$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/48ba97a9-e439-3494-95f4-ba34ffeddc52.roa File: 48ba97a9-e439-3494-95f4-ba34ffeddc52.roa (raw, json) Hash identifier: Kv1wR7uVh/HKBMuHnkN4euMFIpUM4ucLxM1m/Qju0xc= Subject key identifier: AD:49:32:FC:BD:D7:4D:53:38:57:40:4B:12:6C:72:9D:4E:B9:F4:89 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F432858482D5A916F9E8FF2C14C0D25C0 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/48ba97a9-e439-3494-95f4-ba34ffeddc52.roa Signing time: Thu 12 Dec 2024 02:00:38 +0000 ROA not before: Thu 12 Dec 2024 02:00:38 +0000 ROA not after: Wed 12 Mar 2025 01:00:38 +0000 asID: 137409 IP address blocks: 173.239.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2d:5a:91:6f:9e:8f:f2:c1:4c:0d:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Dec 12 02:00:38 2024 GMT Not After : Mar 12 01:00:38 2025 GMT Subject: CN=e8b2193b-9259-470b-8575-97ba896543f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:95:00:df:bd:0b:00:9a:0c:6c:31:ef:6d:1f: e9:52:48:73:9a:ab:5f:45:18:13:92:3e:b9:66:1d: f4:22:94:79:af:ec:68:5f:76:be:fe:83:af:b9:6f: ce:33:27:a4:b8:bf:08:23:7f:86:a7:c8:a7:25:c2: fa:d2:b7:92:37:a1:ac:ce:e1:96:e4:8e:66:a5:83: 42:a3:87:59:49:6e:54:b8:c1:2a:96:7a:4c:31:2d: b1:f9:79:87:b1:61:17:f7:83:45:0b:fe:56:1e:64: 4c:30:31:ff:db:02:8e:31:f2:88:74:99:55:36:57: 5e:3b:e9:67:3d:bf:29:27:9b:80:91:ef:fc:2a:14: 25:b9:61:ed:1c:db:3d:9f:e8:c7:75:48:2f:a5:be: 24:89:ed:fa:50:d8:33:bf:51:65:8e:d8:c7:83:12: 4e:8b:be:ce:06:1b:48:aa:ae:1e:77:8e:7d:3a:c7: 06:9d:0a:94:04:3a:71:05:49:fe:27:ce:e1:58:78: 00:89:51:3d:ee:ed:9c:aa:cb:63:e4:5d:17:c2:27: 29:b9:48:f1:63:e7:55:4e:4a:37:2b:84:e5:7d:43: 2f:46:55:4d:4d:63:3f:9d:68:da:b7:b6:a9:18:20: 25:5b:3b:4d:14:bb:f6:4b:b0:11:fd:a8:96:60:b0: c5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:49:32:FC:BD:D7:4D:53:38:57:40:4B:12:6C:72:9D:4E:B9:F4:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/48ba97a9-e439-3494-95f4-ba34ffeddc52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:1c:22:9b:54:0d:5d:13:c3:66:e0:b2:38:a2:f1:d5:29:ba: eb:b5:80:36:b4:f0:45:8c:fa:1e:e0:d9:c4:96:ec:87:37:9c: 79:78:4b:a4:5e:0f:a0:8c:5c:ba:ba:3f:28:50:31:17:d3:bf: 14:81:7d:dc:34:c4:c6:d3:38:3a:4a:eb:8b:cb:0b:c3:4c:d1: d1:87:06:0e:46:77:48:4d:76:86:66:2f:d9:3b:7f:e2:b4:1e: 0d:9d:e7:2e:19:ac:d5:dd:43:88:bd:2e:75:53:d3:e2:c6:a8: bb:1b:e9:e8:22:31:02:15:a8:f0:e9:69:3b:f9:3c:1c:ce:d1: 75:1f:4f:31:d5:88:bc:b2:1b:a3:48:39:2c:02:20:9d:54:33: 8d:04:0b:86:f9:1d:5a:64:1b:af:9b:93:a2:f3:33:49:58:52: a8:aa:e9:2f:8b:76:8b:44:e9:4f:26:9f:d1:6b:b8:77:21:85: e5:0c:5f:06:42:6f:3d:f4:f4:89:9a:14:7c:40:9c:77:7a:ee: 01:88:34:9f:86:18:f1:a2:ce:26:a3:fe:47:43:1b:b7:9a:42: b9:b2:43:c4:8e:8f:50:19:fe:e3:60:71:e3:2b:bb:0e:da:bb: e8:71:01:53:c3:30:27:f9:da:fc:8a:81:21:a9:6b:bc:ff:09: 76:a7:75:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgtWpFvno/ywUwNJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI0MTIxMjAyMDAzOFoXDTI1MDMxMjAxMDAzOFowLzEtMCsGA1UEAxMk ZThiMjE5M2ItOTI1OS00NzBiLTg1NzUtOTdiYTg5NjU0M2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJUA370LAJoMbDHvbR/pUkhzmqtfRRgTkj65 Zh30IpR5r+xoX3a+/oOvuW/OMyekuL8II3+Gp8inJcL60reSN6GszuGW5I5mpYNC o4dZSW5UuMEqlnpMMS2x+XmHsWEX94NFC/5WHmRMMDH/2wKOMfKIdJlVNldeO+ln Pb8pJ5uAke/8KhQluWHtHNs9n+jHdUgvpb4kie36UNgzv1FljtjHgxJOi77OBhtI qq4ed459OscGnQqUBDpxBUn+J87hWHgAiVE97u2cqstj5F0XwicpuUjxY+dVTko3 K4TlfUMvRlVNTWM/nWjat7apGCAlWztNFLv2S7AR/aiWYLDFpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1JMvy9101TOFdASxJscp1OufSJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvNDhiYTk3YTktZTQzOS0z NDk0LTk1ZjQtYmEzNGZmZWRkYzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0cIptUDV0Tw2bgsjii8dUpuuu1gDa08EWM+h7g2cSW7Ic3nHl4S6Re D6CMXLq6PyhQMRfTvxSBfdw0xMbTODpK64vLC8NM0dGHBg5Gd0hNdoZmL9k7f+K0 Hg2d5y4ZrNXdQ4i9LnVT0+LGqLsb6egiMQIVqPDpaTv5PBzO0XUfTzHViLyyG6NI OSwCIJ1UM40EC4b5HVpkG6+bk6LzM0lYUqiq6S+LdotE6U8mn9FruHchheUMXwZC bz309ImaFHxAnHd67gGINJ+GGPGiziaj/kdDG7eaQrmyQ8SOj1AZ/uNgceMruw7a u+hxAVPDMCf52vyKgSGpa7z/CXandSM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:31:04 2025 by rpki-client