$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/7c4313aa-d6c0-3d7a-b06c-c74e7368f2ff.roa File: 7c4313aa-d6c0-3d7a-b06c-c74e7368f2ff.roa (raw, json) Hash identifier: Wf88G6E2kLVjbk0RzRAE7rcBhnmN+7gNJkhMUvwYlTE= Subject key identifier: 86:BE:8F:80:91:F6:44:EE:86:1D:47:B6:D3:A1:6A:9C:59:72:0C:84 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F432858483885499FFFB6B8091B814880 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/7c4313aa-d6c0-3d7a-b06c-c74e7368f2ff.roa Signing time: Mon 16 Dec 2024 02:00:39 +0000 ROA not before: Mon 16 Dec 2024 02:00:39 +0000 ROA not after: Sun 16 Mar 2025 01:00:39 +0000 asID: 20471 IP address blocks: 209.124.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:38:85:49:9f:ff:b6:b8:09:1b:81:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Dec 16 02:00:39 2024 GMT Not After : Mar 16 01:00:39 2025 GMT Subject: CN=ea331113-824c-4188-a6f6-06407c13ba28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:93:d7:56:12:fc:d7:c4:da:a0:df:d1:85:7a: 0d:80:b0:36:88:17:b8:51:a6:88:3e:5e:fe:48:5b: db:a2:bd:49:43:f5:6d:c8:20:e4:0e:2f:1c:63:98: ac:94:f8:e7:3a:4b:ab:ac:45:08:5a:12:ad:d2:1d: a8:13:19:f5:44:76:e9:f2:cc:12:06:56:38:74:39: d9:cc:45:f2:28:c7:84:b4:e0:e0:f3:35:e9:3f:81: ad:5d:b1:41:6d:34:f2:30:6a:6a:59:78:01:fb:5a: 95:fd:1f:18:ec:95:38:c4:9e:12:93:e7:f8:70:f4: dc:36:23:d7:76:78:69:ef:70:f8:b1:de:1f:c8:7b: c1:e0:17:ea:6a:94:31:b7:19:a6:b3:b9:0f:40:6d: c2:12:89:65:f9:1e:bb:b1:59:84:11:45:9c:d8:e1: 1f:e3:67:35:cc:ed:e6:19:8c:d7:04:fa:6d:11:cc: 35:6a:69:d3:d6:f8:7e:5d:d7:89:39:83:48:15:80: 28:65:fc:6b:2e:d3:3a:32:b1:3b:97:1e:81:cf:fa: df:6f:4d:1a:d5:d8:0d:5d:f0:bd:b7:df:7c:c8:60: 55:88:bb:7c:54:e4:b9:b9:27:5a:e5:76:7c:ac:ba: ad:9b:36:20:81:83:f7:7f:e6:fb:4b:34:c3:ba:1d: 99:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:BE:8F:80:91:F6:44:EE:86:1D:47:B6:D3:A1:6A:9C:59:72:0C:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/7c4313aa-d6c0-3d7a-b06c-c74e7368f2ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 209.124.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:82:96:5e:32:67:b0:d5:33:21:bd:6f:1e:1f:61:9c:a4:7b: 01:df:5a:98:18:ab:a7:68:ab:8c:cf:fc:2e:e0:d6:f9:44:04: 97:09:e5:40:74:0a:e4:57:e0:50:40:87:93:b9:46:18:a4:6e: 23:81:1e:73:69:f4:d7:40:26:71:eb:74:0d:ca:b2:3e:b5:45: 31:9f:48:57:bc:bc:75:c1:58:e4:b4:67:df:96:47:5f:75:4b: 49:8b:d3:a0:ec:34:a0:0c:4b:ab:a3:ec:9d:f1:34:e4:28:0a: 89:b7:00:79:b1:b0:05:5c:e4:67:cd:7d:af:14:f9:41:c0:47: a4:a9:d2:9b:58:1a:5c:29:82:57:01:8b:8c:dd:86:11:c7:1e: 9e:a5:c8:bc:ff:57:c3:6b:89:6e:4e:2a:28:33:fa:9f:9c:b2: 82:12:7f:f5:21:8c:ac:8c:c5:44:cd:37:77:02:f4:47:ca:ed: 23:e4:ba:3d:fe:50:a1:02:cc:75:a0:2c:ac:03:78:f0:85:a2: 77:e4:0a:56:51:c5:94:59:14:fd:b7:0b:e8:e0:41:67:da:3d: 50:c0:74:72:7b:0b:a0:9c:b8:23:12:0a:cf:ab:46:50:cb:18: 12:22:64:32:ac:e6:77:98:72:92:7e:70:28:b7:d2:18:6c:e9: 8c:b7:84:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg4hUmf/7a4CRuBSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk ZWEzMzExMTMtODI0Yy00MTg4LWE2ZjYtMDY0MDdjMTNiYTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZPXVhL818TaoN/RhXoNgLA2iBe4UaaIPl7+ SFvbor1JQ/VtyCDkDi8cY5islPjnOkurrEUIWhKt0h2oExn1RHbp8swSBlY4dDnZ zEXyKMeEtODg8zXpP4GtXbFBbTTyMGpqWXgB+1qV/R8Y7JU4xJ4Sk+f4cPTcNiPX dnhp73D4sd4fyHvB4BfqapQxtxmms7kPQG3CEoll+R67sVmEEUWc2OEf42c1zO3m GYzXBPptEcw1amnT1vh+XdeJOYNIFYAoZfxrLtM6MrE7lx6Bz/rfb00a1dgNXfC9 t998yGBViLt8VOS5uSda5XZ8rLqtmzYggYP3f+b7SzTDuh2ZxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIa+j4CR9kTuhh1HttOhapxZcgyEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvN2M0MzEzYWEtZDZjMC0z ZDdhLWIwNmMtYzc0ZTczNjhmMmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XwqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaCll4yZ7DVMyG9bx4fYZykewHfWpgYq6doq4zP/C7g1vlEBJcJ5UB0 CuRX4FBAh5O5RhikbiOBHnNp9NdAJnHrdA3Ksj61RTGfSFe8vHXBWOS0Z9+WR191 S0mL06DsNKAMS6uj7J3xNOQoCom3AHmxsAVc5GfNfa8U+UHAR6Sp0ptYGlwpglcB i4zdhhHHHp6lyLz/V8NriW5OKigz+p+csoISf/UhjKyMxUTNN3cC9EfK7SPkuj3+ UKECzHWgLKwDePCFonfkClZRxZRZFP23C+jgQWfaPVDAdHJ7C6CcuCMSCs+rRlDL GBIiZDKs5neYcpJ+cCi30hhs6Yy3hBs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:55 2025 by rpki-client