$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0d504470-f7a7-353b-99fe-145e26284c9d.roa File: 0d504470-f7a7-353b-99fe-145e26284c9d.roa (raw, json) Hash identifier: MNd5pkqPmkeXQ+LdrFOrojZLrZjONlgib5bJzmynTLg= Subject key identifier: BD:D4:A4:72:5B:E7:3D:1D:38:14:6B:BA:2D:57:4A:57:CF:67:81:8F Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F43285848F926900B652408435CAB5BF8 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0d504470-f7a7-353b-99fe-145e26284c9d.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 6312 IP address blocks: 209.151.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:90:0b:65:24:08:43:5c:ab:5b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=b0115095-aedd-4a0e-ac62-800ae7e75eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4a:20:8f:85:e9:f4:e9:d6:46:df:c7:22:9b: 9d:a0:cf:93:85:45:3a:72:19:f3:33:ec:35:fe:d0: 62:24:d1:99:6d:c0:88:1c:81:f1:0e:a4:51:d5:4e: dc:55:59:67:a8:e8:0d:36:6f:3c:03:bc:50:70:1f: d4:b8:ab:47:d4:32:60:ae:c6:ce:72:cb:54:97:2e: 4a:f9:72:6e:25:42:e9:46:d3:e3:b3:06:a3:dc:b6: 36:14:29:79:25:61:50:48:81:99:e4:4a:e0:a1:24: e7:87:aa:e7:ea:28:8c:44:6d:89:3d:53:43:05:dc: 8c:3e:c9:40:9a:03:6f:bd:1a:d2:03:e6:af:3b:87: 88:38:57:11:7e:29:fb:c2:cd:ba:a4:20:51:b2:45: 51:2a:8f:c8:61:0f:65:6f:94:b5:f3:52:47:0d:03: d3:ac:14:6e:3f:84:60:79:59:db:2b:6a:2d:fa:aa: 0c:6a:a3:3f:5a:69:0d:ca:87:1e:ab:a2:90:20:e7: 44:d2:c7:5b:74:10:65:6c:85:61:ec:ad:a5:de:2a: c4:45:13:52:60:65:eb:d4:9c:af:cc:51:c4:ab:9b: 64:4d:27:87:90:76:fa:c6:6b:c5:8d:9a:fe:39:6b: dd:03:34:33:5a:14:b2:d3:a9:bc:37:f1:bf:1a:00: cc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D4:A4:72:5B:E7:3D:1D:38:14:6B:BA:2D:57:4A:57:CF:67:81:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0d504470-f7a7-353b-99fe-145e26284c9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 209.151.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:9a:3f:32:6e:b4:88:dc:9e:82:38:b9:4d:9a:67:da:99:5e: b6:a4:a9:cf:ff:9f:25:6b:2f:a2:84:59:51:2b:45:18:17:91: 97:de:92:c1:4a:5c:07:c7:5f:8d:4a:ea:f0:b7:05:0c:da:6d: 75:97:22:ac:69:46:9e:9f:c4:ca:e9:55:2c:fe:5a:9d:17:d6: 77:98:a2:ff:13:10:e5:b3:65:3d:6d:b9:8e:95:66:97:ad:3b: c9:cc:67:1e:9e:9f:c4:d1:f5:cc:ac:db:12:a3:b3:65:01:97: 8b:f4:99:95:2d:26:f1:2f:e2:76:5e:87:a8:26:30:53:0e:24: cc:72:33:26:57:a2:26:0b:96:3b:c6:c8:2f:6b:67:ed:69:82: d3:f3:49:b4:cd:96:f7:39:18:d3:f8:b7:d5:31:01:7b:f8:cf: ae:e6:08:6e:3a:6f:6d:5a:31:fa:04:e4:ec:94:7e:3c:7f:0a: f9:08:32:27:40:d2:0f:da:3e:68:c2:47:60:f8:2e:41:29:18: 66:8c:6b:8b:11:a1:fd:bf:05:3d:b7:21:6d:7d:d5:59:4d:db: 4e:37:cd:c0:d9:4a:ac:5c:11:10:19:7b:9a:ba:5a:9c:61:bc: 2d:2d:88:01:37:9a:99:69:be:6d:f8:00:0d:e5:35:64:05:8c: e3:a2:a1:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JpALZSQIQ1yrW/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YjAxMTUwOTUtYWVkZC00YTBlLWFjNjItODAwYWU3ZTc1ZWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0ogj4Xp9OnWRt/HIpudoM+ThUU6chnzM+w1 /tBiJNGZbcCIHIHxDqRR1U7cVVlnqOgNNm88A7xQcB/UuKtH1DJgrsbOcstUly5K +XJuJULpRtPjswaj3LY2FCl5JWFQSIGZ5ErgoSTnh6rn6iiMRG2JPVNDBdyMPslA mgNvvRrSA+avO4eIOFcRfin7ws26pCBRskVRKo/IYQ9lb5S181JHDQPTrBRuP4Rg eVnbK2ot+qoMaqM/WmkNyoceq6KQIOdE0sdbdBBlbIVh7K2l3irERRNSYGXr1Jyv zFHEq5tkTSeHkHb6xmvFjZr+OWvdAzQzWhSy06m8N/G/GgDMJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3UpHJb5z0dOBRrui1XSlfPZ4GPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMGQ1MDQ0NzAtZjdhNy0z NTNiLTk5ZmUtMTQ1ZTI2Mjg0YzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZezMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKyaPzJutIjcnoI4uU2aZ9qZXrakqc//nyVrL6KEWVErRRgXkZfeksFK XAfHX41K6vC3BQzabXWXIqxpRp6fxMrpVSz+Wp0X1neYov8TEOWzZT1tuY6VZpet O8nMZx6en8TR9cys2xKjs2UBl4v0mZUtJvEv4nZeh6gmMFMOJMxyMyZXoiYLljvG yC9rZ+1pgtPzSbTNlvc5GNP4t9UxAXv4z67mCG46b21aMfoE5OyUfjx/CvkIMidA 0g/aPmjCR2D4LkEpGGaMa4sRof2/BT23IW191VlN2043zcDZSqxcERAZe5q6Wpxh vC0tiAE3mplpvm34AA3lNWQFjOOioZ0= -----END CERTIFICATE-----Generated at Sat Apr 12 10:14:36 2025 by rpki-client