$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b333322c-12e3-3e1e-8b8e-0b60c401d4ad.roa File: b333322c-12e3-3e1e-8b8e-0b60c401d4ad.roa (raw, json) Hash identifier: P6/3H8fwE6LOH0T0wEmYhcts6J6kGM+6i+BG7itBWTE= Subject key identifier: B6:78:6D:1C:3B:EA:DD:02:F0:17:3D:21:3A:B5:06:C8:34:6B:24:74 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584902EC330B5F980F5C70C69720 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b333322c-12e3-3e1e-8b8e-0b60c401d4ad.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 701 IP address blocks: 209.116.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:33:0b:5f:98:0f:5c:70:c6:97:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=bbb304f5-bbab-47b6-91cd-75641707c903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a0:2c:e6:b2:3c:a2:d0:01:a6:4b:ad:2d:7b: 80:66:8d:29:63:05:d9:2c:fc:d1:2c:78:9c:2e:10: 76:34:48:06:70:d5:97:03:e4:40:23:12:c7:47:b2: 26:1d:30:5e:08:06:b1:9e:60:b2:7e:3c:c2:7d:26: 4f:7a:7d:02:c2:49:ef:4a:58:87:a9:4e:f8:5a:d2: a5:49:af:b8:bd:e7:09:bf:71:ad:b8:d7:68:a0:07: ea:74:25:85:c9:d0:40:a6:73:49:82:79:75:c7:b9: 7c:f5:00:cc:6a:6c:44:e6:9d:ef:64:57:db:a8:23: df:29:f2:e9:51:88:28:d0:45:c5:e4:0b:0d:fc:64: f7:7f:d8:9e:13:0c:67:26:df:86:85:dd:e6:17:49: d3:ee:2e:0d:97:98:44:9f:75:1b:53:81:2c:13:0e: 47:53:05:b4:9f:5a:60:81:5d:1e:ac:63:2d:c5:ee: 5b:42:6b:70:73:be:fa:0d:bf:22:dc:ae:c8:ef:53: dc:24:d9:a3:bd:bd:29:49:39:8d:f4:51:3e:63:24: da:ca:7b:19:53:c6:ef:15:5d:d9:4b:38:c8:00:ca: 60:1c:93:bb:44:51:01:d2:a7:2e:a6:4a:12:78:2a: b8:5a:7f:c6:00:38:1b:04:b6:7e:e8:e7:2f:cf:1c: 43:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:78:6D:1C:3B:EA:DD:02:F0:17:3D:21:3A:B5:06:C8:34:6B:24:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b333322c-12e3-3e1e-8b8e-0b60c401d4ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 209.116.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:af:39:62:58:a4:a8:11:fa:3e:01:af:6c:c3:65:ae:8e:cf: 0e:de:92:3a:f4:ba:b3:81:c2:84:5d:cd:d7:cb:e9:bb:d8:0b: 23:46:f4:56:9f:1e:46:e3:87:f6:73:89:16:9a:0c:e9:10:62: b4:5f:f7:37:14:6d:9c:01:8c:7f:c6:dd:0e:30:54:d6:9a:b0: b5:72:dd:c7:bb:81:29:6d:d1:0d:a6:3d:7f:d5:8b:06:01:c1: f2:a4:d6:36:d5:7b:db:4c:07:19:9e:9c:c7:0f:9d:31:89:84: 7b:8c:e5:67:5d:1b:ad:77:63:4d:6f:70:a2:59:d8:e2:ab:33: c4:20:1c:97:e4:ff:c5:4d:03:35:b6:57:8a:50:1d:15:cf:e6: 1f:ac:78:86:e9:5c:82:28:f0:10:f9:0f:81:79:ed:ae:52:61: 20:32:a9:84:9a:aa:db:ab:06:79:e0:e4:26:3b:00:66:2b:4a: 41:6d:7d:2d:05:47:01:6a:5c:85:31:a0:f1:3d:9f:34:ac:8a: 65:f6:18:f0:98:a7:5b:ff:75:4d:c6:70:e0:0d:b0:e1:1f:13: 01:0e:fc:0f:ae:3f:8c:b3:8b:36:b7:69:18:fd:72:a3:bb:f6: 35:68:4f:b8:05:2a:04:d2:4c:8a:f5:ac:e4:97:d0:57:23:e6: 6c:44:ad:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7DMLX5gPXHDGlyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk YmJiMzA0ZjUtYmJhYi00N2I2LTkxY2QtNzU2NDE3MDdjOTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKAs5rI8otABpkutLXuAZo0pYwXZLPzRLHic LhB2NEgGcNWXA+RAIxLHR7ImHTBeCAaxnmCyfjzCfSZPen0CwknvSliHqU74WtKl Sa+4vecJv3GtuNdooAfqdCWFydBApnNJgnl1x7l89QDMamxE5p3vZFfbqCPfKfLp UYgo0EXF5AsN/GT3f9ieEwxnJt+Ghd3mF0nT7i4Nl5hEn3UbU4EsEw5HUwW0n1pg gV0erGMtxe5bQmtwc776Db8i3K7I71PcJNmjvb0pSTmN9FE+YyTaynsZU8bvFV3Z SzjIAMpgHJO7RFEB0qcupkoSeCq4Wn/GADgbBLZ+6OcvzxxDtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZ4bRw76t0C8Bc9ITq1Bsg0ayR0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjMzMzMyMmMtMTJlMy0z ZTFlLThiOGUtMGI2MGM0MDFkNGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XQSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqvOWJYpKgR+j4Br2zDZa6Ozw7ekjr0urOBwoRdzdfL6bvYCyNG9Faf Hkbjh/ZziRaaDOkQYrRf9zcUbZwBjH/G3Q4wVNaasLVy3ce7gSlt0Q2mPX/ViwYB wfKk1jbVe9tMBxmenMcPnTGJhHuM5WddG613Y01vcKJZ2OKrM8QgHJfk/8VNAzW2 V4pQHRXP5h+seIbpXIIo8BD5D4F57a5SYSAyqYSaqturBnng5CY7AGYrSkFtfS0F RwFqXIUxoPE9nzSsimX2GPCYp1v/dU3GcOANsOEfEwEO/A+uP4yziza3aRj9cqO7 9jVoT7gFKgTSTIr1rOSX0Fcj5mxErZc= -----END CERTIFICATE-----Generated at Sun Apr 27 23:00:05 2025 by rpki-client