$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/07930a4f-e959-34a9-8903-62f74562e3ee.roa File: 07930a4f-e959-34a9-8903-62f74562e3ee.roa (raw, json) Hash identifier: 9k+mR590cyxz/RVpv57M5mLY3H5rj00jKxnkdx1lfAw= Subject key identifier: 49:E1:B6:C0:BC:08:FC:7E:04:C9:4C:4E:38:1A:8B:4E:AB:5B:DD:51 Certificate issuer: /CN=1073152b-033a-4ad5-ba98-45c1d65704d4 Certificate serial: 010D0C9F432858484EDABBE78A85C71AE52B6080 Authority key identifier: AF:6C:EF:89:28:99:02:21:63:73:BB:FA:49:68:55:AB:8C:49:1E:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/07930a4f-e959-34a9-8903-62f74562e3ee.roa Signing time: Tue 24 Dec 2024 02:00:38 +0000 ROA not before: Tue 24 Dec 2024 02:00:38 +0000 ROA not after: Mon 24 Mar 2025 01:00:38 +0000 asID: 30700 IP address blocks: 23.191.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/1073152b-033a-4ad5-ba98-45c1d65704d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/1073152b-033a-4ad5-ba98-45c1d65704d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4e:da:bb:e7:8a:85:c7:1a:e5:2b:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1073152b-033a-4ad5-ba98-45c1d65704d4 Validity Not Before: Dec 24 02:00:38 2024 GMT Not After : Mar 24 01:00:38 2025 GMT Subject: CN=058d6c72-a122-472f-9b7f-cd3c8a97e32a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:85:74:e0:a7:72:d2:71:c9:d8:44:f4:f7:2f: 81:38:e4:b6:15:9f:f0:b8:fb:31:a2:71:b0:41:b0: a2:b4:28:26:08:0a:4a:93:93:d5:6e:a0:01:31:4b: d0:c4:82:f2:c7:09:f8:01:37:49:91:76:d7:a2:29: 2b:46:ab:c3:51:ae:12:44:4c:e7:89:2b:c0:75:36: b2:c6:9f:ad:e8:0c:68:8e:3b:c3:98:c5:5d:25:60: cd:92:54:b1:38:f1:0f:64:c2:37:cb:98:a9:1b:33: 15:e4:4a:7d:d3:19:ad:90:90:8e:3c:66:c7:6d:e8: c4:24:6e:11:c2:7a:05:f2:9b:a4:9e:25:41:65:ae: 9e:4d:d5:4e:06:e8:5e:85:61:e5:9a:80:e2:0b:8e: 01:0e:85:b0:99:18:7b:f9:8b:22:ff:dd:2f:1e:5b: a1:8c:94:d4:c9:10:5c:6d:7c:1c:ab:ca:63:83:5c: 4f:a8:f3:9e:ee:3c:a7:54:5e:e7:16:3a:4d:31:53: 39:65:ef:9d:b9:b8:d9:f3:b5:cf:40:79:b6:d0:f0: cf:06:76:35:31:33:e1:be:72:be:7b:3e:b4:43:23: 74:56:55:5a:0c:74:1e:21:8e:c0:02:78:7f:ab:15: cf:6d:e8:6a:c0:c4:bb:7d:4f:36:e5:6a:2e:4e:41: c5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E1:B6:C0:BC:08:FC:7E:04:C9:4C:4E:38:1A:8B:4E:AB:5B:DD:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/07930a4f-e959-34a9-8903-62f74562e3ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/1073152b-033a-4ad5-ba98-45c1d65704d4.crl X509v3 Authority Key Identifier: keyid:AF:6C:EF:89:28:99:02:21:63:73:BB:FA:49:68:55:AB:8C:49:1E:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4.cer sbgp-ipAddrBlock: critical IPv4: 23.191.