$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/68b3d500-685c-3e96-9137-6a74b385d1b6.roa File: 68b3d500-685c-3e96-9137-6a74b385d1b6.roa (raw, json) Hash identifier: v3g0Lql9I/7iUL/F5h7ZsWCHeEuHWi4WNHgL1p7nHP0= Subject key identifier: 4E:47:3A:81:CD:DD:DD:18:04:F9:23:07:93:CF:78:21:DC:7F:ED:DC Certificate issuer: /CN=de848e16-b429-4505-9234-f6d889fd1438 Certificate serial: 010D0C9F43285848CC7B906CDADF64119AE4DE00 Authority key identifier: 1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/68b3d500-685c-3e96-9137-6a74b385d1b6.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 399820 IP address blocks: 23.146.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:90:6c:da:df:64:11:9a:e4:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de848e16-b429-4505-9234-f6d889fd1438 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=cbba0eb3-3e79-4f8f-97b9-b9e15a11044a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:53:37:08:54:c6:f9:d9:82:25:6d:52:52:f3: ac:e0:e8:79:62:64:c5:3c:c5:ba:a5:6f:c9:26:a4: f7:a7:2d:9c:24:06:6f:7f:c6:b7:09:51:69:7b:50: 86:10:a6:33:83:05:dd:5e:6c:56:14:d7:5a:59:d9: 7a:cb:69:c0:49:17:33:6d:11:b3:53:b7:c3:a2:f9: cf:ef:09:c0:4b:74:5b:35:cf:6a:c1:ee:a6:af:8a: 83:b1:34:0a:ed:f6:67:ec:02:60:7e:51:b0:d2:fd: b0:54:55:22:e7:49:a6:89:46:d7:57:9f:a6:1c:54: e4:93:4f:fe:57:41:57:80:62:ce:44:db:df:eb:b1: 89:43:48:f3:66:3b:da:13:3e:cd:bc:25:44:3b:1e: 40:f9:3c:69:0f:b3:3e:b2:17:79:03:ef:a8:85:13: 18:23:a6:c1:b3:ee:11:24:7e:87:35:09:6f:a1:d3: 42:fb:0b:ea:b5:7a:e5:ff:a9:d5:21:44:28:91:7d: 86:45:5b:00:72:b7:5a:db:b9:8c:7f:5b:98:03:3e: e9:16:2e:e3:aa:a4:76:09:cc:8a:43:79:10:45:4e: 4e:71:0f:ce:3a:6f:dd:81:16:d5:2a:84:03:d3:9f: 5f:bd:d9:9d:ad:45:52:ce:37:38:b4:64:d1:40:52: 29:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:47:3A:81:CD:DD:DD:18:04:F9:23:07:93:CF:78:21:DC:7F:ED:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/68b3d500-685c-3e96-9137-6a74b385d1b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl X509v3 Authority Key Identifier: keyid:1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer sbgp-ipAddrBlock: critical IPv4: 23.146.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:33:37:52:4e:a5:26:94:ed:47:ce:70:67:bf:20:4b:64:67: ff:b4:52:b7:75:ed:a4:22:69:42:9a:3e:38:30:08:5c:ce:53: f5:0b:d8:78:92:88:d2:5b:9b:32:9a:00:61:37:9f:6d:3b:d7: 2d:19:eb:65:fc:ad:a4:bb:dc:e3:89:52:ad:b2:94:45:b1:86: 1f:f0:45:5b:bd:d5:f7:75:c4:7c:f0:58:86:2d:40:7c:08:e9: 53:4d:af:8b:8c:b4:3f:52:5a:93:52:fe:1c:22:50:b8:d0:07: 77:67:94:53:db:59:9a:86:da:2a:25:6b:9f:03:ec:3c:0e:90: bf:2d:41:1d:93:e7:d0:91:98:98:2c:09:60:74:c2:48:9c:0c: 5a:eb:72:36:de:00:ec:97:74:c2:40:fd:43:60:e7:f7:d3:e7: c4:7b:75:45:64:60:3a:79:b2:ea:73:35:32:a4:93:3e:0a:a1: af:2f:f0:07:58:42:e3:96:a5:4a:45:03:a7:c1:19:18:a9:99: 8c:8d:fd:ca:ae:f3:7c:78:fb:c1:14:e9:63:c1:22:8a:e2:8f: 55:c8:c4:0c:ca:42:dc:ff:6b:be:4a:5d:22:84:d6:50:b6:f4: 86:f8:2c:e7:fb:9f:64:56:5e:f8:1d:8f:e4:16:26:99:38:c2: a7:9d:03:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe5Bs2t9kEZrk3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4NDhlMTYtYjQyOS00NTA1LTkyMzQtZjZkODg5ZmQx NDM4MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk Y2JiYTBlYjMtM2U3OS00ZjhmLTk3YjktYjllMTVhMTEwNDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVM3CFTG+dmCJW1SUvOs4Oh5YmTFPMW6pW/J JqT3py2cJAZvf8a3CVFpe1CGEKYzgwXdXmxWFNdaWdl6y2nASRczbRGzU7fDovnP 7wnAS3RbNc9qwe6mr4qDsTQK7fZn7AJgflGw0v2wVFUi50mmiUbXV5+mHFTkk0/+ V0FXgGLORNvf67GJQ0jzZjvaEz7NvCVEOx5A+TxpD7M+shd5A++ohRMYI6bBs+4R JH6HNQlvodNC+wvqtXrl/6nVIUQokX2GRVsAcrda27mMf1uYAz7pFi7jqqR2CcyK Q3kQRU5OcQ/OOm/dgRbVKoQD059fvdmdrUVSzjc4tGTRQFIptQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5HOoHN3d0YBPkjB5PPeCHcf+3cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg0 OGUxNi1iNDI5LTQ1MDUtOTIzNC1mNmQ4ODlmZDE0MzgvNjhiM2Q1MDAtNjg1Yy0z ZTk2LTkxMzctNmE3NGIzODVkMWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4NDhlMTYtYjQyOS00NTA1LTky MzQtZjZkODg5ZmQxNDM4L2RlODQ4ZTE2LWI0MjktNDUwNS05MjM0LWY2ZDg4OWZk MTQzOC5jcmwwHwYDVR0jBBgwFoAUHsnQl1NrlIorg8DaKChlnetiZ+QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg0OGUxNi1iNDI5LTQ1MDUtOTIzNC1mNmQ4 ODlmZDE0MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5K4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkzN1JOpSaU7UfOcGe/IEtkZ/+0Urd17aQiaUKaPjgwCFzOU/UL2HiS iNJbmzKaAGE3n2071y0Z62X8raS73OOJUq2ylEWxhh/wRVu91fd1xHzwWIYtQHwI 6VNNr4uMtD9SWpNS/hwiULjQB3dnlFPbWZqG2iola58D7DwOkL8tQR2T59CRmJgs CWB0wkicDFrrcjbeAOyXdMJA/UNg5/fT58R7dUVkYDp5supzNTKkkz4Koa8v8AdY QuOWpUpFA6fBGRipmYyN/cqu83x4+8EU6WPBIorij1XIxAzKQtz/a75KXSKE1lC2 9Ib4LOf7n2RWXvgdj+QWJpk4wqedA44= -----END CERTIFICATE-----Generated at Fri Apr 4 23:54:22 2025 by rpki-client