$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2339c654-e8fe-3c18-ab52-2c353f8dfc70.roa File: 2339c654-e8fe-3c18-ab52-2c353f8dfc70.roa (raw, json) Hash identifier: upyf7Z9PJ870c7zbqHChc5CSBxTfUnWR3aShvkTLFDI= Subject key identifier: 92:77:0C:AC:76:E0:15:6E:AA:8D:6D:B9:26:E9:D6:31:34:1B:F1:75 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584858A03F02EB49561134F36F00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2339c654-e8fe-3c18-ab52-2c353f8dfc70.roa Signing time: Fri 27 Dec 2024 14:00:52 +0000 ROA not before: Fri 27 Dec 2024 14:00:52 +0000 ROA not after: Thu 27 Mar 2025 13:00:52 +0000 asID: 5650 IP address blocks: 168.93.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:58:a0:3f:02:eb:49:56:11:34:f3:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Dec 27 14:00:52 2024 GMT Not After : Mar 27 13:00:52 2025 GMT Subject: CN=77d92ab8-2d05-44bc-897c-1cb38f9a2ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4b:6c:d8:8a:cb:9c:14:09:0e:2d:43:13:0a: 6a:27:d5:84:4a:a7:f8:22:bb:51:e6:93:39:e4:48: 4f:37:7f:c4:5b:d1:05:5e:46:e6:56:38:0e:a1:2f: d9:2a:c8:0a:59:5f:da:3d:0c:e3:dc:d4:cb:ea:9b: c6:7f:4e:0e:48:f3:41:74:7a:4e:9a:6a:27:42:59: 11:f9:3a:2a:39:44:b1:b1:c8:10:72:f2:ad:80:50: 83:e4:71:80:b4:a6:f8:18:64:75:8f:cc:ec:5e:bd: ff:ca:51:0d:1d:79:8a:1c:23:b8:57:be:1a:fd:b5: 67:e3:dc:2f:bb:72:c9:f0:6f:5b:06:49:9b:d5:ce: 71:d5:e1:40:21:cb:f4:b5:18:7d:02:22:0a:ce:3c: 71:eb:ab:11:1b:c2:a7:05:c8:c8:ab:e5:c1:70:ec: 44:26:74:44:8b:c2:62:a5:db:91:b0:b6:25:63:a6: 44:89:62:69:ff:77:ab:71:dc:f6:14:a8:74:48:e1: f8:92:fd:11:48:de:64:24:76:e1:e9:64:d1:0c:4f: a5:9a:69:94:fb:b9:1d:41:58:09:49:35:dc:cd:00: 3e:38:02:c7:70:b4:4a:7b:ac:2d:8e:65:05:1e:23: 95:2b:f1:93:59:1f:ee:1d:6f:ed:2f:0b:69:c1:a0: c7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:77:0C:AC:76:E0:15:6E:AA:8D:6D:B9:26:E9:D6:31:34:1B:F1:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2339c654-e8fe-3c18-ab52-2c353f8dfc70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 168.93.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:63:f4:55:45:3f:0d:8b:0b:f4:c9:b8:30:4a:4e:46:c6:fb: a5:87:af:20:29:a6:fb:db:15:fe:d5:86:01:8b:b8:4a:e7:92: cf:2b:04:78:f2:9b:c3:95:7e:cb:9b:bb:0d:1e:a4:89:5f:4f: a3:fe:ba:49:35:df:34:6e:71:08:87:92:65:8e:3d:22:fc:f7: e5:a6:41:1d:f2:73:26:0e:62:19:c8:62:54:d8:3b:be:48:58: 83:2c:1e:76:89:0f:ae:45:a0:b9:df:15:b5:82:56:18:99:52: 72:61:a9:59:49:f8:d0:1f:b2:d1:5f:51:6c:63:84:9d:2b:33: d2:45:a4:39:65:80:9a:1f:0f:99:d6:c8:0a:7a:bb:fb:9f:ea: 6f:6d:96:4c:79:21:18:32:13:a8:34:33:54:ac:ed:eb:7d:7e: 22:3c:f1:89:47:5a:35:fb:08:1f:f2:6c:64:97:4e:a5:d1:2f: 22:4b:60:42:81:f4:ac:ef:08:f8:5e:68:11:e2:fd:1b:c9:bc: db:a1:83:de:5a:26:d2:94:37:2c:4b:2e:6b:41:f0:45:46:e1: 2e:ba:1e:84:42:70:59:a9:e3:36:3b:b3:e5:a8:42:8a:f7:c2: 75:26:fe:e2:a3:18:1a:43:82:8a:0a:81:67:16:23:24:8c:97: 48:c2:07:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoD8C60lWETTzbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk NzdkOTJhYjgtMmQwNS00NGJjLTg5N2MtMWNiMzhmOWEyYWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUts2IrLnBQJDi1DEwpqJ9WESqf4IrtR5pM5 5EhPN3/EW9EFXkbmVjgOoS/ZKsgKWV/aPQzj3NTL6pvGf04OSPNBdHpOmmonQlkR +ToqOUSxscgQcvKtgFCD5HGAtKb4GGR1j8zsXr3/ylENHXmKHCO4V74a/bVn49wv u3LJ8G9bBkmb1c5x1eFAIcv0tRh9AiIKzjxx66sRG8KnBcjIq+XBcOxEJnREi8Ji pduRsLYlY6ZEiWJp/3ercdz2FKh0SOH4kv0RSN5kJHbh6WTRDE+lmmmU+7kdQVgJ STXczQA+OALHcLRKe6wtjmUFHiOVK/GTWR/uHW/tLwtpwaDH8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJ3DKx24BVuqo1tuSbp1jE0G/F1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjMzOWM2NTQtZThmZS0z YzE4LWFiNTItMmMzNTNmOGRmYzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNj9FVFPw2LC/TJuDBKTkbG+6WHryAppvvbFf7VhgGLuErnks8rBHjy m8OVfsubuw0epIlfT6P+ukk13zRucQiHkmWOPSL89+WmQR3ycyYOYhnIYlTYO75I WIMsHnaJD65FoLnfFbWCVhiZUnJhqVlJ+NAfstFfUWxjhJ0rM9JFpDllgJofD5nW yAp6u/uf6m9tlkx5IRgyE6g0M1Ss7et9fiI88YlHWjX7CB/ybGSXTqXRLyJLYEKB 9KzvCPheaBHi/RvJvNuhg95aJtKUNyxLLmtB8EVG4S66HoRCcFmp4zY7s+WoQor3 wnUm/uKjGBpDgooKgWcWIySMl0jCB7k= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:30 2025 by rpki-client