$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/03940f68-15cc-37ea-9d81-2d50bccadcd8.roa File: 03940f68-15cc-37ea-9d81-2d50bccadcd8.roa (raw, json) Hash identifier: 5lFOSoifmKh14XtlyT6z/6AJ8f524oO1CQHNyMRSImM= Subject key identifier: 0E:31:7E:F0:FA:8F:42:1E:1E:C4:E0:9B:35:D1:15:BE:8A:BB:5F:5A Certificate issuer: /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Certificate serial: 010D0C9F432858487CEB3118C72A3ADBAEC1F580 Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/03940f68-15cc-37ea-9d81-2d50bccadcd8.roa Signing time: Thu 09 Jan 2025 14:00:52 +0000 ROA not before: Thu 09 Jan 2025 14:00:52 +0000 ROA not after: Wed 09 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 45.223.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7c:eb:31:18:c7:2a:3a:db:ae:c1:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Validity Not Before: Jan 9 14:00:52 2025 GMT Not After : Apr 9 13:00:52 2025 GMT Subject: CN=ee7b95cc-0d41-4ef3-aeff-ecdc8ea93e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9f:a4:4c:ad:ca:47:c7:9f:ec:40:bf:6d:40: 22:03:8f:7b:b4:65:04:50:e1:04:80:ba:e2:71:38: 43:9d:b7:a5:cd:4d:6e:16:21:95:57:e7:87:d6:34: 47:c4:97:83:03:9c:45:e2:b6:09:a1:21:d7:0d:4a: 1a:28:22:d2:b9:e4:60:63:2f:84:27:c2:19:ec:b6: 07:55:15:4c:69:42:0d:23:54:12:c3:53:9a:50:de: 06:ce:56:9b:1e:96:44:26:af:ce:7a:50:99:c6:3d: 50:3c:61:01:73:04:99:a4:7d:2f:8f:0e:9e:2d:06: db:0e:dc:3a:42:d4:ce:bd:14:95:a9:f8:19:1c:48: 89:33:6d:78:cc:30:a5:51:34:1a:78:59:7a:4d:ad: 9f:28:3f:56:4d:67:27:dd:e9:9d:e3:9e:ad:71:39: 26:ac:a9:65:a2:d8:83:2b:5d:20:0e:5a:ea:0a:67: 28:c5:b0:81:7b:34:e9:8a:57:82:b9:c9:01:d9:13: bf:77:4e:e5:db:d4:f6:33:0b:d1:25:86:0c:e5:93: e7:f2:b3:9e:60:5c:28:73:df:13:c5:34:f1:bf:b3: da:fb:77:41:d6:91:37:83:72:64:7e:a3:c4:37:7c: 7f:a0:5c:ac:a0:06:a5:69:76:5e:a1:a9:a5:75:5c: f1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:31:7E:F0:FA:8F:42:1E:1E:C4:E0:9B:35:D1:15:BE:8A:BB:5F:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/03940f68-15cc-37ea-9d81-2d50bccadcd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl X509v3 Authority Key Identifier: keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer sbgp-ipAddrBlock: critical IPv4: 45.223.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:59:1a:7d:6c:7e:f4:06:ec:08:47:4c:a7:e9:e9:d0:13:91: 0a:72:82:b8:6d:a5:7d:c7:1f:79:97:91:f8:a2:ae:b5:6f:36: 66:a9:13:c4:65:ac:8c:33:f0:92:5a:fb:99:59:3d:94:d9:e2: cc:11:26:9d:43:1e:41:d8:aa:6f:82:5a:ba:45:cc:8d:74:a6: 73:eb:6c:c2:e6:f1:6e:07:dd:b2:b7:40:ef:81:65:37:84:85: 27:02:05:f7:d0:07:b3:e9:b0:b2:a3:80:16:5f:50:26:6e:0a: 69:83:f9:4c:46:7f:a9:fa:b3:80:d7:bf:55:30:74:b8:73:dd: fb:8d:55:20:5d:5b:52:95:ff:43:5e:7b:08:ef:0e:73:be:d5: 9d:b5:28:ec:2a:73:11:b8:aa:53:14:c8:67:a5:2b:0f:dc:5d: 48:e0:c8:e8:d0:e4:ae:8b:6e:6f:0e:91:e5:04:09:2e:85:30: a7:1f:0b:80:a8:8b:a9:3d:1b:cf:13:eb:9e:8c:0b:09:b8:5b: 77:c7:74:2c:89:09:c8:30:ea:28:d9:8b:a6:67:88:d1:21:59: b3:81:26:88:99:d4:c2:10:89:fc:31:7f:92:0b:3e:dd:bd:5d: 73:67:1d:66:8c:29:e1:33:3d:03:dc:44:81:61:c3:7e:60:e4: a2:e3:48:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh86zEYxyo6267B9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQxYjdlOTYtYTZmMC00NGQzLWFlY2MtOTI5NGQ2YmNj Yzc4MB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk ZWU3Yjk1Y2MtMGQ0MS00ZWYzLWFlZmYtZWNkYzhlYTkzZTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ+kTK3KR8ef7EC/bUAiA497tGUEUOEEgLri cThDnbelzU1uFiGVV+eH1jRHxJeDA5xF4rYJoSHXDUoaKCLSueRgYy+EJ8IZ7LYH VRVMaUINI1QSw1OaUN4GzlabHpZEJq/OelCZxj1QPGEBcwSZpH0vjw6eLQbbDtw6 QtTOvRSVqfgZHEiJM214zDClUTQaeFl6Ta2fKD9WTWcn3emd456tcTkmrKllotiD K10gDlrqCmcoxbCBezTpileCuckB2RO/d07l29T2MwvRJYYM5ZPn8rOeYFwoc98T xTTxv7Pa+3dB1pE3g3JkfqPEN3x/oFysoAalaXZeoamldVzx0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4xfvD6j0IeHsTgmzXRFb6Ku19aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFi N2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0ZDZiY2NjNzgvMDM5NDBmNjgtMTVjYy0z N2VhLTlkODEtMmQ1MGJjY2FkY2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzQxYjdlOTYtYTZmMC00NGQzLWFl Y2MtOTI5NGQ2YmNjYzc4LzM0MWI3ZTk2LWE2ZjAtNDRkMy1hZWNjLTkyOTRkNmJj Y2M3OC5jcmwwHwYDVR0jBBgwFoAUoPBBeGGMSJbPqYzGmlOLQFAosrUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFiN2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0 ZDZiY2NjNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALd8MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINZGn1sfvQG7AhHTKfp6dATkQpygrhtpX3HH3mXkfiirrVvNmapE8Rl rIwz8JJa+5lZPZTZ4swRJp1DHkHYqm+CWrpFzI10pnPrbMLm8W4H3bK3QO+BZTeE hScCBffQB7PpsLKjgBZfUCZuCmmD+UxGf6n6s4DXv1UwdLhz3fuNVSBdW1KV/0Ne ewjvDnO+1Z21KOwqcxG4qlMUyGelKw/cXUjgyOjQ5K6Lbm8OkeUECS6FMKcfC4Co i6k9G88T656MCwm4W3fHdCyJCcgw6ijZi6ZniNEhWbOBJoiZ1MIQifwxf5ILPt29 XXNnHWaMKeEzPQPcRIFhw35g5KLjSOQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:10 2025 by rpki-client