$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/b9020da3-8b55-3fc5-80ac-495e2b2e15b4.roa File: b9020da3-8b55-3fc5-80ac-495e2b2e15b4.roa (raw, json) Hash identifier: KJDTtLEBCp4dVRomZ7PbtSvE4RXab7B3//ld11WLtk4= Subject key identifier: 37:70:88:3E:CC:B8:63:C2:C7:D5:E6:3C:22:AC:1B:97:23:C5:27:42 Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F432858489E567B707ED335E11294F680 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/b9020da3-8b55-3fc5-80ac-495e2b2e15b4.roa Signing time: Tue 21 Jan 2025 13:18:51 +0000 ROA not before: Tue 21 Jan 2025 13:18:51 +0000 ROA not after: Mon 21 Apr 2025 12:18:51 +0000 asID: 40509 IP address blocks: 209.71.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Feb 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:56:7b:70:7e:d3:35:e1:12:94:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Jan 21 13:18:51 2025 GMT Not After : Apr 21 12:18:51 2025 GMT Subject: CN=6616cf30-f581-4cb3-8e11-3f53867f196f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:29:7b:3d:b8:3e:20:0a:1e:5b:cf:e8:a4:d5: 60:11:b4:b5:62:f0:1a:2d:ba:5d:1c:78:ec:eb:64: 88:7b:e2:d9:03:d6:92:6d:72:ad:d9:49:69:da:1b: 12:f3:6b:85:9a:db:93:86:ac:a1:7c:16:32:2f:14: 91:6c:eb:da:39:d8:80:3b:5f:8b:87:16:25:65:32: 33:30:d2:e1:33:08:b2:f8:8a:bc:85:e1:ad:2f:37: ef:7e:cb:3c:ce:0d:b4:cb:26:ba:16:e7:75:d0:08: 6c:04:9d:fb:21:e5:c3:76:fc:63:f3:57:d5:2a:b3: 8b:24:36:d8:73:cb:21:a3:bb:f5:18:58:4f:6b:45: d5:ee:9a:61:ff:36:35:16:dc:d2:4f:52:0d:ca:83: 02:ec:0f:dc:e0:89:1c:35:a3:34:69:1b:d4:71:8d: 11:f1:b5:cd:a4:8f:d7:30:87:d2:d1:39:58:4d:9f: 89:1e:c5:5a:72:ca:27:7f:18:f8:2b:cd:e4:0a:10: e8:c8:5f:51:f5:96:3a:5a:b1:18:53:39:9b:25:55: ad:cd:ab:a9:93:59:73:3c:0c:a0:07:08:b0:05:e6: 68:ac:96:f0:97:b5:37:aa:3e:03:4a:fc:8a:63:a1: 13:ad:8d:a0:72:d3:74:c5:62:f1:a8:63:ff:aa:f9: b6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:70:88:3E:CC:B8:63:C2:C7:D5:E6:3C:22:AC:1B:97:23:C5:27:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/b9020da3-8b55-3fc5-80ac-495e2b2e15b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 209.71.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:e6:ef:0b:44:0b:ef:a4:01:69:4f:75:40:a8:02:7b:f0:0f: e6:26:83:95:5a:e2:e0:c7:66:7b:a4:4e:ab:0a:08:a6:42:70: 89:ed:16:26:3c:99:a1:57:5d:b6:aa:4c:76:93:09:45:be:3f: 2d:c8:c7:3e:4c:74:f4:ad:b3:ad:02:c7:ac:62:74:5d:10:46: 7c:9a:25:5a:ef:af:1e:46:02:e0:aa:9b:7a:e9:ac:60:43:c9: af:35:bd:e5:7d:bb:16:11:12:6b:84:62:42:10:4b:ee:10:35: 96:b3:5e:fb:cf:b4:d8:10:41:56:3f:2d:3a:d2:8f:e6:85:eb: 94:11:f0:78:c4:e6:c5:f6:ef:49:92:0a:d0:48:5a:6f:4c:3c: ca:89:f6:fe:8a:79:1e:28:69:cd:c6:65:eb:58:74:a2:2c:94: f0:a4:39:60:ff:90:ec:ae:a5:bb:40:aa:cb:04:b6:c9:32:94: 3a:fb:48:37:ae:77:80:4c:1c:44:c1:1f:73:62:74:5e:55:33: 2b:88:1c:51:dd:2d:27:01:be:e2:7e:f5:f1:d6:58:6e:7a:1a: 6c:27:46:fc:e2:ac:3f:2a:30:0a:78:5f:99:48:79:d2:ca:3a: 11:32:ac:53:c9:0a:2c:00:24:7a:f6:3a:38:74:c5:e0:00:14: 95:73:16:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEieVntwftM14RKU9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI1MDEyMTEzMTg1MVoXDTI1MDQyMTEyMTg1MVowLzEtMCsGA1UEAxMk NjYxNmNmMzAtZjU4MS00Y2IzLThlMTEtM2Y1Mzg2N2YxOTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSl7Pbg+IAoeW8/opNVgEbS1YvAaLbpdHHjs 62SIe+LZA9aSbXKt2Ulp2hsS82uFmtuThqyhfBYyLxSRbOvaOdiAO1+LhxYlZTIz MNLhMwiy+Iq8heGtLzfvfss8zg20yya6Fud10AhsBJ37IeXDdvxj81fVKrOLJDbY c8sho7v1GFhPa0XV7pph/zY1FtzST1INyoMC7A/c4IkcNaM0aRvUcY0R8bXNpI/X MIfS0TlYTZ+JHsVacsonfxj4K83kChDoyF9R9ZY6WrEYUzmbJVWtzaupk1lzPAyg BwiwBeZorJbwl7U3qj4DSvyKY6ETrY2gctN0xWLxqGP/qvm2DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdwiD7MuGPCx9XmPCKsG5cjxSdCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvYjkwMjBkYTMtOGI1NS0z ZmM1LTgwYWMtNDk1ZTJiMmUxNWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0UdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHm7wtEC++kAWlPdUCoAnvwD+Ymg5Va4uDHZnukTqsKCKZCcIntFiY8 maFXXbaqTHaTCUW+Py3Ixz5MdPSts60Cx6xidF0QRnyaJVrvrx5GAuCqm3rprGBD ya81veV9uxYREmuEYkIQS+4QNZazXvvPtNgQQVY/LTrSj+aF65QR8HjE5sX270mS CtBIWm9MPMqJ9v6KeR4oac3GZetYdKIslPCkOWD/kOyupbtAqssEtskylDr7SDeu d4BMHETBH3NidF5VMyuIHFHdLScBvuJ+9fHWWG56GmwnRvzirD8qMAp4X5lIedLK OhEyrFPJCiwAJHr2Ojh0xeAAFJVzFiA= -----END CERTIFICATE-----Generated at Sun Feb 2 15:50:03 2025 by rpki-client