$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/a502b432-1632-3940-872f-cd24ee7e9163.roa File: a502b432-1632-3940-872f-cd24ee7e9163.roa (raw, json) Hash identifier: 9fnMwZfRO5hylIG/OUHVCX8oH975lpvoTvhtOda+lRY= Subject key identifier: A5:96:B5:DC:EE:57:A7:3D:C7:B4:D5:98:F2:4B:29:02:97:77:A0:BA Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Certificate serial: 010D0C9F43285848854B47F820B912AB16B791C0 Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/a502b432-1632-3940-872f-cd24ee7e9163.roa Signing time: Sun 12 Jan 2025 14:00:53 +0000 ROA not before: Sun 12 Jan 2025 14:00:53 +0000 ROA not after: Sat 12 Apr 2025 13:00:53 +0000 asID: 14369 IP address blocks: 209.173.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:85:4b:47:f8:20:b9:12:ab:16:b7:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Validity Not Before: Jan 12 14:00:53 2025 GMT Not After : Apr 12 13:00:53 2025 GMT Subject: CN=b4fa32fb-2585-4919-82ea-90ee37f53621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2d:f9:8c:a0:da:f5:c6:b1:9d:b4:8d:41:ff: bc:a7:1a:df:f4:c5:57:a5:df:7c:b0:d7:2e:85:b4: c8:23:6c:52:cb:47:63:72:22:88:6f:18:55:e3:1e: 49:d2:35:1c:b2:fa:b2:0f:eb:bc:a3:77:82:fa:d7: 3a:c1:93:fd:2f:74:fe:99:b5:2c:53:a0:dc:43:bf: ff:7e:1a:4d:3e:47:14:8d:14:08:c4:68:0d:f7:16: 27:d8:c4:20:74:9b:db:05:20:49:ac:2d:e0:74:c0: f7:92:4f:7f:69:fc:ba:60:5d:54:f3:ee:e3:88:d1: 5b:28:22:11:1c:4f:bc:8b:97:e3:eb:a1:bb:e0:8c: 74:c2:23:86:37:58:df:c9:74:3b:cd:74:28:fb:68: 5b:1c:2a:cb:0c:40:1d:53:c3:03:6c:e3:17:a0:77: a0:3f:e1:d6:8f:88:5e:f7:88:ab:4c:ab:21:e0:93: 46:92:c0:b4:20:df:9f:4a:c1:c9:30:7b:7b:3d:1f: 3b:ec:8e:bd:69:36:0f:da:44:3b:ea:de:ac:fd:65: f2:51:0d:46:77:a0:a8:14:cd:cc:70:e1:0d:db:b1: 0e:89:f5:4b:39:e2:c4:61:9d:7e:df:46:ee:01:6a: c0:d4:b3:92:d3:66:7d:2d:93:4c:f8:36:f5:b4:81: 77:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:96:B5:DC:EE:57:A7:3D:C7:B4:D5:98:F2:4B:29:02:97:77:A0:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/a502b432-1632-3940-872f-cd24ee7e9163.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl X509v3 Authority Key Identifier: keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer sbgp-ipAddrBlock: critical IPv4: 209.173.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:d7:17:37:08:98:7d:95:7d:a5:5b:ba:93:c6:cd:9a:f1:1b: 26:5b:de:9b:c2:bf:ec:45:9f:35:6d:dd:41:95:8e:29:d0:52: 38:ab:8d:26:21:af:fe:5e:81:eb:9b:22:a7:5c:a2:5e:a5:19: 1f:c3:c9:e5:07:47:c3:88:b4:38:95:38:fb:90:18:b4:b5:7d: d6:87:df:39:65:62:c6:c4:43:bc:00:92:e9:ce:8d:37:c5:2b: 9b:6d:a7:9d:32:3d:be:94:e4:4d:fc:d8:56:3f:fb:c7:7c:78: 84:b9:15:ea:0d:f0:ff:fd:f6:cb:cc:0f:4e:3f:84:e5:ca:dc: b1:48:fa:09:8a:f8:33:69:ac:92:4e:4a:5a:55:c4:c3:63:dc: d9:57:16:ef:ba:e4:3e:e6:84:60:ca:71:7e:a4:39:ed:3f:ba: bd:f5:80:8c:e9:a9:19:60:98:53:4e:3a:40:f1:31:07:a5:83: 91:e2:60:e2:62:2b:84:4d:35:d3:14:ea:47:1d:9f:89:2b:10: d6:47:28:4d:2b:c6:39:d3:a2:69:19:be:ab:d7:28:e0:85:8c: 53:a1:1d:57:0c:b3:ef:ae:69:1a:4d:54:e9:f9:11:e1:fb:c2: c9:f0:2d:37:54:ca:f2:d7:66:b1:ba:05:e3:33:2d:d2:2c:ad: 3e:36:e1:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFS0f4ILkSqxa3kcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi YWZmMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk YjRmYTMyZmItMjU4NS00OTE5LTgyZWEtOTBlZTM3ZjUzNjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiS35jKDa9caxnbSNQf+8pxrf9MVXpd98sNcu hbTII2xSy0djciKIbxhV4x5J0jUcsvqyD+u8o3eC+tc6wZP9L3T+mbUsU6DcQ7// fhpNPkcUjRQIxGgN9xYn2MQgdJvbBSBJrC3gdMD3kk9/afy6YF1U8+7jiNFbKCIR HE+8i5fj66G74Ix0wiOGN1jfyXQ7zXQo+2hbHCrLDEAdU8MDbOMXoHegP+HWj4he 94irTKsh4JNGksC0IN+fSsHJMHt7PR877I69aTYP2kQ76t6s/WXyUQ1Gd6CoFM3M cOEN27EOifVLOeLEYZ1+30buAWrA1LOS02Z9LZNM+Db1tIF3/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWWtdzuV6c9x7TVmPJLKQKXd6C6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvYTUwMmI0MzItMTYzMi0z OTQwLTg3MmYtY2QyNGVlN2U5MTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0 ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1 YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj YzY5NWJhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a0JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALDXFzcImH2VfaVbupPGzZrxGyZb3pvCv+xFnzVt3UGVjinQUjirjSYh r/5egeubIqdcol6lGR/DyeUHR8OItDiVOPuQGLS1fdaH3zllYsbEQ7wAkunOjTfF K5ttp50yPb6U5E382FY/+8d8eIS5FeoN8P/99svMD04/hOXK3LFI+gmK+DNprJJO SlpVxMNj3NlXFu+65D7mhGDKcX6kOe0/ur31gIzpqRlgmFNOOkDxMQelg5HiYOJi K4RNNdMU6kcdn4krENZHKE0rxjnTomkZvqvXKOCFjFOhHVcMs++uaRpNVOn5EeH7 wsnwLTdUyvLXZrG6BeMzLdIsrT424fk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:54 2025 by rpki-client