$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/86ec9619-2868-36f8-b49d-03305645f65d.roa File: 86ec9619-2868-36f8-b49d-03305645f65d.roa (raw, json) Hash identifier: pWm8qTpipUhsrxKEyW6e7WzTa25Yq2dZFYK8u0aovzU= Subject key identifier: DD:06:45:14:3A:E6:BF:F6:59:1C:4C:85:E9:7F:0E:E3:A4:73:8B:FA Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F43285848EF6152F8EE91B23F943E0D80 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/86ec9619-2868-36f8-b49d-03305645f65d.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 33164 IP address blocks: 209.58.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:52:f8:ee:91:b2:3f:94:3e:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=43ccdafb-53aa-40de-83c5-31cf1d88f6bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:55:5d:fb:0c:38:10:26:cb:5f:dd:08:a9:31: a2:a6:95:e3:a1:7c:56:75:95:3f:70:20:98:3d:f8: 3b:cb:2d:54:17:04:6b:1d:0a:10:9c:d9:4d:32:72: 54:01:e2:b9:ee:ff:e2:a6:1f:8e:92:c8:82:f4:83: 36:d1:48:ec:11:03:3e:70:ac:df:bf:cb:36:c6:b6: 97:e5:2f:77:c6:6c:58:aa:cf:a1:ce:2b:46:00:0d: b6:31:f9:fc:d1:87:2b:b6:fa:d3:db:ad:e9:c1:ac: 81:9d:94:1b:4b:d7:bf:32:c5:32:35:6c:28:bc:fb: c3:23:34:ee:a7:c3:b7:a6:a3:a8:45:9a:63:7a:19: 76:ed:0a:86:f1:d5:37:58:63:40:42:5c:e4:29:6f: 3c:5a:01:24:c5:47:7a:95:10:8b:81:50:5f:c0:b3: f5:aa:e4:3d:74:c9:aa:1b:7a:06:e6:27:8b:0c:0c: 5e:cd:66:5a:e9:ed:b4:24:2d:2f:7b:6b:54:b8:a4: 37:7b:1d:ea:ee:55:d4:b8:16:26:66:44:59:10:f0: 52:34:80:17:4f:f2:db:d2:e4:0f:93:d1:a0:02:00: cb:66:a0:ac:94:6c:17:fb:49:c0:e6:e6:f8:c3:cf: 7c:03:8d:55:fc:9b:a5:38:d0:51:cb:59:6e:b1:cd: 06:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:06:45:14:3A:E6:BF:F6:59:1C:4C:85:E9:7F:0E:E3:A4:73:8B:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/86ec9619-2868-36f8-b49d-03305645f65d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 209.58.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:9b:dd:1a:fb:f3:f0:00:8d:36:b9:7f:c9:84:a0:97:fa:d4: a3:f8:10:e6:36:d8:52:07:56:06:26:09:80:8b:68:ca:e1:76: 65:5f:c5:06:88:62:2a:ad:28:8f:db:67:9f:bd:24:c6:ca:62: c3:37:6c:b3:e4:df:83:7d:54:42:33:e1:98:40:67:4a:37:35: 02:04:97:ce:45:9f:3b:84:c6:a9:80:c6:f3:10:d5:c9:c2:da: cb:3a:3b:07:b0:62:28:a1:e3:5f:16:37:18:a4:a9:c0:5f:27: cc:88:54:22:63:bf:54:c6:21:a9:c3:f1:1c:b5:ca:3b:43:2a: eb:f0:78:b7:ab:a3:d5:a8:8b:92:27:71:a4:4c:ba:d1:42:39: 88:b2:d6:e6:f4:8b:20:5e:53:f6:94:98:27:58:b7:d7:10:da: 7a:4c:13:89:3a:8c:d4:14:db:45:f6:01:3a:5f:c3:e3:c8:b6: ef:12:02:84:da:ea:97:93:2a:c3:ca:a7:4f:c2:f7:f5:bf:37: a5:ab:74:37:cd:d7:70:6a:cb:6a:7c:1e:5f:c7:65:cf:7e:15: 33:7f:5b:3e:4b:a7:5b:a4:ec:bf:b0:23:5a:01:f4:e0:69:1b: f8:04:cf:8a:53:a3:5e:18:dc:a0:8e:27:b1:1f:db:cf:57:26: bc:00:6d:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYVL47pGyP5Q+DYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NDNjY2RhZmItNTNhYS00MGRlLTgzYzUtMzFjZjFkODhmNmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVVd+ww4ECbLX90IqTGippXjoXxWdZU/cCCY Pfg7yy1UFwRrHQoQnNlNMnJUAeK57v/iph+OksiC9IM20UjsEQM+cKzfv8s2xraX 5S93xmxYqs+hzitGAA22Mfn80YcrtvrT263pwayBnZQbS9e/MsUyNWwovPvDIzTu p8O3pqOoRZpjehl27QqG8dU3WGNAQlzkKW88WgEkxUd6lRCLgVBfwLP1quQ9dMmq G3oG5ieLDAxezWZa6e20JC0ve2tUuKQ3ex3q7lXUuBYmZkRZEPBSNIAXT/Lb0uQP k9GgAgDLZqCslGwX+0nA5ub4w898A41V/JulONBRy1lusc0GcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0GRRQ65r/2WRxMhel/DuOkc4v6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvODZlYzk2MTktMjg2OC0z NmY4LWI0OWQtMDMzMDU2NDVmNjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TplMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeb3Rr78/AAjTa5f8mEoJf61KP4EOY22FIHVgYmCYCLaMrhdmVfxQaI YiqtKI/bZ5+9JMbKYsM3bLPk34N9VEIz4ZhAZ0o3NQIEl85FnzuExqmAxvMQ1cnC 2ss6OwewYiih418WNxikqcBfJ8yIVCJjv1TGIanD8Ry1yjtDKuvweLero9Woi5In caRMutFCOYiy1ub0iyBeU/aUmCdYt9cQ2npME4k6jNQU20X2ATpfw+PItu8SAoTa 6peTKsPKp0/C9/W/N6WrdDfN13Bqy2p8Hl/HZc9+FTN/Wz5Lp1uk7L+wI1oB9OBp G/gEz4pTo14Y3KCOJ7Ef289XJrwAbR0= -----END CERTIFICATE-----Generated at Mon Apr 28 18:07:58 2025 by rpki-client