$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/41b495a1-3627-3667-af41-d2072d5d9889.roa File: 41b495a1-3627-3667-af41-d2072d5d9889.roa (raw, json) Hash identifier: gQj+xXHc8IQ9MRh5IUcrxB29SFjjyCsnWJLNEfGTo1Y= Subject key identifier: BA:D9:39:87:84:BA:AD:DC:19:DE:9E:F4:D4:DB:5A:AF:C7:A2:39:FF Certificate issuer: /CN=38ec4694-a70f-4329-b713-f4da59e49973 Certificate serial: 010D0C9F432858484515836E7D9CC6E27B796D40 Authority key identifier: B6:D1:08:1D:37:82:AE:20:58:F3:76:D9:DC:18:7B:0C:14:93:2B:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/41b495a1-3627-3667-af41-d2072d5d9889.roa Signing time: Fri 20 Dec 2024 14:00:51 +0000 ROA not before: Fri 20 Dec 2024 14:00:51 +0000 ROA not after: Thu 20 Mar 2025 13:00:51 +0000 asID: 16509 IP address blocks: 23.247.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:45:15:83:6e:7d:9c:c6:e2:7b:79:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38ec4694-a70f-4329-b713-f4da59e49973 Validity Not Before: Dec 20 14:00:51 2024 GMT Not After : Mar 20 13:00:51 2025 GMT Subject: CN=cb2744a4-af0a-430f-8e5d-fd019ceea845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e3:6d:00:e0:02:aa:5c:20:e2:74:d5:a5:de: 6e:e2:fe:8f:e8:4b:3f:ab:6f:99:7e:dc:e5:a3:82: ba:ab:74:9f:1d:b3:44:af:98:24:f7:58:97:98:af: 8d:28:94:c2:dd:67:0b:3b:ee:c5:72:ce:92:75:6f: d3:68:85:e5:87:f8:dd:6c:8e:22:46:d1:3f:d2:2d: 11:c1:a7:e9:45:3e:a3:d7:d5:9e:3b:9a:b5:ac:f4: 6e:bb:2e:09:9d:6f:b9:3e:ef:4e:db:56:be:40:5b: c3:c2:05:92:2d:2e:38:66:a4:ba:11:3f:00:ee:38: eb:be:05:af:27:d4:39:2a:9d:33:51:13:1e:8e:96: 17:3f:6c:7c:98:88:c5:31:c9:a4:24:01:03:7b:af: 98:d4:59:77:84:34:44:be:16:f2:54:e8:a0:96:b1: fa:99:18:6b:fa:ee:9f:22:5e:5e:c5:3b:8d:a7:38: 84:a1:a4:b5:e7:b0:9d:48:4c:60:09:59:7f:60:6b: 78:de:09:74:7f:60:6e:01:5a:7d:73:41:1e:3c:c2: d2:fc:d9:a7:9d:1b:eb:ef:27:7e:99:ba:cf:eb:d8: ac:f9:5e:87:53:bc:93:0e:60:1f:83:9b:69:6b:51: a0:18:7e:ed:28:03:70:1d:a4:85:59:29:dd:d5:99: 58:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D9:39:87:84:BA:AD:DC:19:DE:9E:F4:D4:DB:5A:AF:C7:A2:39:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/41b495a1-3627-3667-af41-d2072d5d9889.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.crl X509v3 Authority Key Identifier: keyid:B6:D1:08:1D:37:82:AE:20:58:F3:76:D9:DC:18:7B:0C:14:93:2B:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer sbgp-ipAddrBlock: critical IPv4: 23.247.