$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/ddbaf3d1-6f13-3fb0-ad25-8fffb9457ccb.roa File: ddbaf3d1-6f13-3fb0-ad25-8fffb9457ccb.roa (raw, json) Hash identifier: +F7NaVFAnAwJavfDN1OwXXZohU5A9JoO+y9liZAGaRM= Subject key identifier: 1F:7F:35:3E:73:EB:79:F4:7A:66:7F:AF:00:B6:7B:37:4E:A8:C8:1C Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584968B4288A38D0A61F17C206D0 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/ddbaf3d1-6f13-3fb0-ad25-8fffb9457ccb.roa Signing time: Fri 04 Apr 2025 01:00:47 +0000 ROA not before: Fri 04 Apr 2025 01:00:47 +0000 ROA not after: Thu 03 Jul 2025 01:00:47 +0000 asID: 2153 IP address blocks: 209.129.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:b4:28:8a:38:d0:a6:1f:17:c2:06:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Apr 4 01:00:47 2025 GMT Not After : Jul 3 01:00:47 2025 GMT Subject: CN=4125e9a2-a825-4188-8c28-343bad0aa4a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1c:5e:60:80:96:18:1b:b8:fb:9a:b7:1a:72: d0:c8:54:76:72:11:c1:e7:7b:e8:c5:96:17:d0:1c: 2d:d2:c7:80:5d:56:64:08:24:54:78:a3:3e:46:15: 88:8b:60:07:27:70:9d:3f:a7:b7:a6:ab:c2:cd:a8: ae:74:d3:95:37:93:50:80:b6:9a:2b:4b:eb:d9:ec: 79:93:bd:d7:29:c1:a8:29:2c:6c:d4:46:a5:a1:f1: 3c:96:82:cc:75:45:d5:16:d9:e2:19:fd:1f:b1:ee: 0b:18:2c:7d:78:9c:f8:5e:a0:5c:af:97:a2:d6:0d: a8:49:bc:43:80:5b:c8:cc:e5:e3:e0:e3:c9:47:e5: ed:88:96:c3:cd:bd:a7:12:e5:a1:fb:31:a0:07:b1: 93:e3:0a:0b:48:37:7d:74:30:fe:ad:c4:a6:7c:ce: dd:58:f1:25:cd:63:cb:90:2b:92:34:5f:d3:24:24: 2f:7f:53:de:ad:57:3c:28:15:50:9f:96:e6:7a:20: 88:fc:75:b3:2e:87:c5:0e:19:ba:3b:9c:c9:e5:20: c2:d7:ad:e7:23:3b:51:e4:3d:ee:50:d7:e7:1f:e2: 5e:82:27:e7:7d:e1:88:79:c0:25:cf:13:a3:25:af: 6d:38:24:5f:a4:e0:2e:db:4c:24:c0:4c:36:be:7a: c3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7F:35:3E:73:EB:79:F4:7A:66:7F:AF:00:B6:7B:37:4E:A8:C8:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/ddbaf3d1-6f13-3fb0-ad25-8fffb9457ccb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 209.129.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:7c:43:34:02:5e:10:0c:9f:21:2a:cf:ab:3e:d0:e0:bc:f5: 02:f4:a3:fd:b2:9a:66:16:34:ef:11:8a:23:40:5b:e7:91:6d: 53:0d:dc:7e:76:43:ad:1f:08:6d:a8:a3:99:6e:b8:9e:eb:c0: 67:1f:1b:80:ac:ae:5c:c2:8e:87:2d:9f:b1:95:9c:3c:bc:f9: 82:d7:4b:89:ec:27:16:c2:cb:f7:e8:b4:b8:3c:21:cd:07:06: 1c:5f:07:13:83:be:2e:5f:e9:e1:a6:fa:eb:d5:3c:02:a7:72: 78:fe:fc:8e:7a:9e:4b:5c:8a:ba:85:39:44:f0:db:fb:06:63: 33:61:e1:15:cc:e8:79:08:d4:4d:9e:ee:b4:fa:5a:74:58:9e: a8:da:49:b6:ec:65:b6:b2:ea:9e:03:7d:bd:f2:1d:88:90:e6: 47:19:41:11:d6:d2:fe:55:8e:70:87:1a:64:b2:e0:86:50:7d: 78:a4:6d:e1:3d:fd:1f:d3:8a:3e:f7:b5:ce:4f:f6:6a:85:92: 0f:25:82:0c:5f:4c:39:d9:58:a9:b7:1c:5f:d2:d4:9f:9d:53: 62:59:ed:3e:b2:20:13:c8:2b:c1:e2:d2:8c:09:b0:3a:1a:53: 40:13:9f:c0:82:e7:3d:c7:d2:98:eb:67:79:2a:1e:bf:7f:30: fc:0a:d5:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElotCiKONCmHxfCBtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDQwNDAxMDA0N1oXDTI1MDcwMzAxMDA0N1owLzEtMCsGA1UEAxMk NDEyNWU5YTItYTgyNS00MTg4LThjMjgtMzQzYmFkMGFhNGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hxeYICWGBu4+5q3GnLQyFR2chHB53voxZYX 0Bwt0seAXVZkCCRUeKM+RhWIi2AHJ3CdP6e3pqvCzaiudNOVN5NQgLaaK0vr2ex5 k73XKcGoKSxs1EalofE8loLMdUXVFtniGf0fse4LGCx9eJz4XqBcr5ei1g2oSbxD gFvIzOXj4OPJR+XtiJbDzb2nEuWh+zGgB7GT4woLSDd9dDD+rcSmfM7dWPElzWPL kCuSNF/TJCQvf1PerVc8KBVQn5bmeiCI/HWzLofFDhm6O5zJ5SDC163nIztR5D3u UNfnH+JegifnfeGIecAlzxOjJa9tOCRfpOAu20wkwEw2vnrDMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9/NT5z63n0emZ/rwC2ezdOqMgcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvZGRiYWYzZDEtNmYxMy0z ZmIwLWFkMjUtOGZmZmI5NDU3Y2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YE8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACh8QzQCXhAMnyEqz6s+0OC89QL0o/2ymmYWNO8RiiNAW+eRbVMN3H52 Q60fCG2oo5luuJ7rwGcfG4CsrlzCjoctn7GVnDy8+YLXS4nsJxbCy/fotLg8Ic0H BhxfBxODvi5f6eGm+uvVPAKncnj+/I56nktcirqFOUTw2/sGYzNh4RXM6HkI1E2e 7rT6WnRYnqjaSbbsZbay6p4Dfb3yHYiQ5kcZQRHW0v5VjnCHGmSy4IZQfXikbeE9 /R/Tij73tc5P9mqFkg8lggxfTDnZWKm3HF/S1J+dU2JZ7T6yIBPIK8Hi0owJsDoa U0ATn8CC5z3H0pjrZ3kqHr9/MPwK1Sk= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:01 2025 by rpki-client