$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/00f0462c-a442-31ab-8df4-efac62bb8166.roa File: 00f0462c-a442-31ab-8df4-efac62bb8166.roa (raw, json) Hash identifier: H0cavYPNa2GgIkMh/fnm7C08YR8g+N61l06ILgg0zc4= Subject key identifier: 45:6D:72:17:DB:E5:18:A9:0E:8A:2C:18:EC:42:65:1F:CC:3D:0B:1A Certificate issuer: /CN=2cb23841-08c5-41c8-81c9-076b288743e8 Certificate serial: 010D0C9F432858489E6B6A6FD133082B121AD740 Authority key identifier: 69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/00f0462c-a442-31ab-8df4-efac62bb8166.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 14618 IP address blocks: 69.7.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:6a:6f:d1:33:08:2b:12:1a:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb23841-08c5-41c8-81c9-076b288743e8 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=0af80e08-addb-475b-b81a-1563e4ffe093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8d:05:ce:c6:a7:ab:ea:07:0c:44:31:f6:2b: bf:4c:3a:79:d5:18:5d:d7:3c:70:fc:15:05:8c:8d: 6a:ee:f7:b2:d9:fd:bf:bf:9d:09:cd:72:4c:19:78: 7d:6d:d2:4a:94:6a:f9:cb:d9:f8:43:f1:b8:5c:99: 43:a7:e2:9b:e1:1c:a4:a3:55:03:3d:21:50:dc:12: 8a:d8:7d:7b:46:8b:6f:69:9c:74:40:a2:f7:e7:c3: 03:ad:df:d6:a4:e8:9e:21:77:82:57:6d:51:d8:74: 2d:04:cf:c7:95:08:c8:89:98:32:27:4d:14:96:5e: d5:a2:c0:b1:48:0a:6e:ae:00:54:ba:ea:18:eb:f4: 8d:c9:2e:cb:dc:3d:35:e1:ba:d4:c6:64:f9:c0:cf: 9e:dc:cb:6e:7a:bf:c9:4e:f6:5d:2b:79:8d:26:b1: ea:d0:32:c7:71:5c:50:a3:c1:a2:20:cc:56:1d:93: f8:78:d7:3d:fb:d9:26:19:2d:e7:ae:05:d5:05:ce: 4f:9c:59:83:97:37:df:6e:a2:88:33:0a:46:74:8f: ba:0d:c8:91:3c:22:a6:b9:d3:d7:d2:65:d5:21:73: d1:14:9c:5e:5c:0e:bc:e9:4f:ff:76:88:11:df:40: 74:de:1c:e4:37:dc:40:da:0d:be:91:c8:0d:43:72: 4c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6D:72:17:DB:E5:18:A9:0E:8A:2C:18:EC:42:65:1F:CC:3D:0B:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/00f0462c-a442-31ab-8df4-efac62bb8166.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl X509v3 Authority Key Identifier: keyid:69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer sbgp-ipAddrBlock: critical IPv4: 69.7.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:4c:6b:71:db:67:67:fe:58:35:96:18:c6:84:64:ec:40:7e: 71:22:62:7f:9c:5e:ba:5c:80:ba:d8:85:d2:7c:12:58:ca:b4: f6:42:ab:89:af:22:0d:01:fd:cf:55:af:ee:2f:64:54:2c:39: e2:b4:f3:8b:54:e9:26:8d:21:95:e5:66:2d:c3:76:81:49:80: 5a:32:52:fa:77:54:e3:b8:8f:29:db:c6:f4:69:52:18:7c:e4: e2:9a:b7:62:ab:3a:41:2f:b0:c0:7f:b6:04:87:c9:0d:24:bd: 0c:96:17:4b:c0:ad:b7:3b:ae:fe:cc:6e:d7:34:a8:35:0c:69: cb:52:bb:1d:ca:f8:8b:e1:31:e8:00:11:e7:35:b6:c3:d9:38: a1:a1:bd:47:97:35:4c:76:99:f9:59:52:61:ae:eb:b4:70:7c: 07:fc:c8:c0:44:af:e7:c2:46:5d:73:17:9a:8f:9d:15:05:f7: 58:47:20:54:04:9e:71:12:33:22:42:be:20:d5:c8:4e:c3:20: 45:09:0a:fe:43:03:b4:65:1b:a7:52:e0:43:8b:8f:59:56:58: 5c:00:89:1e:70:01:75:73:26:03:bc:28:18:7c:1d:95:68:c8: 04:65:20:8c:06:39:91:b3:b7:ef:85:02:89:d3:83:27:bf:08: 81:8b:02:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea2pv0TMIKxIa10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNiMjM4NDEtMDhjNS00MWM4LTgxYzktMDc2YjI4ODc0 M2U4MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MGFmODBlMDgtYWRkYi00NzViLWI4MWEtMTU2M2U0ZmZlMDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo0Fzsanq+oHDEQx9iu/TDp51Rhd1zxw/BUF jI1q7vey2f2/v50JzXJMGXh9bdJKlGr5y9n4Q/G4XJlDp+Kb4Ryko1UDPSFQ3BKK 2H17RotvaZx0QKL358MDrd/WpOieIXeCV21R2HQtBM/HlQjIiZgyJ00Ull7VosCx SApurgBUuuoY6/SNyS7L3D014brUxmT5wM+e3Mtuer/JTvZdK3mNJrHq0DLHcVxQ o8GiIMxWHZP4eNc9+9kmGS3nrgXVBc5PnFmDlzffbqKIMwpGdI+6DciRPCKmudPX 0mXVIXPRFJxeXA686U//dogR30B03hzkN9xA2g2+kcgNQ3JMkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVtchfb5RipDoosGOxCZR/MPQsaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yY2Iy Mzg0MS0wOGM1LTQxYzgtODFjOS0wNzZiMjg4NzQzZTgvMDBmMDQ2MmMtYTQ0Mi0z MWFiLThkZjQtZWZhYzYyYmI4MTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmNiMjM4NDEtMDhjNS00MWM4LTgx YzktMDc2YjI4ODc0M2U4LzJjYjIzODQxLTA4YzUtNDFjOC04MWM5LTA3NmIyODg3 NDNlOC5jcmwwHwYDVR0jBBgwFoAUaa4nJAgOrfpuCq6JeTBbwR2WXxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yY2IyMzg0MS0wOGM1LTQxYzgtODFjOS0wNzZi Mjg4NzQzZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQdNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJMa3HbZ2f+WDWWGMaEZOxAfnEiYn+cXrpcgLrYhdJ8EljKtPZCq4mv Ig0B/c9Vr+4vZFQsOeK084tU6SaNIZXlZi3DdoFJgFoyUvp3VOO4jynbxvRpUhh8 5OKat2KrOkEvsMB/tgSHyQ0kvQyWF0vArbc7rv7Mbtc0qDUMactSux3K+IvhMegA Eec1tsPZOKGhvUeXNUx2mflZUmGu67RwfAf8yMBEr+fCRl1zF5qPnRUF91hHIFQE nnESMyJCviDVyE7DIEUJCv5DA7RlG6dS4EOLj1lWWFwAiR5wAXVzJgO8KBh8HZVo yARlIIwGOZGzt++FAonTgye/CIGLAmQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:01 2025 by rpki-client