$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/c629930b-0b54-3c4b-99e5-12e0b43928ec.roa File: c629930b-0b54-3c4b-99e5-12e0b43928ec.roa (raw, json) Hash identifier: k5TO0NqxYvKrt9+/LRMNYsQHa3pcdLtLtAyoHkl9mWM= Subject key identifier: 3B:17:14:96:BD:80:C2:22:D5:00:79:8D:68:86:C8:71:D6:08:BE:20 Certificate issuer: /CN=53f9e4fa-8a21-4981-b8c8-6c7eaf79186d Certificate serial: 010D0C9F4328584838854B59CA00089629F78820 Authority key identifier: C7:C8:8B:AC:CE:CE:96:FD:73:FB:D3:9D:73:C3:AA:C1:42:DD:4C:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/c629930b-0b54-3c4b-99e5-12e0b43928ec.roa Signing time: Mon 16 Dec 2024 02:00:39 +0000 ROA not before: Mon 16 Dec 2024 02:00:39 +0000 ROA not after: Sun 16 Mar 2025 01:00:39 +0000 asID: 14618 IP address blocks: 23.191.48.0/24 maxlen: 24 2620:9d:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:38:85:4b:59:ca:00:08:96:29:f7:88:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53f9e4fa-8a21-4981-b8c8-6c7eaf79186d Validity Not Before: Dec 16 02:00:39 2024 GMT Not After : Mar 16 01:00:39 2025 GMT Subject: CN=0a13cb17-af9f-44a7-bef3-ae932a5452a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:16:0b:c3:d9:e2:fc:b7:bc:25:9b:c3:f4:55: de:ed:8f:e2:5f:5e:02:21:5d:16:42:ab:f0:b9:02: a6:5e:d7:a9:60:c5:25:4a:dc:50:87:6d:92:73:8f: c5:12:b9:4e:e6:4a:74:1e:03:85:84:08:d6:84:66: 7e:25:ac:1e:bb:ef:17:1f:f0:61:1e:41:c1:d1:8d: a9:f8:1d:70:3d:f5:47:45:b9:ab:9d:03:9f:0b:e3: 9b:e0:ad:6b:12:85:14:12:87:95:19:9d:82:cc:46: 37:8f:54:5d:33:a8:dd:be:e3:00:3d:85:b8:51:26: 4a:71:87:95:66:90:58:87:ce:c3:07:f2:6b:64:8b: 88:7c:95:25:1c:f0:a2:ca:0f:90:29:80:52:e5:a2: 78:9b:f3:12:6d:93:4b:43:45:59:9e:19:d5:9b:b4: 4c:10:fb:7d:e1:23:57:8b:af:b9:13:05:f1:61:ff: fa:df:b5:93:12:e8:38:98:0d:e2:a0:f8:1e:92:fa: ef:6d:75:cd:9f:5a:26:df:92:2a:94:28:8d:fd:48: d4:30:ca:f7:b5:38:69:57:9d:bd:82:18:c1:ef:05: 06:d5:cc:95:95:07:32:e4:db:ec:7b:2f:b7:e9:30: 2a:14:3c:96:ff:75:a6:a3:e2:36:78:0b:20:8c:84: a1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:17:14:96:BD:80:C2:22:D5:00:79:8D:68:86:C8:71:D6:08:BE:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/c629930b-0b54-3c4b-99e5-12e0b43928ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.crl X509v3 Authority Key Identifier: keyid:C7:C8:8B:AC:CE:CE:96:FD:73:FB:D3:9D:73:C3:AA:C1:42:DD:4C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.cer sbgp-ipAddrBlock: critical IPv4: 23.191.48.0/24 IPv6: 2620:9d:6000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f5:68:2f:6f:ab:4a:38:b9:e0:d9:1c:cc:6f:ba:c2:48:d4: 