$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7/e389b2bd-b87e-3e7a-8537-72af1d063d52.roa File: e389b2bd-b87e-3e7a-8537-72af1d063d52.roa (raw, json) Hash identifier: RduEnpAm4eT2OB1+8ESvpdiieU0vmlNB8wMYBhBUqXQ= Subject key identifier: 7C:C4:27:6A:7E:09:B2:CB:A9:E7:28:7A:4B:4B:1E:45:A7:70:97:A0 Certificate issuer: /CN=447fba4c-60a0-499e-8d5b-087545c981b7 Certificate serial: 010D0C9F43285848530AF0CD44D6E82482C76E40 Authority key identifier: EE:19:B8:5F:E1:49:1F:BB:27:E1:4B:09:95:0F:35:36:91:30:16:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7/e389b2bd-b87e-3e7a-8537-72af1d063d52.roa Signing time: Wed 25 Dec 2024 14:00:52 +0000 ROA not before: Wed 25 Dec 2024 14:00:52 +0000 ROA not after: Tue 25 Mar 2025 13:00:52 +0000 asID: 394510 IP address blocks: 206.168.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7/447fba4c-60a0-499e-8d5b-087545c981b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7/447fba4c-60a0-499e-8d5b-087545c981b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:53:0a:f0:cd:44:d6:e8:24:82:c7:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=447fba4c-60a0-499e-8d5b-087545c981b7 Validity Not Before: Dec 25 14:00:52 2024 GMT Not After : Mar 25 13:00:52 2025 GMT Subject: CN=5f247b4c-ae45-4c70-ae1c-8365a22778bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:67:36:0e:0f:b5:7c:b0:ad:2f:6f:a6:ff:f4: 9e:68:03:2b:41:2d:79:bc:b6:eb:5a:35:89:9c:d4: e8:61:cc:0a:91:dc:b1:92:7d:21:29:28:d4:bb:6d: 0d:68:a8:21:22:c0:84:42:8e:3b:d0:f6:cf:f5:84: e3:46:6c:96:ec:01:d2:25:76:d7:b1:15:0f:f6:fc: cb:54:0a:f7:a3:ed:88:2f:72:b6:d3:d1:e6:c2:fd: 0a:56:bd:38:75:2b:8c:20:17:57:b8:74:1c:08:5f: c7:41:cc:ba:ff:6d:ad:95:71:cc:64:3c:5b:c9:17: ab:19:cd:d5:f3:d4:16:16:8f:b1:50:de:ff:3f:c9: fd:5c:eb:5c:8d:12:a3:dd:9a:c6:80:f0:50:21:88: e1:b8:52:58:eb:97:87:82:d5:be:f8:7c:7f:a9:fa: 79:ab:bb:cb:35:59:ea:8d:29:cf:06:75:aa:2e:5d: 47:31:e2:8c:51:2f:5b:34:78:20:fa:02:d1:a1:1d: 36:6d:f6:9b:21:99:d6:4d:74:07:6a:e5:f1:4e:34: 28:fe:59:a6:1f:2a:c0:28:19:a9:54:7e:39:ad:00: ae:a0:b4:aa:2d:1c:c7:f3:3b:53:50:74:e9:45:6f: 75:34:4e:a3:7c:c8:7a:f5:d2:e7:f0:3e:58:ec:a8: 1c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C4:27:6A:7E:09:B2:CB:A9:E7:28:7A:4B:4B:1E:45:A7:70:97:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7/e389b2bd-b87e-3e7a-8537-72af1d063d52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7/447fba4c-60a0-499e-8d5b-087545c981b7.crl X509v3 Authority Key Identifier: keyid:EE:19:B8:5F:E1:49:1F:BB:27:E1:4B:09:95:0F:35:36:91:30:16:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7.cer sbgp-ipAddrBlock: critical IPv4: 206.168.