$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/eb572f04-9954-326a-ae86-3c2d4e3360c1.roa File: eb572f04-9954-326a-ae86-3c2d4e3360c1.roa (raw, json) Hash identifier: yKR+VOTgiJ7XZAofssekyjoORBSpy/cXgcIBOrInSiI= Subject key identifier: 54:63:7C:96:CB:AA:44:30:60:02:B2:26:0D:93:76:5E:72:0E:9E:20 Certificate issuer: /CN=811bd2ac-c53d-40a6-bfa4-275c2241af63 Certificate serial: 010D0C9F43285848A44DA6EA8E3905E7A77FC400 Authority key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/eb572f04-9954-326a-ae86-3c2d4e3360c1.roa Signing time: Thu 23 Jan 2025 16:35:55 +0000 ROA not before: Thu 23 Jan 2025 16:35:55 +0000 ROA not after: Wed 23 Apr 2025 15:35:55 +0000 asID: 400597 IP address blocks: 217.149.97.0/24 maxlen: 24 2602:fb1b:61::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:4d:a6:ea:8e:39:05:e7:a7:7f:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63 Validity Not Before: Jan 23 16:35:55 2025 GMT Not After : Apr 23 15:35:55 2025 GMT Subject: CN=d11cb6c1-879a-46c4-ae20-4dae7a3cc776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c2:1e:ff:85:6b:80:cb:23:8a:e1:0c:16:6c: 09:15:01:9e:2d:a1:7a:46:65:9e:33:ec:0d:7d:2b: 01:67:d3:9c:40:8a:3d:50:45:c6:5d:fa:a6:33:03: d5:0c:3b:88:c3:d0:88:3b:95:42:08:0f:c5:05:02: 7b:8e:9f:b6:67:58:57:01:a9:51:eb:b4:0e:d8:a2: e3:d7:3d:d6:18:ef:df:28:47:86:11:89:b6:eb:2d: 0b:9e:ea:b9:7a:62:0e:37:c4:62:64:6f:21:a4:58: a6:50:e3:21:49:eb:e3:69:9e:86:66:34:a9:5f:a8: 9f:ac:14:e2:5e:29:32:88:f6:26:2b:75:3c:1b:89: 5d:5b:6f:e3:db:43:11:42:40:5b:5a:2c:6a:dd:28: 6d:e4:a6:c6:a3:9f:e9:b3:83:62:90:d5:4a:b4:55: e0:b8:b8:e0:c1:11:c3:a0:97:1d:df:17:65:f1:c4: 73:00:a8:92:b6:67:a2:57:43:46:01:22:5c:94:2e: 3c:c7:7a:8e:96:7c:55:63:13:d6:87:46:b6:d1:6e: 91:50:96:d1:66:0f:7c:bf:ed:28:7c:c4:5c:e3:41: bf:94:6f:7e:38:eb:40:00:0a:a2:0f:da:db:47:98: 2f:03:d5:4f:6c:59:70:57:bf:5c:46:6d:e8:c7:01: be:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:63:7C:96:CB:AA:44:30:60:02:B2:26:0D:93:76:5E:72:0E:9E:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/eb572f04-9954-326a-ae86-3c2d4e3360c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl X509v3 Authority Key Identifier: keyid:2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer sbgp-ipAddrBlock: critical IPv4: 217.149.97.0/24 IPv6: 2602:fb1b:61::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:45:41:de:76:48:a9:1f:fb:e0:94:df:e3:02:37:45:4f:7e: 4b:8f:a6:d3:96:a2:fd:d0:7c:e7:16:a4:4f:24:62:1a:2b:03: