$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d6c17614-b6c8-3e14-9443-1922a25dd1ef.roa File: d6c17614-b6c8-3e14-9443-1922a25dd1ef.roa (raw, json) Hash identifier: RWB2scx0tU4UIoPtmH9WD1yF2HuOsMss3rWb2UAZNS4= Subject key identifier: 65:58:BE:DC:B1:B7:40:A8:62:EA:61:C0:5F:77:D4:0B:74:8A:BE:EE Certificate issuer: /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Certificate serial: 010D0C9F432858485B6AF05E4B2A60D95880F5C0 Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d6c17614-b6c8-3e14-9443-1922a25dd1ef.roa Signing time: Sat 28 Dec 2024 14:00:52 +0000 ROA not before: Sat 28 Dec 2024 14:00:52 +0000 ROA not after: Fri 28 Mar 2025 13:00:52 +0000 asID: 401369 IP address blocks: 23.187.152.0/24 maxlen: 24 2602:f82d::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5b:6a:f0:5e:4b:2a:60:d9:58:80:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Validity Not Before: Dec 28 14:00:52 2024 GMT Not After : Mar 28 13:00:52 2025 GMT Subject: CN=0933f1a3-a59c-4ede-a029-194fd65f65c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0f:3b:bb:05:f5:9b:a1:30:0a:b1:0a:0f:d6: dc:df:1f:fc:fc:9f:c6:ac:1b:1e:b5:fd:7d:24:5d: 2e:43:ea:bf:98:b7:4e:2e:2e:c3:69:37:a8:f8:7b: 06:4c:53:c7:87:a4:e6:5d:89:73:54:b9:b2:cb:ce: ae:f9:27:fc:45:db:de:a1:a4:ee:af:21:e2:d3:59: 0b:af:1f:2b:d8:da:8b:8e:90:87:af:87:a3:27:38: a9:20:10:71:56:ca:52:20:91:e5:fd:80:a5:4e:c2: 93:27:be:fa:8c:95:11:e6:d0:d5:f9:b4:a0:91:8a: ee:10:b0:03:74:4c:c4:a0:45:ff:42:bd:a2:7a:de: 70:19:0e:3e:8e:3d:cb:f6:05:f7:03:67:e5:b2:79: bd:93:3e:28:fa:52:70:3c:06:ba:ca:46:11:78:ba: ce:2e:17:e1:41:36:51:54:5d:66:ae:fc:46:19:3f: 5b:b1:78:b8:b0:e8:a4:7c:21:49:31:4e:4e:8e:31: e0:aa:17:48:93:bb:c2:48:f3:3c:71:55:17:8b:17: a1:d3:30:08:69:f9:42:90:bc:e3:71:93:b9:9f:8d: ab:48:8f:a8:5c:62:02:b3:f3:24:81:64:30:fd:29: 6a:77:31:41:f6:0e:12:6a:b8:ad:3a:cc:72:02:dd: 36:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:58:BE:DC:B1:B7:40:A8:62:EA:61:C0:5F:77:D4:0B:74:8A:BE:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d6c17614-b6c8-3e14-9443-1922a25dd1ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl X509v3 Authority Key Identifier: keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer sbgp-ipAddrBlock: critical IPv4: 23.187.152.0/24 IPv6: 2602:f82d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:01:87:50:f0:d6:93:62:96:5b:fe:4f:04:ca:b5:c3:19:17: 84:fd:09:2a:db:f6:83:cc:f0:d2:01:0b:29:89:36:1c:78:40: 9a:06:06:bc:69:28:cf:72:cb:05:d5:73:b7:23:cc:ff:4c:3e: f1:04:27:bf:07:c3:4a:68:50:01:1b:c7:f2:e6:14:96:12:5e: d8:a3:5d:49:e4:14:ea:79:47:4e:30:da:df:96:1a:31:bb:a1: 94:48:0c:0f:cf:de:2b:80:79:9a:5d:64:79:39:54:fd:20:5e: ce:5b:ae:3c:f6:93:54:0b:b0:40:f8:e0:20:9c:19:4f:c8:c1: 2a:1f:a6:8a:6d:db:b6:c8:3b:0e:ab:d4:d1:d8:f4:d3:6e:11: 37:4e:d2:12:72:00:c1:ed:54:33:e0:e5:53:90:1d:09:18:a1: 7e:f4:7d:a0:85:5a:a9:16:6e:79:35:4b:b8:ee:18:9c:ae:8e: fe:04:68:b4:12:68:2d:c3:56:55:3e:1b:5e:43:16:e1:88:90: 3b:a0:32:f2:32:50:21:77:d1:16:c1:fc:fa:80:84:fa:23:e9: 99:47:ca:2f:db:4a:53:6b:40:f0:16:14:50:c2:6a:7b:03:12: 0c:2f:11:59:f9:c7:7b:06:7c:51:8e:20:15:11:0b:94:92:ba: 2d:44:f7:7a -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEhbavBeSypg2ViA9cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZmODVlNzktMTc0Yy00NmY2LThhNjItYTkyYzJjOTg3 NWI4MB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk MDkzM2YxYTMtYTU5Yy00ZWRlLWEwMjktMTk0ZmQ2NWY2NWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ87uwX1m6EwCrEKD9bc3x/8/J/GrBsetf19 JF0uQ+q/mLdOLi7DaTeo+HsGTFPHh6TmXYlzVLmyy86u+Sf8RdveoaTuryHi01kL rx8r2NqLjpCHr4ejJzipIBBxVspSIJHl/YClTsKTJ776jJUR5tDV+bSgkYruELAD dEzEoEX/Qr2iet5wGQ4+jj3L9gX3A2flsnm9kz4o+lJwPAa6ykYReLrOLhfhQTZR VF1mrvxGGT9bsXi4sOikfCFJMU5OjjHgqhdIk7vCSPM8cVUXixeh0zAIaflCkLzj cZO5n42rSI+oXGICs/MkgWQw/SlqdzFB9g4SaritOsxyAt02BwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGVYvtyxt0CoYuphwF931At0ir7uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4 NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJjMmM5ODc1YjgvZDZjMTc2MTQtYjZjOC0z ZTE0LTk0NDMtMTkyMmEyNWRkMWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmZmODVlNzktMTc0Yy00NmY2LThh NjItYTkyYzJjOTg3NWI4LzJmZjg1ZTc5LTE3NGMtNDZmNi04YTYyLWE5MmMyYzk4 NzViOC5jcmwwHwYDVR0jBBgwFoAUyL7y7tghnnjUrlWgB40hcC+PUdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJj MmM5ODc1YjguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7uYMA4E AgACMAgDBgQmAvgtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAyAYdQ8NaTYpZb/k8EyrXDGReE/Qkq2/aD zPDSAQspiTYceECaBga8aSjPcssF1XO3I8z/TD7xBCe/B8NKaFABG8fy5hSWEl7Y o11J5BTqeUdOMNrflhoxu6GUSAwPz94rgHmaXWR5OVT9IF7OW6489pNUC7BA+OAg nBlPyMEqH6aKbdu2yDsOq9TR2PTTbhE3TtIScgDB7VQz4OVTkB0JGKF+9H2ghVqp Fm55NUu47hicro7+BGi0Emgtw1ZVPhteQxbhiJA7oDLyMlAhd9EWwfz6gIT6I+mZ R8ov20pTa0DwFhRQwmp7AxIMLxFZ+cd7BnxRjiAVEQuUkrotRPd6 -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:18 2025 by rpki-client