$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6a6f3cff-6ac0-311f-91ee-4bee3b0137a3.roa File: 6a6f3cff-6ac0-311f-91ee-4bee3b0137a3.roa (raw, json) Hash identifier: gmM6DohbSWWreqQP105rCrg7lHEDicOerzo0J5m8eKE= Subject key identifier: 95:13:03:FC:80:07:30:18:8D:ED:05:EF:D3:EE:B4:90:ED:42:2A:AD Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F43285848159FEA56E55B2272562E9500 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6a6f3cff-6ac0-311f-91ee-4bee3b0137a3.roa Signing time: Tue 03 Dec 2024 14:00:52 +0000 ROA not before: Tue 03 Dec 2024 14:00:52 +0000 ROA not after: Mon 03 Mar 2025 14:00:52 +0000 asID: 12129 IP address blocks: 209.131.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:15:9f:ea:56:e5:5b:22:72:56:2e:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Dec 3 14:00:52 2024 GMT Not After : Mar 3 14:00:52 2025 GMT Subject: CN=cb562d86-2f4a-4e35-93fb-2fc0ed289210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a0:9e:60:c1:1b:be:e8:fc:fc:63:27:4d:00: a8:b7:e9:2a:a4:44:c5:01:54:09:38:99:bc:90:84: c1:63:c2:ea:fc:0a:dd:70:08:04:15:7e:b1:f1:ac: 33:8e:e0:71:79:57:b0:0d:59:26:1d:72:4d:64:a3: e5:37:a6:ba:21:f9:94:fd:b5:e1:67:2d:bf:2a:56: 65:03:3f:7c:40:1d:8f:0c:10:53:54:64:7b:87:82: 0f:78:51:c1:26:0b:40:03:3f:56:22:48:74:14:a1: 51:9b:5c:6f:e7:78:5f:02:95:c4:0e:84:26:69:9a: 83:a7:24:04:ae:8e:9d:6a:b8:b8:d7:5c:5a:ac:72: 4a:3c:72:ba:53:1d:bb:aa:b3:33:c1:31:33:58:d4: e6:9e:c9:98:d2:5a:53:54:12:9a:cb:38:6c:6f:64: ed:4b:30:b5:a2:71:2b:e3:46:8d:0f:8f:2d:da:b4: 0f:28:19:e0:0d:4c:90:79:19:14:34:94:aa:4f:e0: 20:83:32:8d:bf:99:37:ab:a5:b8:de:83:aa:7d:cb: f6:48:ad:70:47:b7:fe:a9:51:8d:63:8e:5d:fe:19: f6:f8:b3:a5:74:cf:1e:99:7a:41:9f:09:67:03:74: eb:1a:55:48:05:33:4b:5c:8f:c0:ed:a6:5e:c4:58: 43:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:13:03:FC:80:07:30:18:8D:ED:05:EF:D3:EE:B4:90:ED:42:2A:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6a6f3cff-6ac0-311f-91ee-4bee3b0137a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 209.131.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:6d:dd:81:88:c1:77:cc:a4:fc:2e:10:77:ff:8b:0d:66:0e: b0:91:bb:2a:63:e0:89:4d:76:95:1e:17:ad:bb:5f:9d:31:0f: 6f:d7:78:d4:74:cf:86:31:51:66:f8:1c:11:ef:c2:03:db:a7: e0:32:9c:bc:8d:15:10:81:c0:71:3c:68:01:87:ee:a3:3c:0c: 78:bf:33:39:bc:af:5f:a9:0b:52:98:c3:de:79:1c:fe:83:a0: 32:0a:07:f1:69:cf:86:82:e6:b3:b2:e7:f5:3c:6c:bb:8c:31: 05:38:60:29:ce:50:ea:5f:d7:f8:fa:13:95:1f:e6:84:28:08: ab:db:3c:92:fa:64:84:a3:20:b4:0e:5f:32:8e:85:3f:99:a6: 87:22:d8:a3:45:1e:a9:76:85:75:68:95:98:de:4d:51:a0:a8: b3:8d:2d:21:a5:18:bf:8f:40:1c:5e:53:fa:99:87:e0:44:12: 19:54:d4:f5:e4:08:74:30:41:3f:ec:0f:42:3f:3c:be:ee:a6: 8f:bf:e4:1d:4f:27:c0:45:4c:da:66:f4:d1:db:63:56:71:b1: fe:3f:2c:38:13:22:21:f1:68:38:aa:a1:54:0e:c1:29:ed:68: 0a:75:16:cd:cd:c4:32:14:9f:79:35:43:c7:0f:a7:67:f1:db: 9b:29:14:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgVn+pW5VsiclYulQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI0MTIwMzE0MDA1MloXDTI1MDMwMzE0MDA1MlowLzEtMCsGA1UEAxMk Y2I1NjJkODYtMmY0YS00ZTM1LTkzZmItMmZjMGVkMjg5MjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76CeYMEbvuj8/GMnTQCot+kqpETFAVQJOJm8 kITBY8Lq/ArdcAgEFX6x8awzjuBxeVewDVkmHXJNZKPlN6a6IfmU/bXhZy2/KlZl Az98QB2PDBBTVGR7h4IPeFHBJgtAAz9WIkh0FKFRm1xv53hfApXEDoQmaZqDpyQE ro6dari411xarHJKPHK6Ux27qrMzwTEzWNTmnsmY0lpTVBKayzhsb2TtSzC1onEr 40aND48t2rQPKBngDUyQeRkUNJSqT+AggzKNv5k3q6W43oOqfcv2SK1wR7f+qVGN Y45d/hn2+LOldM8emXpBnwlnA3TrGlVIBTNLXI/A7aZexFhD3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUTA/yABzAYje0F79PutJDtQiqtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvNmE2ZjNjZmYtNmFjMC0z MTFmLTkxZWUtNGJlZTNiMDEzN2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0YMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABt3YGIwXfMpPwuEHf/iw1mDrCRuypj4IlNdpUeF627X50xD2/XeNR0 z4YxUWb4HBHvwgPbp+AynLyNFRCBwHE8aAGH7qM8DHi/Mzm8r1+pC1KYw955HP6D oDIKB/Fpz4aC5rOy5/U8bLuMMQU4YCnOUOpf1/j6E5Uf5oQoCKvbPJL6ZISjILQO XzKOhT+Zpoci2KNFHql2hXVolZjeTVGgqLONLSGlGL+PQBxeU/qZh+BEEhlU1PXk CHQwQT/sD0I/PL7upo+/5B1PJ8BFTNpm9NHbY1Zxsf4/LDgTIiHxaDiqoVQOwSnt aAp1Fs3NxDIUn3k1Q8cPp2fx25spFKM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:46 2025 by rpki-client