$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/05224f4f-29f9-328d-ad4a-db204fafa300.roa File: 05224f4f-29f9-328d-ad4a-db204fafa300.roa (raw, json) Hash identifier: JjE/fzO3oWNvvTqVCqWOtB4HxtXb9dLaDtSTncHU8Gw= Subject key identifier: 51:1D:8C:55:1E:8E:6F:D4:A2:F4:50:4C:F0:F5:B4:B1:77:EA:2D:1F Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F43285848EF613725C2B21409454E7400 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/05224f4f-29f9-328d-ad4a-db204fafa300.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 7782 IP address blocks: 209.112.128.0/18 maxlen: 18 209.112.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:37:25:c2:b2:14:09:45:4e:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=f89e3200-a852-4ecf-b86f-45dee8eea4d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4c:d6:48:a6:50:44:3f:82:10:eb:5e:b5:68: 69:f0:b6:f1:0f:ec:06:d0:a8:aa:4c:24:66:cd:3f: 3b:78:4e:2c:d3:87:60:f5:7e:8b:e4:90:e8:43:bf: bf:08:f9:1b:e5:a5:e9:31:f9:ec:3a:b5:a7:e7:05: ea:92:2c:7f:db:ee:78:56:29:8d:58:b3:bd:a9:80: 9a:66:fc:99:12:19:cf:82:cc:52:60:34:94:64:7d: f7:2e:87:80:79:29:05:3a:96:01:63:50:61:f8:a5: 31:f0:6f:96:61:cb:4c:2d:2d:cd:f5:50:3d:30:bd: f7:fa:ff:83:50:c7:51:10:53:87:ad:5b:9b:32:4f: 7f:a5:c4:96:ef:2b:00:19:d2:1d:b6:92:dc:51:89: 78:ec:f7:6b:07:6e:f9:8b:76:b6:24:b1:0f:dd:68: 37:0c:51:23:3f:26:cb:b5:53:ec:03:05:be:da:03: 49:09:53:e8:d8:c6:78:6e:c0:a6:b2:9c:c8:b5:db: 69:e3:05:fb:c6:46:0c:31:9e:e9:22:67:c7:43:61: 9b:ec:3e:b9:7d:62:a4:2b:1e:61:ec:74:6f:24:5b: 44:1c:45:31:aa:e1:15:b3:e8:b8:19:fb:e2:ba:b9: 21:43:4f:9f:5c:cf:89:e7:c6:2d:40:ba:d7:4a:96: 01:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:1D:8C:55:1E:8E:6F:D4:A2:F4:50:4C:F0:F5:B4:B1:77:EA:2D:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/05224f4f-29f9-328d-ad4a-db204fafa300.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 209.112.128.0-209.112.223.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:3d:0f:ca:b4:13:15:58:31:d8:97:56:df:2a:44:ab:c5:bd: 53:83:1b:6e:88:cf:30:1a:b7:e9:18:67:d9:75:01:1e:b9:f5: 6f:71:ac:54:72:56:c7:9b:d2:ae:cf:b2:a5:84:54:f6:3d:71: f6:88:5f:48:51:be:20:b8:65:c9:26:87:cd:d7:5f:01:01:9a: 07:7e:39:bd:42:da:73:01:68:bb:7e:eb:d9:d2:f9:5e:a2:82: b7:47:dc:ae:ba:ac:bd:02:e7:37:60:e5:7c:7b:d1:93:c1:c5: 48:a4:2f:d6:9c:f0:2b:13:a9:fe:b3:95:e3:ed:be:91:d0:fb: 7b:01:d2:b7:21:ae:3a:0e:b7:64:8d:a5:ed:95:74:29:0a:39: 09:70:47:38:4d:a5:87:03:90:c7:c0:cd:d4:b8:90:bc:8b:e8: 35:cb:cd:21:b9:5b:4e:26:8f:d3:33:28:0f:71:e4:95:73:42: 01:90:3f:52:8b:67:e2:d4:17:c3:e1:82:d2:bf:d5:d3:bc:50: 20:e6:36:41:27:42:77:d4:0b:ed:7e:72:f2:45:5c:04:00:f1: 97:26:3c:65:9f:c4:06:42:76:b8:89:2d:b8:bf:cb:51:90:1b: 0b:b3:f1:88:74:c6:b5:55:5c:87:b3:00:e3:bd:0d:a9:cd:2d: ae:75:79:dc -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEjvYTclwrIUCUVOdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk Zjg5ZTMyMDAtYTg1Mi00ZWNmLWI4NmYtNDVkZWU4ZWVhNGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukzWSKZQRD+CEOtetWhp8LbxD+wG0KiqTCRm zT87eE4s04dg9X6L5JDoQ7+/CPkb5aXpMfnsOrWn5wXqkix/2+54VimNWLO9qYCa ZvyZEhnPgsxSYDSUZH33LoeAeSkFOpYBY1Bh+KUx8G+WYctMLS3N9VA9ML33+v+D UMdREFOHrVubMk9/pcSW7ysAGdIdtpLcUYl47PdrB275i3a2JLEP3Wg3DFEjPybL tVPsAwW+2gNJCVPo2MZ4bsCmspzItdtp4wX7xkYMMZ7pImfHQ2Gb7D65fWKkKx5h 7HRvJFtEHEUxquEVs+i4GfviurkhQ0+fXM+J58YtQLrXSpYB6wIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFFEdjFUejm/UovRQTPD1tLF36i0fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvMDUyMjRmNGYtMjlmOS0z MjhkLWFkNGEtZGIyMDRmYWZhMzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAfRcIAD BAXRcMAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAZz0PyrQTFVgx2JdW3ypEq8W9U4MbbojPMBq36Rhn2XUB Hrn1b3GsVHJWx5vSrs+ypYRU9j1x9ohfSFG+ILhlySaHzddfAQGaB345vULacwFo u37r2dL5XqKCt0fcrrqsvQLnN2DlfHvRk8HFSKQv1pzwKxOp/rOV4+2+kdD7ewHS tyGuOg63ZI2l7ZV0KQo5CXBHOE2lhwOQx8DN1LiQvIvoNcvNIblbTiaP0zMoD3Hk lXNCAZA/Uotn4tQXw+GC0r/V07xQIOY2QSdCd9QL7X5y8kVcBADxlyY8ZZ/EBkJ2 uIktuL/LUZAbC7PxiHTGtVVch7MA470Nqc0trnV53A== -----END CERTIFICATE-----Generated at Fri Mar 14 11:19:51 2025 by rpki-client