$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/7d1782c8-6710-350b-a87c-af35b36707e0.roa File: 7d1782c8-6710-350b-a87c-af35b36707e0.roa (raw, json) Hash identifier: ZUSIceQ7EY+9uY5pF0G3VRpm3+o74VK7eYSQ5sx9/A8= Subject key identifier: AE:FB:CB:BE:64:23:9E:D8:47:64:98:C4:49:73:F7:F1:D9:F3:CF:63 Certificate issuer: /CN=cef8d320-c2b4-4718-be9c-ec3f801c0818 Certificate serial: 010D0C9F432858480BDA6BA311C24B2A7CEEE640 Authority key identifier: 4E:25:DB:86:B1:2F:12:A6:19:D4:A4:01:D5:5F:F2:92:96:52:43:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/7d1782c8-6710-350b-a87c-af35b36707e0.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 63452 IP address blocks: 173.243.238.0/24 maxlen: 24 173.243.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:6b:a3:11:c2:4b:2a:7c:ee:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cef8d320-c2b4-4718-be9c-ec3f801c0818 Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=b1fba910-1c15-4f30-bcd5-076419bdfa2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c3:e8:ec:28:33:2c:d8:08:d2:75:24:83:b1: b2:ed:7e:cb:eb:5f:c5:15:60:df:14:ab:17:26:23: b4:76:7c:84:32:6d:5b:5d:4a:9b:e1:a7:c7:c8:ef: 2a:90:67:90:6e:a1:7c:fd:7e:78:fe:2b:f2:36:19: 23:1a:f6:e3:93:04:9d:98:64:c2:aa:e3:29:fb:da: 94:53:33:91:6c:89:13:c2:5d:ac:c5:e2:21:27:47: dc:f6:75:ea:2d:b0:04:fc:89:55:c2:0c:e8:68:64: 8f:21:dd:d3:e2:c3:0c:71:4c:21:e1:4d:bc:fb:1e: 18:24:82:dc:6a:8a:ee:5d:da:da:31:3d:09:3a:7e: a7:c0:2b:20:5a:63:13:55:15:51:52:c7:ac:b7:8c: bc:84:c5:69:00:88:b2:7d:54:f2:ad:be:84:50:65: 8f:56:60:b4:f8:d1:8a:7d:8d:26:5e:8a:eb:66:52: 2e:da:a8:cb:d9:3b:26:1f:1c:ef:7c:c4:10:5b:e0: 9e:a2:7d:36:22:35:b7:dc:73:37:6e:b1:a5:5c:bc: 27:28:ce:7c:d3:66:9a:d0:93:7f:34:52:9f:e6:01: 78:7b:fb:4e:b7:5e:7a:b7:82:b4:3a:29:e8:94:26: 7f:83:5f:b3:2f:c6:b5:df:6d:df:fd:2f:13:eb:26: 87:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FB:CB:BE:64:23:9E:D8:47:64:98:C4:49:73:F7:F1:D9:F3:CF:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/7d1782c8-6710-350b-a87c-af35b36707e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.crl X509v3 Authority Key Identifier: keyid:4E:25:DB:86:B1:2F:12:A6:19:D4:A4:01:D5:5F:F2:92:96:52:43:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer sbgp-ipAddrBlock: critical IPv4: 173.243.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:5c:fd:75:9e:61:84:51:44:cb:aa:ac:41:cb:33:26:db:5e: 59:57:ea:95:f2:3b:f0:eb:d2:d3:1d:14:94:e7:bc:f4:b2:1d: 64:0e:9f:04:77:90:d7:14:e3:36:02:43:ac:57:18:da:9f:0d: 4c:98:f6:43:80:27:ee:3f:ed:82:26:40:92:8e:17:0f:e2:6a: 7f:10:30:75:70:44:d4:90:45:48:5f:58:46:ff:e7:2f:18:43: 96:90:17:c4:b3:99:b7:08:10:dd:2b:7b:88:9c:bc:78:62:5e: 08:34:01:08:34:cd:dd:ad:d1:77:4c:3b:0d:cf:89:ee:c0:0a: 2b:e4:44:b4:9b:4b:a3:81:9f:ae:3a:79:89:e2:bf:65:d2:7f: 0e:0d:be:0d:1a:99:f4:54:ef:02:5b:31:af:51:3c:f7:74:c9: 38:bc:7b:d2:0f:89:71:43:5c:27:1e:97:fb:d9:41:01:a7:81: 79:fd:47:33:a4:5f:3a:b3:0c:8b:87:32:c7:e4:b7:a7:df:90: ed:17:c9:0a:16:fc:de:26:2c:2a:13:d4:6c:3c:e3:d5:04:d7: 6f:3b:36:81:f2:34:69:a6:2a:15:39:83:62:c8:df:b6:59:6d: 60:b5:12:37:0b:81:da:1a:65:0e:bb:50:66:f5:bd:44:ce:30: 51:09:0c:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgL2mujEcJLKnzu5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VmOGQzMjAtYzJiNC00NzE4LWJlOWMtZWMzZjgwMWMw ODE4MB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk YjFmYmE5MTAtMWMxNS00ZjMwLWJjZDUtMDc2NDE5YmRmYTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsPo7CgzLNgI0nUkg7Gy7X7L61/FFWDfFKsX JiO0dnyEMm1bXUqb4afHyO8qkGeQbqF8/X54/ivyNhkjGvbjkwSdmGTCquMp+9qU UzORbIkTwl2sxeIhJ0fc9nXqLbAE/IlVwgzoaGSPId3T4sMMcUwh4U28+x4YJILc aoruXdraMT0JOn6nwCsgWmMTVRVRUsest4y8hMVpAIiyfVTyrb6EUGWPVmC0+NGK fY0mXorrZlIu2qjL2TsmHxzvfMQQW+Ceon02IjW33HM3brGlXLwnKM5802aa0JN/ NFKf5gF4e/tOt156t4K0OinolCZ/g1+zL8a1323f/S8T6yaHDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK77y75kI57YR2SYxElz9/HZ889jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZWY4 ZDMyMC1jMmI0LTQ3MTgtYmU5Yy1lYzNmODAxYzA4MTgvN2QxNzgyYzgtNjcxMC0z NTBiLWE4N2MtYWYzNWIzNjcwN2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2VmOGQzMjAtYzJiNC00NzE4LWJl OWMtZWMzZjgwMWMwODE4L2NlZjhkMzIwLWMyYjQtNDcxOC1iZTljLWVjM2Y4MDFj MDgxOC5jcmwwHwYDVR0jBBgwFoAUTiXbhrEvEqYZ1KQB1V/ykpZSQ+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZWY4ZDMyMC1jMmI0LTQ3MTgtYmU5Yy1lYzNm ODAxYzA4MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrfPuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARc/XWeYYRRRMuqrEHLMybbXllX6pXyO/Dr0tMdFJTnvPSyHWQOnwR3 kNcU4zYCQ6xXGNqfDUyY9kOAJ+4/7YImQJKOFw/ian8QMHVwRNSQRUhfWEb/5y8Y Q5aQF8SzmbcIEN0re4icvHhiXgg0AQg0zd2t0XdMOw3Pie7ACivkRLSbS6OBn646 eYniv2XSfw4Nvg0amfRU7wJbMa9RPPd0yTi8e9IPiXFDXCcel/vZQQGngXn9RzOk XzqzDIuHMsfkt6ffkO0XyQoW/N4mLCoT1Gw849UE1287NoHyNGmmKhU5g2LI37ZZ bWC1EjcLgdoaZQ67UGb1vUTOMFEJDOs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:48 2025 by rpki-client