$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/0e4b0048-b197-364d-82a5-3127b9f92159.roa File: 0e4b0048-b197-364d-82a5-3127b9f92159.roa (raw, json) Hash identifier: BCgJV35orJoks//E4xQ4pdzYowE2W+PzlZcbW1Saf9w= Subject key identifier: 8F:F1:42:5C:DB:E5:E8:A4:B9:84:A2:A5:27:DA:6C:90:D7:9B:14:7C Certificate issuer: /CN=9e36a683-142b-41cd-932c-e115603de431 Certificate serial: 010D0C9F43285848E59BC7CEE358A0F00E123980 Authority key identifier: 5B:80:E2:B1:A5:A1:53:32:EC:8B:61:F2:F9:99:5D:66:E3:D0:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/0e4b0048-b197-364d-82a5-3127b9f92159.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 14618 IP address blocks: 209.163.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:c7:ce:e3:58:a0:f0:0e:12:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e36a683-142b-41cd-932c-e115603de431 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=83977423-bdae-4895-8081-7ca3b3580cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:48:50:15:9e:55:dc:6d:06:aa:a5:b4:5f:0a: 91:89:51:21:1e:2f:74:f1:d9:62:35:f3:90:d8:aa: 6d:6d:1c:9a:f9:08:09:f6:dc:c4:b2:dc:d8:24:f7: 64:c4:2e:09:13:56:1f:67:1a:b9:db:76:76:7c:a1: e5:c4:a8:29:ba:97:82:84:84:6a:90:34:a7:63:0e: 29:ad:8e:31:36:13:b5:51:19:d0:70:d9:1b:90:56: 79:d5:25:98:f9:62:01:5a:9f:27:7c:a0:b1:fd:87: ac:11:c4:97:54:06:1c:9d:7a:57:66:a0:9f:52:aa: ee:1b:69:c9:3b:a4:bf:af:ad:95:4b:b1:3f:22:28: 63:7a:88:6d:4e:e9:ef:69:42:3e:13:15:90:70:df: 8e:e0:33:e7:76:0f:dd:12:a5:20:9c:af:f6:b0:59: ac:61:8d:20:01:96:20:f1:66:ad:9c:74:e3:f2:8b: 04:da:ef:49:20:40:da:d5:0b:27:d1:bb:37:8c:14: ab:b3:1e:15:27:d7:5b:6c:a2:17:80:39:7c:d8:0e: 8c:96:a4:ca:6c:e7:8d:a0:e1:e7:21:a2:f7:5d:38: 0d:51:d7:aa:e0:97:58:aa:a1:6d:41:d7:f7:bc:be: 61:53:9f:ac:4f:cc:d7:5a:ae:90:f4:6e:54:04:cd: 07:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F1:42:5C:DB:E5:E8:A4:B9:84:A2:A5:27:DA:6C:90:D7:9B:14:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/0e4b0048-b197-364d-82a5-3127b9f92159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.crl X509v3 Authority Key Identifier: keyid:5B:80:E2:B1:A5:A1:53:32:EC:8B:61:F2:F9:99:5D:66:E3:D0:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer sbgp-ipAddrBlock: critical IPv4: 209.163.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:9a:3d:44:01:31:41:51:e9:88:9f:07:79:05:4b:3d:9a:bb: 64:9c:5b:11:cd:ed:08:ca:0c:09:38:87:93:86:cf:36:0e:10: 68:7f:23:af:20:4a:9c:cb:36:02:38:88:61:59:1c:29:0a:b9: 70:68:cd:71:6a:de:7b:d8:18:4c:d2:e0:d2:35:2b:33:57:06: 65:c5:85:f0:6d:ea:aa:74:bd:56:b5:65:15:6f:87:13:d5:6e: cf:00:6f:d6:96:42:94:24:f2:b4:6c:22:dd:15:6e:99:a3:5b: f7:d9:6a:37:2a:ad:39:a7:5f:8a:89:04:1a:39:a6:00:6f:77: 1f:b1:52:90:ce:5c:a1:79:27:7d:78:42:dc:ba:6a:c1:f0:d1: f3:60:18:30:3f:fe:ae:87:d5:28:f5:e2:1b:9d:2f:01:15:8c: 90:3c:b1:6e:7b:d1:f6:4d:9b:c1:14:c6:ee:f6:fc:a6:3a:eb: 3a:66:e3:6a:bb:69:ab:12:86:e0:e6:16:42:4f:a0:7d:b5:81: 0c:c7:43:88:01:a9:72:12:8b:b9:3c:1d:ea:0b:e2:64:7b:c4: 7a:33:5a:fe:51:d4:e5:30:be:4b:8d:d4:c7:40:1c:8b:13:68: 23:2f:b4:e0:84:ab:22:5c:44:98:27:27:52:97:a9:43:84:8f: 9d:53:8d:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm8fO41ig8A4SOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWUzNmE2ODMtMTQyYi00MWNkLTkzMmMtZTExNTYwM2Rl NDMxMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ODM5Nzc0MjMtYmRhZS00ODk1LTgwODEtN2NhM2IzNTgwY2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokhQFZ5V3G0GqqW0XwqRiVEhHi908dliNfOQ 2KptbRya+QgJ9tzEstzYJPdkxC4JE1YfZxq523Z2fKHlxKgpupeChIRqkDSnYw4p rY4xNhO1URnQcNkbkFZ51SWY+WIBWp8nfKCx/YesEcSXVAYcnXpXZqCfUqruG2nJ O6S/r62VS7E/IihjeohtTunvaUI+ExWQcN+O4DPndg/dEqUgnK/2sFmsYY0gAZYg 8WatnHTj8osE2u9JIEDa1Qsn0bs3jBSrsx4VJ9dbbKIXgDl82A6MlqTKbOeNoOHn IaL3XTgNUdeq4JdYqqFtQdf3vL5hU5+sT8zXWq6Q9G5UBM0HCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/xQlzb5eikuYSipSfabJDXmxR8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZTM2 YTY4My0xNDJiLTQxY2QtOTMyYy1lMTE1NjAzZGU0MzEvMGU0YjAwNDgtYjE5Ny0z NjRkLTgyYTUtMzEyN2I5ZjkyMTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWUzNmE2ODMtMTQyYi00MWNkLTkz MmMtZTExNTYwM2RlNDMxLzllMzZhNjgzLTE0MmItNDFjZC05MzJjLWUxMTU2MDNk ZTQzMS5jcmwwHwYDVR0jBBgwFoAUW4DisaWhUzLsi2Hy+ZldZuPQAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZTM2YTY4My0xNDJiLTQxY2QtOTMyYy1lMTE1 NjAzZGU0MzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmaPUQBMUFR6YifB3kFSz2au2ScWxHN7QjKDAk4h5OGzzYOEGh/I68g SpzLNgI4iGFZHCkKuXBozXFq3nvYGEzS4NI1KzNXBmXFhfBt6qp0vVa1ZRVvhxPV bs8Ab9aWQpQk8rRsIt0VbpmjW/fZajcqrTmnX4qJBBo5pgBvdx+xUpDOXKF5J314 Qty6asHw0fNgGDA//q6H1Sj14hudLwEVjJA8sW570fZNm8EUxu72/KY66zpm42q7 aasShuDmFkJPoH21gQzHQ4gBqXISi7k8HeoL4mR7xHozWv5R1OUwvkuN1MdAHIsT aCMvtOCEqyJcRJgnJ1KXqUOEj51TjUo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:35 2025 by rpki-client