$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/cc8612bf-93f2-3816-b381-ffe171586d50.roa File: cc8612bf-93f2-3816-b381-ffe171586d50.roa (raw, json) Hash identifier: B4YuOk9P1GN2lNPK4fezdmXAHulOcStQLwBV5cKUQJI= Subject key identifier: E6:5A:2F:E0:BF:DA:24:63:3E:F7:F2:AA:E5:2C:6E:36:68:BF:59:0E Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f Certificate serial: 010D0C9F43285848A830A19D1918B7F7C540F800 Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/cc8612bf-93f2-3816-b381-ffe171586d50.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 397515 IP address blocks: 208.109.144.0/24 maxlen: 24 208.109.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:a1:9d:19:18:b7:f7:c5:40:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=38c821bf-fbc9-41d7-8eef-ae11766f84c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:28:d8:cb:95:22:ce:07:a6:31:a5:c2:25:8f: be:69:6c:dd:17:03:1d:8b:44:8a:f2:ab:a5:23:1d: 30:93:a9:9e:a9:4d:21:63:cc:df:54:66:59:5d:2e: 35:a5:e9:0a:b1:b4:7d:18:84:a2:65:06:9a:e8:92: 94:05:0c:97:8c:8c:df:5d:56:07:3c:9b:10:16:19: ce:0a:77:2c:75:7f:1e:ab:ad:3e:b2:76:e1:38:9f: 9c:fd:f3:39:35:62:94:37:aa:6c:be:be:60:3a:1e: 20:81:c1:db:c9:b9:88:94:af:d7:55:06:35:40:da: 65:6d:cb:ce:90:ab:3e:85:3c:62:4f:de:a3:5e:2f: 45:a3:47:39:5e:99:82:74:81:b3:f6:74:f4:6b:0b: 9f:78:59:6f:54:fc:f1:ed:07:3a:bc:2d:4d:ce:b0: 3a:6f:6c:cd:a1:65:cd:34:b5:5c:7e:39:1d:25:ed: 5c:64:92:11:68:b2:51:1a:31:5a:0d:1a:1f:b7:37: 1f:8a:23:52:67:50:1a:bb:d7:46:2e:9b:ef:9f:c2: f2:b7:70:10:55:d6:db:b9:14:10:1a:46:a5:b6:35: 60:34:22:af:17:c9:cf:3b:6a:99:26:c7:95:12:c2: 38:24:63:c7:89:e9:3c:ff:07:a0:2c:86:87:91:52: 11:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5A:2F:E0:BF:DA:24:63:3E:F7:F2:AA:E5:2C:6E:36:68:BF:59:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/cc8612bf-93f2-3816-b381-ffe171586d50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl X509v3 Authority Key Identifier: keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer sbgp-ipAddrBlock: critical IPv4: 208.109.144.0/24 208.109.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:63:e9:db:d4:ee:88:ce:c1:23:b2:59:60:82:8b:c4:49:ea: f4:40:ee:4d:7e:18:7a:0e:45:ce:f0:d7:06:b9:fd:17:29:03: 8c:7e:88:55:32:ac:83:b1:7f:32:a2:c7:ec:57:94:ee:9a:d3: 6e:cd:1b:bf:bc:c1:cc:5c:e5:bb:50:20:dc:6c:2e:60:a5:59: 25:e5:a8:09:6c:ba:5b:82:ac:24:ca:05:79:8c:85:cf:c6:7c: 4c:0b:84:a9:31:31:a1:6c:9f:ff:e4:e6:61:4e:31:e6:08:6c: 0d:e0:3d:fa:a7:7d:58:ed:98:a9:ef:d4:ca:8b:a3:4d:96:22: 9f:30:79:94:6d:66:60:30:32:e2:cc:47:fa:95:39:c2:0c:cd: 3f:fc:b3:95:b9:7d:fe:15:0a:ab:f2:52:49:76:56:0f:ce:7a: 09:37:92:43:d8:fc:a0:1a:7e:61:04:3f:ea:b7:0a:5a:34:16: ca:f7:41:c8:fb:99:c1:2e:0e:36:be:46:7e:07:5a:de:3a:26: 3b:39:2e:4a:27:c2:b1:4b:37:05:ec:89:39:34:bf:e3:c0:42: 74:a5:12:94:39:57:d9:37:46:a9:99:ad:47:2c:03:39:45:8c: 4a:19:aa:1d:5f:dc:c3:6a:41:a3:45:f3:92:bd:eb:66:a6:53: 54:83:3d:a3 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEioMKGdGRi398VA+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2Nm MTNmMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk MzhjODIxYmYtZmJjOS00MWQ3LThlZWYtYWUxMTc2NmY4NGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSjYy5UizgemMaXCJY++aWzdFwMdi0SK8qul Ix0wk6meqU0hY8zfVGZZXS41pekKsbR9GISiZQaa6JKUBQyXjIzfXVYHPJsQFhnO CncsdX8eq60+snbhOJ+c/fM5NWKUN6psvr5gOh4ggcHbybmIlK/XVQY1QNplbcvO kKs+hTxiT96jXi9Fo0c5XpmCdIGz9nT0awufeFlvVPzx7Qc6vC1NzrA6b2zNoWXN NLVcfjkdJe1cZJIRaLJRGjFaDRoftzcfiiNSZ1Aau9dGLpvvn8Lyt3AQVdbbuRQQ GkaltjVgNCKvF8nPO2qZJseVEsI4JGPHiek8/wegLIaHkVIRxQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOZaL+C/2iRjPvfyquUsbjZov1kOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1 Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvY2M4NjEyYmYtOTNmMi0z ODE2LWIzODEtZmZlMTcxNTg2ZDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0 ZjEtMWFmY2U4Y2NmMTNmLzllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNj ZjEzZi5jcmwwHwYDVR0jBBgwFoAUOB2fprp8wahErgn+WgCWnTv84Q8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZj ZThjY2YxM2YuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0G2QAwQA 0G2SMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAFj6dvU7ojOwSOyWWCCi8RJ6vRA7k1+GHoORc7w1wa5/Rcp A4x+iFUyrIOxfzKix+xXlO6a027NG7+8wcxc5btQINxsLmClWSXlqAlsuluCrCTK BXmMhc/GfEwLhKkxMaFsn//k5mFOMeYIbA3gPfqnfVjtmKnv1MqLo02WIp8weZRt ZmAwMuLMR/qVOcIMzT/8s5W5ff4VCqvyUkl2Vg/Oegk3kkPY/KAafmEEP+q3Clo0 Fsr3Qcj7mcEuDja+Rn4HWt46Jjs5LkonwrFLNwXsiTk0v+PAQnSlEpQ5V9k3RqmZ rUcsAzlFjEoZqh1f3MNqQaNF85K962amU1SDPaM= -----END CERTIFICATE-----Generated at Sat Apr 5 12:43:47 2025 by rpki-client