$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/2b33ad14-189d-3a2c-acdc-181a057bd6f4.roa File: 2b33ad14-189d-3a2c-acdc-181a057bd6f4.roa (raw, json) Hash identifier: GX1kw6b8jHU5dNSQLy/FHixeKA6gbXmdnT6SB1LYs5U= Subject key identifier: FF:47:84:DF:F6:90:25:4F:C2:C0:EE:C2:84:CF:40:65:65:3B:44:FC Certificate issuer: /CN=c0aed97d-7073-4206-b05c-18a84d3f256d Certificate serial: 010D0C9F4328584849457169D2FAB32DFA736C80 Authority key identifier: 89:7F:03:30:67:E4:3D:E8:6D:FC:A9:72:8E:4B:37:8F:AF:87:0C:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/2b33ad14-189d-3a2c-acdc-181a057bd6f4.roa Signing time: Sun 22 Dec 2024 02:00:39 +0000 ROA not before: Sun 22 Dec 2024 02:00:39 +0000 ROA not after: Sat 22 Mar 2025 01:00:39 +0000 asID: 55002 IP address blocks: 199.34.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/c0aed97d-7073-4206-b05c-18a84d3f256d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/c0aed97d-7073-4206-b05c-18a84d3f256d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:49:45:71:69:d2:fa:b3:2d:fa:73:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0aed97d-7073-4206-b05c-18a84d3f256d Validity Not Before: Dec 22 02:00:39 2024 GMT Not After : Mar 22 01:00:39 2025 GMT Subject: CN=fc3b3419-2282-49dc-9fd8-3640d628e605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c8:71:28:7a:5a:00:5c:98:bf:2e:99:ce:c0: 21:58:21:8f:6c:81:db:6d:d2:14:29:99:49:6c:d0: 23:d4:28:ad:ca:2e:5a:20:70:f7:83:42:a6:6e:d7: 90:4b:66:de:57:2a:78:7e:f0:42:e0:93:34:e6:8d: 35:3e:9c:bd:14:4e:00:e0:35:36:f6:e3:3a:f5:8f: 8a:63:7f:ee:1c:31:5f:9f:92:a4:90:c8:28:8c:c0: d4:41:b7:8d:d3:54:b8:dd:db:1e:27:c6:f3:34:0c: f8:4c:8b:5d:9e:70:21:ba:83:7a:92:7a:e7:26:92: 5d:a4:aa:f7:bb:a4:00:43:24:40:ed:a4:8d:e2:48: b5:2f:55:43:03:63:9c:71:b6:b0:02:fb:e3:2a:e9: e4:60:c7:87:13:ca:19:21:b6:87:e9:3c:62:9a:5f: d7:5c:66:18:33:d2:ef:8f:cc:f4:96:9a:d8:43:f7: 37:63:96:e0:40:26:51:f6:c7:dc:dd:f1:91:7e:5c: ae:c0:21:3e:02:e3:c4:cb:cf:46:b1:45:7b:73:14: 3c:b2:20:55:82:30:25:75:39:07:2b:ee:22:5f:d7: 97:e6:47:53:b0:41:5c:9e:89:f0:8a:b9:c9:e0:b9: db:d4:25:37:83:d6:30:95:02:ad:7c:f7:c9:2d:81: 34:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:47:84:DF:F6:90:25:4F:C2:C0:EE:C2:84:CF:40:65:65:3B:44:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/2b33ad14-189d-3a2c-acdc-181a057bd6f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/c0aed97d-7073-4206-b05c-18a84d3f256d.crl X509v3 Authority Key Identifier: keyid:89:7F:03:30:67:E4:3D:E8:6D:FC:A9:72:8E:4B:37:8F:AF:87:0C:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d.cer sbgp-ipAddrBlock: critical IPv4: 199.34.