$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/a9cd02b8-2365-3281-9012-ab50278bf591.roa File: a9cd02b8-2365-3281-9012-ab50278bf591.roa (raw, json) Hash identifier: 8lPC6MJ1gr+wjo28oZSwYG6ZJWdWND3d/C7qk3UkOHM= Subject key identifier: 35:9E:06:5F:FB:6E:7E:06:92:BF:48:7F:4C:85:F7:CD:FA:48:D8:03 Certificate issuer: /CN=2059c963-068e-4fba-a7d6-639c3f36a91b Certificate serial: 010D0C9F43285848828084F6E18D212DCF325F80 Authority key identifier: 58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/a9cd02b8-2365-3281-9012-ab50278bf591.roa Signing time: Sat 11 Jan 2025 14:00:52 +0000 ROA not before: Sat 11 Jan 2025 14:00:52 +0000 ROA not after: Fri 11 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 209.126.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:82:80:84:f6:e1:8d:21:2d:cf:32:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2059c963-068e-4fba-a7d6-639c3f36a91b Validity Not Before: Jan 11 14:00:52 2025 GMT Not After : Apr 11 13:00:52 2025 GMT Subject: CN=228d8f13-f5f6-448a-b498-65be6f81c964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:18:9a:59:02:ef:c6:db:cb:77:f5:7e:01:78: cb:b8:02:57:49:6d:b5:31:7c:41:06:ae:f6:ab:41: fc:12:d2:69:f1:82:a4:1d:79:19:47:fe:a4:48:c7: 02:24:c3:4d:fd:2e:18:69:86:d1:b6:ae:46:25:ff: 18:ad:d3:e1:10:4e:5f:8c:de:9b:4a:d2:8a:5e:00: b1:0a:5a:8e:34:c5:8f:9b:bc:40:c7:73:24:28:2d: bc:c5:7d:7a:c8:7d:3d:98:3b:5a:8d:06:e7:e4:33: ac:f7:49:04:7d:d6:5c:3e:24:13:e8:50:58:16:b9: 76:d6:e8:67:8f:59:6f:9c:ed:0c:fd:36:d0:1d:4e: 34:b8:d8:67:da:19:3c:03:4d:70:c4:41:20:93:88: ca:69:25:d1:0d:4a:1a:32:c4:76:eb:16:f8:8a:cc: 92:fb:51:db:a9:00:4d:89:e8:5f:d3:7b:98:74:29: 62:93:44:e0:38:0c:7e:8c:5a:23:78:8c:85:d6:d8: 0b:eb:57:2b:75:20:a3:8e:ff:18:cf:6c:a0:60:75: 4e:1d:f8:b3:21:41:a7:4a:14:44:a7:8a:12:95:46: ab:30:20:0e:14:fc:13:18:41:cc:9b:8d:23:9f:eb: 0a:5f:7d:9e:a5:a7:95:59:67:15:87:81:5b:65:d3: 26:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9E:06:5F:FB:6E:7E:06:92:BF:48:7F:4C:85:F7:CD:FA:48:D8:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/a9cd02b8-2365-3281-9012-ab50278bf591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.crl X509v3 Authority Key Identifier: keyid:58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer sbgp-ipAddrBlock: critical IPv4: 209.126.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:40:e1:26:1e:3d:e8:a1:96:f9:0c:29:30:f9:1a:45:68:cf: 25:ea:17:c4:bf:91:92:03:63:e0:29:39:3c:c0:f1:11:65:28: 55:fb:c8:54:b5:b1:d5:f9:84:62:44:59:0e:a1:74:88:47:02: 2e:f0:88:e1:a6:9b:98:2d:69:35:88:97:1a:0f:f0:bd:8b:c5: 45:c3:af:2e:db:aa:4a:8f:bd:04:60:ef:af:dc:d9:de:ba:08: 3d:69:83:2e:d1:7f:77:83:a1:e6:1d:b6:a9:39:f5:e4:26:15: 15:05:72:13:17:d0:cb:93:95:fe:bb:05:c7:53:83:a6:50:90: 64:07:cd:62:0f:2a:21:24:85:69:b9:a3:bd:be:51:4c:6a:1a: de:c5:91:d2:2f:87:03:19:80:a1:52:21:38:41:bb:d0:82:33: 03:63:fd:79:2b:ed:54:20:12:93:7d:9b:31:d2:96:a5:75:6d: 8b:87:4d:16:dd:a4:42:c5:da:08:8d:42:be:71:ac:53:c2:b8: ad:5c:bd:44:81:19:0b:16:ab:44:d1:78:db:82:0d:f9:fe:06: 16:20:69:1b:aa:42:ce:4c:29:41:8d:8a:ac:00:96:3c:81:0a: cb:d5:ff:e3:99:f4:be:1b:07:c5:d5:93:0a:bf:dc:3d:13:39: 8c:a5:18:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgIT24Y0hLc8yX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA1OWM5NjMtMDY4ZS00ZmJhLWE3ZDYtNjM5YzNmMzZh OTFiMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk MjI4ZDhmMTMtZjVmNi00NDhhLWI0OTgtNjViZTZmODFjOTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphiaWQLvxtvLd/V+AXjLuAJXSW21MXxBBq72 q0H8EtJp8YKkHXkZR/6kSMcCJMNN/S4YaYbRtq5GJf8YrdPhEE5fjN6bStKKXgCx ClqONMWPm7xAx3MkKC28xX16yH09mDtajQbn5DOs90kEfdZcPiQT6FBYFrl21uhn j1lvnO0M/TbQHU40uNhn2hk8A01wxEEgk4jKaSXRDUoaMsR26xb4isyS+1HbqQBN iehf03uYdClik0TgOAx+jFojeIyF1tgL61crdSCjjv8Yz2ygYHVOHfizIUGnShRE p4oSlUarMCAOFPwTGEHMm40jn+sKX32epaeVWWcVh4FbZdMmgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWeBl/7bn4Gkr9If0yF9836SNgDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDU5 Yzk2My0wNjhlLTRmYmEtYTdkNi02MzljM2YzNmE5MWIvYTljZDAyYjgtMjM2NS0z MjgxLTkwMTItYWI1MDI3OGJmNTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA1OWM5NjMtMDY4ZS00ZmJhLWE3 ZDYtNjM5YzNmMzZhOTFiLzIwNTljOTYzLTA2OGUtNGZiYS1hN2Q2LTYzOWMzZjM2 YTkxYi5jcmwwHwYDVR0jBBgwFoAUWNZYCwcsYV693v/1IVy0dP6S2y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDU5Yzk2My0wNjhlLTRmYmEtYTdkNi02Mzlj M2YzNmE5MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0X5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdA4SYePeihlvkMKTD5GkVozyXqF8S/kZIDY+ApOTzA8RFlKFX7yFS1 sdX5hGJEWQ6hdIhHAi7wiOGmm5gtaTWIlxoP8L2LxUXDry7bqkqPvQRg76/c2d66 CD1pgy7Rf3eDoeYdtqk59eQmFRUFchMX0MuTlf67BcdTg6ZQkGQHzWIPKiEkhWm5 o72+UUxqGt7FkdIvhwMZgKFSIThBu9CCMwNj/Xkr7VQgEpN9mzHSlqV1bYuHTRbd pELF2giNQr5xrFPCuK1cvUSBGQsWq0TReNuCDfn+BhYgaRuqQs5MKUGNiqwAljyB CsvV/+OZ9L4bB8XVkwq/3D0TOYylGKM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:45 2025 by rpki-client