$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa File: 639c1735-1cd0-355a-a116-4129dc8f68b1.roa (raw, json) Hash identifier: YH170DHw5h2okNioDA/AWIOcVpkDJLPPU9JWkz+diyE= Subject key identifier: D5:BC:D3:36:2F:7D:9F:3D:15:DC:BB:F0:87:33:2C:FC:52:01:0F:CD Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584838854FF81E232C4EEDE6C8C0 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa Signing time: Mon 16 Dec 2024 02:00:39 +0000 ROA not before: Mon 16 Dec 2024 02:00:39 +0000 ROA not after: Sun 16 Mar 2025 01:00:39 +0000 asID: 20471 IP address blocks: 209.124.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:38:85:4f:f8:1e:23:2c:4e:ed:e6:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Dec 16 02:00:39 2024 GMT Not After : Mar 16 01:00:39 2025 GMT Subject: CN=fa8b9d0f-1cc1-4e3f-887d-ae2e544effce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d5:0f:9f:38:47:53:5a:fa:50:7e:83:77:14: d7:7b:66:8c:e2:08:f0:12:4c:05:6e:9b:9c:d8:12: 09:93:25:5a:b8:24:5e:a5:bb:21:10:62:45:2a:74: 8a:3f:2c:65:09:90:8e:a0:d1:59:98:ad:c8:7d:d8: a8:95:65:ae:6f:8e:d8:8a:12:81:ae:a7:36:e4:f9: b7:98:3c:6a:2e:d1:2e:0f:b8:23:46:c9:74:fb:0f: 59:36:b7:df:7a:fc:a8:4a:95:b5:59:34:d1:72:29: 06:01:36:4c:fc:2e:b6:1f:c4:e7:98:91:ef:26:12: cc:43:76:ca:99:42:a9:af:f0:3f:23:b7:ce:a5:60: 34:f6:ac:b5:7e:50:b8:4b:3c:1b:7e:47:05:89:ca: b0:8a:44:28:b9:1f:c4:3b:4d:08:12:b0:10:a1:30: db:1a:a0:60:32:be:18:1c:17:03:5d:81:a7:e0:0b: d9:a9:44:72:9f:25:3b:0b:5b:0e:7e:13:43:27:21: de:7e:72:01:f6:dd:7e:cf:30:a9:4d:16:9d:68:6f: 9d:af:6d:04:be:c5:be:78:8a:c1:3d:7e:44:08:83: 7a:61:69:89:bd:c8:4e:fa:c5:51:38:cf:63:dd:0d: fa:20:fb:32:c5:0e:c8:a1:77:7e:b4:96:10:0a:c3: 52:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BC:D3:36:2F:7D:9F:3D:15:DC:BB:F0:87:33:2C:FC:52:01:0F:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 209.124.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:d9:df:4e:eb:6b:74:b8:7c:65:78:9b:07:fe:0e:05:84:25: 11:4f:0e:4e:99:da:0e:f5:30:f6:b4:d6:6a:dc:81:71:67:f2: b0:20:e2:7b:90:85:e5:31:50:f7:d1:63:30:a9:fb:48:00:29: 4a:78:74:fd:f0:12:1e:17:70:81:e8:53:ae:11:7b:d5:e9:67: 50:a5:aa:bb:97:c3:fd:d7:c9:9f:da:a4:a3:ad:c6:e8:bc:7c: 7c:6d:1d:0f:68:fa:18:df:81:bb:14:31:4a:67:4e:0a:ca:53: 78:c7:12:1f:2c:12:79:e2:1e:df:9e:2e:16:e3:ea:20:d7:2b: b1:9c:1d:f6:28:05:37:03:0d:28:20:ae:1f:36:ab:f6:f5:21: 5f:bf:ba:a8:cb:0c:0c:4d:b0:ee:cd:40:e3:13:69:60:c1:da: 80:d1:b1:2b:f6:23:5f:a0:49:bc:3b:6e:db:01:07:33:80:e4: 84:87:87:fd:6b:04:d5:99:03:d2:2b:23:16:83:33:bd:38:fd: be:52:c2:7a:e3:47:0b:8c:58:42:6e:cd:0d:4e:72:d7:ce:de: e9:69:7d:f5:37:a9:0f:7b:73:74:09:0d:98:b2:a9:8b:aa:d9: 2f:2a:31:11:0a:f6:46:6c:f5:52:08:8f:8b:45:89:f1:ea:52: ac:d9:88:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg4hU/4HiMsTu3myMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk ZmE4YjlkMGYtMWNjMS00ZTNmLTg4N2QtYWUyZTU0NGVmZmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9UPnzhHU1r6UH6DdxTXe2aM4gjwEkwFbpuc 2BIJkyVauCRepbshEGJFKnSKPyxlCZCOoNFZmK3IfdiolWWub47YihKBrqc25Pm3 mDxqLtEuD7gjRsl0+w9ZNrffevyoSpW1WTTRcikGATZM/C62H8TnmJHvJhLMQ3bK mUKpr/A/I7fOpWA09qy1flC4SzwbfkcFicqwikQouR/EO00IErAQoTDbGqBgMr4Y HBcDXYGn4AvZqURynyU7C1sOfhNDJyHefnIB9t1+zzCpTRadaG+dr20EvsW+eIrB PX5ECIN6YWmJvchO+sVROM9j3Q36IPsyxQ7IoXd+tJYQCsNSNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNW80zYvfZ89Fdy78IczLPxSAQ/NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvNjM5YzE3MzUtMWNkMC0z NTVhLWExMTYtNDEyOWRjOGY2OGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XwmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvZ307ra3S4fGV4mwf+DgWEJRFPDk6Z2g71MPa01mrcgXFn8rAg4nuQ heUxUPfRYzCp+0gAKUp4dP3wEh4XcIHoU64Re9XpZ1ClqruXw/3XyZ/apKOtxui8 fHxtHQ9o+hjfgbsUMUpnTgrKU3jHEh8sEnniHt+eLhbj6iDXK7GcHfYoBTcDDSgg rh82q/b1IV+/uqjLDAxNsO7NQOMTaWDB2oDRsSv2I1+gSbw7btsBBzOA5ISHh/1r BNWZA9IrIxaDM704/b5SwnrjRwuMWEJuzQ1OctfO3ulpffU3qQ97c3QJDZiyqYuq 2S8qMREK9kZs9VIIj4tFifHqUqzZiAc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:21:07 2025 by rpki-client