$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/d68b1747-8766-30c7-9761-0368f3106f64.roa File: d68b1747-8766-30c7-9761-0368f3106f64.roa (raw, json) Hash identifier: +w+ayqcaOqCAuBc2WVoGRM3DszyW42CM3INIEH+EHz0= Subject key identifier: E7:1E:97:AE:8D:A4:EB:F7:F3:1B:60:62:B3:30:5E:AA:29:8A:A5:F5 Certificate issuer: /CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7 Certificate serial: 010D0C9F43285848530AEE84E64E18BD050FF980 Authority key identifier: 8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/d68b1747-8766-30c7-9761-0368f3106f64.roa Signing time: Wed 25 Dec 2024 14:00:52 +0000 ROA not before: Wed 25 Dec 2024 14:00:52 +0000 ROA not after: Tue 25 Mar 2025 13:00:52 +0000 asID: 30690 IP address blocks: 23.171.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:53:0a:ee:84:e6:4e:18:bd:05:0f:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7 Validity Not Before: Dec 25 14:00:52 2024 GMT Not After : Mar 25 13:00:52 2025 GMT Subject: CN=478cf609-beae-47ec-860c-a80639f2b7b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:81:ef:2c:c8:2b:87:78:29:96:a5:dd:85:d8: b7:f1:9b:99:13:56:2e:dc:09:dd:dd:ef:0e:da:be: 56:77:90:b6:16:c2:70:95:63:07:9e:17:80:3f:a5: 5f:b8:08:28:e5:c0:a0:28:9d:45:0d:b7:fb:0b:70: f7:2e:72:ff:45:16:33:f0:6e:bb:c6:50:fd:73:4a: 8d:bd:72:e0:bb:c1:3f:4e:b3:e9:0c:ed:c2:35:c0: 50:16:52:de:42:80:d0:5b:d6:9b:0c:f0:87:0e:32: 19:75:01:28:9b:90:9b:33:43:62:f4:50:b1:c5:9a: 3f:bd:d7:ab:c7:35:9e:aa:07:a1:d3:c3:d0:96:a1: 38:4d:23:bd:5a:a4:ae:1f:60:ac:7e:b0:00:fb:88: 03:dc:b4:c1:83:61:82:e6:0a:8e:e9:24:df:f4:c1: e3:db:02:d3:43:3f:cd:c4:43:43:1f:bd:3e:82:73: e2:23:e3:49:cf:8c:f5:01:8c:6e:95:0f:d1:6c:79: 8e:3b:ac:bf:28:2d:3e:4d:7e:cf:11:66:fd:f5:b5: bb:d2:ab:ff:3d:1c:72:74:15:f4:32:ff:3a:8f:64: 5d:43:ad:3e:56:ec:0b:b7:42:15:18:d1:2b:ad:44: 76:8a:f7:c4:89:79:f6:e8:18:d5:cc:c8:2c:4c:5b: 6e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1E:97:AE:8D:A4:EB:F7:F3:1B:60:62:B3:30:5E:AA:29:8A:A5:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/d68b1747-8766-30c7-9761-0368f3106f64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl X509v3 Authority Key Identifier: keyid:8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer sbgp-ipAddrBlock: critical IPv4: 23.171.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:6e:29:1e:95:4b:24:43:b5:e1:e8:8e:57:37:5f:bc:fe:60: 3a:0b:db:8e:cc:b2:de:cb:bc:69:65:29:17:fd:f9:59:0d:48: 3d:60:3f:32:fa:18:70:70:05:e2:fc:04:d7:38:19:83:6e:ac: bb:97:97:4b:08:4e:23:e6:ca:bc:38:d4:2a:ef:74:64:d2:3a: 86:be:87:96:1d:40:8e:19:eb:30:44:8f:82:2a:8a:86:e8:a2: fe:e1:4a:94:0c:8d:3e:e2:36:4e:3a:a4:a2:9b:14:ab:16:fa: 41:8e:2d:b4:d4:79:a0:65:f1:59:21:83:dc:a4:4b:6c:99:c0: 5d:65:43:10:e1:89:92:57:d4:83:7d:53:cd:0d:6e:04:d2:b5: 2b:87:d0:98:5e:0a:a5:e8:35:bc:61:5a:9c:78:38:09:cb:d8: c3:2d:40:74:bc:49:d7:5b:5c:61:09:38:6c:2d:d1:43:75:4b: ec:16:f3:54:7c:b9:9e:1f:31:bb:a5:66:72:97:9d:d1:54:75: f7:f7:68:1f:13:f8:3f:f5:78:7d:90:4c:18:71:05:42:15:a5: 2a:2c:ff:c8:f8:0a:8b:22:4f:74:ca:f0:0f:a5:06:6c:d7:d6: a8:f5:0f:85:75:6e:81:47:7f:11:85:df:e3:4d:c1:23:02:d9: df:d5:29:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhTCu6E5k4YvQUP+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM1ZmMyM2EtZTQyMi00YzYxLWEyNWEtYjczYjA5NjNi NmY3MB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk NDc4Y2Y2MDktYmVhZS00N2VjLTg2MGMtYTgwNjM5ZjJiN2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoHvLMgrh3gplqXdhdi38ZuZE1Yu3And3e8O 2r5Wd5C2FsJwlWMHnheAP6VfuAgo5cCgKJ1FDbf7C3D3LnL/RRYz8G67xlD9c0qN vXLgu8E/TrPpDO3CNcBQFlLeQoDQW9abDPCHDjIZdQEom5CbM0Ni9FCxxZo/vder xzWeqgeh08PQlqE4TSO9WqSuH2CsfrAA+4gD3LTBg2GC5gqO6STf9MHj2wLTQz/N xENDH70+gnPiI+NJz4z1AYxulQ/RbHmOO6y/KC0+TX7PEWb99bW70qv/PRxydBX0 Mv86j2RdQ60+VuwLt0IVGNErrUR2ivfEiXn26BjVzMgsTFtuhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcel66NpOv38xtgYrMwXqopiqX1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMzVm YzIzYS1lNDIyLTRjNjEtYTI1YS1iNzNiMDk2M2I2ZjcvZDY4YjE3NDctODc2Ni0z MGM3LTk3NjEtMDM2OGYzMTA2ZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjM1ZmMyM2EtZTQyMi00YzYxLWEy NWEtYjczYjA5NjNiNmY3L2IzNWZjMjNhLWU0MjItNGM2MS1hMjVhLWI3M2IwOTYz YjZmNy5jcmwwHwYDVR0jBBgwFoAUjS9eZJw3d6zMTnUYB7+cZ2lqHf4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMzVmYzIzYS1lNDIyLTRjNjEtYTI1YS1iNzNi MDk2M2I2ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6tIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9uKR6VSyRDteHojlc3X7z+YDoL247Mst7LvGllKRf9+VkNSD1gPzL6 GHBwBeL8BNc4GYNurLuXl0sITiPmyrw41CrvdGTSOoa+h5YdQI4Z6zBEj4Iqiobo ov7hSpQMjT7iNk46pKKbFKsW+kGOLbTUeaBl8Vkhg9ykS2yZwF1lQxDhiZJX1IN9 U80NbgTStSuH0JheCqXoNbxhWpx4OAnL2MMtQHS8SddbXGEJOGwt0UN1S+wW81R8 uZ4fMbulZnKXndFUdff3aB8T+D/1eH2QTBhxBUIVpSos/8j4CosiT3TK8A+lBmzX 1qj1D4V1boFHfxGF3+NNwSMC2d/VKeQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:47 2025 by rpki-client