$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/34a15df3-ae78-372e-8160-e71d118b8d2e.roa File: 34a15df3-ae78-372e-8160-e71d118b8d2e.roa (raw, json) Hash identifier: 9EHLkhyWPXzMbexpkcE3nlEm/gbWuQG7YAtncK8gpFk= Subject key identifier: C7:38:63:4A:4D:71:95:E3:CA:C1:C2:CE:43:B2:DF:2F:87:62:4E:1C Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584807AA6A90B5AEB28F61956E00 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/34a15df3-ae78-372e-8160-e71d118b8d2e.roa Signing time: Thu 28 Nov 2024 14:00:52 +0000 ROA not before: Thu 28 Nov 2024 14:00:52 +0000 ROA not after: Wed 26 Feb 2025 14:00:52 +0000 asID: 3356 IP address blocks: 209.224.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:07:aa:6a:90:b5:ae:b2:8f:61:95:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Nov 28 14:00:52 2024 GMT Not After : Feb 26 14:00:52 2025 GMT Subject: CN=abb9cd9e-649c-43b3-855a-237ee442c5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2d:c8:1b:95:35:f2:94:12:40:cf:11:4a:77: d3:b6:18:2a:9f:4b:51:1b:9d:49:85:a5:b2:b7:6f: ab:80:08:4f:0d:e8:8b:a6:54:5f:c2:db:ce:c7:0e: 3f:6d:99:f5:3f:8a:e5:8c:21:fd:a5:85:a0:c9:8c: 68:77:8d:27:61:ef:b7:8c:5e:42:28:d7:01:6e:53: e1:5a:a8:a9:db:cd:31:b0:a7:0d:47:b4:64:e8:6b: b4:99:af:c8:af:3f:3f:37:0a:5e:ef:2c:31:31:3e: 4a:71:cf:55:0f:c4:fc:40:63:db:c2:4f:18:7c:61: 9e:d8:55:e4:a5:68:3f:cb:13:e1:76:23:a0:64:10: 16:1a:1a:75:2e:b3:c6:4b:02:e9:c9:68:a9:e3:ec: 46:9a:2e:55:9a:8b:91:e4:3f:0e:41:23:64:85:bc: 4e:f4:cf:1d:3a:2b:1d:bc:55:f6:ea:f7:71:05:50: a4:07:de:91:d4:39:28:fb:37:c2:e0:08:b8:50:02: d7:46:89:61:65:c6:9f:e6:e4:b3:61:5a:4e:c8:68: a7:26:8b:96:e2:a6:ae:cc:50:39:da:81:7a:af:29: d5:ad:ce:a1:0d:2f:e6:01:14:36:e0:c3:12:85:4b: ca:4b:36:b1:b9:c4:4b:28:1d:0b:92:c1:fc:2e:9f: ff:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:38:63:4A:4D:71:95:E3:CA:C1:C2:CE:43:B2:DF:2F:87:62:4E:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/34a15df3-ae78-372e-8160-e71d118b8d2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 209.224.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:c4:02:e1:4c:8c:05:fe:97:65:25:55:36:a0:9e:6a:5d:ea: 8a:e1:a8:18:7b:5b:8d:09:b2:02:4b:76:b2:2a:c9:61:1c:08: 07:8a:ae:66:9c:f0:3b:6e:44:ae:0f:b9:43:61:98:3d:ed:38: b0:36:47:39:fa:5e:bc:6b:4f:5d:9a:7c:6d:59:1d:66:f5:56: f6:39:63:b4:18:68:66:31:55:b7:53:13:8b:d0:ad:fa:da:85: df:db:98:47:9a:ee:ea:fd:24:51:57:be:51:86:c9:75:29:cc: 92:d1:cc:49:9f:73:26:d7:5b:1e:00:2d:a0:71:4a:08:b3:35: 36:a1:2a:67:c7:05:48:6c:b5:c6:01:18:ab:95:9e:82:f9:81: 26:af:f1:30:5b:d8:31:a3:db:14:f6:7a:a7:b5:7d:f9:f4:42: f7:0b:ee:bd:3b:70:19:2f:0f:27:0f:d6:50:19:b0:bb:76:e6: 58:39:01:60:fc:2a:2d:1e:ea:58:54:aa:4f:af:65:00:cb:d6: 47:5b:7c:51:36:e6:f4:44:4a:5b:12:6a:f9:d3:b7:88:26:69: 90:11:45:48:6e:27:86:b0:8d:8a:4b:97:55:4d:97:8c:e3:67: d6:19:15:47:68:39:55:37:de:6c:c0:93:96:17:77:d1:c4:25: e0:8d:ad:7a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgHqmqQta6yj2GVbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI0MTEyODE0MDA1MloXDTI1MDIyNjE0MDA1MlowLzEtMCsGA1UEAxMk YWJiOWNkOWUtNjQ5Yy00M2IzLTg1NWEtMjM3ZWU0NDJjNWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAni3IG5U18pQSQM8RSnfTthgqn0tRG51JhaWy t2+rgAhPDeiLplRfwtvOxw4/bZn1P4rljCH9pYWgyYxod40nYe+3jF5CKNcBblPh Wqip280xsKcNR7Rk6Gu0ma/Irz8/Nwpe7ywxMT5Kcc9VD8T8QGPbwk8YfGGe2FXk pWg/yxPhdiOgZBAWGhp1LrPGSwLpyWip4+xGmi5VmouR5D8OQSNkhbxO9M8dOisd vFX26vdxBVCkB96R1Dko+zfC4Ai4UALXRolhZcaf5uSzYVpOyGinJouW4qauzFA5 2oF6rynVrc6hDS/mARQ24MMShUvKSzaxucRLKB0LksH8Lp//dwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMc4Y0pNcZXjysHCzkOy3y+HYk4cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzRhMTVkZjMtYWU3OC0z NzJlLTgxNjAtZTcxZDExOGI4ZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0eAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAMMQC4UyMBf6XZSVVNqCeal3qiuGoGHtbjQmyAkt2sirJYRwIB4quZpzw O25Erg+5Q2GYPe04sDZHOfpevGtPXZp8bVkdZvVW9jljtBhoZjFVt1MTi9Ct+tqF 39uYR5ru6v0kUVe+UYbJdSnMktHMSZ9zJtdbHgAtoHFKCLM1NqEqZ8cFSGy1xgEY q5WegvmBJq/xMFvYMaPbFPZ6p7V9+fRC9wvuvTtwGS8PJw/WUBmwu3bmWDkBYPwq LR7qWFSqT69lAMvWR1t8UTbm9ERKWxJq+dO3iCZpkBFFSG4nhrCNikuXVU2XjONn 1hkVR2g5VTfebMCTlhd30cQl4I2teg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:42 2025 by rpki-client