$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/05224f4f-29f9-328d-ad4a-db204fafa300.roa File: 05224f4f-29f9-328d-ad4a-db204fafa300.roa (raw, json) Hash identifier: xfaT0/ygC1ABvgMbVCJp5EXmYwy0LW7fMzZUlm6Xcwk= Subject key identifier: FB:9B:21:06:7C:1D:EE:62:2A:27:DA:BC:A7:DF:E0:41:6B:75:87:A9 Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F432858480EA50D1151D240989F0ED840 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/05224f4f-29f9-328d-ad4a-db204fafa300.roa Signing time: Sun 01 Dec 2024 02:00:39 +0000 ROA not before: Sun 01 Dec 2024 02:00:39 +0000 ROA not after: Sat 01 Mar 2025 02:00:39 +0000 asID: 7782 IP address blocks: 209.112.128.0/18 maxlen: 18 209.112.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0e:a5:0d:11:51:d2:40:98:9f:0e:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Dec 1 02:00:39 2024 GMT Not After : Mar 1 02:00:39 2025 GMT Subject: CN=05dd4397-a444-4600-b8d3-579e1c3c0a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:89:6d:ac:0d:f8:32:c3:50:06:cd:e5:34:7a: c7:c8:a4:5b:75:a1:36:cc:59:df:31:e3:9d:29:db: 39:90:b0:33:4d:1a:b1:c4:07:fd:4a:7d:45:f9:f1: 5e:40:dc:7f:7e:f3:a3:2e:e2:43:a6:75:0b:33:34: f5:11:5d:5c:bf:a1:f3:16:5b:69:8b:5f:0f:6a:6c: 55:30:53:f6:6d:87:5f:d1:d9:85:ab:26:1a:78:1c: 8b:38:36:35:50:bf:e4:43:65:aa:2b:f2:2f:44:4e: 07:2a:2d:87:44:29:3c:41:45:b5:bb:ee:0a:3c:bd: 3c:ed:a1:e1:43:4c:72:a1:fb:b4:6c:bf:89:ea:3b: d3:99:36:49:2d:da:02:29:29:13:72:93:52:bc:c1: 4d:fb:e4:c6:ed:56:f9:e7:8a:63:92:c2:9e:a4:47: e0:74:15:d3:74:15:80:08:2c:46:c2:85:29:f2:0c: 9b:f3:2e:ec:44:76:07:cd:1f:b6:c4:a3:85:4a:3d: 39:db:1c:ba:94:5c:e0:64:0c:7c:c9:60:e9:f4:11: 2a:54:19:95:6d:66:e2:db:a7:8b:85:82:ff:2e:1f: 2a:0a:66:33:39:e1:36:f6:ef:85:2e:b1:d5:26:5e: 05:b5:87:de:b3:1c:99:bd:5c:9c:85:2c:ea:11:af: 38:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9B:21:06:7C:1D:EE:62:2A:27:DA:BC:A7:DF:E0:41:6B:75:87:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/05224f4f-29f9-328d-ad4a-db204fafa300.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 209.112.128.0-209.112.223.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:2d:20:de:f1:fa:b6:07:f8:39:2a:44:4f:e6:12:8b:e2:07: c5:a8:24:b1:07:fd:13:23:6a:b7:60:0d:49:05:cc:26:00:f6: 75:9c:fe:de:d1:30:48:f1:78:54:e3:42:c9:f5:57:da:2b:12: 4d:60:fa:64:d4:8a:ba:ef:37:13:41:8a:95:55:41:2a:7b:81: de:0c:b2:43:19:1b:80:86:b4:b5:eb:d4:96:01:d4:20:55:21: c3:7b:fc:53:9f:ce:77:43:e8:90:04:67:5d:8c:55:2d:aa:8e: 73:07:59:7b:05:4c:72:6f:3f:62:b7:5d:bf:77:17:5c:a8:7d: f7:18:09:cd:6c:49:7f:9f:1a:e4:17:36:76:8a:14:9c:0d:51: 99:ba:82:c1:fb:1d:21:eb:ea:4e:e0:88:34:fb:6c:d2:f2:ec: d5:bb:e7:7b:3d:64:de:fe:9d:7d:22:9e:ed:51:22:cc:4e:aa: 6a:30:7d:45:c3:68:e6:47:fa:1b:35:0c:c4:e7:48:bb:4c:90: 3b:91:0e:1e:c9:3e:35:94:c7:07:87:44:3b:97:df:6e:3a:c0: 9b:b8:69:cc:62:c2:52:69:aa:79:f4:93:e2:a6:86:49:71:aa: 39:89:42:e9:df:74:b9:42:68:6b:35:c2:50:a2:0e:a2:cb:61: 23:46:05:71 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEgOpQ0RUdJAmJ8O2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk MDVkZDQzOTctYTQ0NC00NjAwLWI4ZDMtNTc5ZTFjM2MwYTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YltrA34MsNQBs3lNHrHyKRbdaE2zFnfMeOd Kds5kLAzTRqxxAf9Sn1F+fFeQNx/fvOjLuJDpnULMzT1EV1cv6HzFltpi18PamxV MFP2bYdf0dmFqyYaeByLODY1UL/kQ2WqK/IvRE4HKi2HRCk8QUW1u+4KPL087aHh Q0xyofu0bL+J6jvTmTZJLdoCKSkTcpNSvMFN++TG7Vb554pjksKepEfgdBXTdBWA CCxGwoUp8gyb8y7sRHYHzR+2xKOFSj052xy6lFzgZAx8yWDp9BEqVBmVbWbi26eL hYL/Lh8qCmYzOeE29u+FLrHVJl4FtYfesxyZvVychSzqEa84PwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFPubIQZ8He5iKifavKff4EFrdYepMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvMDUyMjRmNGYtMjlmOS0z MjhkLWFkNGEtZGIyMDRmYWZhMzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAfRcIAD BAXRcMAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAZC0g3vH6tgf4OSpET+YSi+IHxagksQf9EyNqt2ANSQXM JgD2dZz+3tEwSPF4VONCyfVX2isSTWD6ZNSKuu83E0GKlVVBKnuB3gyyQxkbgIa0 tevUlgHUIFUhw3v8U5/Od0PokARnXYxVLaqOcwdZewVMcm8/Yrddv3cXXKh99xgJ zWxJf58a5Bc2dooUnA1RmbqCwfsdIevqTuCINPts0vLs1bvnez1k3v6dfSKe7VEi zE6qajB9RcNo5kf6GzUMxOdIu0yQO5EOHsk+NZTHB4dEO5ffbjrAm7hpzGLCUmmq efST4qaGSXGqOYlC6d90uUJoazXCUKIOosthI0YFcQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:46 2025 by rpki-client