$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/c8effb7c-3ff5-367a-9768-2bfe031beb26.roa File: c8effb7c-3ff5-367a-9768-2bfe031beb26.roa (raw, json) Hash identifier: 0Kvi6pYWd8hZ+dIE4pnKfTDrXkn3zAiQtZ8o0Pqj7gg= Subject key identifier: 79:AD:97:15:AF:F7:D3:21:BD:8A:48:88:35:E9:E2:AD:A7:F0:24:00 Certificate issuer: /CN=f4f85718-cda0-442f-9727-709a536e1e27 Certificate serial: 010D0C9F43285848EF61558ED3174460EFA95370 Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/c8effb7c-3ff5-367a-9768-2bfe031beb26.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 6639 IP address blocks: 209.27.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:55:8e:d3:17:44:60:ef:a9:53:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=4b90ad45-2138-495d-bc02-1be5421553e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c9:e6:2e:92:0c:b3:75:5c:5b:fa:03:3e:c5: 64:1d:7e:df:53:29:79:2e:25:e1:62:0c:b7:80:56: c7:00:12:45:d0:38:07:90:7d:28:4f:33:49:c3:1e: 4e:80:26:ce:27:99:01:4b:bc:97:8b:25:c4:4b:0d: 17:ac:76:9a:07:73:4c:ae:bf:83:77:dd:fc:34:5f: 0b:a7:36:23:97:29:e6:6e:89:99:c5:5f:14:59:22: 8f:a9:82:67:b6:2d:48:c1:f7:cb:9b:4a:c0:17:bf: 4c:e4:e0:70:2c:5d:54:2b:7c:e3:25:13:90:d8:df: 06:7e:46:13:52:8c:1c:f0:15:94:24:18:bb:a5:ec: 65:fc:47:25:49:f1:2b:e4:17:93:93:e7:b2:e0:bb: 25:c9:79:ad:1f:e4:8c:35:6d:67:1b:a1:49:77:84: 4e:84:f0:0c:41:be:94:9a:54:eb:96:b3:62:5d:c7: c4:32:21:0e:02:0d:aa:32:c0:9f:d3:ff:93:6e:42: 36:73:a0:9c:3a:63:15:78:85:39:dc:0e:c8:4e:a4: 6d:53:69:e5:d8:f4:60:d5:75:eb:ba:7c:d3:66:1c: e0:c1:97:11:8d:72:67:84:b7:9a:b7:47:a2:dc:3a: ba:df:cf:03:8a:d0:d5:08:bb:0a:34:cd:0a:0b:58: 5e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AD:97:15:AF:F7:D3:21:BD:8A:48:88:35:E9:E2:AD:A7:F0:24:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/c8effb7c-3ff5-367a-9768-2bfe031beb26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl X509v3 Authority Key Identifier: keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer sbgp-ipAddrBlock: critical IPv4: 209.27.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:2e:13:bd:87:eb:93:7b:eb:ee:d2:38:44:3a:50:ec:f3:4f: 31:4b:d1:7c:51:16:32:49:46:ea:cf:fa:47:c4:fd:bf:0d:ba: 82:ce:e4:0f:db:39:ad:f6:50:ea:f9:b7:15:78:44:29:b9:8b: fd:d6:17:8f:15:b3:15:42:26:13:dc:45:02:87:1a:96:5a:5c: 65:70:9c:cb:84:5d:c8:de:2e:0d:33:ed:86:1c:27:d0:d1:43: c2:6c:7d:f3:a3:11:9e:64:50:18:07:7e:5d:1d:28:03:8a:8f: 2c:a9:fd:ae:df:76:6d:4b:44:92:43:04:44:86:0a:4b:05:6c: 95:29:d1:ec:dd:30:fb:89:5f:25:cd:b2:55:d8:c9:0a:7b:16: 3f:f8:33:4e:4e:6b:37:d8:91:00:b1:a3:15:1a:41:e7:09:f3: 41:22:31:0c:f4:ff:ec:d5:fe:43:26:2d:6f:50:ec:11:e4:50: 99:d0:b7:6b:c4:eb:05:10:d6:86:a5:60:da:63:53:ca:be:ad: f1:02:0c:7e:64:ff:f8:47:dd:89:f7:79:f1:fe:d0:4f:8c:47: 3b:68:e5:da:94:38:88:fc:a0:55:55:54:7a:e2:6d:aa:e4:74: ec:4e:e5:c1:28:43:54:46:1d:3c:35:b5:e6:1b:84:01:c1:4e: e2:19:ff:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYVWO0xdEYO+pU3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRmODU3MTgtY2RhMC00NDJmLTk3MjctNzA5YTUzNmUx ZTI3MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NGI5MGFkNDUtMjEzOC00OTVkLWJjMDItMWJlNTQyMTU1M2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MnmLpIMs3VcW/oDPsVkHX7fUyl5LiXhYgy3 gFbHABJF0DgHkH0oTzNJwx5OgCbOJ5kBS7yXiyXESw0XrHaaB3NMrr+Dd938NF8L pzYjlynmbomZxV8UWSKPqYJnti1IwffLm0rAF79M5OBwLF1UK3zjJROQ2N8GfkYT Uowc8BWUJBi7pexl/EclSfEr5BeTk+ey4LslyXmtH+SMNW1nG6FJd4ROhPAMQb6U mlTrlrNiXcfEMiEOAg2qMsCf0/+TbkI2c6CcOmMVeIU53A7ITqRtU2nl2PRg1XXr unzTZhzgwZcRjXJnhLeat0ei3Dq6388DitDVCLsKNM0KC1heYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmtlxWv99MhvYpIiDXp4q2n8CQAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4 NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2ZTFlMjcvYzhlZmZiN2MtM2ZmNS0z NjdhLTk3NjgtMmJmZTAzMWJlYjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjRmODU3MTgtY2RhMC00NDJmLTk3 MjctNzA5YTUzNmUxZTI3L2Y0Zjg1NzE4LWNkYTAtNDQyZi05NzI3LTcwOWE1MzZl MWUyNy5jcmwwHwYDVR0jBBgwFoAUa2/guyMG6CGl/y1Pb59cNa87Qn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlh NTM2ZTFlMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Rs8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkuE72H65N76+7SOEQ6UOzzTzFL0XxRFjJJRurP+kfE/b8NuoLO5A/b Oa32UOr5txV4RCm5i/3WF48VsxVCJhPcRQKHGpZaXGVwnMuEXcjeLg0z7YYcJ9DR Q8JsffOjEZ5kUBgHfl0dKAOKjyyp/a7fdm1LRJJDBESGCksFbJUp0ezdMPuJXyXN slXYyQp7Fj/4M05OazfYkQCxoxUaQecJ80EiMQz0/+zV/kMmLW9Q7BHkUJnQt2vE 6wUQ1oalYNpjU8q+rfECDH5k//hH3Yn3efH+0E+MRzto5dqUOIj8oFVVVHribark dOxO5cEoQ1RGHTw1teYbhAHBTuIZ/88= -----END CERTIFICATE-----Generated at Fri Apr 11 21:38:10 2025 by rpki-client