0c:a7:88:a6:c3:19:48:5b:ba:2d:70:41:5f:84:bc:85:d4:2d: 1b:34:ee:55:23:fd:c2:cf:58:38:af:cd:78:3a:c9:8b:fa:12: 9b:1c:ec:5b:6f:46:fa:97:92:f6:e7:5e:74:db:74:fc:e6:91: 26:32:04:0b:f1:c1:d0:08:de:9d:92:d1:9b:3b:21:a1:93:56: 0d:f0:4e:6e:6d:65:59:5c:4d:44:0d:d8:fb:9f:ef:9d:2d:56: 37:3a:c5:bf:91:9d:7d:50:88:a6:33:02:bb:f8:f0:38:23:21: 02:a3:02:63:90:5c:4e:f4:db:7a:27:b5:3d:a8:f8:38:81:ee: 2a:5a:85:37:19:6e:21:a7:1f:3d:40:cf:39:a9:55:22:4e:93: 7d:d6:6f:ef:09:a5:36:18:9c:69:4a:78:87:f3:97:0c:4b:e4: bb:56:af:d3:39:c1:c2:38:d1:69:7d:d7:74:48:b9:1c:3e:11: 3a:10:3f:a1:85:aa:2b:05:f9:bf:cc:00:ed:2e:b0:17:6e:d7: a5:73:21:57:3f:c6:b5:90:3d:4c:f2:dc:c9:8c:0a:5f:57:e8: 1d:3e:5c:43:fd:29:9f:92:38:04:5b:f7:b2:f9:53:ed:b7:e6: b4:d6:a2:3f -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEg4hUtZygAIlin3iCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNmOWU0ZmEtOGEyMS00OTgxLWI4YzgtNmM3ZWFmNzkx ODZkMB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk MGExM2NiMTctYWY5Zi00NGE3LWJlZjMtYWU5MzJhNTQ1MmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxYLw9ni/Le8JZvD9FXe7Y/iX14CIV0WQqvw uQKmXtepYMUlStxQh22Sc4/FErlO5kp0HgOFhAjWhGZ+Jaweu+8XH/BhHkHB0Y2p +B1wPfVHRbmrnQOfC+Ob4K1rEoUUEoeVGZ2CzEY3j1RdM6jdvuMAPYW4USZKcYeV ZpBYh87DB/JrZIuIfJUlHPCiyg+QKYBS5aJ4m/MSbZNLQ0VZnhnVm7RMEPt94SNX i6+5EwXxYf/637WTEug4mA3ioPgekvrvbXXNn1om35IqlCiN/UjUMMr3tThpV529 ghjB7wUG1cyVlQcy5Nvsey+36TAqFDyW/3Wmo+I2eAsgjIShFQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFDsXFJa9gMIi1QB5jWiGyHHWCL4gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81M2Y5 ZTRmYS04YTIxLTQ5ODEtYjhjOC02YzdlYWY3OTE4NmQvYzYyOTkzMGItMGI1NC0z YzRiLTk5ZTUtMTJlMGI0MzkyOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTNmOWU0ZmEtOGEyMS00OTgxLWI4 YzgtNmM3ZWFmNzkxODZkLzUzZjllNGZhLThhMjEtNDk4MS1iOGM4LTZjN2VhZjc5 MTg2ZC5jcmwwHwYDVR0jBBgwFoAUx8iLrM7Olv1z+9Odc8OqwULdTAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81M2Y5ZTRmYS04YTIxLTQ5ODEtYjhjOC02Yzdl YWY3OTE4NmQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF78wMA8E AgACMAkDBwAmIACdYAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhfVoL2+rSji54NkczG+6wkjUDKeIpsMZ SFu6LXBBX4S8hdQtGzTuVSP9ws9YOK/NeDrJi/oSmxzsW29G+peS9udedNt0/OaR JjIEC/HB0AjenZLRmzshoZNWDfBObm1lWVxNRA3Y+5/vnS1WNzrFv5GdfVCIpjMC u/jwOCMhAqMCY5BcTvTbeie1Paj4OIHuKlqFNxluIacfPUDPOalVIk6TfdZv7wml NhicaUp4h/OXDEvku1av0znBwjjRaX3XdEi5HD4ROhA/oYWqKwX5v8wA7S6wF27X pXMhVz/GtZA9TPLcyYwKX1foHT5cQ/0pn5I4BFv3svlT7bfmtNaiPw== -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:09 2025 by rpki-client