$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fbb7b44b-75a0-304d-8878-021d4d576a6e.roa File: fbb7b44b-75a0-304d-8878-021d4d576a6e.roa (raw, json) Hash identifier: I5RU2jve5Ckb6dgCGY6oupVQm+zjgOr2s1ylZpXKvT0= Subject key identifier: B2:49:F5:50:00:0D:54:59:E8:C7:1A:D9:CA:E5:51:78:68:EB:AD:8F Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F432858487755E34290B1779C17C7C700 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fbb7b44b-75a0-304d-8878-021d4d576a6e.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 11290 IP address blocks: 24.153.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:e3:42:90:b1:77:9c:17:c7:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=90ee1886-f8dd-4a35-a4e0-c57de5626634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9f:84:b3:80:00:84:25:d8:bd:d8:5b:ae:cd: 1a:ec:1a:7e:47:cc:37:84:97:82:db:7d:3d:be:fa: b1:ed:c7:48:2f:bf:25:f5:f6:29:dd:3d:2a:7b:49: 78:0c:75:76:27:46:2a:15:75:cc:d8:28:5b:bb:07: d0:66:d6:1d:62:a3:16:d9:ec:9b:30:9e:70:c3:ab: c4:18:49:c6:5e:04:45:fd:c4:8c:03:fe:ae:55:a4: 7d:ff:cb:b6:ae:3a:bf:3c:d3:f8:2d:2f:30:0b:aa: ba:8b:69:dd:eb:63:57:01:3a:3e:33:79:4c:49:02: ba:1d:b9:1a:3a:3f:64:4c:37:05:b2:21:0f:8f:69: 77:27:a4:f6:e0:22:94:fc:50:31:b5:52:86:6f:a2: 2d:6d:8b:3d:9e:0b:b9:63:55:a1:02:cb:b8:59:8e: df:34:45:be:8a:06:9c:b3:01:14:3b:48:e7:c6:4b: 88:37:d2:2a:1e:af:74:98:d7:a4:74:80:59:fe:45: fc:7d:14:92:48:a7:02:40:1c:41:96:d1:6d:85:ca: 2c:6b:db:5d:9e:44:f5:a9:c9:de:e6:05:57:8f:5e: b8:0d:22:47:c1:51:8e:be:d6:10:d2:28:5c:cb:2a: 93:de:5f:ef:ff:b0:89:6e:85:4b:d9:45:e9:2c:80: 6c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:49:F5:50:00:0D:54:59:E8:C7:1A:D9:CA:E5:51:78:68:EB:AD:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fbb7b44b-75a0-304d-8878-021d4d576a6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.153.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:6e:db:12:bd:35:75:5d:d9:d6:5a:10:c3:fc:1b:8e:e2:17: 91:80:19:50:70:9c:63:2c:42:8d:35:f1:dd:93:6a:b0:20:c3: 13:97:e3:71:1d:49:e5:20:d6:80:aa:c9:f3:28:35:a7:9e:a0: 35:17:43:2e:85:52:03:c9:db:95:94:6e:1b:89:0c:32:1a:1c: c1:eb:e8:ca:60:d1:17:e6:01:06:85:4c:91:65:40:eb:8f:af: ad:e5:48:cd:2d:5f:0e:b9:c1:d7:99:fd:04:aa:82:8f:70:77: 48:bc:43:38:6b:ca:a4:12:a3:cd:b1:20:68:bb:fe:76:38:c9: 32:1f:5d:0e:73:de:e8:70:13:d8:3d:08:99:29:d8:0c:cb:f3: ab:b4:5b:b4:13:13:bd:58:f1:26:29:c8:d9:ac:2c:ff:be:97: 68:0c:5e:26:d5:d6:e0:4f:99:a5:86:02:c2:48:e4:2c:93:53: 1d:ed:2d:a6:4f:1f:ca:3f:9b:ec:fe:5e:75:3c:eb:6e:8e:99: 66:b6:50:a4:76:01:37:c1:9b:24:7a:46:28:de:d0:11:76:e4: a5:b2:b9:46:c8:77:e8:b2:4a:c4:94:07:2d:eb:8e:5f:64:02: 1a:20:d0:b1:04:5f:e4:9d:c4:af:3f:5f:cc:92:80:8a:15:8b: ca:20:98:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VeNCkLF3nBfHxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk OTBlZTE4ODYtZjhkZC00YTM1LWE0ZTAtYzU3ZGU1NjI2NjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ+Es4AAhCXYvdhbrs0a7Bp+R8w3hJeC2309 vvqx7cdIL78l9fYp3T0qe0l4DHV2J0YqFXXM2ChbuwfQZtYdYqMW2eybMJ5ww6vE GEnGXgRF/cSMA/6uVaR9/8u2rjq/PNP4LS8wC6q6i2nd62NXATo+M3lMSQK6Hbka Oj9kTDcFsiEPj2l3J6T24CKU/FAxtVKGb6ItbYs9ngu5Y1WhAsu4WY7fNEW+igac swEUO0jnxkuIN9IqHq90mNekdIBZ/kX8fRSSSKcCQBxBltFthcosa9tdnkT1qcne 5gVXj164DSJHwVGOvtYQ0ihcyyqT3l/v/7CJboVL2UXpLIBsnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJJ9VAADVRZ6Mca2crlUXho662PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZmJiN2I0NGItNzVhMC0z MDRkLTg4NzgtMDIxZDRkNTc2YTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGJlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZu2xK9NXVd2dZaEMP8G47iF5GAGVBwnGMsQo018d2TarAgwxOX43Ed SeUg1oCqyfMoNaeeoDUXQy6FUgPJ25WUbhuJDDIaHMHr6Mpg0RfmAQaFTJFlQOuP r63lSM0tXw65wdeZ/QSqgo9wd0i8QzhryqQSo82xIGi7/nY4yTIfXQ5z3uhwE9g9 CJkp2AzL86u0W7QTE71Y8SYpyNmsLP++l2gMXibV1uBPmaWGAsJI5CyTUx3tLaZP H8o/m+z+XnU8626OmWa2UKR2ATfBmyR6Rije0BF25KWyuUbId+iySsSUBy3rjl9k Ahog0LEEX+SdxK8/X8ySgIoVi8ogmFI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:16 2025 by rpki-client