$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4e676a00-dad3-3ddc-a5c2-e12299dbc680.roa File: 4e676a00-dad3-3ddc-a5c2-e12299dbc680.roa (raw, json) Hash identifier: 9wIGFhikr93NX8grvxP9NFgHZwAHv1gavBNWA92KNyA= Subject key identifier: 88:0E:4A:2B:E3:53:00:A4:E4:86:13:61:BC:91:FA:54:59:CE:77:EB Certificate issuer: /CN=4a1bda30-5045-4ded-bf47-7fd03a594092 Certificate serial: 010D0C9F43285848E16BD47CE4074B72717699C0 Authority key identifier: 83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4e676a00-dad3-3ddc-a5c2-e12299dbc680.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 209.166.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:d4:7c:e4:07:4b:72:71:76:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a1bda30-5045-4ded-bf47-7fd03a594092 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=ef1e1e10-ab67-40c0-8b27-cd748e094d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:53:19:c0:f3:f8:47:4c:36:b3:bf:62:cc:de: 20:69:f3:f6:d2:83:cd:31:c0:94:55:6a:f7:8c:37: 01:8d:af:7c:cb:2c:f6:89:f0:93:5e:be:cd:d9:26: da:f7:87:e5:85:60:f7:d7:c2:80:db:4f:a7:60:f8: 1e:cd:0b:20:db:e7:43:7c:06:76:e5:7c:69:72:71: 96:33:03:ed:1e:35:be:37:17:3f:9f:16:cc:a3:ad: f5:cb:5d:56:29:48:db:40:d0:05:82:35:9d:dd:3a: 2b:47:3a:ad:d9:8f:46:2b:b9:30:06:98:c9:44:23: ee:14:10:2e:b4:8a:d1:b7:89:d8:ba:e6:ef:90:eb: b3:21:a2:b7:c3:8b:b1:fa:bd:1b:1a:bf:f6:e0:e9: 9a:80:59:7f:90:fb:df:75:30:6e:13:99:7e:a5:f2: 64:c1:34:51:f9:0e:69:26:91:f0:18:7b:24:d1:3b: 41:b7:a7:82:5d:f3:47:54:da:06:a7:ca:6a:37:c2: 4b:f0:95:e4:58:fa:fe:6c:45:53:ca:f0:f4:84:a8: 26:6d:fb:2b:3e:1f:7b:ca:5f:1d:80:a8:60:7d:14: f6:af:7a:4f:1f:4a:6b:38:54:92:62:cb:8c:ab:5d: 81:bc:a7:60:cb:f2:6d:f1:1d:e9:85:39:bd:3d:9b: 6e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0E:4A:2B:E3:53:00:A4:E4:86:13:61:BC:91:FA:54:59:CE:77:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4e676a00-dad3-3ddc-a5c2-e12299dbc680.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl X509v3 Authority Key Identifier: keyid:83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer sbgp-ipAddrBlock: critical IPv4: 209.166.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:42:dd:9e:cc:8c:eb:ee:3f:e5:b8:88:56:02:d6:99:d2:d3: d0:36:4f:5b:55:27:3b:12:3a:d3:52:3c:b3:c2:a4:bc:e8:e7: 3a:db:e1:9a:46:c6:10:ce:8d:f1:a1:36:86:60:2b:d9:a1:06: 08:ea:e0:9f:b7:44:f6:92:02:91:5b:4e:8a:9c:3e:1d:e9:cc: d8:6d:12:5a:2f:50:69:23:44:87:3f:62:a7:c4:8e:42:dd:85: f0:cb:66:fb:93:69:d9:53:44:52:80:6f:a6:11:19:bf:7c:53: c3:80:29:f8:ff:6b:6a:6f:ad:7a:4d:d0:31:e7:77:f1:d2:ff: 37:82:d4:cd:3b:29:65:ef:d2:87:e6:c0:d2:5e:8d:b5:0d:4e: ef:bd:2b:d5:23:55:5d:21:b0:ef:54:90:89:1d:ef:73:8e:bd: 24:8b:4b:7d:2c:19:0c:26:fb:e2:6b:29:00:83:e8:b7:af:67: cd:5e:38:6c:a8:a7:7f:3f:97:62:cb:71:58:84:c9:4c:40:d1: 0c:3d:48:9e:4f:58:a5:d1:48:03:d6:73:07:f5:57:65:f2:a6: b4:91:f6:d3:94:47:2b:31:8b:45:c7:a4:ad:95:e2:0b:99:85: 5a:94:b7:8d:04:ad:26:5c:a8:2b:06:f1:45:5a:df:29:87:82: 77:85:fa:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha9R85AdLcnF2mcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGExYmRhMzAtNTA0NS00ZGVkLWJmNDctN2ZkMDNhNTk0 MDkyMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk ZWYxZTFlMTAtYWI2Ny00MGMwLThiMjctY2Q3NDhlMDk0ZDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilMZwPP4R0w2s79izN4gafP20oPNMcCUVWr3 jDcBja98yyz2ifCTXr7N2Sba94flhWD318KA20+nYPgezQsg2+dDfAZ25XxpcnGW MwPtHjW+Nxc/nxbMo631y11WKUjbQNAFgjWd3TorRzqt2Y9GK7kwBpjJRCPuFBAu tIrRt4nYuubvkOuzIaK3w4ux+r0bGr/24OmagFl/kPvfdTBuE5l+pfJkwTRR+Q5p JpHwGHsk0TtBt6eCXfNHVNoGp8pqN8JL8JXkWPr+bEVTyvD0hKgmbfsrPh97yl8d gKhgfRT2r3pPH0prOFSSYsuMq12BvKdgy/Jt8R3phTm9PZtuSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgOSivjUwCk5IYTYbyR+lRZznfrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YTFi ZGEzMC01MDQ1LTRkZWQtYmY0Ny03ZmQwM2E1OTQwOTIvNGU2NzZhMDAtZGFkMy0z ZGRjLWE1YzItZTEyMjk5ZGJjNjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGExYmRhMzAtNTA0NS00ZGVkLWJm NDctN2ZkMDNhNTk0MDkyLzRhMWJkYTMwLTUwNDUtNGRlZC1iZjQ3LTdmZDAzYTU5 NDA5Mi5jcmwwHwYDVR0jBBgwFoAUg9WJsYZCUYnHW+3xTeETLIiJodYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YTFiZGEzMC01MDQ1LTRkZWQtYmY0Ny03ZmQw M2E1OTQwOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0abAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJC3Z7MjOvuP+W4iFYC1pnS09A2T1tVJzsSOtNSPLPCpLzo5zrb4ZpG xhDOjfGhNoZgK9mhBgjq4J+3RPaSApFbToqcPh3pzNhtElovUGkjRIc/YqfEjkLd hfDLZvuTadlTRFKAb6YRGb98U8OAKfj/a2pvrXpN0DHnd/HS/zeC1M07KWXv0ofm wNJejbUNTu+9K9UjVV0hsO9UkIkd73OOvSSLS30sGQwm++JrKQCD6LevZ81eOGyo p38/l2LLcViEyUxA0Qw9SJ5PWKXRSAPWcwf1V2XyprSR9tOURysxi0XHpK2V4guZ hVqUt40ErSZcqCsG8UVa3ymHgneF+s8= -----END CERTIFICATE-----Generated at Sat Apr 5 18:04:12 2025 by rpki-client