$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bbd2f858-9042-3bcd-b218-a6755f52faa6.roa File: bbd2f858-9042-3bcd-b218-a6755f52faa6.roa (raw, json) Hash identifier: +QASFcg0A0hCwSQxV23HdfhTHVTwYnTgNW9XE1KDKvg= Subject key identifier: A5:2A:47:2E:A5:7D:9F:A0:A8:F0:D8:73:F7:A3:BF:02:56:44:B6:52 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C448CCC393E4AFE93FA00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bbd2f858-9042-3bcd-b218-a6755f52faa6.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 13367 IP address blocks: 24.118.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:44:8c:cc:39:3e:4a:fe:93:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=62d59157-d729-4cb4-8232-838c3c26308c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:91:be:af:2c:7b:3a:b3:13:97:96:87:e9:47: f8:8d:20:01:5e:df:18:40:42:db:0c:f4:c5:68:fc: 53:ff:d4:a5:20:bc:c2:0b:06:46:1c:04:03:18:40: 82:e1:4a:51:f5:e7:fe:02:f5:a4:84:88:8f:16:2e: c4:51:eb:c2:1c:28:d0:db:c9:56:a3:a7:25:63:ef: 01:1a:f6:48:2a:2d:5f:ca:05:c5:c9:9f:41:fd:5c: 29:f2:88:19:0b:db:11:02:cf:e9:6c:05:b1:89:3e: a9:f8:04:2a:64:e2:68:12:ab:56:c9:99:6a:5d:6a: 4d:75:9f:0a:49:ef:17:57:63:00:bb:6c:63:72:aa: 32:47:2d:e5:d1:85:ad:21:40:11:12:de:b8:f4:02: 87:9c:a6:37:1f:03:b2:40:19:71:45:4f:7f:f9:5e: a4:81:8d:52:c0:29:50:0a:5a:68:bd:60:d9:4d:4a: 3f:04:51:ec:c3:0c:ef:23:37:8c:79:0c:44:a2:22: e7:6a:fd:ef:7f:8d:90:c5:7f:ca:73:0f:56:f9:81: 08:1c:10:a4:11:e4:ca:39:6a:9e:f3:dc:f8:cc:a2: 45:e6:56:20:7d:46:73:9b:5f:70:69:9d:72:74:d8: 44:da:7e:91:b2:b3:49:5a:33:b0:00:42:d6:0e:5d: b6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2A:47:2E:A5:7D:9F:A0:A8:F0:D8:73:F7:A3:BF:02:56:44:B6:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bbd2f858-9042-3bcd-b218-a6755f52faa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.118.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:3f:02:a3:61:ba:79:ef:2b:93:9b:95:58:12:9f:22:bc:6b: b2:c1:61:34:67:98:d6:de:f6:d7:14:37:dd:76:e3:82:cc:3c: 36:bb:cd:e4:8e:d9:b2:69:05:dc:2d:2d:33:85:c8:70:ae:7f: 30:41:38:38:4d:d1:65:68:cb:e0:f8:f9:da:01:e9:88:14:70: 61:dc:63:91:13:93:3f:c3:11:84:e8:a8:21:fd:9b:5d:5f:38: 22:92:97:0a:16:0c:cb:6e:85:c0:75:dd:2f:59:ad:b1:2b:dd: 19:37:8a:dc:a6:18:46:1e:fe:56:4f:00:45:ab:c2:8a:b8:9c: 4b:f7:c5:6c:b2:15:89:54:40:b9:20:c7:d4:08:f2:92:e1:9d: 0f:21:41:d7:c6:c0:e9:37:c4:8d:e7:05:0b:47:67:6e:ff:ef: 48:77:c2:83:c9:73:ad:c4:c7:c7:4e:ab:39:f2:2c:58:b9:3e: 84:9c:a8:11:fd:17:e5:bc:3e:f0:9f:d1:d4:5d:76:3b:b5:1a: f9:52:be:cf:ee:8e:90:81:49:a8:54:b5:e1:0f:c9:ad:26:0a: 83:f8:38:df:83:3f:81:23:ed:75:43:4e:b3:cc:e3:47:39:e0: 1b:8c:ce:77:68:81:3a:a1:c7:3c:07:8b:78:ee:a6:62:6a:38: 72:88:a3:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebESMzDk+Sv6T+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NjJkNTkxNTctZDcyOS00Y2I0LTgyMzItODM4YzNjMjYzMDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZG+ryx7OrMTl5aH6Uf4jSABXt8YQELbDPTF aPxT/9SlILzCCwZGHAQDGECC4UpR9ef+AvWkhIiPFi7EUevCHCjQ28lWo6clY+8B GvZIKi1fygXFyZ9B/Vwp8ogZC9sRAs/pbAWxiT6p+AQqZOJoEqtWyZlqXWpNdZ8K Se8XV2MAu2xjcqoyRy3l0YWtIUAREt649AKHnKY3HwOyQBlxRU9/+V6kgY1SwClQ ClpovWDZTUo/BFHswwzvIzeMeQxEoiLnav3vf42QxX/Kcw9W+YEIHBCkEeTKOWqe 89z4zKJF5lYgfUZzm19waZ1ydNhE2n6RsrNJWjOwAELWDl22aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUqRy6lfZ+gqPDYc/ejvwJWRLZSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmJkMmY4NTgtOTA0Mi0z YmNkLWIyMTgtYTY3NTVmNTJmYWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGHb2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGg/AqNhunnvK5OblVgSnyK8a7LBYTRnmNbe9tcUN91244LMPDa7zeSO 2bJpBdwtLTOFyHCufzBBODhN0WVoy+D4+doB6YgUcGHcY5ETkz/DEYToqCH9m11f OCKSlwoWDMtuhcB13S9ZrbEr3Rk3itymGEYe/lZPAEWrwoq4nEv3xWyyFYlUQLkg x9QI8pLhnQ8hQdfGwOk3xI3nBQtHZ27/70h3woPJc63Ex8dOqznyLFi5PoScqBH9 F+W8PvCf0dRddju1GvlSvs/ujpCBSahUteEPya0mCoP4ON+DP4Ej7XVDTrPM40c5 4BuMzndogTqhxzwHi3jupmJqOHKIo9Y= -----END CERTIFICATE-----Generated at Mon Apr 7 05:57:56 2025 by rpki-client