$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/bde956a1-6e2e-3242-be5c-cd2e2f445e7e.roa File: bde956a1-6e2e-3242-be5c-cd2e2f445e7e.roa (raw, json) Hash identifier: JX8EdjQR/q77iAMYuoEo+3syrExY1zZE1FfiqvOwQDA= Subject key identifier: A1:C0:9E:9A:1E:AA:0C:11:28:2A:0B:81:80:14:4E:CF:3A:33:C0:81 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F43285848451586EA3E23F855FF803140 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/bde956a1-6e2e-3242-be5c-cd2e2f445e7e.roa Signing time: Fri 20 Dec 2024 14:00:51 +0000 ROA not before: Fri 20 Dec 2024 14:00:51 +0000 ROA not after: Thu 20 Mar 2025 13:00:51 +0000 asID: 14061 IP address blocks: 157.230.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:45:15:86:ea:3e:23:f8:55:ff:80:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Dec 20 14:00:51 2024 GMT Not After : Mar 20 13:00:51 2025 GMT Subject: CN=4aebadd1-1076-41fa-81bf-a2f758d124ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:97:21:0a:ee:9d:97:6f:4c:fa:10:ff:f0:7c: a4:f4:1e:f2:10:55:50:b0:86:c8:52:4d:ff:ca:a4: 2e:92:7f:31:57:d3:fa:d0:e7:3b:7c:cd:48:1d:72: ab:b1:8e:8f:05:e9:6f:13:b5:f5:39:0d:fa:77:9e: fe:97:21:23:7c:0c:91:50:e0:cb:55:35:7a:3f:59: b5:f2:5e:c5:c0:7b:6a:a3:95:4c:9e:01:53:d9:8a: 72:d1:15:2b:97:66:64:bf:1e:8d:8d:42:09:ff:81: cf:80:36:12:eb:23:e6:7f:24:7c:be:9b:3d:db:a0: 56:aa:db:08:34:f8:a1:b6:b5:bf:1a:85:67:2b:3f: 23:0a:57:2a:8c:c8:4c:ef:b4:bb:e4:49:ee:50:14: 23:2b:df:61:17:45:0b:77:23:8e:35:94:30:4e:3f: 62:a4:71:ff:71:8c:9f:67:dd:87:27:42:8b:e9:cd: d0:b3:20:be:c5:38:cd:8b:98:d3:4b:0d:c4:a0:f8: 8d:58:a3:01:18:f6:1d:21:42:24:f8:64:af:58:1d: 8e:d9:fd:8a:7c:2c:71:af:f9:74:df:d2:b0:a1:11: 26:08:19:dc:d5:8a:9e:66:29:12:f2:b8:24:bd:5d: b4:86:cf:fa:a9:54:9a:2f:bc:57:44:6e:53:64:ba: a8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C0:9E:9A:1E:AA:0C:11:28:2A:0B:81:80:14:4E:CF:3A:33:C0:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/bde956a1-6e2e-3242-be5c-cd2e2f445e7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 157.230.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:48:25:a7:6c:5a:34:51:68:1f:96:c6:ba:7f:d7:16:e2:6f: dc:16:d2:b5:21:da:8c:19:f3:57:8c:16:9f:a9:cc:15:5b:a9: bd:38:b3:93:e4:2b:49:13:2b:6d:a0:c3:68:14:6a:9c:69:30: cb:24:fe:06:47:4b:21:eb:d0:fa:10:3c:2f:60:96:47:f9:92: 5c:a3:5f:ce:79:3f:c8:97:70:c3:a7:db:71:09:4a:2c:ed:27: 5a:3a:8e:52:7c:f7:64:1e:e9:04:f6:a7:43:7b:ff:ae:d0:b3: d1:24:be:5d:cd:63:cb:79:ee:5f:47:40:e0:e5:91:6d:57:06: 79:f4:4b:e4:36:65:8f:a9:55:51:42:b0:3f:08:08:bb:0a:ab: ce:3a:19:92:e9:ff:cf:dc:43:15:5c:66:61:09:05:a3:9f:ea: 41:79:fa:1a:ab:f2:ff:93:5e:98:d8:4d:3c:a4:03:ae:42:50: 9b:5c:a1:b8:68:33:92:f8:35:df:e8:e2:92:96:c4:58:5e:bd: 72:a2:a7:34:7b:07:45:95:e3:84:f2:a9:aa:d6:8f:84:78:d0: a7:63:01:cd:af:5e:f8:ef:8a:9e:db:7e:6b:b7:33:d8:ac:2e: ec:65:43:7b:46:f8:f5:f1:20:92:ca:d3:3e:62:a1:49:f0:a7: e2:bc:83:0d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhFFYbqPiP4Vf+AMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk NGFlYmFkZDEtMTA3Ni00MWZhLTgxYmYtYTJmNzU4ZDEyNGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5chCu6dl29M+hD/8Hyk9B7yEFVQsIbIUk3/ yqQukn8xV9P60Oc7fM1IHXKrsY6PBelvE7X1OQ36d57+lyEjfAyRUODLVTV6P1m1 8l7FwHtqo5VMngFT2Ypy0RUrl2Zkvx6NjUIJ/4HPgDYS6yPmfyR8vps926BWqtsI NPihtrW/GoVnKz8jClcqjMhM77S75EnuUBQjK99hF0ULdyOONZQwTj9ipHH/cYyf Z92HJ0KL6c3QsyC+xTjNi5jTSw3EoPiNWKMBGPYdIUIk+GSvWB2O2f2KfCxxr/l0 39KwoREmCBnc1YqeZikS8rgkvV20hs/6qVSaL7xXRG5TZLqoaQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKHAnpoeqgwRKCoLgYAUTs86M8CBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvYmRlOTU2YTEtNmUyZS0z MjQyLWJlNWMtY2QyZTJmNDQ1ZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAneYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAhkglp2xaNFFoH5bGun/XFuJv3BbStSHajBnzV4wWn6nMFVupvTizk+Qr SRMrbaDDaBRqnGkwyyT+BkdLIevQ+hA8L2CWR/mSXKNfznk/yJdww6fbcQlKLO0n WjqOUnz3ZB7pBPanQ3v/rtCz0SS+Xc1jy3nuX0dA4OWRbVcGefRL5DZlj6lVUUKw PwgIuwqrzjoZkun/z9xDFVxmYQkFo5/qQXn6Gqvy/5NemNhNPKQDrkJQm1yhuGgz kvg13+jikpbEWF69cqKnNHsHRZXjhPKpqtaPhHjQp2MBza9e+O+Kntt+a7cz2Kwu 7GVDe0b49fEgksrTPmKhSfCn4ryDDQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:57 2025 by rpki-client