$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f94ccadf-7418-3f69-be72-bdf267aac201.roa File: f94ccadf-7418-3f69-be72-bdf267aac201.roa (raw, json) Hash identifier: U3YcdyXCcPrkrO2MAJNsrQbU8vxYtCxSkNHen7iQ8vQ= Subject key identifier: 0C:8E:97:1A:1A:6F:A5:AD:4C:D8:75:90:56:D1:6E:21:86:7C:9C:13 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584863CB07D007E101505D3088C0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f94ccadf-7418-3f69-be72-bdf267aac201.roa Signing time: Tue 31 Dec 2024 14:00:53 +0000 ROA not before: Tue 31 Dec 2024 14:00:53 +0000 ROA not after: Mon 31 Mar 2025 13:00:53 +0000 asID: 13720 IP address blocks: 209.0.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:63:cb:07:d0:07:e1:01:50:5d:30:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Dec 31 14:00:53 2024 GMT Not After : Mar 31 13:00:53 2025 GMT Subject: CN=01d3aba5-ea62-4715-bf2e-2e7853e9178a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2c:de:3a:b6:d1:33:5a:aa:da:c7:b1:32:43: 2e:04:86:17:f7:17:1d:ab:4f:57:88:c1:04:12:05: ab:26:8b:38:6c:8c:f4:09:06:0c:d4:d3:53:8f:b8: d0:11:30:ba:25:62:9b:ad:71:db:81:15:a7:4d:ca: 7c:13:db:48:4c:8f:0c:7f:fc:dd:ba:f5:cb:9f:98: 32:43:83:a2:f2:92:de:de:5f:4f:41:23:f1:49:a9: 81:dc:49:24:e1:b7:3a:ad:a7:3b:b6:fa:73:17:7c: f1:d1:b1:8b:49:54:e7:d0:70:92:70:00:af:69:10: 49:82:05:22:71:f4:90:df:6c:3e:53:be:06:68:dd: ba:38:43:c7:9c:0d:f6:4e:9e:9a:53:43:3a:18:98: 8e:c6:28:7c:be:c6:5e:d3:90:23:4b:d3:eb:ef:54: b5:52:71:83:22:29:e2:9e:f8:a1:81:8e:85:3c:7f: 7d:9d:7e:fb:a6:bb:6b:c4:ad:a6:f7:fb:e9:96:3e: 99:8c:9a:ca:56:81:be:c5:8e:43:6b:11:3a:b9:a3: 4e:15:c1:fc:a5:0e:f9:25:1c:ee:a8:b7:a6:f1:c2: 27:9f:aa:88:0a:9f:15:f3:f9:d7:26:75:39:72:f1: be:fb:4d:03:34:9c:a4:be:10:22:2c:2a:36:af:cc: 37:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8E:97:1A:1A:6F:A5:AD:4C:D8:75:90:56:D1:6E:21:86:7C:9C:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f94ccadf-7418-3f69-be72-bdf267aac201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 209.0.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:58:e8:42:5d:86:23:f4:e5:9d:63:61:5e:bf:42:27:1a:9f: ad:bd:18:28:1e:af:c4:dd:dc:73:b9:ae:c2:c7:b1:7f:8d:7c: 21:10:4d:bb:f5:5e:c1:53:6c:5f:fd:7b:1c:61:12:e0:3e:b8: ad:fd:16:83:30:6c:5e:6c:7d:45:e9:74:6e:fa:f2:cb:13:60: c9:ac:67:7e:a3:ec:4c:90:2a:ab:a6:39:9c:32:c8:c7:51:b1: 05:1b:4b:15:09:7f:77:d5:38:08:32:b8:84:46:6b:98:97:b6: ad:3c:cf:f5:e9:0f:1c:e3:44:6e:90:1a:76:c0:35:8e:40:11: e8:0c:7a:89:d7:ca:b2:ec:ac:e7:db:cf:8c:a8:4a:89:d7:db: d5:3a:e1:71:44:a9:a1:38:ce:f2:99:1d:5d:83:88:6c:0b:58: 9d:7e:2c:d5:02:42:d7:d2:24:34:e2:35:f4:64:aa:17:be:9e: d7:83:23:8b:b8:55:8d:0a:53:f2:d1:5f:a5:21:a7:0a:2f:30: 53:5b:c9:e8:96:93:82:79:71:ee:f3:ee:6f:57:20:5d:91:e1: b9:da:83:7c:e9:03:df:62:bf:09:7a:e3:e9:bb:ea:c0:73:3c: f8:cd:d1:23:9f:47:18:4c:d4:e9:8d:f5:af:a8:51:d3:7c:b5: ec:af:a8:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhjywfQB+EBUF0wiMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk MDFkM2FiYTUtZWE2Mi00NzE1LWJmMmUtMmU3ODUzZTkxNzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyzeOrbRM1qq2sexMkMuBIYX9xcdq09XiMEE EgWrJos4bIz0CQYM1NNTj7jQETC6JWKbrXHbgRWnTcp8E9tITI8Mf/zduvXLn5gy Q4Oi8pLe3l9PQSPxSamB3Ekk4bc6rac7tvpzF3zx0bGLSVTn0HCScACvaRBJggUi cfSQ32w+U74GaN26OEPHnA32Tp6aU0M6GJiOxih8vsZe05AjS9Pr71S1UnGDIini nvihgY6FPH99nX77prtrxK2m9/vplj6ZjJrKVoG+xY5DaxE6uaNOFcH8pQ75JRzu qLem8cInn6qICp8V8/nXJnU5cvG++00DNJykvhAiLCo2r8w36QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyOlxoab6WtTNh1kFbRbiGGfJwTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZjk0Y2NhZGYtNzQxOC0z ZjY5LWJlNzItYmRmMjY3YWFjMjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0QDqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhY6EJdhiP05Z1jYV6/Qican629GCger8Td3HO5rsLHsX+NfCEQTbv1 XsFTbF/9exxhEuA+uK39FoMwbF5sfUXpdG768ssTYMmsZ36j7EyQKqumOZwyyMdR sQUbSxUJf3fVOAgyuIRGa5iXtq08z/XpDxzjRG6QGnbANY5AEegMeonXyrLsrOfb z4yoSonX29U64XFEqaE4zvKZHV2DiGwLWJ1+LNUCQtfSJDTiNfRkqhe+nteDI4u4 VY0KU/LRX6UhpwovMFNbyeiWk4J5ce7z7m9XIF2R4bnag3zpA99ivwl64+m76sBz PPjN0SOfRxhM1OmN9a+oUdN8teyvqH8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:33 2025 by rpki-client