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:b0:a5:6d:be:e1:c3:5c:6b:57:9b:45:30:57:53:f1:36:6f: 9c:4e:c3:c3:b9:45:5a:11:1c:3e:b9:c3:a4:b6:f8:6b:5a:1b: 9a:58:00:19:e3:92:6a:3a:fb:70:14:f8:b0:6c:3e:78:25:48: fb:0d:2c:9c:0b:ea:cb:0a:5c:d2:b6:a9:82:cb:e7:38:0c:3f: bf:58:1b:c4:99:78:4e:b4:8e:d9:7a:50:d5:04:aa:a5:44:7c: db:b8:b0:44:70:81:a5:a5:70:bf:84:a1:3b:c7:46:f1:b3:63: 65:fc:c5:27:a2:54:26:46:df:48:f4:f3:5d:c0:4d:c2:58:6b: 48:7d:69:ef:e3:7a:fa:20:e1:e9:51:57:1a:a0:1f:20:70:40: 64:1c:a0:8f:9b:82:dd:93:2e:8f:b9:b8:f2:1e:25:89:68:ea: 46:46:19:71:f0:8a:2a:5a:3f:57:bc:2c:2b:87:92:06:12:94: a4:71:05:a3:ae:c5:9c:8d:cc:dd:09:65:28:63:67:e9:a9:f7: ee:13:6b:d3:32:56:38:1b:87:96:f8:6e:75:be:23:d9:41:5c: d0:68:ea:cf:bf:cf:6e:62:0a:3f:6c:37:50:01:26:41:db:d2: ae:61:e6:f9:ca:0c:0b:8d:34:73:63:09:d6:74:b5:1f:6a:27: 0f:ad:06:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhO2rvnioXHGuUrYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA3MzE1MmItMDMzYS00YWQ1LWJhOTgtNDVjMWQ2NTcw NGQ0MB4XDTI0MTIyNDAyMDAzOFoXDTI1MDMyNDAxMDAzOFowLzEtMCsGA1UEAxMk MDU4ZDZjNzItYTEyMi00NzJmLTliN2YtY2QzYzhhOTdlMzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIV04Kdy0nHJ2ET09y+BOOS2FZ/wuPsxonGw QbCitCgmCApKk5PVbqABMUvQxILyxwn4ATdJkXbXoikrRqvDUa4SREzniSvAdTay xp+t6AxojjvDmMVdJWDNklSxOPEPZMI3y5ipGzMV5Ep90xmtkJCOPGbHbejEJG4R wnoF8pukniVBZa6eTdVOBuhehWHlmoDiC44BDoWwmRh7+Ysi/90vHluhjJTUyRBc bXwcq8pjg1xPqPOe7jynVF7nFjpNMVM5Ze+dubjZ87XPQHm20PDPBnY1MTPhvnK+ ez60QyN0VlVaDHQeIY7AAnh/qxXPbehqwMS7fU825WouTkHFsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnhtsC8CPx+BMlMTjgai06rW91RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMDcz MTUyYi0wMzNhLTRhZDUtYmE5OC00NWMxZDY1NzA0ZDQvMDc5MzBhNGYtZTk1OS0z NGE5LTg5MDMtNjJmNzQ1NjJlM2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTA3MzE1MmItMDMzYS00YWQ1LWJh OTgtNDVjMWQ2NTcwNGQ0LzEwNzMxNTJiLTAzM2EtNGFkNS1iYTk4LTQ1YzFkNjU3 MDRkNC5jcmwwHwYDVR0jBBgwFoAUr2zviSiZAiFjc7v6SWhVq4xJHvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMDczMTUyYi0wMzNhLTRhZDUtYmE5OC00NWMx ZDY1NzA0ZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF78IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiwpW2+4cNca1ebRTBXU/E2b5xOw8O5RVoRHD65w6S2+GtaG5pYABnj kmo6+3AU+LBsPnglSPsNLJwL6ssKXNK2qYLL5zgMP79YG8SZeE60jtl6UNUEqqVE fNu4sERwgaWlcL+EoTvHRvGzY2X8xSeiVCZG30j0813ATcJYa0h9ae/jevog4elR VxqgHyBwQGQcoI+bgt2TLo+5uPIeJYlo6kZGGXHwiipaP1e8LCuHkgYSlKRxBaOu xZyNzN0JZShjZ+mp9+4Ta9MyVjgbh5b4bnW+I9lBXNBo6s+/z25iCj9sN1ABJkHb 0q5h5vnKDAuNNHNjCdZ0tR9qJw+tBjM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:42 2025 by rpki-client