$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/4b56dc87-70d9-397b-bf76-7c918176aa3b.roa File: 4b56dc87-70d9-397b-bf76-7c918176aa3b.roa (raw, json) Hash identifier: Wsz0I2ulpxQSMmEV6jYLruqWmRqys1aJoX72lmunM9c= Subject key identifier: 8B:86:D7:BF:88:05:9B:59:1C:70:FB:53:38:82:9E:CE:76:92:E8:06 Certificate issuer: /CN=c8607cef-f8a0-4a7c-8845-db8d32964491 Certificate serial: 010D0C9F432858485F9AE331FD03E7F43A2C1080 Authority key identifier: 44:08:C4:D0:D5:E1:2F:18:8A:42:37:69:60:1E:84:4F:69:F7:4D:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/4b56dc87-70d9-397b-bf76-7c918176aa3b.roa Signing time: Mon 30 Dec 2024 02:00:39 +0000 ROA not before: Mon 30 Dec 2024 02:00:39 +0000 ROA not after: Sun 30 Mar 2025 01:00:39 +0000 asID: 398335 IP address blocks: 52.129.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/c8607cef-f8a0-4a7c-8845-db8d32964491.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/c8607cef-f8a0-4a7c-8845-db8d32964491.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:9a:e3:31:fd:03:e7:f4:3a:2c:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8607cef-f8a0-4a7c-8845-db8d32964491 Validity Not Before: Dec 30 02:00:39 2024 GMT Not After : Mar 30 01:00:39 2025 GMT Subject: CN=088f92e4-aba3-426f-b79e-25855e05316e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:84:2c:df:ae:61:25:43:16:47:87:d9:c2:0a: 91:b6:e7:ec:28:1c:52:a6:d9:2d:5c:ba:1e:96:32: a4:f0:d7:ff:51:3b:37:b2:61:f6:8f:6c:3c:44:6b: 95:53:e0:8e:90:d1:01:ad:2e:20:ba:8e:49:bd:e8: 16:e7:7d:7a:5d:88:59:53:ae:b1:44:69:e3:ec:e0: cf:ec:d3:44:f2:b9:38:a4:05:8d:a2:a3:04:73:28: 3e:0c:35:0a:77:8e:e9:06:3b:12:0e:f6:8a:dd:3f: 09:db:f9:13:2e:95:17:a3:6a:62:c1:19:e5:53:31: 4a:4e:00:ce:1b:8c:0b:6e:dc:3c:3a:10:58:4f:12: 7c:46:61:95:32:fa:3d:30:04:ae:bc:cd:35:ca:f0: f8:9c:91:1e:19:92:f8:6f:8d:6a:b4:ed:d8:a1:ac: a2:d3:c7:8d:c9:24:60:ab:91:e1:22:88:67:17:27: dd:95:6d:24:b6:81:3a:e4:7c:a6:57:4b:81:64:eb: e3:5d:c9:bb:d7:07:32:ce:64:f2:6e:b2:9f:24:dc: d6:0e:a1:05:5d:c5:6b:61:1c:3c:ed:40:ed:2f:39: 4c:f1:42:fe:7b:84:ec:a6:2f:5c:a0:1c:ce:71:1e: 09:4a:d4:cd:67:78:cd:c9:a6:f8:fe:e8:03:a0:f0: 06:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:86:D7:BF:88:05:9B:59:1C:70:FB:53:38:82:9E:CE:76:92:E8:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/4b56dc87-70d9-397b-bf76-7c918176aa3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/c8607cef-f8a0-4a7c-8845-db8d32964491.crl X509v3 Authority Key Identifier: keyid:44:08:C4:D0:D5:E1:2F:18:8A:42:37:69:60:1E:84:4F:69:F7:4D:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491.cer sbgp-ipAddrBlock: critical IPv4: 52.129.