$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/1eee6a67-8c37-3b60-aa92-7c3f23759983.roa File: 1eee6a67-8c37-3b60-aa92-7c3f23759983.roa (raw, json) Hash identifier: 92cFJUMRoaRE8bzd5by19ajDIWquBGDSRcjNVZHlDRU= Subject key identifier: 38:C7:0C:E4:4C:FE:B7:DF:39:F2:BA:E7:83:8C:37:79:DD:9E:02:AC Certificate issuer: /CN=46b96165-9c22-47d1-962f-486840cec7fa Certificate serial: 010D0C9F4328584891DB31A2CE849C19FADFC560 Authority key identifier: 7E:68:D8:AA:EB:33:0A:33:7C:88:D9:3E:FA:7D:E1:FC:34:A1:2F:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/1eee6a67-8c37-3b60-aa92-7c3f23759983.roa Signing time: Fri 17 Jan 2025 02:00:40 +0000 ROA not before: Fri 17 Jan 2025 02:00:40 +0000 ROA not after: Thu 17 Apr 2025 01:00:40 +0000 asID: 11117 IP address blocks: 23.171.9.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:91:db:31:a2:ce:84:9c:19:fa:df:c5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46b96165-9c22-47d1-962f-486840cec7fa Validity Not Before: Jan 17 02:00:40 2025 GMT Not After : Apr 17 01:00:40 2025 GMT Subject: CN=0d867c90-2792-4700-848d-21552e8ad597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:74:8b:73:ab:57:fc:87:66:9f:5f:e0:12:4b: 7c:7e:1b:55:a0:c6:ad:59:5a:15:d8:15:d1:83:a1: 2b:80:f1:1a:ac:86:a5:6a:6a:e1:e7:d9:8f:5d:5c: ec:10:6f:dd:5d:7a:5f:97:cc:2c:07:9f:82:c5:1a: bf:65:0a:a2:7d:79:56:2a:22:05:46:ce:cb:ec:40: 54:1a:9a:71:05:32:7a:53:18:67:2c:73:fa:21:b4: 23:2f:9a:ac:0c:97:95:05:76:ae:da:ab:62:53:96: 82:6c:ef:94:c9:3e:88:6f:08:9a:58:19:38:21:ae: 7b:68:16:60:b7:9e:8e:e3:d0:34:89:e1:99:4f:f7: 10:8e:72:b4:b4:81:b2:ff:fa:fe:c9:18:36:e7:79: 97:b2:29:01:e0:1a:e1:43:e4:1c:18:60:26:b0:b7: 8e:85:f1:87:f9:77:3c:76:ee:b0:e3:0c:57:77:36: dd:f6:c1:08:13:e8:4d:e4:1f:0f:f7:be:2e:ad:6f: 3e:e2:ea:aa:b5:38:a9:b4:7c:bc:c7:d9:6a:8f:f4: 8b:bb:d6:85:4e:02:6a:26:8c:61:e6:52:01:fe:7e: 32:07:fd:6c:b9:50:8d:cc:dc:cf:30:d7:b2:e2:57: 39:c4:e3:5e:17:21:cb:2b:88:87:58:0c:1d:04:7d: 8d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C7:0C:E4:4C:FE:B7:DF:39:F2:BA:E7:83:8C:37:79:DD:9E:02:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/1eee6a67-8c37-3b60-aa92-7c3f23759983.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.crl X509v3 Authority Key Identifier: keyid:7E:68:D8:AA:EB:33:0A:33:7C:88:D9:3E:FA:7D:E1:FC:34:A1:2F:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer sbgp-ipAddrBlock: critical IPv4: 23.171.