$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d73dd892-ee55-3262-86e9-4939ca3508af.roa File: d73dd892-ee55-3262-86e9-4939ca3508af.roa (raw, json) Hash identifier: 52uG1J6FdPxtb/5HY4UlLpjwVl7LWbnzCdORhfAQea0= Subject key identifier: BD:75:0A:AB:08:3E:7C:E3:B1:C4:CB:FA:78:3B:72:14:DD:B9:36:7F Certificate issuer: /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Certificate serial: 010D0C9F432858485A0577F87129C602B00DB6CE Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d73dd892-ee55-3262-86e9-4939ca3508af.roa Signing time: Sat 28 Dec 2024 02:00:38 +0000 ROA not before: Sat 28 Dec 2024 02:00:38 +0000 ROA not after: Fri 28 Mar 2025 01:00:38 +0000 asID: 401368 IP address blocks: 23.187.152.0/24 maxlen: 24 2602:f82d::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5a:05:77:f8:71:29:c6:02:b0:0d:b6:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Validity Not Before: Dec 28 02:00:38 2024 GMT Not After : Mar 28 01:00:38 2025 GMT Subject: CN=6085e089-959f-4077-bc64-f121a06e76ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2f:15:3a:2a:9f:49:ad:ac:5d:e6:e4:b1:a6: 2a:9c:da:f1:80:d8:3f:2a:c6:ba:c1:48:c8:ae:f4: ee:2c:88:d8:21:f6:ac:52:a0:c2:c5:52:a1:22:2c: bd:4a:bb:47:2f:51:0e:54:a7:28:50:43:16:fa:e5: 0d:a4:72:9f:a0:87:c5:2d:70:40:47:a6:dd:ba:5c: fd:d3:c8:01:43:67:b0:26:5a:48:13:39:55:c0:eb: af:62:02:50:3c:15:b3:70:66:30:81:d8:fc:e5:a0: e4:a8:64:6f:b9:94:8d:14:d1:e2:e7:93:29:6e:57: 3d:c7:79:6b:00:59:31:86:0b:e0:a7:53:2a:c8:b9: 64:f3:6d:bd:ef:7e:6e:2d:41:af:71:8a:93:89:2b: a8:ad:bd:b1:d7:bd:fc:26:1b:fc:19:d9:c2:c2:69: 7d:d3:e5:5d:ee:22:2f:9a:82:5c:08:df:62:ef:15: 91:0b:96:58:5b:60:6a:18:3b:53:4e:f0:34:8b:54: 4d:2a:19:0c:28:78:b8:e2:46:6c:c4:ab:30:71:af: 02:5f:8c:50:9b:e0:b1:49:38:64:4c:47:64:68:04: 5e:a4:49:4c:69:76:11:b7:d0:e6:c3:13:33:54:ed: db:b0:af:55:3a:8f:29:b8:54:cb:ac:72:68:c3:22: 5b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:75:0A:AB:08:3E:7C:E3:B1:C4:CB:FA:78:3B:72:14:DD:B9:36:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d73dd892-ee55-3262-86e9-4939ca3508af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl X509v3 Authority Key Identifier: keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer sbgp-ipAddrBlock: critical IPv4: 23.187.152.0/24 IPv6: 2602:f82d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:cf:78:b6:cb:89:d4:dc:0f:09:d9:25:3d:26:12:f6:00:b1: 61:be:e9:b5:4f:4d:44:d0:81:9a:5b:fa:b3:f1:2d:26:48:86: d8:38:92:52:9d:1f:0a:ee:d1:9b:a1:dc:8a:0e:37:3e:c9:9a: 0c:41:a1:10:6a:fd:d9:9f:18:77:3b:2c:9d:a4:35:50:0e:5d: d8:26:74:28:ba:3a:e4:48:ad:97:51:be:b4:1f:57:df:59:ce: 0d:c6:be:41:c1:27:ad:4b:f0:88:c9:95:00:44:04:8d:31:45: e0:4c:e1:9c:aa:2b:2a:5a:f9:be:bd:67:39:3e:5e:d1:0a:f6: 7b:8e:93:f9:8c:f1:6a:b8:9d:0e:df:e6:0c:ef:15:89:f7:19: d0:e0:12:2b:90:b0:a4:85:81:2b:98:ef:0c:00:f4:bb:69:31: 20:aa:4e:e6:17:03:67:5b:f3:f7:4e:36:76:74:6b:a7:22:c7: cb:71:b3:ea:cc:6f:87:a3:5f:fc:c9:f8:92:22:85:4f:7b:2f: 17:58:68:ce:ef:2a:f0:57:bf:6a:71:41:e9:6e:59:e2:36:58: a2:d6:bd:c0:80:56:8d:d9:5f:a2:5c:11:6a:06:7b:da:00:ae: 60:ba:0c:db:43:f5:ff:0b:a6:50:85:42:58:67:af:f2:b8:72: a4:9a:05:f2 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEhaBXf4cSnGArANts4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZmODVlNzktMTc0Yy00NmY2LThhNjItYTkyYzJjOTg3 NWI4MB4XDTI0MTIyODAyMDAzOFoXDTI1MDMyODAxMDAzOFowLzEtMCsGA1UEAxMk NjA4NWUwODktOTU5Zi00MDc3LWJjNjQtZjEyMWEwNmU3NmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC8VOiqfSa2sXebksaYqnNrxgNg/Ksa6wUjI rvTuLIjYIfasUqDCxVKhIiy9SrtHL1EOVKcoUEMW+uUNpHKfoIfFLXBAR6bdulz9 08gBQ2ewJlpIEzlVwOuvYgJQPBWzcGYwgdj85aDkqGRvuZSNFNHi55Mpblc9x3lr AFkxhgvgp1MqyLlk8229735uLUGvcYqTiSuorb2x1738Jhv8GdnCwml90+Vd7iIv moJcCN9i7xWRC5ZYW2BqGDtTTvA0i1RNKhkMKHi44kZsxKswca8CX4xQm+CxSThk TEdkaARepElMaXYRt9DmwxMzVO3bsK9VOo8puFTLrHJowyJbrQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFL11CqsIPnzjscTL+ng7chTduTZ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4 NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJjMmM5ODc1YjgvZDczZGQ4OTItZWU1NS0z MjYyLTg2ZTktNDkzOWNhMzUwOGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmZmODVlNzktMTc0Yy00NmY2LThh NjItYTkyYzJjOTg3NWI4LzJmZjg1ZTc5LTE3NGMtNDZmNi04YTYyLWE5MmMyYzk4 NzViOC5jcmwwHwYDVR0jBBgwFoAUyL7y7tghnnjUrlWgB40hcC+PUdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJj MmM5ODc1YjguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7uYMA4E AgACMAgDBgQmAvgtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtz3i2y4nU3A8J2SU9JhL2ALFhvum1T01E 0IGaW/qz8S0mSIbYOJJSnR8K7tGbodyKDjc+yZoMQaEQav3Znxh3OyydpDVQDl3Y JnQoujrkSK2XUb60H1ffWc4Nxr5BwSetS/CIyZUARASNMUXgTOGcqisqWvm+vWc5 Pl7RCvZ7jpP5jPFquJ0O3+YM7xWJ9xnQ4BIrkLCkhYErmO8MAPS7aTEgqk7mFwNn W/P3TjZ2dGunIsfLcbPqzG+Ho1/8yfiSIoVPey8XWGjO7yrwV79qcUHpblniNlii 1r3AgFaN2V+iXBFqBnvaAK5gugzbQ/X/C6ZQhUJYZ6/yuHKkmgXy -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:39 2025 by rpki-client