$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/c6afc596-0b9b-3e43-b3b3-f7b83df310c2.roa File: c6afc596-0b9b-3e43-b3b3-f7b83df310c2.roa (raw, json) Hash identifier: gCIIAOrIFm0U7/4wJr6uBevzk1c6frbc/R6iLl6albA= Subject key identifier: 82:48:7A:BE:C2:90:B6:68:42:EB:C9:05:08:43:46:61:15:0F:B0:98 Certificate issuer: /CN=3e97ddc1-e605-46cf-bcf5-048f8d8eb41a Certificate serial: 010D0C9F43285848977087BA2356696B3A009D80 Authority key identifier: 52:1A:57:8E:2A:C7:61:B5:E3:66:CB:74:74:61:80:E0:B1:16:4A:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/c6afc596-0b9b-3e43-b3b3-f7b83df310c2.roa Signing time: Sun 19 Jan 2025 02:00:39 +0000 ROA not before: Sun 19 Jan 2025 02:00:39 +0000 ROA not after: Sat 19 Apr 2025 01:00:39 +0000 asID: 11655 IP address blocks: 23.128.92.0/24 maxlen: 24 2602:f979::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:97:70:87:ba:23:56:69:6b:3a:00:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e97ddc1-e605-46cf-bcf5-048f8d8eb41a Validity Not Before: Jan 19 02:00:39 2025 GMT Not After : Apr 19 01:00:39 2025 GMT Subject: CN=b1aeed5f-92ac-408a-87cf-279c2bfa7835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c5:4c:e7:09:e6:20:25:0b:d8:44:a8:c0:84: 9d:ed:2b:5c:6c:08:37:dd:30:9a:50:88:9b:f8:f8: c1:d1:bc:ce:5f:eb:5a:0f:48:74:c8:76:c4:85:5d: 38:d2:26:90:79:65:27:b8:56:f8:b7:77:59:18:86: d7:7e:26:01:15:61:39:14:55:98:45:8d:86:d6:33: 53:ed:ff:cd:32:ac:3e:0c:03:e1:ed:bf:23:4c:6d: 74:de:5a:2c:88:93:52:08:81:cf:e6:bc:85:92:d3: be:b6:2e:bd:e2:7f:13:11:e8:3f:b0:a6:6b:e6:0f: ee:29:b2:a3:ba:4e:a8:99:98:04:ee:59:da:51:b9: 30:69:28:9f:b6:82:9f:6d:2d:79:aa:1b:bb:5b:1c: a5:1a:0a:5b:87:db:4a:dd:22:a1:67:6e:5a:85:27: bd:64:2d:14:20:71:c8:5a:3e:ed:de:16:6d:c7:bc: df:a8:6b:26:85:bc:0a:5d:04:9c:20:e8:3d:b9:34: 8e:37:75:da:ec:42:ed:4e:16:71:db:cd:2e:d4:53: 48:24:55:1d:00:05:63:8d:74:fc:e5:69:a5:fe:58: c3:81:9f:c0:04:65:fb:07:42:f0:4d:e5:7f:26:b1: 14:6b:05:63:aa:c5:f5:fd:02:7b:e1:17:d7:ae:52: 7a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:48:7A:BE:C2:90:B6:68:42:EB:C9:05:08:43:46:61:15:0F:B0:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/c6afc596-0b9b-3e43-b3b3-f7b83df310c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.crl X509v3 Authority Key Identifier: keyid:52:1A:57:8E:2A:C7:61:B5:E3:66:CB:74:74:61:80:E0:B1:16:4A:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.cer sbgp-ipAddrBlock: critical IPv4: 23.128.92.0/24 IPv6: 2602:f979::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:6e:ef:3c:e7:cc:d5:06:5a:24:85:c9:85:15:e5:b5:55:c8: 