$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/ca4eafff-9365-3068-b787-140215783a30.roa File: ca4eafff-9365-3068-b787-140215783a30.roa (raw, json) Hash identifier: 8d3iv+WhcPDaJmrFJWR1AgNPpo9t67PCWNocB+o5fGM= Subject key identifier: BA:17:12:59:EE:EA:3B:E8:64:F6:42:FA:C9:67:C7:34:48:AA:D9:60 Certificate issuer: /CN=bdd46844-e081-4813-bfe2-0cfbeac92e08 Certificate serial: 010D0C9F43285848BD20DF8EFF0F1990EBDE1680 Authority key identifier: FF:99:49:19:84:88:39:A6:03:55:7D:CC:8A:2D:A2:C6:77:B4:D5:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/ca4eafff-9365-3068-b787-140215783a30.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 401472 IP address blocks: 23.129.28.0/24 maxlen: 24 2602:f7af::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:20:df:8e:ff:0f:19:90:eb:de:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd46844-e081-4813-bfe2-0cfbeac92e08 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=01ea0c19-53cb-4b19-ae33-8abcbd97b6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8d:fd:7f:b9:cd:08:ec:ad:0e:39:8b:0a:e0: 9d:1a:af:17:7b:ff:1b:15:81:ac:9b:f8:0c:72:f4: e8:54:bb:9f:c4:3a:c4:94:75:2d:84:07:b0:ba:86: e6:04:1d:3a:32:5a:c9:4e:f5:ee:da:60:2d:ab:6c: 08:3d:de:f7:67:ea:51:97:62:69:ff:6e:1e:3b:90: eb:2f:7c:0d:ee:d6:8c:03:81:fe:0c:ca:4d:73:3f: 50:41:da:7f:66:d9:b7:1d:4a:74:d8:d6:dd:63:71: 00:c4:07:e3:78:71:c2:af:aa:ff:10:1c:5a:b6:87: af:89:6a:d9:ce:2e:54:37:6e:58:a7:f9:eb:54:97: c8:85:27:55:08:34:e8:f9:57:74:a0:55:9e:7f:06: 02:b8:01:af:69:a0:1a:30:d3:e9:cc:4f:78:5b:de: be:54:7d:03:b2:f5:28:88:6d:2c:df:98:13:a0:29: 23:be:58:c5:1f:e3:ce:f6:dd:5f:4a:fa:af:a0:01: d4:f1:b2:19:a7:ca:2c:3f:f7:8a:02:c6:c1:b4:00: 7d:17:02:21:f4:1d:1c:0c:4f:3e:3a:59:a7:07:fc: 54:b9:1d:d5:54:5a:7d:9f:79:a5:45:44:97:cc:00: 44:af:d9:08:aa:50:77:5e:c7:dd:9f:f6:c9:61:54: 7c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:17:12:59:EE:EA:3B:E8:64:F6:42:FA:C9:67:C7:34:48:AA:D9:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/ca4eafff-9365-3068-b787-140215783a30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.crl X509v3 Authority Key Identifier: keyid:FF:99:49:19:84:88:39:A6:03:55:7D:CC:8A:2D:A2:C6:77:B4:D5:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer sbgp-ipAddrBlock: critical IPv4: 23.129.28.0/24 IPv6: 2602:f7af::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:05:6e:a2:e0:df:ee:80:3b:af:9d:cd:db:38:f1:2b:e8:1c: 30:5b:99:11:c1:56:2b:dc:45:72:40:0d:bd:fd:64:1a:0c:0d: 