$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4/fcb80d6b-b948-3c12-9a8f-59561151ac02.roa File: fcb80d6b-b948-3c12-9a8f-59561151ac02.roa (raw, json) Hash identifier: cFdXjogad+2aWOspjmMR9Ygu5unONERafLPdnydC4T8= Subject key identifier: 1A:B8:CC:C5:F1:3F:22:A6:45:D8:CB:2E:F6:E5:3D:14:BF:2E:1B:00 Certificate issuer: /CN=37a572e9-4783-4234-bb28-e490155ccaf4 Certificate serial: 010D0C9F4328584886B07ACAB383970F25CA6B00 Authority key identifier: 67:A1:74:65:BB:4D:0B:AF:AA:CA:22:5B:F3:64:0B:AE:1C:86:08:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4/fcb80d6b-b948-3c12-9a8f-59561151ac02.roa Signing time: Mon 13 Jan 2025 02:00:40 +0000 ROA not before: Mon 13 Jan 2025 02:00:40 +0000 ROA not after: Sun 13 Apr 2025 01:00:40 +0000 asID: 400192 IP address blocks: 23.161.56.0/24 maxlen: 24 2606:b140::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4/37a572e9-4783-4234-bb28-e490155ccaf4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4/37a572e9-4783-4234-bb28-e490155ccaf4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:86:b0:7a:ca:b3:83:97:0f:25:ca:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37a572e9-4783-4234-bb28-e490155ccaf4 Validity Not Before: Jan 13 02:00:40 2025 GMT Not After : Apr 13 01:00:40 2025 GMT Subject: CN=d7df3d69-f7e1-47cd-b61a-1728d03653aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ae:09:48:13:7e:eb:71:e6:3d:43:72:71:fa: b1:d8:ae:98:4b:77:1b:82:84:17:4c:63:81:ad:4f: 9c:f5:b3:1d:67:fa:36:44:36:7b:5c:81:6e:9c:74: 9a:90:57:1f:c5:6b:c1:83:06:94:20:28:d7:06:d8: da:16:50:0d:6d:dc:25:b7:47:ba:81:b5:81:df:56: 2b:af:36:2a:05:19:0b:f6:c3:9c:89:41:66:7e:ef: 65:db:74:c1:58:3d:72:8a:bc:2b:77:a4:1b:4b:f3: f4:3f:28:b4:b5:b0:30:cf:b7:46:c9:ca:be:77:b1: f1:12:04:85:56:b4:41:d7:43:ba:20:d3:ff:75:88: 71:89:0b:00:7c:5e:43:3b:b9:5e:51:8c:d5:46:cf: 8c:a1:e6:1a:90:ac:c9:f7:de:77:ed:e7:0d:82:d5: 7e:11:64:74:30:de:c1:46:31:ff:1a:9c:77:bb:14: 76:7f:43:a9:dc:2b:83:60:8e:7a:b1:69:00:d5:b3: b2:59:ce:53:be:de:da:96:f3:e1:d8:58:89:9f:f2: 03:e7:db:3a:3d:5b:fd:be:d2:a6:04:85:02:eb:72: fc:53:68:b2:95:5b:46:88:84:64:ff:f3:2f:a6:c8: ad:5f:1a:9e:7d:64:6c:9c:2d:d2:1a:9d:7e:a8:99: 28:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B8:CC:C5:F1:3F:22:A6:45:D8:CB:2E:F6:E5:3D:14:BF:2E:1B:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4/fcb80d6b-b948-3c12-9a8f-59561151ac02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4/37a572e9-4783-4234-bb28-e490155ccaf4.crl X509v3 Authority Key Identifier: keyid:67:A1:74:65:BB:4D:0B:AF:AA:CA:22:5B:F3:64:0B:AE:1C:86:08:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4.cer sbgp-ipAddrBlock: critical IPv4: 23.161.56.0/24 