$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/939bf517-6119-3675-bac5-1d660e0dbbde.roa File: 939bf517-6119-3675-bac5-1d660e0dbbde.roa (raw, json) Hash identifier: Y2bNJSE2WiCPteR1iK4pfqbXP8w2L0HvqWxi0wz+eXk= Subject key identifier: 26:9C:BB:55:90:D7:B3:94:0C:00:FD:AC:6C:84:23:8D:3C:7E:2F:96 Certificate issuer: /CN=44a561a3-0ac9-4535-922f-85de35ad8de7 Certificate serial: 010D0C9F432858486AC59977BACC4E58C1CBE180 Authority key identifier: 2C:40:05:53:53:46:71:E6:5F:7D:B7:0F:1B:6F:F5:D6:91:58:19:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/939bf517-6119-3675-bac5-1d660e0dbbde.roa Signing time: Fri 03 Jan 2025 02:00:40 +0000 ROA not before: Fri 03 Jan 2025 02:00:40 +0000 ROA not after: Thu 03 Apr 2025 01:00:40 +0000 asID: 16509 IP address blocks: 216.238.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/44a561a3-0ac9-4535-922f-85de35ad8de7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/44a561a3-0ac9-4535-922f-85de35ad8de7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6a:c5:99:77:ba:cc:4e:58:c1:cb:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44a561a3-0ac9-4535-922f-85de35ad8de7 Validity Not Before: Jan 3 02:00:40 2025 GMT Not After : Apr 3 01:00:40 2025 GMT Subject: CN=2e730e41-5b1b-4451-b4da-e49ed73d9323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9c:c6:58:0e:b2:71:e8:8d:c7:ae:5c:7e:17: 35:bf:e3:99:f9:c2:01:75:f9:f3:7b:b3:56:c0:d7: 74:eb:be:c8:16:b3:ef:a2:9c:3d:6f:e2:89:13:e1: fc:dd:e8:e9:e7:c8:17:b3:5c:98:74:c4:4b:54:22: 44:b3:a5:b2:3f:cc:b3:03:67:e0:44:8d:33:96:30: d2:db:9b:55:b8:7f:42:19:a5:5d:14:f0:17:4c:b6: b2:a0:60:5a:d4:0a:7d:fa:59:46:74:ee:f5:39:11: 17:04:90:21:ce:77:c9:67:60:d0:1b:b4:56:88:8d: 15:1f:0e:11:36:79:fa:8a:d9:9f:db:d4:f8:29:7c: 5d:06:a4:9e:53:ae:e4:e5:a7:fb:26:37:eb:cc:ae: 77:32:27:e2:e4:69:ad:61:9e:a7:81:0d:03:b7:5b: 36:89:f4:e6:18:a7:40:2c:7e:6d:da:fd:9c:de:87: e4:cc:8f:a9:1f:d2:4d:7a:7a:e7:79:59:62:b0:ab: 4a:78:97:3a:60:f7:31:d7:ce:a7:d7:e6:5e:39:bd: 64:e0:2d:34:58:41:cf:2c:5f:0d:a7:b5:6b:3a:94: 5b:0d:78:9c:4b:72:24:16:58:0a:2f:7d:7d:3c:c2: 9f:0c:6c:6b:c2:a0:4a:72:92:83:f2:d7:95:42:14: 3b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:9C:BB:55:90:D7:B3:94:0C:00:FD:AC:6C:84:23:8D:3C:7E:2F:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/939bf517-6119-3675-bac5-1d660e0dbbde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/44a561a3-0ac9-4535-922f-85de35ad8de7.crl X509v3 Authority Key Identifier: keyid:2C:40:05:53:53:46:71:E6:5F:7D:B7:0F:1B:6F:F5:D6:91:58:19:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7.cer sbgp-ipAddrBlock: critical IPv4: 216.238.