg3wZlJoRLSPOHOpW6Xa1W/mjM2xeJCrhjJ411TH vFaQuTONf0KqikVDbLMRuG1pNfOSLfQ= -----END CERTIFICATE-----Generated at Sun Feb 2 16:06:29 2025 by rpki-client