$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/89a6eccf-2b5e-3cf6-9496-387f7a14f81d.roa File: 89a6eccf-2b5e-3cf6-9496-387f7a14f81d.roa (raw, json) Hash identifier: 3LTbM6z2SuwrNFb4zjrw/AM+2chYHPfl+pcBVP46gqw= Subject key identifier: 22:00:51:F8:73:58:12:CF:46:B4:DE:64:97:5B:E1:A5:A0:D0:11:E2 Certificate issuer: /CN=5ccc6d6f-2606-494d-a559-67c452762d98 Certificate serial: 010D0C9F43285848B8F0C3AD1A262D00FF1D8880 Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/89a6eccf-2b5e-3cf6-9496-387f7a14f81d.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 11032 IP address blocks: 207.162.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:c3:ad:1a:26:2d:00:ff:1d:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=c1d8af2a-78e0-48e3-8362-cefe3e1877a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:04:07:65:23:34:ca:94:9a:62:9a:fc:5d:29: e0:38:f1:17:ab:eb:15:5c:5b:62:28:d0:ca:8c:42: 28:a0:a6:0a:3d:9d:a7:a4:be:07:31:dd:a9:48:9e: 63:b4:e4:fa:c4:3e:3b:12:55:c0:22:8e:a9:5f:fe: 25:cd:34:cb:64:6d:86:6e:91:85:3c:39:ae:41:c0: 2c:8d:5a:4d:67:37:f1:b2:5a:43:dc:43:c6:50:78: 6f:3f:b1:98:d4:fc:08:4a:f7:8f:78:b1:7d:4b:34: 44:94:4c:f4:b0:72:e9:62:7a:3a:14:e2:fc:50:f4: 1d:3a:d4:fe:00:20:10:2c:17:03:bf:d8:5a:aa:eb: d8:16:67:ed:5f:4b:dd:bf:30:7a:3a:68:cf:64:ab: 22:c0:05:13:c8:f6:8f:82:fc:32:13:d0:4b:6c:89: 8d:2e:89:e6:25:e4:f3:b1:43:c1:fe:22:6d:3d:c9: 07:b5:97:bf:a1:a8:fb:27:f0:dd:ae:93:36:a6:ea: 1c:f3:0c:5c:62:41:3c:79:ef:2b:84:d5:bd:f2:7c: 51:01:58:5d:37:90:54:47:ac:06:f0:a0:6d:5b:99: ce:54:b3:39:b2:a6:24:30:11:48:3f:34:3e:4b:b7: 32:f8:52:8f:e8:74:13:05:9c:58:e8:cc:51:30:67: 21:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:00:51:F8:73:58:12:CF:46:B4:DE:64:97:5B:E1:A5:A0:D0:11:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/89a6eccf-2b5e-3cf6-9496-387f7a14f81d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl X509v3 Authority Key Identifier: keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer sbgp-ipAddrBlock: critical IPv4: 207.162.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:28:32:6d:30:00:df:ef:d4:c5:06:72:3f:de:69:f5:44:55: 75:60:bb:69:19:b6:78:da:f1:a9:ce:13:e7:9c:60:6c:bc:b5: 16:6f:2e:db:23:9b:f8:de:28:56:fe:3d:21:bb:f0:74:aa:a4: f5:3e:dd:bb:e9:00:37:80:20:c9:75:f7:a3:dc:2f:e8:83:04: 57:93:da:4b:bb:ef:42:ff:81:4b:4b:a2:05:33:21:fb:c7:87: 81:b2:8f:af:79:36:96:8f:d5:83:25:c6:0b:05:29:34:45:1a: 72:bc:50:b1:b9:00:9d:00:48:64:a1:7f:0f:6c:c5:99:55:c1: 79:de:8a:56:1c:f6:c2:b9:35:89:cb:32:a4:52:89:aa:04:24: 08:95:79:97:c6:c4:8d:60:79:62:75:c8:3b:c3:8c:95:45:67: 98:90:bb:d0:9d:c9:65:90:ad:42:a2:51:f3:43:2e:e6:86:8c: 25:f2:66:32:b4:b5:34:74:9b:23:82:64:63:78:1e:9f:4d:c5: 6e:de:07:7c:d6:6c:b9:51:a3:ef:bd:81:1a:58:89:98:46:80: 32:61:c6:e0:af:c3:f9:ed:7a:21:1b:51:f8:c2:08:7a:1f:e4: 2f:55:8e:15:a2:b7:81:bf:10:3a:08:ef:4a:86:cc:4f:80:7b: b2:b0:cd:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48MOtGiYtAP8diIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy ZDk4MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk YzFkOGFmMmEtNzhlMC00OGUzLTgzNjItY2VmZTNlMTg3N2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgQHZSM0ypSaYpr8XSngOPEXq+sVXFtiKNDK jEIooKYKPZ2npL4HMd2pSJ5jtOT6xD47ElXAIo6pX/4lzTTLZG2GbpGFPDmuQcAs jVpNZzfxslpD3EPGUHhvP7GY1PwISvePeLF9SzRElEz0sHLpYno6FOL8UPQdOtT+ ACAQLBcDv9haquvYFmftX0vdvzB6OmjPZKsiwAUTyPaPgvwyE9BLbImNLonmJeTz sUPB/iJtPckHtZe/oaj7J/DdrpM2puoc8wxcYkE8ee8rhNW98nxRAVhdN5BUR6wG 8KBtW5nOVLM5sqYkMBFIPzQ+S7cy+FKP6HQTBZxY6MxRMGchcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIAUfhzWBLPRrTeZJdb4aWg0BHiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvODlhNmVjY2YtMmI1ZS0z Y2Y2LTk0OTYtMzg3ZjdhMTRmODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1 NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2 MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0 NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6IdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgoMm0wAN/v1MUGcj/eafVEVXVgu2kZtnja8anOE+ecYGy8tRZvLtsj m/jeKFb+PSG78HSqpPU+3bvpADeAIMl196PcL+iDBFeT2ku770L/gUtLogUzIfvH h4Gyj695NpaP1YMlxgsFKTRFGnK8ULG5AJ0ASGShfw9sxZlVwXneilYc9sK5NYnL MqRSiaoEJAiVeZfGxI1geWJ1yDvDjJVFZ5iQu9CdyWWQrUKiUfNDLuaGjCXyZjK0 tTR0myOCZGN4Hp9NxW7eB3zWbLlRo++9gRpYiZhGgDJhxuCvw/nteiEbUfjCCHof 5C9VjhWit4G/EDoI70qGzE+Ae7Kwzbo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:39 2025 by rpki-client