$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/480969e7-5db5-391b-a687-2a4105fe0786.roa File: 480969e7-5db5-391b-a687-2a4105fe0786.roa (raw, json) Hash identifier: tRUU6zppVTKlYk2fdIQbqaQfDQ0fecVoLeM1BPf4css= Subject key identifier: 49:6E:BF:0B:1B:43:54:2D:E1:C9:6A:7C:4C:4E:EA:C7:CF:F8:6F:C8 Certificate issuer: /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Certificate serial: 010D0C9F4328584898D60FA369838B808F737580 Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/480969e7-5db5-391b-a687-2a4105fe0786.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 14618 IP address blocks: 168.203.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:0f:a3:69:83:8b:80:8f:73:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=8192abd8-18c7-4420-9bd8-212198d5f5e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d6:dd:c3:b9:b1:9c:b5:70:e2:fa:07:c4:e9: 17:0c:30:09:37:0f:c3:5e:97:5d:06:05:0e:61:be: 25:ed:4a:f8:54:09:92:05:09:51:93:7b:59:fd:1e: 31:8b:53:1a:63:bf:e7:a4:ac:5b:01:67:e9:6b:ad: 2f:a8:d6:9f:37:7d:48:a5:6f:fb:73:72:9a:13:d9: 55:2c:b5:5d:57:bc:c3:78:31:17:97:d2:5a:5d:6d: 50:d4:61:ce:32:23:94:ec:6a:bc:a7:c2:00:24:5c: 2a:87:d8:ec:cc:00:23:13:72:0e:c1:dd:9e:d2:09: 4e:35:7d:da:b5:c5:e4:3b:2c:76:36:53:8e:8f:e3: 9a:70:bf:74:5c:eb:56:69:ba:93:5b:e6:85:72:22: 3f:10:89:14:2f:59:b3:61:a6:d0:e1:24:c3:2b:9d: ce:54:32:32:07:22:99:e1:1d:f2:cd:80:72:5d:0a: 4e:67:74:71:3b:6d:f1:e8:d8:8e:69:c1:39:9e:d1: 42:9e:3f:71:ee:09:7a:88:58:5d:75:1c:c5:30:6f: ca:b5:4f:43:9e:ca:ae:6d:da:1e:72:55:4a:41:49: e6:cb:ae:bf:e7:6c:fa:b9:2f:fa:98:85:da:56:3f: bf:73:0f:7b:6d:59:73:e7:f4:f0:e7:31:7f:08:0d: 56:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6E:BF:0B:1B:43:54:2D:E1:C9:6A:7C:4C:4E:EA:C7:CF:F8:6F:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/480969e7-5db5-391b-a687-2a4105fe0786.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl X509v3 Authority Key Identifier: keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer sbgp-ipAddrBlock: critical IPv4: 168.203.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:a5:44:ec:b1:4c:68:18:38:1e:88:1e:1b:0c:5d:a4:8a:17: ed:31:b0:45:bc:24:90:ed:6b:24:4b:97:05:63:77:21:8e:ab: 16:12:dd:af:13:e6:a7:f0:18:cc:96:57:81:c3:0a:13:c6:fe: 95:3f:a6:5a:75:91:c7:1e:db:3e:71:96:57:c0:0a:d9:0d:61: c5:19:05:33:53:0f:11:e9:3d:02:e6:5d:46:8a:78:e4:d5:5f: b2:32:39:1b:05:73:38:3a:f3:2e:6c:b5:3b:13:3b:65:6a:7c: 27:8b:0e:e1:b1:50:8d:d5:b6:5d:e0:45:0d:94:74:39:8f:ad: f3:04:86:34:49:f9:c4:3e:d5:64:22:b1:ab:48:05:40:94:3f: 73:9a:78:2f:ca:12:7c:88:66:b4:a7:2d:17:48:09:6f:d9:fc: 47:e6:32:56:ea:ac:e8:c8:02:0e:9d:09:b9:b1:cc:5c:db:d7: 9e:3e:58:7c:8c:1c:2f:c0:fe:25:db:bc:5f:35:95:53:fc:cb: 33:70:6e:f1:6e:88:79:27:f0:b9:8f:5e:2f:22:ce:83:98:ec: ca:90:87:1f:a3:ba:34:9c:01:cd:01:40:08:6e:02:1a:1a:16: 68:f6:5d:a3:66:c7:c8:6c:f6:1a:b6:01:e5:ef:a0:6b:da:e7: 34:bf:c8:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1g+jaYOLgI9zdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM4YzgzMTYtMDhkYy00YmVmLTk5ZjYtYTQxNmZmYTBi MDRhMB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk ODE5MmFiZDgtMThjNy00NDIwLTliZDgtMjEyMTk4ZDVmNWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtbdw7mxnLVw4voHxOkXDDAJNw/DXpddBgUO Yb4l7Ur4VAmSBQlRk3tZ/R4xi1MaY7/npKxbAWfpa60vqNafN31IpW/7c3KaE9lV LLVdV7zDeDEXl9JaXW1Q1GHOMiOU7Gq8p8IAJFwqh9jszAAjE3IOwd2e0glONX3a tcXkOyx2NlOOj+OacL90XOtWabqTW+aFciI/EIkUL1mzYabQ4STDK53OVDIyByKZ 4R3yzYByXQpOZ3RxO23x6NiOacE5ntFCnj9x7gl6iFhddRzFMG/KtU9Dnsqubdoe clVKQUnmy66/52z6uS/6mIXaVj+/cw97bVlz5/Tw5zF/CA1WcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEluvwsbQ1Qt4clqfExO6sfP+G/IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81Yzhj ODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZhMGIwNGEvNDgwOTY5ZTctNWRiNS0z OTFiLWE2ODctMmE0MTA1ZmUwNzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWM4YzgzMTYtMDhkYy00YmVmLTk5 ZjYtYTQxNmZmYTBiMDRhLzVjOGM4MzE2LTA4ZGMtNGJlZi05OWY2LWE0MTZmZmEw YjA0YS5jcmwwHwYDVR0jBBgwFoAUMTSeCHAsq7KeL7SqUigmFPMcCSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2 ZmZhMGIwNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqMsoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqlROyxTGgYOB6IHhsMXaSKF+0xsEW8JJDtayRLlwVjdyGOqxYS3a8T 5qfwGMyWV4HDChPG/pU/plp1kcce2z5xllfACtkNYcUZBTNTDxHpPQLmXUaKeOTV X7IyORsFczg68y5stTsTO2VqfCeLDuGxUI3Vtl3gRQ2UdDmPrfMEhjRJ+cQ+1WQi satIBUCUP3OaeC/KEnyIZrSnLRdICW/Z/EfmMlbqrOjIAg6dCbmxzFzb154+WHyM HC/A/iXbvF81lVP8yzNwbvFuiHkn8LmPXi8izoOY7MqQhx+jujScAc0BQAhuAhoa Fmj2XaNmx8hs9hq2AeXvoGva5zS/yNQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:42 2025 by rpki-client