$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/91aaccaf-f050-3f69-9e66-2f8cb643c659.roa File: 91aaccaf-f050-3f69-9e66-2f8cb643c659.roa (raw, json) Hash identifier: vRwUNv/orkVzN6x2g0Bj6D5e8voGloOnonxXKQ1Fkfw= Subject key identifier: CE:77:17:CC:A3:AB:A5:C1:C8:A8:38:C1:F1:69:65:1F:7C:01:DB:98 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F43285848C6E634AFC4C331EEC4F54D80 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/91aaccaf-f050-3f69-9e66-2f8cb643c659.roa Signing time: Wed 05 Feb 2025 02:00:39 +0000 ROA not before: Wed 05 Feb 2025 02:00:39 +0000 ROA not after: Tue 06 May 2025 01:00:39 +0000 asID: 3561 IP address blocks: 208.159.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:e6:34:af:c4:c3:31:ee:c4:f5:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Feb 5 02:00:39 2025 GMT Not After : May 6 01:00:39 2025 GMT Subject: CN=c2af126c-5c4f-4ba6-a92f-2128d5b1c07a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6d:22:29:be:da:aa:36:25:e0:f1:49:bd:8e: 4a:73:51:7e:be:e4:70:5a:a4:0d:e2:45:16:20:82: ab:54:e6:36:ea:86:4c:00:db:e2:a5:67:5d:ef:e9: fe:5a:26:f8:e3:41:cc:4c:dc:57:bb:85:63:90:7d: fe:12:97:1a:d0:a6:aa:8d:47:41:bb:23:2d:f8:40: 83:c7:09:2e:57:40:86:0c:1d:25:43:5b:82:14:d9: df:85:9b:4a:0a:ed:1f:7e:e3:b9:ad:22:95:ed:b2: 50:56:40:78:de:e6:90:22:0c:ec:43:37:58:c3:1d: 8f:d0:73:63:eb:48:05:ce:bd:c7:57:1a:e8:e2:0f: d3:c5:17:3a:fc:81:97:85:9c:30:3b:56:17:22:ec: aa:49:34:72:35:e5:02:97:bc:fe:07:be:97:7f:6c: 19:95:d5:06:fc:fb:89:84:5d:c9:7d:02:7b:04:58: 0e:d2:0f:b3:27:f0:59:1d:1d:1e:28:fe:f1:e3:21: 53:72:87:a9:d0:9c:f4:c5:1e:48:24:5e:4a:9b:63: d6:3a:6a:72:f6:5d:03:a8:85:9c:c2:8f:04:44:05: 96:20:9c:89:5a:dc:ef:08:d9:e5:56:71:c6:45:81: a3:10:3a:49:7e:94:a5:03:0f:d4:1d:cc:ac:3d:3c: 0c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:77:17:CC:A3:AB:A5:C1:C8:A8:38:C1:F1:69:65:1F:7C:01:DB:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/91aaccaf-f050-3f69-9e66-2f8cb643c659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 208.159.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:40:6d:91:be:e6:c5:df:13:61:7b:bc:fb:2e:af:98:72:9d: ff:ea:a4:d2:aa:2f:79:19:6c:77:2d:c3:b4:a9:35:43:de:46: a4:db:a4:a8:9e:dc:7d:7c:2f:eb:66:42:a4:19:dd:7b:14:ab: 54:21:c6:f0:4b:68:9b:23:18:48:ee:60:bf:9f:6a:c2:e0:48: be:fa:32:89:12:9b:69:55:5c:09:b8:c0:f8:9b:bc:ea:9f:04: 11:33:d4:9b:de:52:03:6d:6c:4b:ea:3e:69:4e:e8:5b:ab:1d: a6:38:32:a2:70:96:fa:9e:71:e2:13:8b:ca:1a:d7:26:1d:c8: 53:de:e3:7f:17:9c:69:40:cb:a4:64:44:d6:1e:82:c4:5b:46: 6d:96:54:97:a5:7c:86:64:35:ac:43:0f:2a:e7:5a:d4:80:15: 10:ca:48:a6:a1:17:42:f9:30:3c:f1:05:22:44:9c:a7:3d:4d: 7f:ad:91:09:bc:27:f0:3e:95:54:c6:82:28:4b:31:ba:73:28: 9b:d7:ce:42:81:34:33:04:e3:db:25:4f:1d:f1:ae:08:c4:5e: c3:d7:e8:43:48:94:14:6a:01:32:c2:71:bd:d0:f2:ac:ff:4a: 5c:35:50:9a:7b:b5:26:74:1b:61:3e:de:c8:de:d8:ec:b0:62: 28:89:3d:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5jSvxMMx7sT1TYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk YzJhZjEyNmMtNWM0Zi00YmE2LWE5MmYtMjEyOGQ1YjFjMDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgG0iKb7aqjYl4PFJvY5Kc1F+vuRwWqQN4kUW IIKrVOY26oZMANvipWdd7+n+Wib440HMTNxXu4VjkH3+Epca0KaqjUdBuyMt+ECD xwkuV0CGDB0lQ1uCFNnfhZtKCu0ffuO5rSKV7bJQVkB43uaQIgzsQzdYwx2P0HNj 60gFzr3HVxro4g/TxRc6/IGXhZwwO1YXIuyqSTRyNeUCl7z+B76Xf2wZldUG/PuJ hF3JfQJ7BFgO0g+zJ/BZHR0eKP7x4yFTcoep0Jz0xR5IJF5Km2PWOmpy9l0DqIWc wo8ERAWWIJyJWtzvCNnlVnHGRYGjEDpJfpSlAw/UHcysPTwMPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM53F8yjq6XByKg4wfFpZR98AduYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvOTFhYWNjYWYtZjA1MC0z ZjY5LTllNjYtMmY4Y2I2NDNjNjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0J/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtAbZG+5sXfE2F7vPsur5hynf/qpNKqL3kZbHctw7SpNUPeRqTbpKie 3H18L+tmQqQZ3XsUq1QhxvBLaJsjGEjuYL+fasLgSL76MokSm2lVXAm4wPibvOqf BBEz1JveUgNtbEvqPmlO6FurHaY4MqJwlvqeceITi8oa1yYdyFPe438XnGlAy6Rk RNYegsRbRm2WVJelfIZkNaxDDyrnWtSAFRDKSKahF0L5MDzxBSJEnKc9TX+tkQm8 J/A+lVTGgihLMbpzKJvXzkKBNDME49slTx3xrgjEXsPX6ENIlBRqATLCcb3Q8qz/ Slw1UJp7tSZ0G2E+3sje2OywYiiJPcE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:42 2025 by rpki-client