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:6d:85:0b:12:73:5a:ff:12:f2:c8:f6:41:56:a6:d2:b3:f4: 5f:2c:18:95:e6:96:27:5e:6b:3d:db:cc:17:b1:0c:99:34:03: 77:3e:91:8d:ca:ce:1c:50:bb:c6:46:23:88:f4:fa:3f:ea:1c: 2a:dc:70:18:30:77:68:a4:63:43:ab:48:3d:a0:c0:21:72:76: 13:d3:2e:47:2d:ad:35:ad:e7:9d:26:0b:e9:15:8f:18:ca:e6: c8:9d:15:7b:d9:7b:23:ee:92:16:c5:d0:e4:86:dd:e4:b4:16: f0:eb:ef:bc:59:43:13:9d:56:41:e3:3c:1c:85:56:cf:6b:b0: 42:f1:ff:eb:42:12:3c:d6:e8:9f:b8:56:fe:0f:e9:38:db:a6: 32:5d:73:a0:c9:79:90:ba:9e:8c:10:7b:d0:13:d2:2d:cd:1d: a5:c3:4e:b2:9e:4c:fe:f5:54:ef:3c:1e:3e:33:7d:10:75:86: ff:6e:72:1d:03:58:64:e1:c4:00:3c:0f:ee:0a:d9:64:8d:8b: e5:98:61:51:dd:d3:37:e4:ef:31:4c:99:e6:5c:fd:d3:76:09: 52:02:fb:a5:e5:86:3e:8e:2f:6c:8f:8b:94:2e:ba:a5:83:15: bc:ac:5c:6b:98:46:04:90:a5:2a:70:0e:58:2c:44:fb:0d:1c: 51:96:ae:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhfmuMx/QPn9DosEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg2MDdjZWYtZjhhMC00YTdjLTg4NDUtZGI4ZDMyOTY0 NDkxMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk MDg4ZjkyZTQtYWJhMy00MjZmLWI3OWUtMjU4NTVlMDUzMTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloQs365hJUMWR4fZwgqRtufsKBxSptktXLoe ljKk8Nf/UTs3smH2j2w8RGuVU+COkNEBrS4guo5JvegW5316XYhZU66xRGnj7ODP 7NNE8rk4pAWNoqMEcyg+DDUKd47pBjsSDvaK3T8J2/kTLpUXo2piwRnlUzFKTgDO G4wLbtw8OhBYTxJ8RmGVMvo9MASuvM01yvD4nJEeGZL4b41qtO3Yoayi08eNySRg q5HhIohnFyfdlW0ktoE65HymV0uBZOvjXcm71wcyzmTybrKfJNzWDqEFXcVrYRw8 7UDtLzlM8UL+e4Tspi9coBzOcR4JStTNZ3jNyab4/ugDoPAGlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuG17+IBZtZHHD7UziCns52kugGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jODYw N2NlZi1mOGEwLTRhN2MtODg0NS1kYjhkMzI5NjQ0OTEvNGI1NmRjODctNzBkOS0z OTdiLWJmNzYtN2M5MTgxNzZhYTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzg2MDdjZWYtZjhhMC00YTdjLTg4 NDUtZGI4ZDMyOTY0NDkxL2M4NjA3Y2VmLWY4YTAtNGE3Yy04ODQ1LWRiOGQzMjk2 NDQ5MS5jcmwwHwYDVR0jBBgwFoAURAjE0NXhLxiKQjdpYB6ET2n3TTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jODYwN2NlZi1mOGEwLTRhN2MtODg0NS1kYjhk MzI5NjQ0OTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBNIEuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJthQsSc1r/EvLI9kFWptKz9F8sGJXmlideaz3bzBexDJk0A3c+kY3K zhxQu8ZGI4j0+j/qHCrccBgwd2ikY0OrSD2gwCFydhPTLkctrTWt550mC+kVjxjK 5sidFXvZeyPukhbF0OSG3eS0FvDr77xZQxOdVkHjPByFVs9rsELx/+tCEjzW6J+4 Vv4P6TjbpjJdc6DJeZC6nowQe9AT0i3NHaXDTrKeTP71VO88Hj4zfRB1hv9uch0D WGThxAA8D+4K2WSNi+WYYVHd0zfk7zFMmeZc/dN2CVIC+6Xlhj6OL2yPi5QuuqWD FbysXGuYRgSQpSpwDlgsRPsNHFGWrpU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:53 2025 by rpki-client