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:5d:6d:4a:93:23:ad:82:fc:4c:b5:b4:d0:7e:0e:91:6c:aa: 64:c1:b7:d1:5e:ad:3c:9c:17:6a:4c:bf:54:35:d9:7b:52:c9: f5:41:1e:24:14:30:9b:7d:08:c9:6b:09:3d:63:d6:13:c5:19: f6:68:b7:9f:2b:f2:75:96:1c:0b:89:a7:1e:05:f1:14:c9:33: a7:93:72:3e:dc:a3:11:70:76:ec:aa:e0:d7:35:ba:67:87:56: ba:ea:05:83:f3:76:ed:d8:6d:33:58:07:c4:9c:00:db:53:fe: f4:d1:5b:9b:f7:7c:2f:46:7b:af:74:5b:c3:d6:9a:28:ca:61: a9:27:76:ee:f3:0b:4b:37:8f:76:3a:17:87:ad:f6:29:ae:2b: 2f:a3:11:ac:84:5b:42:06:1c:60:05:3d:6b:b3:ef:94:8d:8f: 55:6b:09:f5:28:b2:30:28:8b:4b:c1:7e:57:82:0e:88:ee:9b: 73:8a:8b:b4:a5:9d:8a:72:d4:10:cb:26:5d:4f:e0:35:52:68: e1:93:96:35:aa:76:95:e4:03:90:6e:8b:29:66:d2:bc:fb:04: 2c:1f:9e:4d:4b:16:b5:05:55:1e:ca:0c:ce:29:93:d1:e8:ee: e6:ba:2a:fc:1a:74:b2:0d:d7:85:6e:3a:8c:4a:78:69:ab:aa: 66:d5:2a:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFFYNufZzG4nt5bUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlYzQ2OTQtYTcwZi00MzI5LWI3MTMtZjRkYTU5ZTQ5 OTczMB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk Y2IyNzQ0YTQtYWYwYS00MzBmLThlNWQtZmQwMTljZWVhODQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+NtAOACqlwg4nTVpd5u4v6P6Es/q2+Zftzl o4K6q3SfHbNEr5gk91iXmK+NKJTC3WcLO+7Fcs6SdW/TaIXlh/jdbI4iRtE/0i0R wafpRT6j19WeO5q1rPRuuy4JnW+5Pu9O21a+QFvDwgWSLS44ZqS6ET8A7jjrvgWv J9Q5Kp0zURMejpYXP2x8mIjFMcmkJAEDe6+Y1Fl3hDREvhbyVOiglrH6mRhr+u6f Il5exTuNpziEoaS157CdSExgCVl/YGt43gl0f2BuAVp9c0EePMLS/NmnnRvr7yd+ mbrP69is+V6HU7yTDmAfg5tpa1GgGH7tKANwHaSFWSnd1ZlYpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrZOYeEuq3cGd6e9NTbWq/Hojn/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGVj NDY5NC1hNzBmLTQzMjktYjcxMy1mNGRhNTllNDk5NzMvNDFiNDk1YTEtMzYyNy0z NjY3LWFmNDEtZDIwNzJkNWQ5ODg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhlYzQ2OTQtYTcwZi00MzI5LWI3 MTMtZjRkYTU5ZTQ5OTczLzM4ZWM0Njk0LWE3MGYtNDMyOS1iNzEzLWY0ZGE1OWU0 OTk3My5jcmwwHwYDVR0jBBgwFoAUttEIHTeCriBY83bZ3Bh7DBSTK7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGVjNDY5NC1hNzBmLTQzMjktYjcxMy1mNGRh NTllNDk5NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF/e4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtdbUqTI62C/Ey1tNB+DpFsqmTBt9FerTycF2pMv1Q12XtSyfVBHiQU MJt9CMlrCT1j1hPFGfZot58r8nWWHAuJpx4F8RTJM6eTcj7coxFwduyq4Nc1umeH VrrqBYPzdu3YbTNYB8ScANtT/vTRW5v3fC9Ge690W8PWmijKYakndu7zC0s3j3Y6 F4et9imuKy+jEayEW0IGHGAFPWuz75SNj1VrCfUosjAoi0vBfleCDojum3OKi7Sl nYpy1BDLJl1P4DVSaOGTljWqdpXkA5Buiylm0rz7BCwfnk1LFrUFVR7KDM4pk9Ho 7ua6KvwadLIN14VuOoxKeGmrqmbVKrQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:35 2025 by rpki-client