$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9332fc23-36d4-3166-a215-774e26fb9257.roa File: 9332fc23-36d4-3166-a215-774e26fb9257.roa (raw, json) Hash identifier: /TNKeo51+nyNeVrxXouH+9xCLO/ubvQMo5V098Dt/vY= Subject key identifier: AE:83:21:40:D6:AA:47:4C:04:B9:58:A6:C4:C8:1B:44:94:D9:EF:92 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285848573AD508C2DCF8796F325660 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9332fc23-36d4-3166-a215-774e26fb9257.roa Signing time: Fri 27 Dec 2024 02:00:40 +0000 ROA not before: Fri 27 Dec 2024 02:00:40 +0000 ROA not after: Thu 27 Mar 2025 01:00:40 +0000 asID: 27455 IP address blocks: 216.174.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:57:3a:d5:08:c2:dc:f8:79:6f:32:56:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Dec 27 02:00:40 2024 GMT Not After : Mar 27 01:00:40 2025 GMT Subject: CN=f94ae1d7-95e5-41b5-b479-d8c8631c9e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:43:e9:de:95:19:6c:8d:ce:60:da:88:ba:bd: 56:f2:e5:1d:d2:d5:2a:31:f6:ac:2d:55:29:10:08: 36:11:23:7f:80:43:91:bc:87:b0:9e:4b:e7:7e:3f: 07:d4:71:b5:31:91:db:08:14:c4:91:e3:04:ed:e6: 71:b4:d3:c6:02:12:33:b3:de:0c:e6:4e:87:6c:52: 7b:28:56:9f:8b:61:3b:9c:99:ba:70:40:6e:4b:e6: 4f:d7:4c:61:5e:cf:eb:20:58:1d:b7:72:d4:a7:19: c4:fd:26:4a:43:2d:0c:1d:0c:5c:03:9d:7b:d5:22: fd:94:1d:19:f9:78:82:aa:a9:91:e5:a6:f2:d5:12: a1:15:00:8a:a5:58:56:8f:1f:9c:e4:ab:d6:4c:c6: 46:51:fc:fb:f5:7b:79:18:3f:ff:42:92:b7:7f:86: 19:75:97:2e:e0:10:8f:4f:75:37:6a:a6:d9:7e:d1: 8f:18:f9:41:a7:87:00:60:99:d4:6e:e0:50:3f:49: 89:5a:d3:c3:7b:e2:53:f9:a1:80:8e:a3:52:69:db: 6e:b7:05:45:81:78:49:2f:a9:0c:a7:96:76:46:f3: 76:1d:77:e7:1d:4b:ae:89:be:71:7e:8a:14:b2:8d: 42:11:23:28:dc:79:00:53:b7:db:f6:ed:60:f0:c8: f8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:83:21:40:D6:AA:47:4C:04:B9:58:A6:C4:C8:1B:44:94:D9:EF:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9332fc23-36d4-3166-a215-774e26fb9257.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 216.174.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:ab:c5:d4:17:41:3f:39:7f:a7:1c:09:69:10:83:74:e2:74: eb:88:b2:3f:86:67:3e:cc:f0:96:43:2b:21:7c:ec:4a:af:3d: 21:e9:2e:bb:6c:2a:57:c5:41:c0:34:97:94:02:71:30:ed:e2: 52:0f:09:b5:aa:c0:48:6c:c3:3c:d7:6f:35:6d:4a:9e:15:27: 58:07:a0:50:ce:ed:3b:8b:f6:a9:86:58:f0:7e:c2:bf:65:05: 8b:fa:01:f1:b2:b4:49:81:2d:d5:d9:ff:be:ea:a9:4a:d0:b8: 34:b0:63:04:42:44:d6:d6:fb:51:7b:63:62:a7:81:d4:73:82: 61:ca:0e:4d:36:23:34:8b:42:c1:4c:76:48:64:41:64:24:32: 67:92:55:d4:f7:72:c8:7e:8e:4a:4e:c3:94:17:19:55:65:c3: c5:00:fb:68:7c:6e:38:a9:b7:43:e5:ff:55:b3:af:db:c3:6a: 6a:fd:f8:76:83:81:10:f8:50:4a:f4:74:92:bd:71:0e:90:ce: c6:98:79:7b:42:c6:35:7f:0c:67:8f:f0:68:a8:2b:3e:fc:7c: 84:b8:f3:51:b9:21:5e:95:89:79:38:d5:60:58:3a:24:ce:39: ba:20:56:a9:ad:5b:9f:4c:b5:9e:53:b1:90:7f:c6:14:17:b7: 7b:6d:4b:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhXOtUIwtz4eW8yVmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI0MTIyNzAyMDA0MFoXDTI1MDMyNzAxMDA0MFowLzEtMCsGA1UEAxMk Zjk0YWUxZDctOTVlNS00MWI1LWI0NzktZDhjODYzMWM5ZTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUPp3pUZbI3OYNqIur1W8uUd0tUqMfasLVUp EAg2ESN/gEORvIewnkvnfj8H1HG1MZHbCBTEkeME7eZxtNPGAhIzs94M5k6HbFJ7 KFafi2E7nJm6cEBuS+ZP10xhXs/rIFgdt3LUpxnE/SZKQy0MHQxcA5171SL9lB0Z +XiCqqmR5aby1RKhFQCKpVhWjx+c5KvWTMZGUfz79Xt5GD//QpK3f4YZdZcu4BCP T3U3aqbZftGPGPlBp4cAYJnUbuBQP0mJWtPDe+JT+aGAjqNSadtutwVFgXhJL6kM p5Z2RvN2HXfnHUuuib5xfooUso1CESMo3HkAU7fb9u1g8Mj4uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6DIUDWqkdMBLlYpsTIG0SU2e+SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOTMzMmZjMjMtMzZkNC0z MTY2LWEyMTUtNzc0ZTI2ZmI5MjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2K4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABurxdQXQT85f6ccCWkQg3TidOuIsj+GZz7M8JZDKyF87EqvPSHpLrts KlfFQcA0l5QCcTDt4lIPCbWqwEhswzzXbzVtSp4VJ1gHoFDO7TuL9qmGWPB+wr9l BYv6AfGytEmBLdXZ/77qqUrQuDSwYwRCRNbW+1F7Y2KngdRzgmHKDk02IzSLQsFM dkhkQWQkMmeSVdT3csh+jkpOw5QXGVVlw8UA+2h8bjipt0Pl/1Wzr9vDamr9+HaD gRD4UEr0dJK9cQ6QzsaYeXtCxjV/DGeP8GioKz78fIS481G5IV6ViXk41WBYOiTO ObogVqmtW59MtZ5TsZB/xhQXt3ttSzE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:49 2025 by rpki-client