$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/64bb8a2c-5255-37bb-83d3-a15c8a68a40b.roa File: 64bb8a2c-5255-37bb-83d3-a15c8a68a40b.roa (raw, json) Hash identifier: ZYetu7AmodoMvkRmxzHW1SFsW0+S8N3KhApx9N03pOE= Subject key identifier: 09:5F:03:47:10:81:6C:23:3D:03:30:6E:21:5A:43:EF:51:62:F6:1C Certificate issuer: /CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Certificate serial: 010D0C9F43285848B35B5C5176C35AECE18CCBC0 Authority key identifier: 8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/64bb8a2c-5255-37bb-83d3-a15c8a68a40b.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 20057 IP address blocks: 23.172.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:5c:51:76:c3:5a:ec:e1:8c:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=fcd2bfb0-dffb-4c2b-b1db-d293b9b85352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fd:5a:c7:e8:67:a8:16:fe:0e:16:fd:94:47: dd:c4:d4:29:72:f6:db:32:23:c1:66:07:69:12:b7: 8d:30:98:82:1b:2a:ec:ea:6c:36:0b:9b:ab:d7:57: 83:6b:27:b5:27:70:b9:34:72:02:d1:c8:8c:fe:58: e8:ae:48:17:07:10:59:8d:b9:75:8e:83:4a:d0:27: 02:e8:9a:12:cc:9e:20:e1:8a:d0:3d:71:f6:bf:e8: db:09:a9:78:df:02:05:53:36:0b:de:b1:2c:ac:58: fe:19:39:a5:b3:70:2d:a4:c7:fd:80:51:d4:e1:3d: 98:b4:8b:56:12:48:12:12:2b:0a:e1:a2:79:87:d7: c9:a7:9c:0a:a8:f3:9b:3a:c7:86:17:5b:f3:48:48: bd:bf:5d:c5:d8:1c:12:06:29:ef:41:8f:a2:c2:56: 58:4d:61:c3:ff:00:d5:08:61:50:b3:5b:af:c1:43: 2e:3f:1e:39:42:4d:4e:81:59:e4:5c:f1:15:b9:49: ea:a2:f3:bd:c7:36:88:3f:d3:02:ad:dc:15:d3:c1: b0:57:db:74:b2:50:01:c8:76:9f:4b:91:23:94:6d: b6:2c:d3:4b:51:f3:c3:1d:f5:a4:4a:1a:ac:ba:a6: c5:95:63:00:09:56:bb:77:79:2c:ee:b2:fe:f8:a2: de:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5F:03:47:10:81:6C:23:3D:03:30:6E:21:5A:43:EF:51:62:F6:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/64bb8a2c-5255-37bb-83d3-a15c8a68a40b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl X509v3 Authority Key Identifier: keyid:8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer sbgp-ipAddrBlock: critical IPv4: 23.172.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:34:29:43:21:a0:95:91:42:65:2e:1e:61:6f:c5:79:76:1b: 25:71:c4:e1:86:a7:2f:b1:0a:dc:e2:c3:cd:c7:83:95:79:7c: 45:ef:e0:87:60:33:75:5a:23:1c:5e:4c:6a:e9:54:15:70:c8: 50:ac:39:22:ee:d9:2f:f2:4c:a9:de:5a:24:c9:e6:2c:04:4a: 56:6a:42:cf:40:79:06:12:e1:1c:dd:41:30:92:03:b5:6c:84: e8:7c:f2:e8:e4:9a:1c:0b:70:eb:e6:70:7d:96:53:1a:b1:cd: 8c:43:96:33:37:40:31:35:76:92:f1:0c:62:01:be:f8:b1:ff: ba:d6:59:0b:a3:0d:49:51:f4:53:03:0d:c6:49:26:a9:2b:36: 8f:9a:b3:9e:f1:7e:f2:28:89:86:41:0a:1c:99:27:42:ac:c0: 91:8c:86:1d:e9:9b:38:84:f0:f2:c9:df:b0:fd:c0:43:4d:8e: 3e:0e:4a:cb:1b:ba:24:62:f4:92:57:55:f0:2f:22:e9:25:63: 3f:3c:0e:a0:1b:63:d9:b2:4c:1c:12:fb:cc:6d:0b:7c:94:bb: 71:31:c7:59:24:a2:ba:75:63:84:79:67:96:86:5c:c6:a8:44: 55:da:6e:d3:25:0d:59:90:91:2f:df:cf:e1:db:ba:68:91:dc: 40:90:c4:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW1xRdsNa7OGMy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMzYmI3ZTQtYzk3ZS00M2FiLWE2ZGQtY2JmMGU2NDM0 YzViMB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk ZmNkMmJmYjAtZGZmYi00YzJiLWIxZGItZDI5M2I5Yjg1MzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/1ax+hnqBb+Dhb9lEfdxNQpcvbbMiPBZgdp EreNMJiCGyrs6mw2C5ur11eDaye1J3C5NHIC0ciM/ljorkgXBxBZjbl1joNK0CcC 6JoSzJ4g4YrQPXH2v+jbCal43wIFUzYL3rEsrFj+GTmls3AtpMf9gFHU4T2YtItW EkgSEisK4aJ5h9fJp5wKqPObOseGF1vzSEi9v13F2BwSBinvQY+iwlZYTWHD/wDV CGFQs1uvwUMuPx45Qk1OgVnkXPEVuUnqovO9xzaIP9MCrdwV08GwV9t0slAByHaf S5EjlG22LNNLUfPDHfWkShqsuqbFlWMACVa7d3ks7rL++KLehwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlfA0cQgWwjPQMwbiFaQ+9RYvYcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80YzNi YjdlNC1jOTdlLTQzYWItYTZkZC1jYmYwZTY0MzRjNWIvNjRiYjhhMmMtNTI1NS0z N2JiLTgzZDMtYTE1YzhhNjhhNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGMzYmI3ZTQtYzk3ZS00M2FiLWE2 ZGQtY2JmMGU2NDM0YzViLzRjM2JiN2U0LWM5N2UtNDNhYi1hNmRkLWNiZjBlNjQz NGM1Yi5jcmwwHwYDVR0jBBgwFoAUjXaDMJHnSwSEQ/fEjyRQUNGYlvQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80YzNiYjdlNC1jOTdlLTQzYWItYTZkZC1jYmYw ZTY0MzRjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6zZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGw0KUMhoJWRQmUuHmFvxXl2GyVxxOGGpy+xCtziw83Hg5V5fEXv4Idg M3VaIxxeTGrpVBVwyFCsOSLu2S/yTKneWiTJ5iwESlZqQs9AeQYS4RzdQTCSA7Vs hOh88ujkmhwLcOvmcH2WUxqxzYxDljM3QDE1dpLxDGIBvvix/7rWWQujDUlR9FMD DcZJJqkrNo+as57xfvIoiYZBChyZJ0KswJGMhh3pmziE8PLJ37D9wENNjj4OSssb uiRi9JJXVfAvIuklYz88DqAbY9myTBwS+8xtC3yUu3Exx1kkorp1Y4R5Z5aGXMao RFXabtMlDVmQkS/fz+HbumiR3ECQxFA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:29 2025 by rpki-client