$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/69494d8e-96f3-3097-9ab3-f5f01f8b4789.roa File: 69494d8e-96f3-3097-9ab3-f5f01f8b4789.roa (raw, json) Hash identifier: abyz+ACHh5vB79nbxybkXfgBa+RpRyJZ2KH9AR0p1Ok= Subject key identifier: A9:23:D5:08:AB:B2:17:6B:FE:BF:5B:25:92:C9:7D:43:E3:A6:E5:F6 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F432858485CD0351FE6EE40DF1A25B100 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/69494d8e-96f3-3097-9ab3-f5f01f8b4789.roa Signing time: Sun 29 Dec 2024 02:00:39 +0000 ROA not before: Sun 29 Dec 2024 02:00:39 +0000 ROA not after: Sat 29 Mar 2025 01:00:39 +0000 asID: 3356 IP address blocks: 207.83.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5c:d0:35:1f:e6:ee:40:df:1a:25:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Dec 29 02:00:39 2024 GMT Not After : Mar 29 01:00:39 2025 GMT Subject: CN=f094c9c2-7cf3-4aff-809f-2a3984036ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b1:1f:a8:2d:2b:e1:a2:91:d8:54:72:d6:03: 52:9e:a4:b2:68:ad:a3:09:ff:19:dd:36:1b:98:64: 78:55:19:b8:93:57:e5:55:f0:3d:80:79:04:a1:44: ef:57:43:f4:d5:dc:3a:06:e7:01:31:82:e2:a4:0f: 75:7e:6a:19:52:9b:44:69:bb:57:c5:cc:36:c8:b1: dd:d0:95:22:25:b8:fc:57:11:b8:ef:85:9a:74:33: 74:66:ed:43:bf:29:b4:d4:3d:3f:7d:de:58:d2:31: 58:82:6c:f4:28:62:2e:a8:08:9c:93:d1:88:f0:aa: 1b:94:dd:11:99:6e:b9:c9:25:0b:5b:e5:0d:20:4b: 74:b4:de:ba:dd:1d:ea:19:68:1a:c5:54:af:17:5f: 98:4e:66:25:ff:18:3d:97:ac:6a:c8:0f:aa:d9:84: ee:72:52:8a:d6:84:39:8a:a5:22:17:0d:b5:da:30: 61:17:58:e7:af:5c:89:e9:43:dc:52:cc:2b:c8:aa: 6a:6e:7f:bb:c4:ee:b5:a3:3c:9b:0e:d4:57:2d:0b: 81:ed:4e:5d:fa:14:ca:72:8c:0c:80:b8:95:5b:0a: 3f:6e:c4:85:b2:cc:cf:07:7f:c5:11:0a:cd:1c:56: 17:97:9c:8b:68:eb:02:f0:97:cc:c6:1f:b8:25:27: 47:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:23:D5:08:AB:B2:17:6B:FE:BF:5B:25:92:C9:7D:43:E3:A6:E5:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/69494d8e-96f3-3097-9ab3-f5f01f8b4789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 207.83.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:d0:1c:ba:53:d3:ea:b1:78:78:2d:83:c0:67:f6:ac:e8:82: c9:7b:3a:21:57:71:58:1a:bd:0b:65:df:c0:31:5f:33:b2:03: 0b:54:ca:5e:8a:4f:16:0c:fa:94:38:69:fc:96:46:95:09:0f: 3d:d3:23:55:da:be:40:44:4f:73:00:80:0d:fb:cd:fe:9f:30: d3:5d:b7:c6:4d:c9:1b:45:b8:a0:a2:fa:a9:34:bc:57:bf:4e: 52:aa:eb:6c:6f:4d:06:5f:c8:e5:40:59:f7:82:aa:86:73:49: 14:e8:88:a0:ba:6c:48:96:12:e2:ec:16:c0:6f:06:72:3c:41: 8c:b3:51:13:ae:68:d8:dc:6a:f6:09:ab:3d:24:75:97:a3:7a: 4a:b2:94:b7:13:e8:e0:73:74:a7:36:e8:9d:cf:3e:f5:6b:a5: 17:81:8e:9e:94:08:dd:a7:4e:43:98:cf:4e:56:71:bd:85:41: 04:4f:40:1a:f9:11:0d:c0:6a:0f:d1:eb:27:a8:52:59:2b:5c: 0e:0b:d4:84:1b:cd:89:5b:1b:2b:01:53:c2:1c:34:38:d6:46: 36:d6:fa:6e:7d:94:48:f9:02:39:44:90:59:f5:06:55:55:37: 82:84:0b:f3:d7:74:1a:35:4c:0e:6a:9f:dc:a6:05:90:62:aa: c8:ad:54:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhc0DUf5u5A3xolsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI0MTIyOTAyMDAzOVoXDTI1MDMyOTAxMDAzOVowLzEtMCsGA1UEAxMk ZjA5NGM5YzItN2NmMy00YWZmLTgwOWYtMmEzOTg0MDM2ZmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rEfqC0r4aKR2FRy1gNSnqSyaK2jCf8Z3TYb mGR4VRm4k1flVfA9gHkEoUTvV0P01dw6BucBMYLipA91fmoZUptEabtXxcw2yLHd 0JUiJbj8VxG474WadDN0Zu1Dvym01D0/fd5Y0jFYgmz0KGIuqAick9GI8KoblN0R mW65ySULW+UNIEt0tN663R3qGWgaxVSvF1+YTmYl/xg9l6xqyA+q2YTuclKK1oQ5 iqUiFw212jBhF1jnr1yJ6UPcUswryKpqbn+7xO61ozybDtRXLQuB7U5d+hTKcowM gLiVWwo/bsSFsszPB3/FEQrNHFYXl5yLaOsC8JfMxh+4JSdH/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkj1Qirshdr/r9bJZLJfUPjpuX2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNjk0OTRkOGUtOTZmMy0z MDk3LTlhYjMtZjVmMDFmOGI0Nzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz1MgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3QHLpT0+qxeHgtg8Bn9qzogsl7OiFXcVgavQtl38AxXzOyAwtUyl6K TxYM+pQ4afyWRpUJDz3TI1XavkBET3MAgA37zf6fMNNdt8ZNyRtFuKCi+qk0vFe/ TlKq62xvTQZfyOVAWfeCqoZzSRToiKC6bEiWEuLsFsBvBnI8QYyzUROuaNjcavYJ qz0kdZejekqylLcT6OBzdKc26J3PPvVrpReBjp6UCN2nTkOYz05Wcb2FQQRPQBr5 EQ3Aag/R6yeoUlkrXA4L1IQbzYlbGysBU8IcNDjWRjbW+m59lEj5AjlEkFn1BlVV N4KEC/PXdBo1TA5qn9ymBZBiqsitVIA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:15 2025 by rpki-client