$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/5a866018-70fa-3794-ba86-57885d76af56.roa File: 5a866018-70fa-3794-ba86-57885d76af56.roa (raw, json) Hash identifier: 5DWA0Lr7gLhCIoWKRAwcKPUivGo477qYXXuV4SybFXY= Subject key identifier: AB:09:9E:DA:38:03:04:BE:AA:07:B1:3B:02:72:B2:F8:71:18:B2:F3 Certificate issuer: /CN=bce2ace0-971c-48f1-8361-962ad02d9618 Certificate serial: 010D0C9F4328584897708DA5D743452EFE834240 Authority key identifier: E0:97:0C:68:49:45:08:A9:16:69:01:83:CE:76:11:9E:83:A9:6F:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/5a866018-70fa-3794-ba86-57885d76af56.roa Signing time: Sun 19 Jan 2025 02:00:39 +0000 ROA not before: Sun 19 Jan 2025 02:00:39 +0000 ROA not after: Sat 19 Apr 2025 01:00:39 +0000 asID: 32943 IP address blocks: 23.175.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/bce2ace0-971c-48f1-8361-962ad02d9618.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/bce2ace0-971c-48f1-8361-962ad02d9618.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:97:70:8d:a5:d7:43:45:2e:fe:83:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bce2ace0-971c-48f1-8361-962ad02d9618 Validity Not Before: Jan 19 02:00:39 2025 GMT Not After : Apr 19 01:00:39 2025 GMT Subject: CN=7f69d1f6-5967-4d95-a96a-9a8234e6682e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:2b:78:ce:c4:ad:d2:c2:95:df:5d:cf:c7:ab: 16:9a:6a:d9:e1:75:f5:d3:5c:0c:85:c7:98:98:65: 91:31:76:97:e3:4a:53:82:9f:33:9c:fc:69:07:51: 6f:42:6d:0a:4f:2d:55:f2:4f:ac:40:cb:5d:71:d4: 28:bc:bb:b2:ab:21:e5:68:8a:04:48:10:bc:e3:be: 88:0c:80:18:ed:fa:ac:6c:60:93:3f:9a:2d:04:ea: 89:cd:bf:1f:8e:c7:cc:06:ca:86:0a:92:c1:ef:50: 8b:f3:35:f9:61:eb:39:15:2e:16:b4:a8:2a:3d:a2: bf:ff:78:24:c9:e5:da:c2:c3:38:c4:22:92:4c:83: 09:99:45:bc:30:4a:94:88:97:86:5b:19:a0:f6:7a: c7:56:94:49:43:73:f2:80:2f:97:bd:0f:f4:67:04: ea:4c:51:79:62:f1:23:74:51:ab:e0:17:15:bf:03: 41:a3:ba:51:7e:62:37:6e:18:d9:d9:97:a4:5c:4a: 53:a9:1a:ad:80:32:6b:32:e8:41:64:33:a4:bf:85: 42:b6:ff:e0:55:44:44:f4:15:d2:e6:0a:d2:23:bb: 95:44:81:7a:c7:b2:cf:cb:7d:80:df:46:fc:a4:2a: 0c:f2:b2:68:1a:dc:2c:31:1b:e6:b4:14:72:a6:13: 9e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:09:9E:DA:38:03:04:BE:AA:07:B1:3B:02:72:B2:F8:71:18:B2:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/5a866018-70fa-3794-ba86-57885d76af56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/bce2ace0-971c-48f1-8361-962ad02d9618.crl X509v3 Authority Key Identifier: keyid:E0:97:0C:68:49:45:08:A9:16:69:01:83:CE:76:11:9E:83:A9:6F:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618.cer sbgp-ipAddrBlock: critical IPv4: 23.175.