$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f24f1b3f-d5e4-3086-89b8-c54a0ecb1c82.roa File: f24f1b3f-d5e4-3086-89b8-c54a0ecb1c82.roa (raw, json) Hash identifier: y7Jh42p88sHLSGhu8YHxc0lstn6Lo76xhw9lTeSc/No= Subject key identifier: B1:66:92:AB:76:5F:E9:76:AD:FD:93:F2:48:23:2D:21:34:03:81:C6 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F432858484DD72D8B8F6F4DB602CAA780 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f24f1b3f-d5e4-3086-89b8-c54a0ecb1c82.roa Signing time: Mon 23 Dec 2024 17:17:41 +0000 ROA not before: Mon 23 Dec 2024 17:17:41 +0000 ROA not after: Sun 23 Mar 2025 16:17:41 +0000 asID: 211373 IP address blocks: 23.26.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4d:d7:2d:8b:8f:6f:4d:b6:02:ca:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Dec 23 17:17:41 2024 GMT Not After : Mar 23 16:17:41 2025 GMT Subject: CN=a15e06b8-e39b-454a-993d-cdb5a5771a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:16:e4:ba:af:e3:fd:37:bb:cc:cb:44:07:73: 0f:ca:35:d3:1b:a4:66:04:78:31:a5:68:30:3a:ae: 2f:b1:bd:ca:0a:43:67:76:48:76:5c:50:4c:d6:81: 7a:de:bd:71:8f:0b:f8:2a:dd:e6:8c:eb:77:cd:6a: 3f:86:01:3e:38:73:43:7e:6f:a7:b4:84:f7:ab:01: 95:66:fc:9c:b0:13:51:81:b8:7b:f6:5a:e2:4c:b7: 45:db:ed:46:51:2f:bf:d3:2e:9b:3c:fe:f2:45:ea: 70:44:df:66:82:04:05:03:39:45:60:60:87:13:5b: 51:82:e9:a4:c5:93:d5:5d:da:0e:ee:9c:9f:c6:8c: ce:11:6f:8f:59:b2:89:32:0a:ae:42:bf:a1:d0:c8: c1:d1:99:e5:9d:3d:64:d6:5e:aa:53:44:da:f5:cc: ff:cd:fe:77:84:2a:48:66:f0:67:68:c7:0a:d2:9f: 20:fa:fb:39:9d:32:07:85:6e:fe:fb:74:bb:c2:ff: 6e:07:9b:54:a7:84:5f:57:98:58:fe:cf:84:f6:69: 05:bb:c9:34:9c:7e:23:25:0d:42:54:65:8b:59:c5: 44:4d:68:8d:f0:fe:84:ee:4d:72:73:db:dc:b9:52: ac:c1:d9:bd:b9:52:f4:4d:fa:2a:6b:b2:45:ad:23: 5c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:66:92:AB:76:5F:E9:76:AD:FD:93:F2:48:23:2D:21:34:03:81:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f24f1b3f-d5e4-3086-89b8-c54a0ecb1c82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 23.26.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:2a:14:b1:26:d5:fc:04:9d:8c:fc:09:9f:29:ad:35:6a:73: d5:fc:cb:33:42:fa:0b:1a:de:ca:db:1d:38:ed:87:e0:65:bc: 4f:16:c4:e2:ce:02:2b:c4:a2:29:61:cb:cc:60:cd:4b:c0:ca: f8:70:20:c1:31:80:55:c9:58:e7:60:29:80:cc:da:b0:49:53: f5:5a:37:32:f8:ab:fa:0c:a4:7f:da:43:b3:9b:27:57:9a:34: 11:ab:b1:b0:5c:1d:02:c5:9a:90:fc:16:f5:65:53:27:d0:57: 42:03:a1:f0:b5:f9:94:90:ff:ef:87:8a:1e:6d:ad:bb:aa:2f: c5:20:51:28:12:94:1f:34:ba:f1:f6:f9:d6:7f:90:a2:5b:ff: b7:9c:c9:5e:f1:ca:a6:c7:b3:68:28:2f:03:40:37:23:ec:19: a7:97:44:b8:21:d7:86:76:a4:ec:e3:b3:f5:85:89:b2:dc:d6: b8:17:84:e0:2a:73:7a:44:d8:5f:5c:a1:03:56:44:a7:31:db: 77:11:f4:a8:66:bd:e4:9d:ba:cc:d9:1f:c4:93:cd:1b:dc:fd: a5:86:8f:05:17:10:43:ed:72:e7:6d:40:bb:19:50:8c:21:a7: 43:b2:f5:67:02:00:69:4e:6e:8e:02:55:2b:1d:46:97:98:8a: de:36:20:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhN1y2Lj29NtgLKp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI0MTIyMzE3MTc0MVoXDTI1MDMyMzE2MTc0MVowLzEtMCsGA1UEAxMk YTE1ZTA2YjgtZTM5Yi00NTRhLTk5M2QtY2RiNWE1NzcxYTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhbkuq/j/Te7zMtEB3MPyjXTG6RmBHgxpWgw Oq4vsb3KCkNndkh2XFBM1oF63r1xjwv4Kt3mjOt3zWo/hgE+OHNDfm+ntIT3qwGV ZvycsBNRgbh79lriTLdF2+1GUS+/0y6bPP7yRepwRN9mggQFAzlFYGCHE1tRgumk xZPVXdoO7pyfxozOEW+PWbKJMgquQr+h0MjB0ZnlnT1k1l6qU0Ta9cz/zf53hCpI ZvBnaMcK0p8g+vs5nTIHhW7++3S7wv9uB5tUp4RfV5hY/s+E9mkFu8k0nH4jJQ1C VGWLWcVETWiN8P6E7k1yc9vcuVKswdm9uVL0Tfoqa7JFrSNcDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFmkqt2X+l2rf2T8kgjLSE0A4HGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZjI0ZjFiM2YtZDVlNC0z MDg2LTg5YjgtYzU0YTBlY2IxYzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxphMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoqFLEm1fwEnYz8CZ8prTVqc9X8yzNC+gsa3srbHTjth+BlvE8WxOLO AivEoilhy8xgzUvAyvhwIMExgFXJWOdgKYDM2rBJU/VaNzL4q/oMpH/aQ7ObJ1ea NBGrsbBcHQLFmpD8FvVlUyfQV0IDofC1+ZSQ/++Hih5trbuqL8UgUSgSlB80uvH2 +dZ/kKJb/7ecyV7xyqbHs2goLwNANyPsGaeXRLgh14Z2pOzjs/WFibLc1rgXhOAq c3pE2F9coQNWRKcx23cR9KhmveSduszZH8STzRvc/aWGjwUXEEPtcudtQLsZUIwh p0Oy9WcCAGlObo4CVSsdRpeYit42ILc= -----END CERTIFICATE-----Generated at Wed Feb 5 09:47:41 2025 by rpki-client