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:1c:43:25:77:6b:96:ed:f5:46:bb:f5:f8:86:92:b9:69:ee: d1:e1:d0:32:62:08:de:8d:fa:ea:fa:4d:cc:1f:16:af:90:5a: 5f:4b:48:bc:fd:ee:7c:7b:26:89:bb:23:4a:87:1a:b8:f0:dc: 85:99:b1:ea:d8:b4:a7:5c:84:22:79:8c:a8:c9:50:c6:97:7a: f2:cb:e0:6a:69:e8:01:ba:05:59:33:fa:1e:a0:f0:7b:a1:d2: 32:96:6a:06:50:ed:1b:52:1f:ba:73:84:6a:35:b8:6b:d4:8f: b2:c6:49:77:0c:53:52:2c:aa:2c:fd:9b:e1:a9:98:24:98:a0: 67:15:43:c9:93:4d:fa:8f:cf:83:4c:d8:0a:b5:74:83:6c:35: d4:10:09:6d:f0:b8:15:c2:93:25:1d:ea:14:95:7d:bf:04:62: 42:e2:d6:c1:3e:05:10:5c:dd:e1:79:13:f0:6e:f1:2a:0f:c3: 33:99:60:79:a2:a0:b6:fe:13:54:55:98:38:e7:f6:ca:38:80: 23:39:90:2a:da:7a:d8:9f:04:f8:ad:42:94:cd:7d:31:02:b8: 1b:c5:40:4c:54:97:c5:1e:be:56:cc:e9:56:82:97:6c:5e:7b: ce:c9:2d:89:ad:47:27:f3:ef:cc:12:0c:97:db:6c:12:26:5e: 97:79:d9:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhJRXFp0vqzLfpzbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzBhZWQ5N2QtNzA3My00MjA2LWIwNWMtMThhODRkM2Yy NTZkMB4XDTI0MTIyMjAyMDAzOVoXDTI1MDMyMjAxMDAzOVowLzEtMCsGA1UEAxMk ZmMzYjM0MTktMjI4Mi00OWRjLTlmZDgtMzY0MGQ2MjhlNjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgshxKHpaAFyYvy6ZzsAhWCGPbIHbbdIUKZlJ bNAj1Cityi5aIHD3g0KmbteQS2beVyp4fvBC4JM05o01Ppy9FE4A4DU29uM69Y+K Y3/uHDFfn5KkkMgojMDUQbeN01S43dseJ8bzNAz4TItdnnAhuoN6knrnJpJdpKr3 u6QAQyRA7aSN4ki1L1VDA2OccbawAvvjKunkYMeHE8oZIbaH6Tximl/XXGYYM9Lv j8z0lprYQ/c3Y5bgQCZR9sfc3fGRflyuwCE+AuPEy89GsUV7cxQ8siBVgjAldTkH K+4iX9eX5kdTsEFcnonwirnJ4Lnb1CU3g9YwlQKtfPfJLYE0iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9HhN/2kCVPwsDuwoTPQGVlO0T8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMGFl ZDk3ZC03MDczLTQyMDYtYjA1Yy0xOGE4NGQzZjI1NmQvMmIzM2FkMTQtMTg5ZC0z YTJjLWFjZGMtMTgxYTA1N2JkNmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzBhZWQ5N2QtNzA3My00MjA2LWIw NWMtMThhODRkM2YyNTZkL2MwYWVkOTdkLTcwNzMtNDIwNi1iMDVjLTE4YTg0ZDNm MjU2ZC5jcmwwHwYDVR0jBBgwFoAUiX8DMGfkPeht/Klyjks3j6+HDPkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMGFlZDk3ZC03MDczLTQyMDYtYjA1Yy0xOGE4 NGQzZjI1NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyLkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgcQyV3a5bt9Ua79fiGkrlp7tHh0DJiCN6N+ur6TcwfFq+QWl9LSLz9 7nx7Jom7I0qHGrjw3IWZserYtKdchCJ5jKjJUMaXevLL4Gpp6AG6BVkz+h6g8Huh 0jKWagZQ7RtSH7pzhGo1uGvUj7LGSXcMU1Isqiz9m+GpmCSYoGcVQ8mTTfqPz4NM 2Aq1dINsNdQQCW3wuBXCkyUd6hSVfb8EYkLi1sE+BRBc3eF5E/Bu8SoPwzOZYHmi oLb+E1RVmDjn9so4gCM5kCraetifBPitQpTNfTECuBvFQExUl8UevlbM6VaCl2xe e87JLYmtRyfz78wSDJfbbBImXpd52dE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:05 2025 by rpki-client