$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5637e173-3e78-350b-928e-7c47064f489f.roa File: 5637e173-3e78-350b-928e-7c47064f489f.roa (raw, json) Hash identifier: lwfb65S3ub7yb58QvKhbcwUFvmyL/nM9Mfh1JF3U6Ls= Subject key identifier: 9E:7E:80:6E:35:C2:F7:0C:E5:8F:3F:3B:78:55:AD:9C:FF:BB:1A:E2 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F432858482D5A8F2B9862B612FD8B3F80 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5637e173-3e78-350b-928e-7c47064f489f.roa Signing time: Thu 12 Dec 2024 02:00:38 +0000 ROA not before: Thu 12 Dec 2024 02:00:38 +0000 ROA not after: Wed 12 Mar 2025 01:00:38 +0000 asID: 51964 IP address blocks: 200.30.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2d:5a:8f:2b:98:62:b6:12:fd:8b:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Dec 12 02:00:38 2024 GMT Not After : Mar 12 01:00:38 2025 GMT Subject: CN=587c75a7-869f-4a0f-8ef2-2164c480e57e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ea:1a:f6:51:74:6e:6e:bd:e4:97:a7:20:12: 76:0b:fb:40:1d:15:aa:cc:07:64:37:4e:88:a1:72: a9:4c:88:81:ee:76:54:68:69:0b:bf:11:62:cc:65: c8:4a:a5:33:e5:a5:a6:a4:27:9b:f6:07:d5:35:fe: 3d:6b:bb:01:5d:25:4c:45:9b:9c:4d:db:61:74:2a: 23:b8:f8:01:aa:e0:a9:8e:b5:78:38:1b:8e:88:50: 36:00:75:12:5f:a8:34:4c:8e:d8:1d:74:e0:4f:6e: a4:da:91:90:36:66:e1:f4:4f:3d:80:7e:45:c1:48: 11:35:3c:a3:89:9f:43:4e:a3:c3:d2:22:0e:47:6c: e1:40:c1:fa:e0:f1:04:09:ac:cc:ad:b7:7f:1a:d9: 37:06:f5:67:32:b4:be:05:be:b7:03:17:97:87:bf: ab:bf:2f:0b:88:f5:d3:05:a2:91:79:1b:1e:bb:9e: 91:78:d8:69:b2:42:a6:ca:55:45:20:4d:80:3d:36: c3:c9:52:5a:0b:d2:57:06:f6:97:20:54:1a:3e:4c: 59:93:c8:33:09:6a:a0:23:c5:84:29:21:b2:5c:e5: 57:9e:f4:62:95:b5:af:ea:ea:95:d1:68:8a:a8:d3: 0b:02:9d:04:61:7f:5f:28:e3:fa:73:00:22:4a:a6: 0f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7E:80:6E:35:C2:F7:0C:E5:8F:3F:3B:78:55:AD:9C:FF:BB:1A:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5637e173-3e78-350b-928e-7c47064f489f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 200.30.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:aa:18:a0:cd:09:a7:b1:53:5f:ce:bb:72:87:77:38:65:77: 7c:6b:ef:16:7d:f9:81:04:4a:af:7f:27:e7:fd:53:21:03:37: 43:d7:b2:60:b0:ca:c1:57:59:d6:d1:0a:63:be:14:b8:7d:db: d5:b2:5c:9c:9b:94:7d:30:a9:30:a7:4c:6b:ad:cf:64:73:a8: bc:13:a1:97:19:14:1a:fc:b3:1c:2a:62:f5:b1:36:f4:22:6f: 11:b8:03:a8:94:9e:e1:63:16:c1:27:a0:3d:c3:c8:ad:a7:5b: 0e:d8:18:92:7b:17:6d:4e:4c:94:92:f6:f2:b5:36:06:60:ac: 1c:3e:30:f2:cd:a6:02:e1:ce:18:c5:30:2e:6d:30:37:a6:5b: 39:b4:36:27:5d:98:f8:9e:ab:a6:16:8e:80:d1:e0:71:e5:02: 9c:8e:14:35:ed:ae:75:95:19:ac:cf:f4:43:b2:70:9f:8f:2d: 15:28:aa:1d:40:d4:27:94:0d:78:87:5a:a1:82:95:cb:70:be: d5:21:28:49:bd:67:f5:d2:55:27:9e:21:d7:d5:e7:68:70:82: b8:13:a0:15:04:56:5e:1a:4c:12:43:c6:fb:3c:0f:17:27:a0: 89:2c:f0:91:b0:7b:55:32:d6:9a:1c:37:4b:8b:6d:6b:01:07: 59:b7:40:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgtWo8rmGK2Ev2LP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI0MTIxMjAyMDAzOFoXDTI1MDMxMjAxMDAzOFowLzEtMCsGA1UEAxMk NTg3Yzc1YTctODY5Zi00YTBmLThlZjItMjE2NGM0ODBlNTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleoa9lF0bm695JenIBJ2C/tAHRWqzAdkN06I oXKpTIiB7nZUaGkLvxFizGXISqUz5aWmpCeb9gfVNf49a7sBXSVMRZucTdthdCoj uPgBquCpjrV4OBuOiFA2AHUSX6g0TI7YHXTgT26k2pGQNmbh9E89gH5FwUgRNTyj iZ9DTqPD0iIOR2zhQMH64PEECazMrbd/Gtk3BvVnMrS+Bb63AxeXh7+rvy8LiPXT BaKReRseu56ReNhpskKmylVFIE2APTbDyVJaC9JXBvaXIFQaPkxZk8gzCWqgI8WE KSGyXOVXnvRilbWv6uqV0WiKqNMLAp0EYX9fKOP6cwAiSqYPYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5+gG41wvcM5Y8/O3hVrZz/uxriMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvNTYzN2UxNzMtM2U3OC0z NTBiLTkyOGUtN2M0NzA2NGY0ODlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyB4OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKeqGKDNCaexU1/Ou3KHdzhld3xr7xZ9+YEESq9/J+f9UyEDN0PXsmCw ysFXWdbRCmO+FLh929WyXJyblH0wqTCnTGutz2RzqLwToZcZFBr8sxwqYvWxNvQi bxG4A6iUnuFjFsEnoD3DyK2nWw7YGJJ7F21OTJSS9vK1NgZgrBw+MPLNpgLhzhjF MC5tMDemWzm0NiddmPieq6YWjoDR4HHlApyOFDXtrnWVGazP9EOycJ+PLRUoqh1A 1CeUDXiHWqGClctwvtUhKEm9Z/XSVSeeIdfV52hwgrgToBUEVl4aTBJDxvs8Dxcn oIks8JGwe1Uy1pocN0uLbWsBB1m3QGE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:20 2025 by rpki-client