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:e1:9f:64:8c:8f:e8:94:ac:f8:ec:17:7c:f7:3d:12:92:3a: 4b:69:2f:da:ba:1d:1c:92:f3:eb:45:54:38:94:82:7a:87:56: f6:3f:bc:8d:32:70:8e:c2:ee:66:b5:0a:fc:c3:e9:91:18:2f: 4d:4d:f6:1c:95:fa:50:8d:33:16:33:2f:a9:a3:fa:f9:5e:4d: ce:d8:05:ad:c0:42:09:a4:8c:3d:6a:e7:54:d5:9a:c4:49:6b: f8:76:68:26:cb:82:09:0a:08:9b:dd:a5:c4:6a:42:9c:14:af: 1c:e8:9f:59:fa:d4:8e:08:9f:04:98:71:22:48:26:c2:06:49: 59:ea:b2:f8:3d:bf:de:58:c6:ef:21:fc:48:c6:07:c3:8d:4b: f7:2b:5d:2f:01:7d:c0:ed:af:53:11:2d:2d:09:f0:36:54:70: b2:be:22:06:2e:77:1e:f7:5b:f6:51:5f:94:d7:0b:45:d3:8a: 67:21:db:4f:12:94:9e:58:55:60:b7:65:24:46:86:60:47:fd: 9a:de:6d:e3:e9:73:d6:a3:10:cb:3c:37:16:12:e7:e2:62:65: 32:a7:31:c2:ac:42:3c:6a:48:10:b0:cd:8b:09:99:71:11:e8: 74:9d:42:14:fb:88:c3:79:6a:e8:fd:e2:ff:58:f7:95:bb:e1: c3:42:ce:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhqxZl3usxOWMHL4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRhNTYxYTMtMGFjOS00NTM1LTkyMmYtODVkZTM1YWQ4 ZGU3MB4XDTI1MDEwMzAyMDA0MFoXDTI1MDQwMzAxMDA0MFowLzEtMCsGA1UEAxMk MmU3MzBlNDEtNWIxYi00NDUxLWI0ZGEtZTQ5ZWQ3M2Q5MzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpzGWA6yceiNx65cfhc1v+OZ+cIBdfnze7NW wNd0677IFrPvopw9b+KJE+H83ejp58gXs1yYdMRLVCJEs6WyP8yzA2fgRI0zljDS 25tVuH9CGaVdFPAXTLayoGBa1Ap9+llGdO71OREXBJAhznfJZ2DQG7RWiI0VHw4R Nnn6itmf29T4KXxdBqSeU67k5af7JjfrzK53Mifi5GmtYZ6ngQ0Dt1s2ifTmGKdA LH5t2v2c3ofkzI+pH9JNenrneVlisKtKeJc6YPcx186n1+ZeOb1k4C00WEHPLF8N p7VrOpRbDXicS3IkFlgKL319PMKfDGxrwqBKcpKD8teVQhQ7UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCacu1WQ17OUDAD9rGyEI408fi+WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NGE1 NjFhMy0wYWM5LTQ1MzUtOTIyZi04NWRlMzVhZDhkZTcvOTM5YmY1MTctNjExOS0z Njc1LWJhYzUtMWQ2NjBlMGRiYmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDRhNTYxYTMtMGFjOS00NTM1LTky MmYtODVkZTM1YWQ4ZGU3LzQ0YTU2MWEzLTBhYzktNDUzNS05MjJmLTg1ZGUzNWFk OGRlNy5jcmwwHwYDVR0jBBgwFoAULEAFU1NGceZffbcPG2/11pFYGS0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NGE1NjFhMy0wYWM5LTQ1MzUtOTIyZi04NWRl MzVhZDhkZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O6PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLhn2SMj+iUrPjsF3z3PRKSOktpL9q6HRyS8+tFVDiUgnqHVvY/vI0y cI7C7ma1CvzD6ZEYL01N9hyV+lCNMxYzL6mj+vleTc7YBa3AQgmkjD1q51TVmsRJ a/h2aCbLggkKCJvdpcRqQpwUrxzon1n61I4InwSYcSJIJsIGSVnqsvg9v95Yxu8h /EjGB8ONS/crXS8BfcDtr1MRLS0J8DZUcLK+IgYudx73W/ZRX5TXC0XTimch208S lJ5YVWC3ZSRGhmBH/ZrebePpc9ajEMs8NxYS5+JiZTKnMcKsQjxqSBCwzYsJmXER 6HSdQhT7iMN5auj94v9Y95W74cNCzow= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:29 2025 by rpki-client