$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2dce97fc-82a8-3ee7-a64e-819e70bebb20.roa File: 2dce97fc-82a8-3ee7-a64e-819e70bebb20.roa (raw, json) Hash identifier: E59KVCP+6WzNlY86CvH0p76kNvVWyqbatVZwNO/B8sY= Subject key identifier: 20:15:9B:13:28:4B:E9:23:11:EB:6C:8E:CB:2B:2C:FE:22:60:3F:51 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F432858487B85B13C0296509D5B55DD80 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2dce97fc-82a8-3ee7-a64e-819e70bebb20.roa Signing time: Thu 09 Jan 2025 02:00:40 +0000 ROA not before: Thu 09 Jan 2025 02:00:40 +0000 ROA not after: Wed 09 Apr 2025 01:00:40 +0000 asID: 55044 IP address blocks: 63.238.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7b:85:b1:3c:02:96:50:9d:5b:55:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Jan 9 02:00:40 2025 GMT Not After : Apr 9 01:00:40 2025 GMT Subject: CN=033f507d-99f5-414f-90e9-37d8611fdcb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3b:c8:83:c3:f2:0f:6e:40:5b:91:f9:5e:43: 17:93:a4:05:8a:8b:9c:d4:6d:d3:60:f4:a0:ab:21: 26:ca:9c:a8:96:8e:99:08:68:9e:cf:39:cf:67:8b: 5a:c5:6e:54:a9:d4:8e:1e:89:9c:a6:7d:84:3a:2b: 5a:dc:1c:0d:e5:4e:58:e4:2c:74:45:49:76:35:aa: d2:21:4f:e0:49:39:5d:5f:c8:03:b4:c5:de:05:ce: d1:83:87:42:ff:e5:c2:60:13:ab:52:22:f0:b5:63: cc:1c:17:9d:c5:91:f3:82:b3:0b:22:3f:8b:aa:d7: 4f:55:c4:f5:5a:3a:e4:93:33:2a:1a:50:24:bc:53: 44:de:d4:88:4e:50:15:ab:70:73:17:5e:c9:4b:7e: 29:e0:85:c0:08:7b:b5:57:76:2d:1b:69:9e:9c:13: 3f:4c:ac:0c:f7:64:7d:9f:e0:04:16:73:f7:ee:31: 64:93:76:7f:c7:c3:4b:5d:da:bc:af:49:0d:37:2c: ae:e4:96:8c:d2:56:da:3a:8c:35:1f:cb:d1:85:76: 41:83:d0:df:f8:cd:78:77:5a:04:fb:8b:b1:e5:4f: cf:fc:ca:3b:26:7c:76:8b:c8:8f:65:f1:8a:bb:b6: 31:42:de:9a:cb:0d:46:6d:30:62:b9:3c:07:57:ef: 18:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:15:9B:13:28:4B:E9:23:11:EB:6C:8E:CB:2B:2C:FE:22:60:3F:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2dce97fc-82a8-3ee7-a64e-819e70bebb20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 63.238.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:eb:8a:5d:16:8a:1b:ad:d6:e8:b4:10:4d:a5:fd:d1:33:17: 3f:d4:a8:03:fe:78:bc:47:05:8f:c9:0f:1d:66:91:37:d9:49: 40:a7:47:a1:85:33:b8:67:6f:ba:d4:4b:39:e0:ba:5d:9f:18: 5e:8e:1d:e2:fe:1e:10:6c:35:70:f8:8f:89:ca:5b:c0:00:aa: 00:9c:c3:8a:6d:f5:e3:af:f0:78:86:92:63:d9:3e:50:ca:02: 50:4b:01:0a:4c:80:de:d3:6a:33:c2:ef:af:7b:94:85:56:a1: 1d:83:29:96:60:61:14:f1:68:39:a1:86:c8:41:48:a0:10:f9: c2:35:56:56:e4:71:35:b4:c6:1a:79:e0:7b:a5:08:8f:90:9a: 1c:18:26:17:11:ba:73:42:45:07:91:68:a8:98:3f:75:d8:81: a1:e3:b0:b6:07:4b:f9:dd:d7:82:bd:78:47:05:c0:10:4f:0f: 19:b9:3f:5b:8a:a0:49:05:a1:6f:0e:18:8d:23:f0:73:82:fe: 02:cc:49:ce:fc:ee:d8:8e:24:20:cd:32:8b:18:74:d8:95:c6: 7a:b3:c4:da:f1:db:79:75:c7:56:d0:d6:5b:cd:05:8d:56:7e: 80:36:cf:6b:2c:b7:5f:fa:6a:d6:c6:45:27:48:92:88:da:a8: 69:52:ea:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh7hbE8ApZQnVtV3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDEwOTAyMDA0MFoXDTI1MDQwOTAxMDA0MFowLzEtMCsGA1UEAxMk MDMzZjUwN2QtOTlmNS00MTRmLTkwZTktMzdkODYxMWZkY2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTvIg8PyD25AW5H5XkMXk6QFiouc1G3TYPSg qyEmypyolo6ZCGiezznPZ4taxW5UqdSOHomcpn2EOita3BwN5U5Y5Cx0RUl2NarS IU/gSTldX8gDtMXeBc7Rg4dC/+XCYBOrUiLwtWPMHBedxZHzgrMLIj+LqtdPVcT1 WjrkkzMqGlAkvFNE3tSITlAVq3BzF17JS34p4IXACHu1V3YtG2menBM/TKwM92R9 n+AEFnP37jFkk3Z/x8NLXdq8r0kNNyyu5JaM0lbaOow1H8vRhXZBg9Df+M14d1oE +4ux5U/P/Mo7Jnx2i8iPZfGKu7YxQt6ayw1GbTBiuTwHV+8Y9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAVmxMoS+kjEetsjssrLP4iYD9RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvMmRjZTk3ZmMtODJhOC0z ZWU3LWE2NGUtODE5ZTcwYmViYjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCP+6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3ril0Wihut1ui0EE2l/dEzFz/UqAP+eLxHBY/JDx1mkTfZSUCnR6GF M7hnb7rUSzngul2fGF6OHeL+HhBsNXD4j4nKW8AAqgCcw4pt9eOv8HiGkmPZPlDK AlBLAQpMgN7TajPC7697lIVWoR2DKZZgYRTxaDmhhshBSKAQ+cI1VlbkcTW0xhp5 4HulCI+QmhwYJhcRunNCRQeRaKiYP3XYgaHjsLYHS/nd14K9eEcFwBBPDxm5P1uK oEkFoW8OGI0j8HOC/gLMSc787tiOJCDNMosYdNiVxnqzxNrx23l1x1bQ1lvNBY1W foA2z2sst1/6atbGRSdIkojaqGlS6o4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:19 2025 by rpki-client