$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/27495369-f50d-3ffe-af45-6c407307205a.roa File: 27495369-f50d-3ffe-af45-6c407307205a.roa (raw, json) Hash identifier: bXNCQKwsixyWv+WM2MlI9dsnVbZYqC9NnrDB6Im1Mh4= Subject key identifier: F6:7E:01:5A:0F:3B:51:74:48:96:C4:A4:C3:61:B0:DB:70:E5:83:F8 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584837B04515B96732A8A5EE6F80 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/27495369-f50d-3ffe-af45-6c407307205a.roa Signing time: Sun 15 Dec 2024 18:51:30 +0000 ROA not before: Sun 15 Dec 2024 18:51:30 +0000 ROA not after: Sat 15 Mar 2025 17:51:30 +0000 asID: 63023 IP address blocks: 68.168.29.0/24 maxlen: 24 186.190.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:37:b0:45:15:b9:67:32:a8:a5:ee:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Dec 15 18:51:30 2024 GMT Not After : Mar 15 17:51:30 2025 GMT Subject: CN=d3befe26-a935-43df-aa39-d0bb1846ebdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:48:d4:6f:7b:ee:63:f6:a1:bc:d2:c9:16:71: 8b:3c:eb:75:ba:14:95:7e:f0:8d:36:15:8c:f6:8e: 66:a1:2a:5a:6c:12:cb:0b:df:3a:a8:25:e1:12:92: 6c:31:cf:90:5f:bc:c4:87:44:64:24:99:63:5a:86: cb:c1:e3:63:9f:b1:83:0d:58:ed:8b:f6:a6:a2:cb: e6:cf:4e:d8:c1:c9:f0:2a:f1:84:60:f5:f7:69:fd: ec:41:d0:9d:e9:68:d2:2b:81:f4:b9:3e:03:18:9a: a0:14:6a:bf:dd:cc:00:b2:d6:b6:10:ce:c9:b9:21: bf:2f:84:78:43:c6:4a:86:c4:a0:9d:fb:e4:43:e8: 2b:6a:57:09:a1:71:3b:8f:c7:9e:e4:b3:5b:68:0f: d9:d6:9b:4a:17:54:fb:10:74:4a:0f:36:ee:22:c1: 96:7e:84:2b:c4:6d:a7:e2:f0:6e:b5:cb:21:60:4e: 21:5d:9d:fb:b2:80:5c:12:56:7d:d7:d6:ee:cc:b9: 35:5c:20:15:28:98:9f:76:5d:cb:29:e8:e8:3f:42: 8a:2a:96:b6:3d:a2:c3:57:5e:39:1b:82:3c:96:a4: e5:81:9a:9f:68:b0:c0:c3:47:d3:10:e3:49:1f:67: 55:d6:ba:0b:67:40:3f:9e:bc:81:9d:25:14:f9:71: e4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:7E:01:5A:0F:3B:51:74:48:96:C4:A4:C3:61:B0:DB:70:E5:83:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/27495369-f50d-3ffe-af45-6c407307205a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 68.168.29.0/24 186.190.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:aa:70:9c:c9:d3:d4:19:eb:68:b1:bc:77:17:f2:07:e8:c2: 28:96:a7:ff:9e:16:b9:94:cd:00:5b:29:4a:68:71:16:ed:7b: 63:09:ab:50:ce:ff:57:e6:ff:47:bd:1c:cc:f9:c6:26:94:d6: 2f:26:2c:9f:53:3b:e4:11:ca:ae:1e:53:8b:3c:46:39:f3:12: b1:09:57:da:38:83:ff:cf:81:d5:e3:ef:7b:ae:3e:81:9c:50: bf:aa:49:c8:e0:aa:25:34:37:a5:f6:5e:de:04:f6:a3:4c:b2: 1a:0d:a9:13:17:fb:8d:fb:30:eb:2f:51:5d:6c:72:02:9b:07: 8f:b4:91:e3:a7:64:7b:fe:ec:f2:08:9b:4d:fc:db:08:47:b5: 6d:13:4c:2e:34:32:a6:ff:7d:7f:3f:3f:fe:ff:cd:56:7a:25: a7:dc:db:0d:91:82:bc:b6:40:52:a8:3e:2e:56:42:43:c0:bb: 02:b5:57:bc:c2:d9:59:3e:df:9e:61:0f:29:1a:87:4f:47:ce: 64:d1:2c:7a:af:16:bb:5c:bc:7a:3b:a4:52:0c:f1:a5:1f:98: d4:89:fd:50:fe:aa:ed:5e:36:6d:f1:0b:4b:b5:63:7c:59:af: 73:4b:d0:f8:a2:ee:ce:6d:61:b4:26:57:e7:1e:eb:d6:8c:13: c6:27:61:a4 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEg3sEUVuWcyqKXub4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI0MTIxNTE4NTEzMFoXDTI1MDMxNTE3NTEzMFowLzEtMCsGA1UEAxMk ZDNiZWZlMjYtYTkzNS00M2RmLWFhMzktZDBiYjE4NDZlYmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUjUb3vuY/ahvNLJFnGLPOt1uhSVfvCNNhWM 9o5moSpabBLLC986qCXhEpJsMc+QX7zEh0RkJJljWobLweNjn7GDDVjti/amosvm z07YwcnwKvGEYPX3af3sQdCd6WjSK4H0uT4DGJqgFGq/3cwAsta2EM7JuSG/L4R4 Q8ZKhsSgnfvkQ+gralcJoXE7j8ee5LNbaA/Z1ptKF1T7EHRKDzbuIsGWfoQrxG2n 4vButcshYE4hXZ37soBcElZ919buzLk1XCAVKJifdl3LKejoP0KKKpa2PaLDV145 G4I8lqTlgZqfaLDAw0fTEONJH2dV1roLZ0A/nryBnSUU+XHktwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPZ+AVoPO1F0SJbEpMNhsNtw5YP4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvMjc0OTUzNjktZjUwZC0z ZmZlLWFmNDUtNmM0MDczMDcyMDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQARKgdAwQA ur7VMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJ+qcJzJ09QZ62ixvHcX8gfowiiWp/+eFrmUzQBbKUpocRbt e2MJq1DO/1fm/0e9HMz5xiaU1i8mLJ9TO+QRyq4eU4s8RjnzErEJV9o4g//PgdXj 73uuPoGcUL+qScjgqiU0N6X2Xt4E9qNMshoNqRMX+437MOsvUV1scgKbB4+0keOn ZHv+7PIIm0382whHtW0TTC40Mqb/fX8/P/7/zVZ6Jafc2w2Rgry2QFKoPi5WQkPA uwK1V7zC2Vk+355hDykah09HzmTRLHqvFrtcvHo7pFIM8aUfmNSJ/VD+qu1eNm3x C0u1Y3xZr3NL0Pii7s5tYbQmV+ce69aME8YnYaQ= -----END CERTIFICATE-----Generated at Wed Feb 19 20:42:04 2025 by rpki-client