$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afdaee7c-3f4f-31f6-a2c7-c9b6b0bb383a.roa File: afdaee7c-3f4f-31f6-a2c7-c9b6b0bb383a.roa (raw, json) Hash identifier: foYZ0I7PCf0Cw2MVvSRV2liOsWzXe/kWMEZWEr6DSxU= Subject key identifier: 1A:9A:86:6C:6E:1A:6F:CF:66:B7:04:D6:01:55:98:B6:CD:22:57:88 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A99633BF12F48933CC24B440 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afdaee7c-3f4f-31f6-a2c7-c9b6b0bb383a.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 32787 IP address blocks: 209.200.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:33:bf:12:f4:89:33:cc:24:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=38571a4c-22e8-47c3-a78f-e75819757543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:eb:5c:10:e0:04:db:cf:6e:30:62:58:ad:33: cf:d4:33:28:6d:a7:1e:3e:2b:34:e7:95:af:62:ea: 92:bb:11:d8:fb:5e:67:e0:47:e4:3f:e9:fd:11:f8: 61:ce:91:ab:b9:2c:18:75:38:48:74:de:ae:15:ba: a5:89:2f:03:05:52:fc:cf:ab:e3:c2:6d:15:5f:72: 20:8b:d2:e4:13:46:14:67:0b:ce:8c:a6:df:e4:8f: 23:a5:21:4e:8b:5b:c7:7b:60:1b:5f:e0:e6:58:bf: 24:2a:fa:d6:d8:98:31:bd:38:7a:16:d1:5b:5e:23: e3:0b:af:c8:ae:5d:61:b7:48:fc:74:d6:24:92:0d: 4b:5e:bc:c7:a9:51:67:3b:b6:f9:08:ba:66:89:69: 27:6f:39:71:ac:13:85:fd:c5:1b:29:9d:ca:8b:ff: ad:0e:18:50:4e:67:8f:eb:82:0c:7c:7a:ce:4e:7f: f7:2b:12:ed:23:96:88:cb:dc:25:02:68:0b:b8:6a: f7:c1:6a:7a:75:5b:03:bc:9e:d0:7d:b6:36:9d:5c: 31:c1:f5:18:91:7d:fd:d1:34:de:16:cf:25:6b:1e: c8:9a:a1:39:ca:48:84:0a:a5:b4:26:89:de:b4:a0: 95:e4:a9:e5:7e:38:23:a2:d8:7d:ea:b5:22:e9:05: 1f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9A:86:6C:6E:1A:6F:CF:66:B7:04:D6:01:55:98:B6:CD:22:57:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afdaee7c-3f4f-31f6-a2c7-c9b6b0bb383a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:49:4e:43:e9:55:7e:39:44:9b:c8:b6:e8:c0:c7:1a:ae:68: c8:8e:55:2b:4b:7a:e1:82:11:10:e2:bf:67:80:7a:25:fe:d8: 85:8f:23:13:c5:9d:04:1b:3b:0c:2e:f1:c2:ac:39:15:cb:1f: 1c:04:6c:9e:23:0f:fb:a4:3c:8a:36:32:a9:73:fd:51:2a:18: 8d:c9:70:a3:c7:17:bb:ac:1c:d4:9f:19:ee:30:63:67:05:a8: 2e:dc:cb:f4:c2:d3:20:3a:0b:af:1e:3e:33:bd:34:c1:3f:69: 33:58:73:f4:7d:ec:de:91:34:e8:c9:f8:50:ff:e8:39:ea:08: 44:a6:d3:f7:32:69:01:9a:0e:d3:a3:71:23:49:c8:df:97:6d: 83:4a:f6:22:d3:1f:b1:a6:dd:da:26:6e:99:bb:ad:f1:54:31: b7:86:09:a5:62:0d:1d:26:cd:c5:21:c0:01:51:c3:a3:d6:8b: e0:56:d1:b1:db:7a:ac:59:b6:c9:09:eb:40:ea:b5:b3:a0:93: 47:d6:26:bb:ab:76:23:7c:06:3c:0b:97:58:ea:19:6c:82:88: 73:3e:58:be:a2:6b:b7:77:90:cf:b8:74:36:79:12:d3:4e:64: 35:89:4f:4e:a6:45:4d:cd:86:ad:65:ed:c8:24:d3:f3:11:34: 9c:c3:2f:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipljO/EvSJM8wktEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk Mzg1NzFhNGMtMjJlOC00N2MzLWE3OGYtZTc1ODE5NzU3NTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyetcEOAE289uMGJYrTPP1DMobacePis055Wv YuqSuxHY+15n4EfkP+n9EfhhzpGruSwYdThIdN6uFbqliS8DBVL8z6vjwm0VX3Ig i9LkE0YUZwvOjKbf5I8jpSFOi1vHe2AbX+DmWL8kKvrW2JgxvTh6FtFbXiPjC6/I rl1ht0j8dNYkkg1LXrzHqVFnO7b5CLpmiWknbzlxrBOF/cUbKZ3Ki/+tDhhQTmeP 64IMfHrOTn/3KxLtI5aIy9wlAmgLuGr3wWp6dVsDvJ7QfbY2nVwxwfUYkX390TTe Fs8lax7ImqE5ykiECqW0JonetKCV5Knlfjgjoth96rUi6QUfNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqahmxuGm/PZrcE1gFVmLbNIleIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWZkYWVlN2MtM2Y0Zi0z MWY2LWEyYzctYzliNmIwYmIzODNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9JTkPpVX45RJvItujAxxquaMiOVStLeuGCERDiv2eAeiX+2IWPIxPF nQQbOwwu8cKsORXLHxwEbJ4jD/ukPIo2Mqlz/VEqGI3JcKPHF7usHNSfGe4wY2cF qC7cy/TC0yA6C68ePjO9NME/aTNYc/R97N6RNOjJ+FD/6DnqCESm0/cyaQGaDtOj cSNJyN+XbYNK9iLTH7Gm3dombpm7rfFUMbeGCaViDR0mzcUhwAFRw6PWi+BW0bHb eqxZtskJ60DqtbOgk0fWJrurdiN8BjwLl1jqGWyCiHM+WL6ia7d3kM+4dDZ5EtNO ZDWJT06mRU3Nhq1l7cgk0/MRNJzDL6M= -----END CERTIFICATE-----Generated at Sat Apr 5 12:10:07 2025 by rpki-client