$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/8edf4efb-a249-33e7-b757-baece63171f8.roa File: 8edf4efb-a249-33e7-b757-baece63171f8.roa (raw, json) Hash identifier: VWbLX6ojIOaP4992nhY3HJtk2eVOfFnnP9WJjN2O4jU= Subject key identifier: D9:43:2E:CB:64:0A:C9:85:BD:B9:63:51:93:5A:9A:EA:BE:60:00:3C Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F432858483F8039B9EE6414E0E4965B00 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/8edf4efb-a249-33e7-b757-baece63171f8.roa Signing time: Wed 18 Dec 2024 14:00:52 +0000 ROA not before: Wed 18 Dec 2024 14:00:52 +0000 ROA not after: Tue 18 Mar 2025 13:00:52 +0000 asID: 14618 IP address blocks: 209.169.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3f:80:39:b9:ee:64:14:e0:e4:96:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Dec 18 14:00:52 2024 GMT Not After : Mar 18 13:00:52 2025 GMT Subject: CN=cf832c28-f72d-4e69-8782-656092c7684c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f6:9d:e0:69:d5:b6:4a:ad:8b:32:08:43:d0: 17:25:36:4a:a3:51:ed:68:26:eb:84:89:a0:0f:0c: bc:c8:19:63:d2:09:30:b0:29:6d:f5:ac:1b:9e:b4: ce:50:9b:de:8f:d4:4e:c7:c5:59:cb:1c:f7:2f:89: 86:93:fa:e2:fa:03:54:5f:06:0d:94:92:64:79:f0: ab:c2:c8:8a:24:1a:82:9b:f3:28:19:63:fe:15:69: 39:5e:47:52:52:d0:c3:88:02:21:10:08:6c:91:eb: a2:05:7b:89:c4:4d:02:4a:e6:bd:5a:37:83:63:6c: 3d:a8:97:9b:f0:3a:c6:c2:94:d9:eb:51:02:62:df: 56:4f:a6:90:07:09:f4:8b:2f:e9:0f:0b:76:79:6b: 91:12:8d:c2:f3:ba:ea:3e:1f:02:02:38:87:48:24: 92:58:0f:79:1b:46:77:a8:de:d2:45:08:2f:86:f1: 87:55:13:c9:16:2a:a5:56:9e:94:03:ee:1c:fa:be: 12:df:fa:e0:fb:5d:3b:a3:fa:28:eb:2e:1a:c6:21: 47:08:dd:44:67:39:25:3c:3a:f3:ae:20:21:2e:25: cf:24:aa:a3:b3:b9:5b:6a:01:b4:b2:99:35:3f:7e: 04:a7:18:cb:fe:e2:3e:a0:1f:65:28:de:62:5b:f6: d3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:43:2E:CB:64:0A:C9:85:BD:B9:63:51:93:5A:9A:EA:BE:60:00:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/8edf4efb-a249-33e7-b757-baece63171f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:20:8b:52:fc:9d:41:8e:2f:26:1c:66:55:74:61:6a:39:14: 30:4d:7c:ce:1a:56:93:b8:4e:ef:79:f4:2b:82:07:60:41:25: 14:de:ff:fc:1f:5d:83:5f:7e:13:7e:39:90:4f:35:2a:09:70: 88:bf:ce:fe:bf:12:59:21:17:e1:a1:86:c3:d6:41:43:0d:c5: 30:96:1e:e2:6a:00:49:53:8c:27:b8:52:67:c5:61:30:32:c7: 74:8c:60:0a:d5:20:69:b9:ca:90:9b:1e:94:37:b5:be:89:ee: 78:fc:7f:b1:eb:d1:ec:e4:b3:04:16:fe:39:40:75:03:96:8e: 04:8e:f2:e9:be:1f:e3:e3:b6:28:b1:27:5c:1a:85:00:bd:bd: 60:a5:77:18:c2:cc:8e:a9:fd:29:20:43:ae:3f:2b:56:20:ec: c5:38:6d:7f:94:96:76:c0:28:8f:6f:03:26:dd:e1:42:27:b2: 08:cf:7c:0b:57:92:6e:16:e5:e3:92:cf:4f:1f:17:e6:00:85: 0d:90:38:ef:3e:d4:0b:32:7b:8c:2b:62:41:65:04:5b:50:9f: fd:84:a7:83:f9:f4:c6:15:28:70:0b:9c:1b:b5:19:da:49:e6: 45:ad:ab:a1:de:b4:24:ff:3d:19:5d:12:c9:48:e0:52:bb:bf: e4:02:73:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg/gDm57mQU4OSWWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI0MTIxODE0MDA1MloXDTI1MDMxODEzMDA1MlowLzEtMCsGA1UEAxMk Y2Y4MzJjMjgtZjcyZC00ZTY5LTg3ODItNjU2MDkyYzc2ODRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPad4GnVtkqtizIIQ9AXJTZKo1HtaCbrhImg Dwy8yBlj0gkwsClt9awbnrTOUJvej9ROx8VZyxz3L4mGk/ri+gNUXwYNlJJkefCr wsiKJBqCm/MoGWP+FWk5XkdSUtDDiAIhEAhskeuiBXuJxE0CSua9WjeDY2w9qJeb 8DrGwpTZ61ECYt9WT6aQBwn0iy/pDwt2eWuREo3C87rqPh8CAjiHSCSSWA95G0Z3 qN7SRQgvhvGHVRPJFiqlVp6UA+4c+r4S3/rg+107o/oo6y4axiFHCN1EZzklPDrz riAhLiXPJKqjs7lbagG0spk1P34EpxjL/uI+oB9lKN5iW/bTTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlDLstkCsmFvbljUZNamuq+YAA8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvOGVkZjRlZmItYTI0OS0z M2U3LWI3NTctYmFlY2U2MzE3MWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0an1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEgi1L8nUGOLyYcZlV0YWo5FDBNfM4aVpO4Tu959CuCB2BBJRTe//wf XYNffhN+OZBPNSoJcIi/zv6/ElkhF+GhhsPWQUMNxTCWHuJqAElTjCe4UmfFYTAy x3SMYArVIGm5ypCbHpQ3tb6J7nj8f7Hr0ezkswQW/jlAdQOWjgSO8um+H+Pjtiix J1wahQC9vWCldxjCzI6p/SkgQ64/K1Yg7MU4bX+UlnbAKI9vAybd4UInsgjPfAtX km4W5eOSz08fF+YAhQ2QOO8+1Asye4wrYkFlBFtQn/2Ep4P59MYVKHALnBu1GdpJ 5kWtq6HetCT/PRldEslI4FK7v+QCc9k= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:06 2025 by rpki-client