$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/aed34a51-5a96-3ead-b62b-a874c42008d6.roa File: aed34a51-5a96-3ead-b62b-a874c42008d6.roa (raw, json) Hash identifier: X18hIUrfYIOkbuJR3L/uWUW8AoTDCFgYAmUhg/Dvo1U= Subject key identifier: 5B:42:10:55:27:76:0D:7A:DB:D8:37:87:C4:AC:20:9F:8B:8E:3E:5E Certificate issuer: /CN=0be9634a-0674-471a-bb54-7866e12ded7a Certificate serial: 010D0C9F432858483D2854D56C39D4F45EB3F6E8 Authority key identifier: 99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/aed34a51-5a96-3ead-b62b-a874c42008d6.roa Signing time: Tue 17 Dec 2024 17:52:28 +0000 ROA not before: Tue 17 Dec 2024 17:52:28 +0000 ROA not after: Mon 17 Mar 2025 16:52:28 +0000 asID: 14618 IP address blocks: 64.42.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3d:28:54:d5:6c:39:d4:f4:5e:b3:f6:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0be9634a-0674-471a-bb54-7866e12ded7a Validity Not Before: Dec 17 17:52:28 2024 GMT Not After : Mar 17 16:52:28 2025 GMT Subject: CN=1bfefe07-c7d0-4bc8-b92f-15211327e7a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bb:8e:33:1c:5f:b9:3b:e0:5a:06:00:0b:63: 28:db:9a:15:92:56:dc:6a:85:a1:1a:6c:61:97:4e: 3d:ff:36:47:8b:f1:24:ce:68:b9:a2:a4:67:91:fc: b4:97:a4:7d:c0:4d:3d:8f:cc:d0:7c:51:35:0c:42: 62:bd:cf:e0:3e:02:a3:e5:39:92:62:43:ef:88:6d: 1c:5a:2b:b8:18:09:88:63:12:81:a4:40:70:aa:34: 79:cf:5d:5e:8b:4b:2f:51:a3:6b:51:4a:35:b4:65: 5b:68:f4:cf:06:00:fa:7f:08:c3:0a:a6:b9:27:5b: 19:9b:09:5d:6c:c8:75:ea:5d:6c:0d:97:85:a7:a3: 19:01:60:d7:e9:02:3f:09:a7:b0:b6:cf:a4:3e:d3: 42:cb:9e:a7:65:df:21:5a:b4:7a:4a:3d:d6:9b:f1: 54:99:70:34:3e:2a:e3:3d:49:c2:60:fa:65:75:81: a0:4c:3d:10:a8:86:10:2a:c8:31:db:66:4f:80:ff: 3e:b1:8f:d6:bb:c5:fc:3e:49:e1:30:bb:c5:77:bf: ca:72:1d:4f:7e:47:39:6d:34:cb:d3:2d:f1:e5:eb: 63:5a:4f:31:32:8c:6d:3d:df:01:d4:6b:20:3b:b6: e6:3c:49:c2:70:96:5a:a6:61:06:18:ff:21:12:2c: a3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:42:10:55:27:76:0D:7A:DB:D8:37:87:C4:AC:20:9F:8B:8E:3E:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/aed34a51-5a96-3ead-b62b-a874c42008d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl X509v3 Authority Key Identifier: keyid:99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer sbgp-ipAddrBlock: critical IPv4: 64.42.