$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/13770d97-71ff-39cc-9e6e-756a964e1b72.roa File: 13770d97-71ff-39cc-9e6e-756a964e1b72.roa (raw, json) Hash identifier: 4eA/16IPLFfnGVC2pH6X/oYyyQYFZIHBSJ2pg4j5+PE= Subject key identifier: 4F:AD:F3:AC:D4:F4:7C:9A:47:86:3E:35:21:F2:20:DD:51:18:23:73 Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F432858480BDA7C72487D96017378FF00 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/13770d97-71ff-39cc-9e6e-756a964e1b72.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 14618 IP address blocks: 209.169.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:7c:72:48:7d:96:01:73:78:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=a1a44032-91b6-4f99-8de6-ef0039ef914e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:29:39:f1:ec:2d:d7:3a:49:3c:07:5b:1f:81: 1e:ef:50:3a:62:1e:54:bb:50:79:7a:88:57:bc:e3: 0b:17:15:d8:d9:73:0b:48:d0:14:5c:75:f1:48:c8: f5:e3:88:87:f0:a5:d1:34:ee:59:2f:24:0c:70:1e: ca:fd:28:bc:2d:98:bc:0b:d2:93:79:5b:0f:92:26: 3a:03:f5:35:1f:54:99:f0:39:44:19:a7:5f:c7:cc: 60:b7:b5:12:92:d0:71:ea:45:1a:eb:a6:44:0c:70: 4f:c4:50:4f:d9:4d:74:95:16:a3:68:a1:c5:d1:82: 5a:07:17:15:af:c5:59:b0:c6:4c:3e:07:a1:82:88: d0:55:99:80:d6:2b:60:52:e1:ea:c3:64:bc:4a:c5: ca:07:5c:96:02:41:1b:a1:21:c6:1e:71:9d:ee:87: f7:1f:ca:8e:7e:a4:62:77:94:3b:a0:6a:e5:51:3a: 11:67:f0:d5:30:7f:1f:b8:9d:b1:e4:a5:d0:4b:23: 99:6f:8c:29:1a:50:b5:57:62:a9:b5:67:bb:20:58: 05:d6:9f:2d:9f:1d:99:a0:4f:8e:61:36:5b:55:11: da:6b:a8:de:b1:02:c4:55:9c:b3:f6:35:5c:c0:30: 13:2b:28:ef:84:5d:24:a3:80:1c:95:1a:25:a4:e0: 0c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AD:F3:AC:D4:F4:7C:9A:47:86:3E:35:21:F2:20:DD:51:18:23:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/13770d97-71ff-39cc-9e6e-756a964e1b72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:dc:b6:8c:5a:f5:8c:9f:21:35:e8:4c:51:d7:39:c1:ae:f7: 24:eb:69:89:d6:42:4b:a9:b0:b7:36:78:d6:a2:60:b2:6a:cb: 31:27:9e:91:dd:43:3d:83:1c:e4:95:2b:b5:ef:56:8c:bf:22: ad:93:b7:1c:91:ca:9a:5a:c0:18:46:1d:e6:55:7b:6e:ae:83: 5d:2c:c7:bd:06:ee:a1:ae:a0:bb:b6:11:1a:96:23:97:d1:49: 53:7d:68:5b:f2:45:6a:06:37:e7:54:9b:09:33:1b:7e:7a:e2: f9:af:44:40:47:1c:bb:46:a8:54:6d:1e:08:d5:17:58:dd:d9: b6:52:e7:3f:ef:49:a8:d4:b7:bb:0a:87:81:d2:11:4c:9b:80: 04:8f:30:0b:84:91:b9:d6:ee:de:5c:01:26:62:ce:5d:9a:c9: 7e:89:28:a4:be:d1:c3:08:b0:ca:2e:c8:a8:9c:f6:66:bf:2d: 4a:ff:4e:5f:1b:c8:d4:0c:03:72:f5:86:46:5f:d5:59:75:c0: 3b:9b:fe:97:f2:c8:84:55:9e:9f:1e:9d:29:ca:24:1c:cc:80: 62:0e:f8:57:ab:72:e9:4b:c8:16:e7:90:3d:63:6a:d5:e4:0a: 54:3a:fb:9a:ad:0e:3a:90:51:ef:72:84:cb:1d:3f:cc:ab:60: ca:cd:6b:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgL2nxySH2WAXN4/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk YTFhNDQwMzItOTFiNi00Zjk5LThkZTYtZWYwMDM5ZWY5MTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSk58ewt1zpJPAdbH4Ee71A6Yh5Uu1B5eohX vOMLFxXY2XMLSNAUXHXxSMj144iH8KXRNO5ZLyQMcB7K/Si8LZi8C9KTeVsPkiY6 A/U1H1SZ8DlEGadfx8xgt7USktBx6kUa66ZEDHBPxFBP2U10lRajaKHF0YJaBxcV r8VZsMZMPgehgojQVZmA1itgUuHqw2S8SsXKB1yWAkEboSHGHnGd7of3H8qOfqRi d5Q7oGrlUToRZ/DVMH8fuJ2x5KXQSyOZb4wpGlC1V2KptWe7IFgF1p8tnx2ZoE+O YTZbVRHaa6jesQLEVZyz9jVcwDATKyjvhF0ko4AclRolpOAM6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+t86zU9HyaR4Y+NSHyIN1RGCNzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvMTM3NzBkOTctNzFmZi0z OWNjLTllNmUtNzU2YTk2NGUxYjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0an8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALctoxa9YyfITXoTFHXOcGu9yTraYnWQkupsLc2eNaiYLJqyzEnnpHd Qz2DHOSVK7XvVoy/Iq2TtxyRyppawBhGHeZVe26ug10sx70G7qGuoLu2ERqWI5fR SVN9aFvyRWoGN+dUmwkzG3564vmvREBHHLtGqFRtHgjVF1jd2bZS5z/vSajUt7sK h4HSEUybgASPMAuEkbnW7t5cASZizl2ayX6JKKS+0cMIsMouyKic9ma/LUr/Tl8b yNQMA3L1hkZf1Vl1wDub/pfyyIRVnp8enSnKJBzMgGIO+FerculLyBbnkD1jatXk ClQ6+5qtDjqQUe9yhMsdP8yrYMrNa5M= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:35 2025 by rpki-client