$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7de612cf-a880-4f90-bd0f-bf90530a8f4e/caa2c494-04bb-339b-8f7a-589020a08d65.roa File: caa2c494-04bb-339b-8f7a-589020a08d65.roa (raw, json) Hash identifier: rDxd6hxUVQ3be5F1GGlon7jvIq57KJS8tkZNxkY/qzU= Subject key identifier: E9:99:28:20:8C:2D:1F:CB:2C:B8:F9:BA:17:CE:D2:28:F8:E8:BC:D1 Certificate issuer: /CN=7de612cf-a880-4f90-bd0f-bf90530a8f4e Certificate serial: 010D0C9F4328584858A05D16E5B5FC35B6DF3640 Authority key identifier: 3B:7B:1A:C4:65:16:4E:24:D1:94:87:5D:9D:9C:17:0F:E8:8A:B6:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7de612cf-a880-4f90-bd0f-bf90530a8f4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7de612cf-a880-4f90-bd0f-bf90530a8f4e/caa2c494-04bb-339b-8f7a-589020a08d65.roa Signing time: Fri 27 Dec 2024 14:00:52 +0000 ROA not before: Fri 27 Dec 2024 14:00:52 +0000 ROA not after: Thu 27 Mar 2025 13:00:52 +0000 asID: 63023 IP address blocks: 23.158.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7de612cf-a880-4f90-bd0f-bf90530a8f4e/7de612cf-a880-4f90-bd0f-bf90530a8f4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7de612cf-a880-4f90-bd0f-bf90530a8f4e/7de612cf-a880-4f90-bd0f-bf90530a8f4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7de612cf-a880-4f90-bd0f-bf90530a8f4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:58:a0:5d:16:e5:b5:fc:35:b6:df:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7de612cf-a880-4f90-bd0f-bf90530a8f4e Validity Not Before: Dec 27 14:00:52 2024 GMT Not After : Mar 27 13:00:52 2025 GMT Subject: CN=b15c2af4-6e53-4488-8569-bfff5d0f171f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:97:c4:02:8f:f0:19:c5:92:62:55:e4:4d:ba: 79:2a:72:e6:f8:11:99:66:10:de:59:3a:75:19:77: 69:45:18:7f:b2:e5:06:d6:45:f0:1a:17:61:f5:16: bc:2f:55:ec:5c:7e:62:57:5d:98:ab:7f:e1:aa:6d: 66:c4:31:70:35:9f:6c:91:12:5b:e6:41:d8:e6:e7: 7d:71:9c:f3:fc:77:fb:77:3a:03:ca:3d:1f:f3:ea: f6:80:05:8f:45:33:23:f4:96:d0:e9:02:65:d9:af: 18:6a:58:3d:c0:9d:43:b6:af:24:e5:03:82:19:ea: 9b:cd:b3:41:0e:5f:90:36:71:40:1e:04:2f:7a:45: 1a:e0:5b:e1:1f:33:24:65:8c:b9:c0:67:3e:da:f9: 72:4f:c9:62:ba:a1:f6:20:57:41:1d:26:61:c7:21: 5e:a9:71:92:62:6f:ee:26:bf:30:e1:0b:05:af:38: 26:e9:e9:cd:6b:5b:a7:ca:1a:de:01:e5:a2:1f:f6: 56:b2:c0:62:93:45:b3:5d:06:38:29:eb:ad:c8:26: ee:53:25:6a:f5:4a:6a:22:56:e4:50:a7:2c:2d:d0: 7e:37:de:ef:66:18:1b:ad:d5:b4:3d:06:6e:7b:96: 3e:50:4a:d0:78:92:5a:d8:14:d6:cd:c3:cc:36:6a: 1a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:99:28:20:8C:2D:1F:CB:2C:B8:F9:BA:17:CE:D2:28:F8:E8:BC:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7de612cf-a880-4f90-bd0f-bf90530a8f4e/caa2c494-04bb-339b-8f7a-589020a08d65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7de612cf-a880-4f90-bd0f-bf90530a8f4e/7de612cf-a880-4f90-bd0f-bf90530a8f4e.crl X509v3 Authority Key Identifier: keyid:3B:7B:1A:C4:65:16:4E:24:D1:94:87:5D:9D:9C:17:0F:E8:8A:B6:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7de612cf-a880-4f90-bd0f-bf90530a8f4e.cer sbgp-ipAddrBlock: critical IPv4: 23.158.