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:01:91:75:36:86:f5:a8:6d:f7:86:c2:7e:4f:56:0f:36:08: 73:46:bb:36:34:5e:e6:21:b7:73:24:2a:d5:1d:b9:4b:3a:87: ad:27:3a:37:99:43:f2:60:0b:32:71:ce:3e:fa:9b:57:0f:6f: a2:cb:b6:9f:30:6b:bb:b8:3a:f3:42:7c:81:0e:7f:a7:1e:2f: bb:14:0f:98:5d:05:76:4e:7b:f4:cf:52:a3:f6:98:64:41:82: ac:37:89:5b:39:92:a0:15:2d:d3:d4:62:d0:e6:ef:49:28:e4: 71:fe:e5:8a:cd:e5:fe:c3:2a:dc:55:f3:1c:fc:69:d3:69:44: 6b:7a:ec:91:61:f7:5e:3e:99:03:1e:f9:0c:f2:d0:7d:4c:a2: 2f:a8:bb:a9:46:cb:38:b7:fd:bd:17:d3:5e:11:d4:fc:a1:9a: 29:2e:67:05:44:6e:c4:8a:f0:52:fa:ab:b7:cf:74:1a:64:ea: f4:38:d1:04:d2:eb:2b:5f:47:32:92:cc:55:4a:f3:cc:33:2e: 93:8f:69:75:fd:47:ce:0f:39:41:3d:d8:f6:4a:fa:b1:51:59: 76:3a:ad:6d:d9:fe:a6:73:96:1a:2f:61:17:f8:af:5d:24:42: 41:d6:8f:b9:d8:26:38:86:0a:88:e4:89:aa:b0:b6:df:5a:e9: ed:af:3f:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiXcI2l10NFLv6DQkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNlMmFjZTAtOTcxYy00OGYxLTgzNjEtOTYyYWQwMmQ5 NjE4MB4XDTI1MDExOTAyMDAzOVoXDTI1MDQxOTAxMDAzOVowLzEtMCsGA1UEAxMk N2Y2OWQxZjYtNTk2Ny00ZDk1LWE5NmEtOWE4MjM0ZTY2ODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8St4zsSt0sKV313Px6sWmmrZ4XX101wMhceY mGWRMXaX40pTgp8znPxpB1FvQm0KTy1V8k+sQMtdcdQovLuyqyHlaIoESBC8476I DIAY7fqsbGCTP5otBOqJzb8fjsfMBsqGCpLB71CL8zX5Yes5FS4WtKgqPaK//3gk yeXawsM4xCKSTIMJmUW8MEqUiJeGWxmg9nrHVpRJQ3PygC+XvQ/0ZwTqTFF5YvEj dFGr4BcVvwNBo7pRfmI3bhjZ2ZekXEpTqRqtgDJrMuhBZDOkv4VCtv/gVURE9BXS 5grSI7uVRIF6x7LPy32A30b8pCoM8rJoGtwsMRvmtBRyphOemQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsJnto4AwS+qgexOwJysvhxGLLzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iY2Uy YWNlMC05NzFjLTQ4ZjEtODM2MS05NjJhZDAyZDk2MTgvNWE4NjYwMTgtNzBmYS0z Nzk0LWJhODYtNTc4ODVkNzZhZjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmNlMmFjZTAtOTcxYy00OGYxLTgz NjEtOTYyYWQwMmQ5NjE4L2JjZTJhY2UwLTk3MWMtNDhmMS04MzYxLTk2MmFkMDJk OTYxOC5jcmwwHwYDVR0jBBgwFoAU4JcMaElFCKkWaQGDznYRnoOpb0QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iY2UyYWNlMC05NzFjLTQ4ZjEtODM2MS05NjJh ZDAyZDk2MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6+oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMBkXU2hvWobfeGwn5PVg82CHNGuzY0XuYht3MkKtUduUs6h60nOjeZ Q/JgCzJxzj76m1cPb6LLtp8wa7u4OvNCfIEOf6ceL7sUD5hdBXZOe/TPUqP2mGRB gqw3iVs5kqAVLdPUYtDm70ko5HH+5YrN5f7DKtxV8xz8adNpRGt67JFh914+mQMe +Qzy0H1Moi+ou6lGyzi3/b0X014R1PyhmikuZwVEbsSK8FL6q7fPdBpk6vQ40QTS 6ytfRzKSzFVK88wzLpOPaXX9R84POUE92PZK+rFRWXY6rW3Z/qZzlhovYRf4r10k QkHWj7nYJjiGCojkiaqwtt9a6e2vP+A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:21:14 2025 by rpki-client