$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/84e996f0-ed2b-3b52-a485-7da64d83f07c.roa File: 84e996f0-ed2b-3b52-a485-7da64d83f07c.roa (raw, json) Hash identifier: 02I0xy28DKp71ieJDEVR2JBuKSvL25aX5yHfO8fzecA= Subject key identifier: 43:DC:7A:A9:BD:E7:AC:C6:A6:64:1B:E0:53:A3:CD:53:B7:4A:6C:49 Certificate issuer: /CN=4edd6357-2935-4b92-8130-68071d4eaf01 Certificate serial: 010D0C9F432858480BDA62C2093C3D6F7EC92000 Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/84e996f0-ed2b-3b52-a485-7da64d83f07c.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 53931 IP address blocks: 184.60.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:62:c2:09:3c:3d:6f:7e:c9:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01 Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=60ae041b-16de-4ad1-ac78-c1eea39a3bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0b:c9:e5:37:64:30:10:0d:49:cd:82:e3:46: 3c:1c:ee:77:1f:94:a9:8f:c3:a4:2a:f4:e9:c5:5d: 93:35:3e:08:bf:2c:2f:99:cb:ee:36:4d:51:3b:4c: 0d:10:e3:01:db:c1:df:d4:c4:52:74:95:0f:14:e8: 0a:03:ee:4a:41:f8:5b:63:70:c5:23:e6:1b:8c:e1: 9b:dd:f1:47:e3:24:99:96:63:6b:6e:ba:e9:94:dd: 04:a0:5c:5e:ea:f7:f2:f1:82:2b:49:99:9d:39:16: 56:f3:68:74:c1:39:ca:db:40:05:4c:f0:66:d2:03: 83:d0:fe:36:c7:d8:31:c7:2b:3f:1f:e0:e1:0d:6e: 3d:4e:fe:a1:ef:5f:01:09:4a:b1:bd:a4:01:b5:d5: 3f:24:c4:8d:1f:83:9b:87:84:11:3d:db:9c:50:71: ae:3f:26:12:e0:c0:57:db:7d:f4:66:bb:a4:8f:25: 3c:5e:a6:62:15:f2:38:6e:6a:98:84:85:18:d9:2b: 08:51:a8:5e:f4:4f:2a:7d:da:3b:97:24:fd:46:ef: 6f:40:fc:37:44:66:84:ee:7b:da:16:d3:bf:0b:6b: 0a:7b:10:07:4d:2f:34:59:c1:6f:f6:1d:73:4d:04: 13:b4:33:99:92:52:1e:11:78:08:df:6e:7c:7f:c2: bf:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DC:7A:A9:BD:E7:AC:C6:A6:64:1B:E0:53:A3:CD:53:B7:4A:6C:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/84e996f0-ed2b-3b52-a485-7da64d83f07c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl X509v3 Authority Key Identifier: keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer sbgp-ipAddrBlock: critical IPv4: 184.60.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:84:a7:68:5d:eb:00:64:5a:6f:aa:62:e0:a0:4a:6f:08:72: 11:aa:bd:0d:02:fb:bd:45:22:cc:51:9d:34:7c:74:85:69:3c: 45:0a:f7:fb:9f:81:41:41:d5:5b:c6:8b:d0:59:62:e2:52:59: b6:68:d3:79:ad:27:73:70:3c:43:db:05:9e:4a:6d:bf:49:44: 3e:2b:3a:81:6f:7a:dd:9e:b9:51:8e:84:f3:97:a2:25:8b:db: 30:92:32:52:86:34:8e:cf:43:d8:26:76:a8:79:af:01:fe:46: c5:18:cf:0c:dd:d9:fc:e3:0f:e7:00:c0:98:46:82:af:9b:48: b6:07:6d:bd:aa:ea:26:f3:4d:1a:3f:d6:0f:6b:95:ae:be:1a: 32:a7:1d:b0:99:55:be:09:0f:67:03:d6:85:97:ff:a2:bd:5c: ea:e6:a3:e6:0b:39:13:ba:ae:25:ec:a6:2b:9e:16:ca:bc:ba: be:ff:ec:6e:6f:fc:22:f7:c5:6f:79:50:48:27:88:49:cb:fe: f6:3a:a9:c8:78:0c:92:fb:9c:8e:8c:2b:77:31:aa:2a:86:2d: a1:92:ac:7c:b8:49:bb:83:d4:76:af:de:df:d3:f8:20:a3:79: 88:8c:eb:d2:e4:3d:6f:af:2b:1d:42:03:d8:92:e3:b4:49:57: bc:49:75:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgL2mLCCTw9b37JIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVkZDYzNTctMjkzNS00YjkyLTgxMzAtNjgwNzFkNGVh ZjAxMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk NjBhZTA0MWItMTZkZS00YWQxLWFjNzgtYzFlZWEzOWEzYmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQvJ5TdkMBANSc2C40Y8HO53H5Spj8OkKvTp xV2TNT4IvywvmcvuNk1RO0wNEOMB28Hf1MRSdJUPFOgKA+5KQfhbY3DFI+YbjOGb 3fFH4ySZlmNrbrrplN0EoFxe6vfy8YIrSZmdORZW82h0wTnK20AFTPBm0gOD0P42 x9gxxys/H+DhDW49Tv6h718BCUqxvaQBtdU/JMSNH4Obh4QRPducUHGuPyYS4MBX 2330ZrukjyU8XqZiFfI4bmqYhIUY2SsIUahe9E8qfdo7lyT9Ru9vQPw3RGaE7nva FtO/C2sKexAHTS80WcFv9h1zTQQTtDOZklIeEXgI3258f8K/4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPceqm956zGpmQb4FOjzVO3SmxJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRk NjM1Ny0yOTM1LTRiOTItODEzMC02ODA3MWQ0ZWFmMDEvODRlOTk2ZjAtZWQyYi0z YjUyLWE0ODUtN2RhNjRkODNmMDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVkZDYzNTctMjkzNS00YjkyLTgx MzAtNjgwNzFkNGVhZjAxLzRlZGQ2MzU3LTI5MzUtNGI5Mi04MTMwLTY4MDcxZDRl YWYwMS5jcmwwHwYDVR0jBBgwFoAUDFBNSElnaFxxGqFqTzIP9RhkBw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRkNjM1Ny0yOTM1LTRiOTItODEzMC02ODA3 MWQ0ZWFmMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuDzYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMyEp2hd6wBkWm+qYuCgSm8IchGqvQ0C+71FIsxRnTR8dIVpPEUK9/uf gUFB1VvGi9BZYuJSWbZo03mtJ3NwPEPbBZ5Kbb9JRD4rOoFvet2euVGOhPOXoiWL 2zCSMlKGNI7PQ9gmdqh5rwH+RsUYzwzd2fzjD+cAwJhGgq+bSLYHbb2q6ibzTRo/ 1g9rla6+GjKnHbCZVb4JD2cD1oWX/6K9XOrmo+YLORO6riXspiueFsq8ur7/7G5v /CL3xW95UEgniEnL/vY6qch4DJL7nI6MK3cxqiqGLaGSrHy4SbuD1Hav3t/T+CCj eYiM69LkPW+vKx1CA9iS47RJV7xJdc4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:37 2025 by rpki-client