$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/854709f1-c55c-3f5f-9469-3bea6718e5b4.roa File: 854709f1-c55c-3f5f-9469-3bea6718e5b4.roa (raw, json) Hash identifier: JCZclR11A3Bzst7LxO3KE8pRJB6GhDAto8n4qKNBeuU= Subject key identifier: 0A:26:73:0A:DF:07:7C:76:B3:1F:BC:AA:EC:5E:66:2F:45:BE:57:18 Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc Certificate serial: 010D0C9F4328584820CA932791D66D8C0AB44830 Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/854709f1-c55c-3f5f-9469-3bea6718e5b4.roa Signing time: Sat 07 Dec 2024 14:00:51 +0000 ROA not before: Sat 07 Dec 2024 14:00:51 +0000 ROA not after: Fri 07 Mar 2025 14:00:51 +0000 asID: 26930 IP address blocks: 23.133.6.0/24 maxlen: 24 202.5.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:20:ca:93:27:91:d6:6d:8c:0a:b4:48:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc Validity Not Before: Dec 7 14:00:51 2024 GMT Not After : Mar 7 14:00:51 2025 GMT Subject: CN=32b9eca1-0ca1-48ea-80f7-3d61eb294705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4c:1b:1a:b2:de:e7:46:c6:47:89:99:6b:a4: 69:21:ae:ba:8f:78:f3:1c:69:d7:67:cb:a2:76:ea: 37:6d:8a:ee:32:81:07:d8:15:c2:ba:0d:bb:c2:18: 97:e8:fb:a8:71:82:17:c3:18:b1:81:ff:f0:69:91: 11:6c:e1:6a:ce:04:c3:49:af:0d:b1:dd:c8:0e:8a: e6:6e:32:f3:50:e0:ed:1e:da:6c:38:25:37:3f:5d: a2:08:1a:67:c1:73:61:6e:f0:aa:7b:20:c7:21:35: 23:0e:be:cd:c3:57:39:5c:07:5e:6f:1e:d5:f5:8c: 15:37:b8:fd:73:6c:75:75:a0:35:a4:61:3a:47:c6: 90:f3:27:12:75:ed:fd:a5:46:9d:5f:6c:52:04:c4: 73:13:f3:84:7a:e9:18:7c:8c:e6:59:3c:3c:00:b4: 41:ec:79:5b:00:b0:ec:ef:d9:72:ac:e6:2d:aa:5a: e3:54:15:71:62:80:75:da:55:63:d0:41:c5:ab:bd: cf:1b:fc:b3:51:e4:0f:b6:85:12:52:49:62:f6:e6: 09:fb:6e:1a:7b:41:aa:85:59:a6:3a:fe:1b:10:9b: 77:9d:0c:6f:1e:9b:7e:97:3b:66:78:6c:59:7c:ed: ce:3e:d4:0b:c1:dd:40:8d:d7:f5:24:bc:b2:a4:08: 62:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:26:73:0A:DF:07:7C:76:B3:1F:BC:AA:EC:5E:66:2F:45:BE:57:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/854709f1-c55c-3f5f-9469-3bea6718e5b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl X509v3 Authority Key Identifier: keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer sbgp-ipAddrBlock: critical IPv4: 23.133.6.0/24 202.5.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:6b:36:0c:d1:7f:95:12:93:ec:c0:0b:77:6d:e4:c4:ea:34: 99:2e:7b:07:88:e3:95:5f:01:c1:c5:73:da:1a:eb:9d:8c:67: 30:4c:b7:48:e6:4c:58:5c:d2:3f:6c:06:9f:39:7c:a2:c5:97: 9f:31:7b:81:9e:f5:fb:3b:e4:f4:75:07:08:5d:c5:1b:60:9d: 50:84:23:67:e1:4f:68:70:ee:c9:ec:18:d0:cc:7a:eb:c5:6e: 52:20:10:a3:30:51:da:8c:46:4f:19:3c:67:a0:2e:ff:c1:f8: 3b:ee:9e:72:d2:a3:75:46:6b:22:90:89:e4:a7:98:d7:db:88: 83:d3:7b:be:b6:cb:cf:6f:d3:89:01:70:fa:88:49:8a:ff:30: 3b:3f:7a:19:76:57:a5:ad:42:4c:6e:3c:ec:46:da:5f:a8:de: 21:cd:e8:ea:9a:bb:5e:c8:f5:e4:88:82:56:00:a7:2f:6b:b7: 30:14:63:e1:22:1e:99:66:e2:7b:11:21:b9:db:ec:ab:9c:06: 27:65:8d:ac:79:d9:da:f3:aa:82:0f:35:62:1f:9c:66:91:9c: f7:06:49:a9:cc:eb:61:c0:8a:04:2a:3b:75:95:df:b6:99:5c: 9f:6b:38:59:c1:f2:9f:38:82:fe:5d:b7:2d:d8:ef:f2:af:0f: 37:26:e6:0b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEggypMnkdZtjAq0SDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3 NGJjMB4XDTI0MTIwNzE0MDA1MVoXDTI1MDMwNzE0MDA1MVowLzEtMCsGA1UEAxMk MzJiOWVjYTEtMGNhMS00OGVhLTgwZjctM2Q2MWViMjk0NzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0wbGrLe50bGR4mZa6RpIa66j3jzHGnXZ8ui duo3bYruMoEH2BXCug27whiX6PuocYIXwxixgf/waZERbOFqzgTDSa8Nsd3IDorm bjLzUODtHtpsOCU3P12iCBpnwXNhbvCqeyDHITUjDr7Nw1c5XAdebx7V9YwVN7j9 c2x1daA1pGE6R8aQ8ycSde39pUadX2xSBMRzE/OEeukYfIzmWTw8ALRB7HlbALDs 79lyrOYtqlrjVBVxYoB12lVj0EHFq73PG/yzUeQPtoUSUkli9uYJ+24ae0GqhVmm Ov4bEJt3nQxvHpt+lztmeGxZfO3OPtQLwd1Ajdf1JLyypAhiIQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAomcwrfB3x2sx+8quxeZi9FvlcYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2 NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvODU0NzA5ZjEtYzU1Yy0z ZjVmLTk0NjktM2JlYTY3MThlNWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5 NTdkZTc0YmMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4UGAwQA ygUaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGdrNgzRf5USk+zAC3dt5MTqNJkueweI45VfAcHFc9oa652M ZzBMt0jmTFhc0j9sBp85fKLFl58xe4Ge9fs75PR1BwhdxRtgnVCEI2fhT2hw7sns GNDMeuvFblIgEKMwUdqMRk8ZPGegLv/B+DvunnLSo3VGayKQieSnmNfbiIPTe762 y89v04kBcPqISYr/MDs/ehl2V6WtQkxuPOxG2l+o3iHN6Oqau17I9eSIglYApy9r tzAUY+EiHplm4nsRIbnb7KucBidljax52drzqoIPNWIfnGaRnPcGSanM62HAigQq O3WV37aZXJ9rOFnB8p84gv5dty3Y7/KvDzcm5gs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:25 2025 by rpki-client