$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/da638dbb-2b83-395f-8e51-53f37ab89035.roa File: da638dbb-2b83-395f-8e51-53f37ab89035.roa (raw, json) Hash identifier: rPEZxwIgiz5T8BqJC+CC25pShXsp+mTQcbZbqMJHslI= Subject key identifier: 1B:88:B9:68:52:81:F2:04:43:83:F1:5D:FE:5F:8E:E4:95:AB:65:94 Certificate issuer: /CN=b2959336-6afe-411c-b979-dac0a693f8c4 Certificate serial: 010D0C9F43285848C580F6F6713FAEEC6E420B00 Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/da638dbb-2b83-395f-8e51-53f37ab89035.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 11870 IP address blocks: 167.23.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:80:f6:f6:71:3f:ae:ec:6e:42:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=a43c286d-e560-432c-acb2-4837d9031635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:09:f0:e6:07:63:18:92:e2:ef:88:5c:86:03: 76:ee:15:32:b3:1e:4f:ac:a0:ca:84:ae:b4:b6:86: ed:ec:7d:f0:6b:3e:88:40:15:78:df:b6:67:09:28: b0:dc:6f:15:73:43:ae:04:6f:27:fd:a9:9a:51:53: 2b:34:e0:d9:33:45:3b:db:64:6b:66:a5:48:9d:06: b7:ec:00:e6:64:62:d4:9b:d0:34:ef:f7:82:dc:31: 84:7b:96:6e:8b:41:e3:03:25:c4:d9:5f:5e:bc:48: 03:c7:ee:57:41:02:70:55:18:34:36:0e:92:6e:b3: ba:89:07:c4:98:fd:ca:bb:f0:60:a5:4e:3c:a8:0d: ad:f4:4e:04:45:ad:62:10:80:da:ab:53:70:cc:48: c9:55:f2:a1:91:6a:8f:cc:6b:e0:9a:30:e5:b6:bc: 4e:14:85:a3:05:81:a0:e7:19:f7:5e:16:f7:ec:98: 4a:a7:c4:74:81:83:26:cb:62:a4:ff:02:64:58:00: 69:90:13:c9:6f:e8:84:dd:72:05:d3:99:b4:4b:31: 15:b4:be:74:73:92:77:83:1f:c6:2a:04:25:ea:89: ba:0d:b7:6d:1a:2e:28:90:91:0d:d1:42:5b:85:51: 1b:09:cd:cb:6c:7c:51:85:71:39:73:1f:15:9f:73: 66:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:88:B9:68:52:81:F2:04:43:83:F1:5D:FE:5F:8E:E4:95:AB:65:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/da638dbb-2b83-395f-8e51-53f37ab89035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl X509v3 Authority Key Identifier: keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer sbgp-ipAddrBlock: critical IPv4: 167.23.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:b6:b0:7f:c0:65:f4:df:ce:6f:dc:a0:91:88:60:60:fd:56: f3:92:54:87:b1:45:b7:0e:2f:10:cb:73:02:9e:f8:6b:33:84: f1:c0:2d:84:cd:bc:f7:a7:d5:71:ee:26:ef:2a:37:d5:cb:96: d5:90:44:80:9e:08:88:25:8b:af:ef:e3:a7:28:49:dc:be:34: c8:fa:be:5a:f4:e4:6e:2f:84:63:00:5e:18:c9:0c:b2:69:7b: 75:e2:ce:0e:68:73:31:46:50:13:2b:e4:6b:3f:47:16:cc:85: 32:c2:7d:2a:3d:72:d6:93:4a:75:90:2d:5c:8c:cf:d5:90:14: 4f:29:4b:d8:9a:9f:cb:38:3d:c2:7e:4a:87:51:e5:64:ca:e8: 2d:99:28:a1:fd:a3:7c:e4:96:3a:1a:50:5c:0a:31:80:85:a5: 20:95:0a:77:4c:f6:5a:20:7b:d0:aa:a6:b2:4f:b8:7c:12:40: 3a:d9:e9:55:0e:08:c2:56:ad:07:ab:a0:af:38:19:cb:59:23: 4a:f4:32:df:00:9c:40:df:2b:39:8c:25:8a:e6:d3:b7:1f:a3: d0:23:da:52:c4:a6:48:0b:03:73:b6:55:3c:e2:17:26:57:ad: 00:e1:e8:54:11:dc:73:b2:de:5b:30:00:d2:b3:ad:62:e1:97: 10:5d:b5:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgPb2cT+u7G5CCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI5NTkzMzYtNmFmZS00MTFjLWI5NzktZGFjMGE2OTNm OGM0MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YTQzYzI4NmQtZTU2MC00MzJjLWFjYjItNDgzN2Q5MDMxNjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQnw5gdjGJLi74hchgN27hUysx5PrKDKhK60 tobt7H3waz6IQBV437ZnCSiw3G8Vc0OuBG8n/amaUVMrNODZM0U722RrZqVInQa3 7ADmZGLUm9A07/eC3DGEe5Zui0HjAyXE2V9evEgDx+5XQQJwVRg0Ng6SbrO6iQfE mP3Ku/BgpU48qA2t9E4ERa1iEIDaq1NwzEjJVfKhkWqPzGvgmjDltrxOFIWjBYGg 5xn3Xhb37JhKp8R0gYMmy2Kk/wJkWABpkBPJb+iE3XIF05m0SzEVtL50c5J3gx/G KgQl6om6DbdtGi4okJEN0UJbhVEbCc3LbHxRhXE5cx8Vn3NmuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuIuWhSgfIEQ4PxXf5fjuSVq2WUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMjk1 OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMwYTY5M2Y4YzQvZGE2MzhkYmItMmI4My0z OTVmLThlNTEtNTNmMzdhYjg5MDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjI5NTkzMzYtNmFmZS00MTFjLWI5 NzktZGFjMGE2OTNmOGM0L2IyOTU5MzM2LTZhZmUtNDExYy1iOTc5LWRhYzBhNjkz ZjhjNC5jcmwwHwYDVR0jBBgwFoAUHFIwMv7rW5JtWi415XyAOxXgMnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMjk1OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMw YTY5M2Y4YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxf4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACy2sH/AZfTfzm/coJGIYGD9VvOSVIexRbcOLxDLcwKe+GszhPHALYTN vPen1XHuJu8qN9XLltWQRICeCIgli6/v46coSdy+NMj6vlr05G4vhGMAXhjJDLJp e3Xizg5oczFGUBMr5Gs/RxbMhTLCfSo9ctaTSnWQLVyMz9WQFE8pS9ian8s4PcJ+ SodR5WTK6C2ZKKH9o3zkljoaUFwKMYCFpSCVCndM9loge9CqprJPuHwSQDrZ6VUO CMJWrQeroK84GctZI0r0Mt8AnEDfKzmMJYrm07cfo9Aj2lLEpkgLA3O2VTziFyZX rQDh6FQR3HOy3lswANKzrWLhlxBdtVc= -----END CERTIFICATE-----Generated at Sat Apr 5 02:52:41 2025 by rpki-client