$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8a56c36f-5f56-3cd0-abe6-75a286daf6b7.roa File: 8a56c36f-5f56-3cd0-abe6-75a286daf6b7.roa (raw, json) Hash identifier: Au64YEkUCNxiX+XwzjmbL5qfi4BC+cYZXPAM/L883Rs= Subject key identifier: 41:8D:67:46:61:01:36:7E:73:FB:1C:30:C9:A1:9E:7E:9B:CF:97:39 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858480EA5026FFCE2CA5DEBEC4280 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8a56c36f-5f56-3cd0-abe6-75a286daf6b7.roa Signing time: Sun 01 Dec 2024 02:00:39 +0000 ROA not before: Sun 01 Dec 2024 02:00:39 +0000 ROA not after: Sat 01 Mar 2025 02:00:39 +0000 asID: 202 IP address blocks: 192.46.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0e:a5:02:6f:fc:e2:ca:5d:eb:ec:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 1 02:00:39 2024 GMT Not After : Mar 1 02:00:39 2025 GMT Subject: CN=2b20202f-c4db-4538-bd5c-f3719f17a8dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0c:d2:6c:d3:3e:30:b7:bc:d1:34:4a:28:63: dc:d2:63:8f:ff:d7:65:52:30:6b:f7:dc:93:a3:58: 84:fe:81:e2:68:9c:93:d6:4c:f9:43:74:f8:86:5e: e4:2f:78:cd:bb:39:77:94:9a:eb:68:0d:3b:1f:dc: 70:bc:10:25:09:cc:d9:28:03:65:04:b6:17:28:15: 5f:db:36:96:e8:9c:39:91:21:c5:2f:ce:f9:98:7b: 05:a7:e1:fb:68:df:39:c5:43:32:05:03:fe:4f:20: b3:a8:c6:26:cc:37:ec:a5:0c:27:0c:59:31:b5:94: 18:d1:27:98:a0:b5:12:dd:da:da:62:93:82:9a:25: 88:02:d2:fa:a3:48:51:ad:4f:c8:a7:38:a5:51:9e: f9:1d:7d:9a:a9:36:50:de:1b:21:05:b3:af:e1:e8: f6:3c:ed:5f:c2:1d:22:b4:67:e4:3e:54:f9:51:34: 9a:4d:e6:fe:e5:57:7a:85:38:94:62:8e:9d:8f:84: 72:be:8b:1c:58:c5:3d:68:77:97:d3:a2:88:01:d4: 16:71:ff:f7:69:7a:dd:cc:a1:a6:71:27:5a:f2:37: f8:24:98:58:ec:6b:b0:50:f1:05:a1:55:94:f2:fc: 98:f2:58:c0:e0:c8:fd:a9:9d:75:7d:d4:20:3e:fc: 34:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8D:67:46:61:01:36:7E:73:FB:1C:30:C9:A1:9E:7E:9B:CF:97:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8a56c36f-5f56-3cd0-abe6-75a286daf6b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.46.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:0a:8d:b6:af:91:04:e9:1b:24:d0:8a:c9:f4:82:d1:75:20: a0:73:16:84:43:ff:aa:c1:95:7f:8f:1c:14:dd:0d:f3:9e:3f: 59:95:83:98:9c:c0:d9:60:99:1a:a9:ef:99:74:09:39:1a:2e: 3c:39:6d:76:5d:c4:f4:43:5e:28:aa:d7:36:3c:21:34:c1:93: 1a:3c:3e:19:ea:61:4b:6a:79:d9:97:91:f9:78:a9:33:31:02: 4c:dc:57:28:06:7a:ac:5b:5c:be:61:8f:a3:70:44:8b:b8:88: e6:68:79:c3:e4:5b:f8:f3:a0:7c:6d:c6:14:59:93:48:a6:a4: db:d5:92:bf:55:1d:98:09:1e:e2:a7:81:27:44:7b:61:dd:3b: 3a:6d:4b:db:3d:84:b1:6f:14:ee:dd:f8:34:c5:b5:dd:40:32: 59:40:1d:95:41:b9:af:30:8b:77:85:e8:ce:d4:31:d8:1b:ac: af:b0:c7:26:a0:be:6b:ab:29:6c:34:61:9b:d7:d4:93:1a:f9: 13:04:9e:41:73:c7:9f:8f:5f:8f:53:cd:8d:3b:ee:4a:e7:b0: 75:a8:67:62:fa:70:2f:33:84:ce:69:f7:9b:e4:96:38:36:dd: a9:00:3f:c4:d3:31:d3:62:5c:3a:21:cd:8a:0b:d8:3c:74:eb: ea:36:05:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgOpQJv/OLKXevsQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk MmIyMDIwMmYtYzRkYi00NTM4LWJkNWMtZjM3MTlmMTdhOGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQzSbNM+MLe80TRKKGPc0mOP/9dlUjBr99yT o1iE/oHiaJyT1kz5Q3T4hl7kL3jNuzl3lJrraA07H9xwvBAlCczZKANlBLYXKBVf 2zaW6Jw5kSHFL875mHsFp+H7aN85xUMyBQP+TyCzqMYmzDfspQwnDFkxtZQY0SeY oLUS3draYpOCmiWIAtL6o0hRrU/IpzilUZ75HX2aqTZQ3hshBbOv4ej2PO1fwh0i tGfkPlT5UTSaTeb+5Vd6hTiUYo6dj4RyvoscWMU9aHeX06KIAdQWcf/3aXrdzKGm cSda8jf4JJhY7GuwUPEFoVWU8vyY8ljA4Mj9qZ11fdQgPvw0JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGNZ0ZhATZ+c/scMMmhnn6bz5c5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOGE1NmMzNmYtNWY1Ni0z Y2QwLWFiZTYtNzVhMjg2ZGFmNmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwC56MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwKjbavkQTpGyTQisn0gtF1IKBzFoRD/6rBlX+PHBTdDfOeP1mVg5ic wNlgmRqp75l0CTkaLjw5bXZdxPRDXiiq1zY8ITTBkxo8PhnqYUtqedmXkfl4qTMx AkzcVygGeqxbXL5hj6NwRIu4iOZoecPkW/jzoHxtxhRZk0impNvVkr9VHZgJHuKn gSdEe2HdOzptS9s9hLFvFO7d+DTFtd1AMllAHZVBua8wi3eF6M7UMdgbrK+wxyag vmurKWw0YZvX1JMa+RMEnkFzx5+PX49TzY077krnsHWoZ2L6cC8zhM5p95vkljg2 3akAP8TTMdNiXDohzYoL2Dx06+o2BYE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:40 2025 by rpki-client