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:61:17:2a:f3:dc:d4:28:58:be:74:4c:d6:f9:f2:c0:8b:37: 69:c5:67:1b:7c:ed:23:37:b7:57:9f:c5:7f:3f:61:33:45:d8: 0c:bd:a1:c4:8d:8b:18:fe:57:bc:26:0a:57:cd:88:15:28:77: 15:eb:af:00:3d:31:6d:64:d6:6a:13:f5:43:54:36:1c:e6:3c: b4:a4:a8:06:a0:27:78:8c:96:5a:01:9b:6f:da:32:e0:8e:94: 66:db:9f:3e:49:ee:48:b8:b6:a2:18:ef:cf:b4:5e:c5:ae:f3: c8:eb:61:51:19:4a:f3:bd:76:e5:49:5d:0d:c3:73:71:0c:67: 5d:ec:62:8a:a7:98:40:7a:dd:b3:c4:c6:ce:a9:e2:cf:69:42: 8e:cc:8a:f0:93:c8:ef:29:35:b2:f2:66:e6:a2:e7:10:b3:38: ab:df:a6:3b:8a:f7:43:4c:86:5f:99:1d:ac:fe:9c:d5:5f:a8: ff:2a:68:38:8a:d3:7c:29:69:b7:be:86:62:1a:e1:5f:f2:ad: 9b:a4:97:29:ee:1f:e1:e9:75:f3:76:2a:9b:c5:49:f3:83:1c: 27:05:69:25:92:bc:d7:23:fb:47:3f:31:f8:d6:cb:8a:01:18: bd:c5:07:72:ba:93:78:52:1e:4f:f1:79:f5:4d:30:41:d5:35: d9:e6:df:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiR2zGizoScGfrfxWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDZiOTYxNjUtOWMyMi00N2QxLTk2MmYtNDg2ODQwY2Vj N2ZhMB4XDTI1MDExNzAyMDA0MFoXDTI1MDQxNzAxMDA0MFowLzEtMCsGA1UEAxMk MGQ4NjdjOTAtMjc5Mi00NzAwLTg0OGQtMjE1NTJlOGFkNTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXSLc6tX/Idmn1/gEkt8fhtVoMatWVoV2BXR g6ErgPEarIalamrh59mPXVzsEG/dXXpfl8wsB5+CxRq/ZQqifXlWKiIFRs7L7EBU GppxBTJ6UxhnLHP6IbQjL5qsDJeVBXau2qtiU5aCbO+UyT6IbwiaWBk4Ia57aBZg t56O49A0ieGZT/cQjnK0tIGy//r+yRg253mXsikB4BrhQ+QcGGAmsLeOhfGH+Xc8 du6w4wxXdzbd9sEIE+hN5B8P974urW8+4uqqtTiptHy8x9lqj/SLu9aFTgJqJoxh 5lIB/n4yB/1suVCNzNzPMNey4lc5xONeFyHLK4iHWAwdBH2NjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjHDORM/rffOfK654OMN3ndngKsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NmI5 NjE2NS05YzIyLTQ3ZDEtOTYyZi00ODY4NDBjZWM3ZmEvMWVlZTZhNjctOGMzNy0z YjYwLWFhOTItN2MzZjIzNzU5OTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDZiOTYxNjUtOWMyMi00N2QxLTk2 MmYtNDg2ODQwY2VjN2ZhLzQ2Yjk2MTY1LTljMjItNDdkMS05NjJmLTQ4Njg0MGNl YzdmYS5jcmwwHwYDVR0jBBgwFoAUfmjYquszCjN8iNk++n3h/DShL6YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NmI5NjE2NS05YzIyLTQ3ZDEtOTYyZi00ODY4 NDBjZWM3ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6sJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABhFyrz3NQoWL50TNb58sCLN2nFZxt87SM3t1efxX8/YTNF2Ay9ocSN ixj+V7wmClfNiBUodxXrrwA9MW1k1moT9UNUNhzmPLSkqAagJ3iMlloBm2/aMuCO lGbbnz5J7ki4tqIY78+0XsWu88jrYVEZSvO9duVJXQ3Dc3EMZ13sYoqnmEB63bPE xs6p4s9pQo7MivCTyO8pNbLyZuai5xCzOKvfpjuK90NMhl+ZHaz+nNVfqP8qaDiK 03wpabe+hmIa4V/yrZuklynuH+HpdfN2KpvFSfODHCcFaSWSvNcj+0c/MfjWy4oB GL3FB3K6k3hSHk/xefVNMEHVNdnm34A= -----END CERTIFICATE-----Generated at Fri Mar 14 14:02:51 2025 by rpki-client