3c:46:48:67:9e:ad:bb:57:7a:23:da:9c:9e:17:fc:f5:b0:50: af:0a:e1:28:5a:6c:3a:8c:de:0f:7c:38:35:22:cd:78:c8:f9: dd:3a:44:fe:42:71:dc:3c:5e:e9:c8:c8:35:58:1d:62:b8:b3: 06:0a:ff:a2:67:ec:8a:67:7e:14:1f:65:8b:77:e1:bb:0d:f6: f7:6a:98:e3:b4:d2:42:02:05:05:b1:1f:52:9a:93:54:14:37: 46:13:00:0e:7f:6f:17:43:fc:3c:8a:0a:0b:dc:96:36:db:03: 73:3b:fc:54:43:ec:51:e8:e9:4c:d0:73:31:3b:d5:8d:df:55: 0d:c1:55:74:82:3e:43:01:58:21:db:23:2a:13:3c:fe:4d:4a: 29:72:ff:4b:20:41:cb:87:c4:96:dd:fd:39:35:2d:31:fa:cd: a4:91:0a:34:b7:03:c0:f5:2a:a7:78:a1:b4:e0:13:0b:50:ae: fe:04:89:d7:8a:54:7e:cb:fa:68:21:82:1b:a6:c4:e4:6c:ff: ab:43:1a:2f:0c:7c:d6:78:11:38:86:a9:7e:3c:4a:d6:4d:26: f1:2a:bf:39:c7:79:b7:1f:81:d7:90:91:c1:9a:24:40:38:d8: a6:16:87:fa -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEiXcIe6I1ZpazoAnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U5N2RkYzEtZTYwNS00NmNmLWJjZjUtMDQ4ZjhkOGVi NDFhMB4XDTI1MDExOTAyMDAzOVoXDTI1MDQxOTAxMDAzOVowLzEtMCsGA1UEAxMk YjFhZWVkNWYtOTJhYy00MDhhLTg3Y2YtMjc5YzJiZmE3ODM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsVM5wnmICUL2ESowISd7StcbAg33TCaUIib +PjB0bzOX+taD0h0yHbEhV040iaQeWUnuFb4t3dZGIbXfiYBFWE5FFWYRY2G1jNT 7f/NMqw+DAPh7b8jTG103losiJNSCIHP5ryFktO+ti694n8TEeg/sKZr5g/uKbKj uk6omZgE7lnaUbkwaSiftoKfbS15qhu7WxylGgpbh9tK3SKhZ25ahSe9ZC0UIHHI Wj7t3hZtx7zfqGsmhbwKXQScIOg9uTSON3Xa7ELtThZx280u1FNIJFUdAAVjjXT8 5Wml/ljDgZ/ABGX7B0LwTeV/JrEUawVjqsX1/QJ74RfXrlJ6GQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFIJIer7CkLZoQuvJBQhDRmEVD7CYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZTk3 ZGRjMS1lNjA1LTQ2Y2YtYmNmNS0wNDhmOGQ4ZWI0MWEvYzZhZmM1OTYtMGI5Yi0z ZTQzLWIzYjMtZjdiODNkZjMxMGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2U5N2RkYzEtZTYwNS00NmNmLWJj ZjUtMDQ4ZjhkOGViNDFhLzNlOTdkZGMxLWU2MDUtNDZjZi1iY2Y1LTA0OGY4ZDhl YjQxYS5jcmwwHwYDVR0jBBgwFoAUUhpXjirHYbXjZst0dGGA4LEWSv8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZTk3ZGRjMS1lNjA1LTQ2Y2YtYmNmNS0wNDhm OGQ4ZWI0MWEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4BcMA4E AgACMAgDBgAmAvl5ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBybu8858zVBlokhcmFFeW1Vcg8Rkhnnq27 V3oj2pyeF/z1sFCvCuEoWmw6jN4PfDg1Is14yPndOkT+QnHcPF7pyMg1WB1iuLMG Cv+iZ+yKZ34UH2WLd+G7Dfb3apjjtNJCAgUFsR9SmpNUFDdGEwAOf28XQ/w8igoL 3JY22wNzO/xUQ+xR6OlM0HMxO9WN31UNwVV0gj5DAVgh2yMqEzz+TUopcv9LIEHL h8SW3f05NS0x+s2kkQo0twPA9SqneKG04BMLUK7+BInXilR+y/poIYIbpsTkbP+r QxovDHzWeBE4hql+PErWTSbxKr85x3m3H4HXkJHBmiRAONimFof6 -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:35 2025 by rpki-client