8e:d6:d6:27:fd:f3:2b:80:cf:1b:f3:75:45:d6:2f:bd:a3:5e: 1d:03:82:c7:29:93:7d:1c:a3:4f:c0:6c:7e:fe:0c:a0:c3:4a: 2a:de:3a:2a:be:ff:36:57:30:66:63:dd:a1:57:96:7a:b1:ec: e3:5a:bf:bd:86:8a:80:ec:fd:bb:a2:55:9d:99:7b:66:74:56: 03:57:bf:22:b5:22:d4:35:41:d7:8b:c9:a0:c2:ee:16:c7:77: 7f:f7:c5:0a:59:fd:7e:ae:f6:c2:b5:8f:a0:fd:17:70:5f:69: 14:f8:29:53:e2:28:d9:09:05:16:92:55:ff:b0:f8:b0:a2:c7: 53:70:62:f9:46:43:d5:f1:8a:42:35:20:f7:82:74:bf:80:8a: ff:47:cb:ac:86:44:3a:88:f7:ce:cc:61:e5:30:0a:e9:55:5d: 71:ee:5f:80:d4:96:66:ec:5a:84:bd:8a:05:a1:a1:12:7d:9d: f9:9c:9c:af:2d:3b:2e:51:70:e5:f0:c0:ce:02:20:26:d1:17: 95:5e:6e:73:c8:f6:3b:2c:46:bb:b1:51:0d:86:e5:d5:8d:5c: 9f:69:24:04 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEi9IN+O/w8ZkOveFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkNDY4NDQtZTA4MS00ODEzLWJmZTItMGNmYmVhYzky ZTA4MB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk MDFlYTBjMTktNTNjYi00YjE5LWFlMzMtOGFiY2JkOTdiNmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn439f7nNCOytDjmLCuCdGq8Xe/8bFYGsm/gM cvToVLufxDrElHUthAewuobmBB06MlrJTvXu2mAtq2wIPd73Z+pRl2Jp/24eO5Dr L3wN7taMA4H+DMpNcz9QQdp/Ztm3HUp02NbdY3EAxAfjeHHCr6r/EBxatoeviWrZ zi5UN25Yp/nrVJfIhSdVCDTo+Vd0oFWefwYCuAGvaaAaMNPpzE94W96+VH0DsvUo iG0s35gToCkjvljFH+PO9t1fSvqvoAHU8bIZp8osP/eKAsbBtAB9FwIh9B0cDE8+ OlmnB/xUuR3VVFp9n3mlRUSXzABEr9kIqlB3Xsfdn/bJYVR89QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLoXElnu6jvoZPZC+slnxzRIqtlgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZGQ0 Njg0NC1lMDgxLTQ4MTMtYmZlMi0wY2ZiZWFjOTJlMDgvY2E0ZWFmZmYtOTM2NS0z MDY4LWI3ODctMTQwMjE1NzgzYTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmRkNDY4NDQtZTA4MS00ODEzLWJm ZTItMGNmYmVhYzkyZTA4L2JkZDQ2ODQ0LWUwODEtNDgxMy1iZmUyLTBjZmJlYWM5 MmUwOC5jcmwwHwYDVR0jBBgwFoAU/5lJGYSIOaYDVX3Mii2ixne01bQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZGQ0Njg0NC1lMDgxLTQ4MTMtYmZlMi0wY2Zi ZWFjOTJlMDguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4EcMA4E AgACMAgDBgAmAvevADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBoBW6i4N/ugDuvnc3bOPEr6BwwW5kRwVYr 3EVyQA29/WQaDA2O1tYn/fMrgM8b83VF1i+9o14dA4LHKZN9HKNPwGx+/gygw0oq 3joqvv82VzBmY92hV5Z6sezjWr+9hoqA7P27olWdmXtmdFYDV78itSLUNUHXi8mg wu4Wx3d/98UKWf1+rvbCtY+g/RdwX2kU+ClT4ijZCQUWklX/sPiwosdTcGL5RkPV 8YpCNSD3gnS/gIr/R8ushkQ6iPfOzGHlMArpVV1x7l+A1JZm7FqEvYoFoaESfZ35 nJyvLTsuUXDl8MDOAiAm0ReVXm5zyPY7LEa7sVENhuXVjVyfaSQE -----END CERTIFICATE-----Generated at Sun Feb 16 15:02:32 2025 by rpki-client