$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/4354db81-bf34-31da-9ac8-8624cca3e411.roa File: 4354db81-bf34-31da-9ac8-8624cca3e411.roa (raw, json) Hash identifier: Cen/8Z4uLv9K90w2GhLqEI1Fp0u8Yns2HS4jB3eeSt8= Subject key identifier: BD:12:47:F1:69:99:EB:C7:9D:9E:DE:AC:C7:57:13:AD:8C:AB:DF:B5 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F43285848977090C1AF591BBF1D897D00 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/4354db81-bf34-31da-9ac8-8624cca3e411.roa Signing time: Sun 19 Jan 2025 02:00:39 +0000 ROA not before: Sun 19 Jan 2025 02:00:39 +0000 ROA not after: Sat 19 Apr 2025 01:00:39 +0000 asID: 13768 IP address blocks: 64.226.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:97:70:90:c1:af:59:1b:bf:1d:89:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Jan 19 02:00:39 2025 GMT Not After : Apr 19 01:00:39 2025 GMT Subject: CN=57e98f88-280d-4959-8d6c-fb66627c033e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b4:23:11:0f:b3:25:53:1d:cd:c5:e0:22:9e: 20:4c:01:02:e5:3e:2c:ac:2e:fc:e0:d7:35:03:6d: 40:36:1a:c8:7b:e6:c5:e1:34:a6:97:ed:e4:c6:d3: 2c:b0:58:3b:e7:be:49:44:1d:43:a1:82:00:04:26: 5f:e9:9d:e6:7c:aa:a0:e3:09:86:f0:c8:46:9c:d8: 35:04:76:bd:d0:35:cc:96:01:5e:a6:98:d4:e6:b3: 3c:8a:e1:ee:95:b0:4b:5b:01:e4:5b:4b:79:38:5b: 3a:83:09:84:08:65:2f:7f:8f:b9:f6:ae:dc:c0:e3: ce:d0:be:06:2b:27:b8:97:d2:ed:17:8f:d3:2c:a0: 39:92:08:78:27:26:1c:74:9c:6a:47:4f:09:c0:25: b9:c4:7a:63:4a:48:37:92:c1:4b:cc:b2:44:9a:9b: b8:65:17:63:60:cb:97:18:13:6e:f6:34:9f:e4:f7: 76:f8:a3:f9:94:61:3c:ba:47:d6:cb:3a:32:40:8f: 32:db:5e:9c:e5:35:81:42:27:7e:a1:aa:a8:9b:e0: 4f:af:15:e6:e6:32:d0:62:76:fb:10:d8:61:8f:22: 7b:4e:d0:d2:f1:9d:f1:10:6e:69:ff:7a:b7:1d:bb: e3:80:94:8a:e6:ab:e8:5a:9d:20:64:1e:44:41:58: 0a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:12:47:F1:69:99:EB:C7:9D:9E:DE:AC:C7:57:13:AD:8C:AB:DF:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/4354db81-bf34-31da-9ac8-8624cca3e411.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.226.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:b6:86:e5:24:d8:bc:a6:61:4e:79:1c:71:18:fa:94:b9:24: fb:ba:c2:1a:c6:69:25:79:9d:5d:32:03:96:42:ec:4a:9c:e7: a3:6f:3a:79:c6:87:47:a7:49:6d:28:f5:4e:3b:10:41:97:ce: 9a:27:51:7a:8f:c2:de:9c:86:89:c6:0f:ee:8e:61:55:03:37: 46:6c:81:c7:0b:74:aa:82:29:de:a0:42:be:2b:97:b5:fc:2c: a7:f0:ea:41:3b:74:61:88:5c:0d:81:03:06:85:b0:6c:55:3a: 50:9f:ec:90:14:9d:a0:7e:93:65:2d:b5:08:ff:8e:38:22:7c: 26:58:28:a8:ea:d4:85:a9:ba:65:fd:a8:37:6b:fc:1a:a1:28: e6:f3:ef:5e:94:8a:e3:7a:c7:e5:89:80:e5:14:39:46:68:d6: 09:e4:7c:10:50:5d:b8:d0:4f:d2:9d:2b:2a:d5:1a:13:73:7b: a0:9b:89:c3:15:af:dd:6b:51:af:49:49:1f:e5:a0:01:44:56: fe:d1:92:ad:be:b3:2c:8a:be:79:ab:00:cc:d6:32:59:b8:bb: 68:98:06:94:7a:80:fe:f2:eb:a0:27:c4:d5:ee:45:78:bb:64: d2:37:ec:7a:08:d1:6d:e4:7d:bd:19:63:ba:0a:31:23:b0:2f: c2:3f:05:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiXcJDBr1kbvx2JfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDExOTAyMDAzOVoXDTI1MDQxOTAxMDAzOVowLzEtMCsGA1UEAxMk NTdlOThmODgtMjgwZC00OTU5LThkNmMtZmI2NjYyN2MwMzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLQjEQ+zJVMdzcXgIp4gTAEC5T4srC784Nc1 A21ANhrIe+bF4TSml+3kxtMssFg7575JRB1DoYIABCZf6Z3mfKqg4wmG8MhGnNg1 BHa90DXMlgFeppjU5rM8iuHulbBLWwHkW0t5OFs6gwmECGUvf4+59q7cwOPO0L4G Kye4l9LtF4/TLKA5kgh4JyYcdJxqR08JwCW5xHpjSkg3ksFLzLJEmpu4ZRdjYMuX GBNu9jSf5Pd2+KP5lGE8ukfWyzoyQI8y216c5TWBQid+oaqom+BPrxXm5jLQYnb7 ENhhjyJ7TtDS8Z3xEG5p/3q3HbvjgJSK5qvoWp0gZB5EQVgK/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0SR/FpmevHnZ7erMdXE62Mq9+1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvNDM1NGRiODEtYmYzNC0z MWRhLTlhYzgtODYyNGNjYTNlNDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOLcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIK2huUk2LymYU55HHEY+pS5JPu6whrGaSV5nV0yA5ZC7Eqc56NvOnnG h0enSW0o9U47EEGXzponUXqPwt6chonGD+6OYVUDN0ZsgccLdKqCKd6gQr4rl7X8 LKfw6kE7dGGIXA2BAwaFsGxVOlCf7JAUnaB+k2UttQj/jjgifCZYKKjq1IWpumX9 qDdr/BqhKObz716UiuN6x+WJgOUUOUZo1gnkfBBQXbjQT9KdKyrVGhNze6CbicMV r91rUa9JSR/loAFEVv7Rkq2+syyKvnmrAMzWMlm4u2iYBpR6gP7y66AnxNXuRXi7 ZNI37HoI0W3kfb0ZY7oKMSOwL8I/BR0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:03 2025 by rpki-client