b2:7e:c8:15:33:ed:24:cc:fd:c0:0f:d3:c1:70:a8:de:11:80: 35:8d:63:63:53:15:a8:53:cc:c7:93:c5:72:9f:a3:04:17:4f: 45:a4:cb:93:a6:c2:96:33:ae:4e:93:8c:e2:13:c2:e2:e4:f1: db:cd:0f:a9:62:b6:5a:45:eb:ec:b2:20:84:20:05:f1:a7:f3: 3d:ad:23:1c:a7:3e:cd:f8:22:2d:1a:dd:98:80:f2:91:c3:8e: 7a:59:b4:84:ae:73:34:ac:90:c2:89:1c:66:11:e1:98:89:68: a7:d4:88:62:62:7e:f1:7b:ef:50:2b:84:bc:f5:8e:be:47:9e: 7a:52:6f:db:c1:1b:dd:2f:a3:4b:21:bf:a7:92:27:53:48:2f: 74:3e:87:57:92:02:1c:92:4a:39:34:35:03:40:0a:f0:df:a9: 03:8c:c0:d0:f2:58:0e:2d:4e:ee:fe:bb:51:93:27:e1:44:c8: 5f:15:5b:53:d0:eb:d8:20:6b:e8:30:54:8b:3a:b4:45:4a:06: 8b:00:45:7a:07:a9:12:6f:d0:c0:8b:f5:7b:2b:36:c6:6b:59: 73:9a:45:e6 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEikTabqjjkF56d/xAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODExYmQyYWMtYzUzZC00MGE2LWJmYTQtMjc1YzIyNDFh ZjYzMB4XDTI1MDEyMzE2MzU1NVoXDTI1MDQyMzE1MzU1NVowLzEtMCsGA1UEAxMk ZDExY2I2YzEtODc5YS00NmM0LWFlMjAtNGRhZTdhM2NjNzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8Ie/4VrgMsjiuEMFmwJFQGeLaF6RmWeM+wN fSsBZ9OcQIo9UEXGXfqmMwPVDDuIw9CIO5VCCA/FBQJ7jp+2Z1hXAalR67QO2KLj 1z3WGO/fKEeGEYm26y0Lnuq5emION8RiZG8hpFimUOMhSevjaZ6GZjSpX6ifrBTi XikyiPYmK3U8G4ldW2/j20MRQkBbWixq3Sht5KbGo5/ps4NikNVKtFXguLjgwRHD oJcd3xdl8cRzAKiStmeiV0NGASJclC48x3qOlnxVYxPWh0a20W6RUJbRZg98v+0o fMRc40G/lG9+OOtAAAqiD9rbR5gvA9VPbFlwV79cRm3oxwG+JQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFFRjfJbLqkQwYAKyJg2Tdl5yDp4gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84MTFi ZDJhYy1jNTNkLTQwYTYtYmZhNC0yNzVjMjI0MWFmNjMvZWI1NzJmMDQtOTk1NC0z MjZhLWFlODYtM2MyZDRlMzM2MGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODExYmQyYWMtYzUzZC00MGE2LWJm YTQtMjc1YzIyNDFhZjYzLzgxMWJkMmFjLWM1M2QtNDBhNi1iZmE0LTI3NWMyMjQx YWY2My5jcmwwHwYDVR0jBBgwFoAUL6VyaMN3iHmP21Xe0bvHxqiGXYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84MTFiZDJhYy1jNTNkLTQwYTYtYmZhNC0yNzVj MjI0MWFmNjMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA2ZVhMA8E AgACMAkDBwAmAvsbAGEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAN0VB3nZIqR/74JTf4wI3RU9+S4+m05ai /dB85xakTyRiGisDsn7IFTPtJMz9wA/TwXCo3hGANY1jY1MVqFPMx5PFcp+jBBdP RaTLk6bCljOuTpOM4hPC4uTx280PqWK2WkXr7LIghCAF8afzPa0jHKc+zfgiLRrd mIDykcOOelm0hK5zNKyQwokcZhHhmIlop9SIYmJ+8XvvUCuEvPWOvkeeelJv28Eb 3S+jSyG/p5InU0gvdD6HV5ICHJJKOTQ1A0AK8N+pA4zA0PJYDi1O7v67UZMn4UTI XxVbU9Dr2CBr6DBUizq0RUoGiwBFegepEm/QwIv1eys2xmtZc5pF5g== -----END CERTIFICATE-----Generated at Wed Feb 19 20:39:00 2025 by rpki-client