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:8e:1e:7f:6a:b4:8e:74:ca:73:34:5b:19:8d:28:49:bc:9d: 54:a2:9e:30:b0:b7:cd:36:c1:cd:2d:ce:58:15:3c:4a:3e:8c: fa:7c:c0:a4:5b:63:92:13:04:b2:8b:da:3c:0b:75:d9:3e:cf: 96:6b:b3:ba:76:81:72:c8:a2:90:9b:11:5e:aa:de:70:52:19: 5c:af:70:83:20:9e:cd:fe:4f:35:b5:99:68:bb:b7:89:82:a4: 84:97:df:f9:67:2d:e8:44:03:16:3f:ed:85:d3:a8:32:1e:df: fe:82:fd:10:aa:0f:94:30:01:20:6a:54:56:df:db:dc:62:ea: 56:d9:47:9c:62:86:89:e9:94:72:a3:15:66:35:03:18:ae:e0: d0:a1:4f:54:86:d7:64:9d:1e:d3:5c:f7:53:36:34:15:d8:18: 51:31:a1:18:69:72:1d:2d:61:66:d3:23:93:71:84:85:60:dd: a2:93:63:04:e2:bc:f9:e7:cb:78:16:eb:ac:a4:cb:1c:05:5e: 5f:42:35:af:85:56:0b:5c:d5:5d:3f:b6:ef:0b:f2:b0:f5:0e: 1b:c4:96:ae:ed:9a:a2:2c:74:0f:eb:c3:cd:59:9a:e9:c6:dc: c4:bf:45:f0:79:86:3b:ac:23:31:da:f3:1e:13:d9:3d:65:a6: 61:94:7b:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhTCvDNRNboJILHbkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQ3ZmJhNGMtNjBhMC00OTllLThkNWItMDg3NTQ1Yzk4 MWI3MB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk NWYyNDdiNGMtYWU0NS00YzcwLWFlMWMtODM2NWEyMjc3OGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmc2Dg+1fLCtL2+m//SeaAMrQS15vLbrWjWJ nNToYcwKkdyxkn0hKSjUu20NaKghIsCEQo470PbP9YTjRmyW7AHSJXbXsRUP9vzL VAr3o+2IL3K209Hmwv0KVr04dSuMIBdXuHQcCF/HQcy6/22tlXHMZDxbyRerGc3V 89QWFo+xUN7/P8n9XOtcjRKj3ZrGgPBQIYjhuFJY65eHgtW++Hx/qfp5q7vLNVnq jSnPBnWqLl1HMeKMUS9bNHgg+gLRoR02bfabIZnWTXQHauXxTjQo/lmmHyrAKBmp VH45rQCuoLSqLRzH8ztTUHTpRW91NE6jfMh69dLn8D5Y7KgcdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzEJ2p+CbLLqecoektLHkWncJegMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80NDdm YmE0Yy02MGEwLTQ5OWUtOGQ1Yi0wODc1NDVjOTgxYjcvZTM4OWIyYmQtYjg3ZS0z ZTdhLTg1MzctNzJhZjFkMDYzZDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDQ3ZmJhNGMtNjBhMC00OTllLThk NWItMDg3NTQ1Yzk4MWI3LzQ0N2ZiYTRjLTYwYTAtNDk5ZS04ZDViLTA4NzU0NWM5 ODFiNy5jcmwwHwYDVR0jBBgwFoAU7hm4X+FJH7sn4UsJlQ81NpEwFo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80NDdmYmE0Yy02MGEwLTQ5OWUtOGQ1Yi0wODc1 NDVjOTgxYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzqgCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+OHn9qtI50ynM0WxmNKEm8nVSinjCwt802wc0tzlgVPEo+jPp8wKRb Y5ITBLKL2jwLddk+z5Zrs7p2gXLIopCbEV6q3nBSGVyvcIMgns3+TzW1mWi7t4mC pISX3/lnLehEAxY/7YXTqDIe3/6C/RCqD5QwASBqVFbf29xi6lbZR5xihonplHKj FWY1Axiu4NChT1SG12SdHtNc91M2NBXYGFExoRhpch0tYWbTI5NxhIVg3aKTYwTi vPnny3gW66ykyxwFXl9CNa+FVgtc1V0/tu8L8rD1DhvElq7tmqIsdA/rw81ZmunG 3MS/RfB5hjusIzHa8x4T2T1lpmGUe2E= -----END CERTIFICATE-----Generated at Fri Mar 14 10:32:01 2025 by rpki-client