IPv6: 2606:b140::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:b6:98:fc:a5:5c:cc:93:1a:46:7b:00:c7:fb:2c:1f:23:29: 01:83:30:72:6a:89:6a:6b:5c:25:3b:eb:f1:c9:9c:9a:1e:0a: 91:7d:78:4a:0b:ee:2d:34:a1:6b:10:12:84:f4:cd:f1:d4:70: 2f:37:cd:0a:f7:99:1a:af:8a:5a:a3:c1:c8:a3:93:4b:40:47: 7f:6f:96:30:66:29:14:0f:c0:27:b0:02:c2:2f:7c:61:47:4f: 6d:31:81:d5:14:eb:c7:63:6a:9d:cb:11:09:3a:2e:7b:bb:5a: 88:14:bd:79:11:1c:1a:86:d2:4b:a3:2b:74:32:b9:4b:0a:bd: 42:fa:db:18:74:63:77:f5:54:d9:bd:5a:15:f8:5b:2f:8c:79: ce:1f:a6:18:dd:4e:26:7b:b8:b5:79:81:22:71:8b:94:b5:24: 92:22:57:6a:d0:28:0e:40:64:48:10:cf:68:b2:84:ad:b2:53: 31:fc:79:36:e6:9f:24:f9:42:d2:72:64:db:fb:39:e5:53:db: e0:cf:a6:74:7c:82:ed:a4:ae:0b:62:47:ac:57:a3:4e:5b:98: 97:bf:7e:af:c1:bf:50:9d:a5:8a:3c:fa:93:96:99:71:cf:07: 68:e7:16:ed:a4:57:b7:c8:0c:e1:ae:1e:8e:ca:a5:82:02:9a: b3:2a:ce:e6 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEiGsHrKs4OXDyXKawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzdhNTcyZTktNDc4My00MjM0LWJiMjgtZTQ5MDE1NWNj YWY0MB4XDTI1MDExMzAyMDA0MFoXDTI1MDQxMzAxMDA0MFowLzEtMCsGA1UEAxMk ZDdkZjNkNjktZjdlMS00N2NkLWI2MWEtMTcyOGQwMzY1M2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh64JSBN+63HmPUNycfqx2K6YS3cbgoQXTGOB rU+c9bMdZ/o2RDZ7XIFunHSakFcfxWvBgwaUICjXBtjaFlANbdwlt0e6gbWB31Yr rzYqBRkL9sOciUFmfu9l23TBWD1yirwrd6QbS/P0Pyi0tbAwz7dGycq+d7HxEgSF VrRB10O6INP/dYhxiQsAfF5DO7leUYzVRs+MoeYakKzJ99537ecNgtV+EWR0MN7B RjH/Gpx3uxR2f0Op3CuDYI56sWkA1bOyWc5Tvt7alvPh2FiJn/ID59s6PVv9vtKm BIUC63L8U2iylVtGiIRk//MvpsitXxqefWRsnC3SGp1+qJkoGQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFBq4zMXxPyKmRdjLLvblPRS/LhsAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zN2E1 NzJlOS00NzgzLTQyMzQtYmIyOC1lNDkwMTU1Y2NhZjQvZmNiODBkNmItYjk0OC0z YzEyLTlhOGYtNTk1NjExNTFhYzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzdhNTcyZTktNDc4My00MjM0LWJi MjgtZTQ5MDE1NWNjYWY0LzM3YTU3MmU5LTQ3ODMtNDIzNC1iYjI4LWU0OTAxNTVj Y2FmNC5jcmwwHwYDVR0jBBgwFoAUZ6F0ZbtNC6+qyiJb82QLrhyGCGgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zN2E1NzJlOS00NzgzLTQyMzQtYmIyOC1lNDkw MTU1Y2NhZjQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF6E4MA0E AgACMAcDBQAmBrFAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAJC2mPylXMyTGkZ7AMf7LB8jKQGDMHJqiWpr XCU76/HJnJoeCpF9eEoL7i00oWsQEoT0zfHUcC83zQr3mRqvilqjwcijk0tAR39v ljBmKRQPwCewAsIvfGFHT20xgdUU68djap3LEQk6Lnu7WogUvXkRHBqG0kujK3Qy uUsKvUL62xh0Y3f1VNm9WhX4Wy+Mec4fphjdTiZ7uLV5gSJxi5S1JJIiV2rQKA5A ZEgQz2iyhK2yUzH8eTbmnyT5QtJyZNv7OeVT2+DPpnR8gu2krgtiR6xXo05bmJe/ fq/Bv1CdpYo8+pOWmXHPB2jnFu2kV7fIDOGuHo7KpYICmrMqzuY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:56 2025 by rpki-client