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:fb:fb:84:c2:8c:5c:a0:24:60:74:1d:d1:e1:a6:1c:bf:a6: 5c:97:2f:1b:dc:8a:93:c4:be:0f:85:63:28:28:d3:cd:ef:b1: 0d:98:88:d3:4d:18:c0:6e:d4:b3:6a:3f:50:92:a3:51:b6:c5: 68:83:80:30:79:70:af:06:c8:65:bb:c5:4d:2e:9c:b8:84:d5: 6f:fb:ca:5e:1b:67:bb:1b:d6:05:fa:cf:33:c6:f3:67:72:ec: c5:c0:bb:b6:e1:22:5d:4c:d0:1c:c8:5f:f9:64:d7:76:af:70: 37:b0:cc:74:02:ef:cb:c1:06:43:4b:b4:99:61:8f:59:19:a2: 2f:e3:c0:e6:cb:c4:ba:a4:0b:53:82:a5:d2:31:8a:2a:10:60: 1b:5f:26:a4:74:a1:5b:48:3b:68:42:2f:63:aa:76:e4:73:3d: d0:a6:c3:9f:17:a0:ba:a5:0d:37:0a:5e:f2:ce:f0:4a:67:67: 1f:14:da:d0:e0:32:29:9a:4b:8f:39:7b:1b:b8:ed:0f:d4:ef: 6b:6e:43:e5:7b:5e:1c:e1:ac:f8:57:3e:80:48:e9:66:bc:b0: bd:14:3e:d9:d1:d9:15:63:c4:4c:b9:de:d0:d8:4e:7a:77:f2: 6b:27:e6:fc:cc:44:75:c6:d2:58:21:00:c1:a3:c6:b6:b0:6d: ff:12:6e:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg9KFTVbDnU9F6z9ugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGJlOTYzNGEtMDY3NC00NzFhLWJiNTQtNzg2NmUxMmRl ZDdhMB4XDTI0MTIxNzE3NTIyOFoXDTI1MDMxNzE2NTIyOFowLzEtMCsGA1UEAxMk MWJmZWZlMDctYzdkMC00YmM4LWI5MmYtMTUyMTEzMjdlN2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47uOMxxfuTvgWgYAC2Mo25oVklbcaoWhGmxh l049/zZHi/Ekzmi5oqRnkfy0l6R9wE09j8zQfFE1DEJivc/gPgKj5TmSYkPviG0c Wiu4GAmIYxKBpEBwqjR5z11ei0svUaNrUUo1tGVbaPTPBgD6fwjDCqa5J1sZmwld bMh16l1sDZeFp6MZAWDX6QI/Caewts+kPtNCy56nZd8hWrR6Sj3Wm/FUmXA0Pirj PUnCYPpldYGgTD0QqIYQKsgx22ZPgP8+sY/Wu8X8PknhMLvFd7/Kch1Pfkc5bTTL 0y3x5etjWk8xMoxtPd8B1GsgO7bmPEnCcJZapmEGGP8hEiyjZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtCEFUndg1629g3h8SsIJ+Ljj5eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYmU5 NjM0YS0wNjc0LTQ3MWEtYmI1NC03ODY2ZTEyZGVkN2EvYWVkMzRhNTEtNWE5Ni0z ZWFkLWI2MmItYTg3NGM0MjAwOGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGJlOTYzNGEtMDY3NC00NzFhLWJi NTQtNzg2NmUxMmRlZDdhLzBiZTk2MzRhLTA2NzQtNDcxYS1iYjU0LTc4NjZlMTJk ZWQ3YS5jcmwwHwYDVR0jBBgwFoAUmcJzE2fDRji36wpv3V7puIFI97EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYmU5NjM0YS0wNjc0LTQ3MWEtYmI1NC03ODY2 ZTEyZGVkN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCq5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACT7+4TCjFygJGB0HdHhphy/plyXLxvcipPEvg+FYygo083vsQ2YiNNN GMBu1LNqP1CSo1G2xWiDgDB5cK8GyGW7xU0unLiE1W/7yl4bZ7sb1gX6zzPG82dy 7MXAu7bhIl1M0BzIX/lk13avcDewzHQC78vBBkNLtJlhj1kZoi/jwObLxLqkC1OC pdIxiioQYBtfJqR0oVtIO2hCL2OqduRzPdCmw58XoLqlDTcKXvLO8EpnZx8U2tDg MimaS485exu47Q/U72tuQ+V7XhzhrPhXPoBI6Wa8sL0UPtnR2RVjxEy53tDYTnp3 8msn5vzMRHXG0lghAMGjxrawbf8SbnI= -----END CERTIFICATE-----Generated at Wed Feb 5 09:48:01 2025 by rpki-client