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:dc:23:b5:6e:1e:55:8a:b7:c0:5d:4a:c7:7b:9c:96:6d:ae: b1:e6:ed:19:0e:52:3f:b9:9e:4c:3d:e9:21:cd:fa:79:27:e3: 06:13:c6:c7:9a:11:8a:70:6d:09:36:c3:2e:fb:8c:ba:db:90: bf:ff:ab:73:c7:b3:f0:24:22:d3:fc:68:86:57:32:fd:cb:64: 24:66:53:b2:c4:3b:ae:9b:75:7c:dc:54:b0:d6:f8:0c:c3:df: dc:e7:59:c6:2d:49:ed:f0:64:55:b1:62:6e:27:73:22:64:0e: 98:22:1a:a7:30:bb:76:e4:00:65:6f:71:95:8d:3b:b3:cb:62: 24:1a:05:02:e1:91:37:cf:ef:3e:97:df:03:92:70:94:cb:8d: 43:c2:e0:a4:47:13:6e:b2:ff:8b:1c:5c:42:70:1a:11:7e:13: b0:38:f8:34:3d:ad:f4:d8:ba:4e:0e:d4:4f:d9:ca:8a:3d:bd: d4:56:e2:e7:1c:58:3c:0f:00:b6:ad:da:fa:cc:00:ac:0c:f1: b4:5f:54:7f:70:62:2a:d1:57:88:8c:4c:4b:90:84:14:76:64: dd:8f:3c:bd:ac:c1:67:4c:58:93:85:95:33:09:85:b5:6e:3a: 13:3e:f7:3b:85:3d:c7:89:dc:02:b3:79:ed:80:68:f4:54:fc: 9f:bf:6a:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoF0W5bX8NbbfNkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RlNjEyY2YtYTg4MC00ZjkwLWJkMGYtYmY5MDUzMGE4 ZjRlMB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk YjE1YzJhZjQtNmU1My00NDg4LTg1NjktYmZmZjVkMGYxNzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5fEAo/wGcWSYlXkTbp5KnLm+BGZZhDeWTp1 GXdpRRh/suUG1kXwGhdh9Ra8L1XsXH5iV12Yq3/hqm1mxDFwNZ9skRJb5kHY5ud9 cZzz/Hf7dzoDyj0f8+r2gAWPRTMj9JbQ6QJl2a8Yalg9wJ1Dtq8k5QOCGeqbzbNB Dl+QNnFAHgQvekUa4FvhHzMkZYy5wGc+2vlyT8liuqH2IFdBHSZhxyFeqXGSYm/u Jr8w4QsFrzgm6enNa1unyhreAeWiH/ZWssBik0WzXQY4KeutyCbuUyVq9UpqIlbk UKcsLdB+N97vZhgbrdW0PQZue5Y+UErQeJJa2BTWzcPMNmoarQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmZKCCMLR/LLLj5uhfO0ij46LzRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83ZGU2 MTJjZi1hODgwLTRmOTAtYmQwZi1iZjkwNTMwYThmNGUvY2FhMmM0OTQtMDRiYi0z MzliLThmN2EtNTg5MDIwYTA4ZDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2RlNjEyY2YtYTg4MC00ZjkwLWJk MGYtYmY5MDUzMGE4ZjRlLzdkZTYxMmNmLWE4ODAtNGY5MC1iZDBmLWJmOTA1MzBh OGY0ZS5jcmwwHwYDVR0jBBgwFoAUO3saxGUWTiTRlIddnZwXD+iKtkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83ZGU2MTJjZi1hODgwLTRmOTAtYmQwZi1iZjkw NTMwYThmNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF57IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDcI7VuHlWKt8BdSsd7nJZtrrHm7RkOUj+5nkw96SHN+nkn4wYTxsea EYpwbQk2wy77jLrbkL//q3PHs/AkItP8aIZXMv3LZCRmU7LEO66bdXzcVLDW+AzD 39znWcYtSe3wZFWxYm4ncyJkDpgiGqcwu3bkAGVvcZWNO7PLYiQaBQLhkTfP7z6X 3wOScJTLjUPC4KRHE26y/4scXEJwGhF+E7A4+DQ9rfTYuk4O1E/Zyoo9vdRW4ucc WDwPALat2vrMAKwM8bRfVH9wYirRV4iMTEuQhBR2ZN2PPL2swWdMWJOFlTMJhbVu OhM+9zuFPceJ3AKzee2AaPRU/J+/ajk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:26 2025 by rpki-client