$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/c024bbee-23b7-32a0-a732-a4c7c0a2b58c.roa File: c024bbee-23b7-32a0-a732-a4c7c0a2b58c.roa (raw, json) Hash identifier: B6rqKhs0GRMEg7A8MLwwrrfgHCAfpExoQM4QnyY8z1M= Subject key identifier: E7:75:FB:90:48:D3:FC:57:D5:B3:A1:B3:E0:D7:DC:E1:D5:E6:BD:FD Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F432858482BF55EFC7C5A87433FA11940 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/c024bbee-23b7-32a0-a732-a4c7c0a2b58c.roa Signing time: Wed 11 Dec 2024 14:01:02 +0000 ROA not before: Wed 11 Dec 2024 14:01:02 +0000 ROA not after: Tue 11 Mar 2025 13:01:02 +0000 asID: 54852 IP address blocks: 68.168.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2b:f5:5e:fc:7c:5a:87:43:3f:a1:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Dec 11 14:01:02 2024 GMT Not After : Mar 11 13:01:02 2025 GMT Subject: CN=7ed2a701-2531-4def-9edc-df317e53d864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c4:25:47:b8:4a:f9:d5:61:72:d8:71:06:16: bb:ef:1e:50:50:12:99:31:35:ea:a5:b4:2f:f7:8c: 14:68:b6:93:fe:0b:7c:01:8b:71:49:85:30:5e:e2: 71:30:ed:30:a4:d5:8d:e2:87:53:ab:5a:18:ad:0c: 34:3c:d9:10:d9:b3:60:80:22:6c:c7:75:c0:54:ab: 41:80:38:c5:01:b0:31:27:39:f3:9c:15:11:33:69: 7b:24:ee:0b:f4:40:04:d9:ef:1a:15:0b:70:b3:06: 5c:64:92:f5:13:e0:20:2b:87:2c:3a:b9:e5:97:c8: aa:2a:24:d1:b3:b9:de:5a:80:67:43:26:ab:4d:d3: 69:4e:d3:5e:f5:08:bc:6b:e2:b0:1e:04:18:ee:f4: a6:99:da:ce:e6:91:ea:37:38:ad:c8:85:00:01:75: de:13:f6:8d:f7:3a:ec:0a:12:b0:b0:47:e0:93:c6: cc:c3:30:bb:16:6e:b9:bb:a1:d2:89:d2:a6:ab:3e: 38:de:40:8b:ef:bd:13:7a:0d:72:cb:d2:23:aa:db: ae:7e:0b:16:f0:c2:6a:9e:e2:8a:61:b2:71:6a:68: ad:40:a9:87:24:84:00:b2:2d:7d:1f:c0:0c:41:12: 80:e4:39:b4:e4:8a:c0:a2:89:39:0e:82:25:e3:73: b0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:75:FB:90:48:D3:FC:57:D5:B3:A1:B3:E0:D7:DC:E1:D5:E6:BD:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/c024bbee-23b7-32a0-a732-a4c7c0a2b58c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 68.168.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:57:c2:bb:90:a8:9e:3b:ed:37:6d:b3:31:dd:3a:78:90:2b: b6:04:3b:a0:1e:9a:73:e5:91:8d:6d:1a:a5:98:4c:bc:46:3f: aa:82:b1:9e:4e:fa:db:c1:7b:2a:f9:1e:7c:69:83:aa:a6:19: 35:69:70:1c:64:09:80:4d:7b:4f:8e:91:5d:bb:ca:61:64:e5: 31:cd:9c:a7:ab:33:03:b7:9e:65:ce:c4:ec:1a:be:36:d9:8e: bc:af:8f:78:74:19:94:dc:92:f5:ec:92:da:97:f4:60:35:01: 82:a6:9a:63:57:14:75:84:8c:e4:14:43:00:07:72:b6:5f:79: a7:c2:d0:bf:47:7d:f4:07:17:31:6a:ea:c4:4d:21:cd:42:55: ba:c9:fa:b8:6c:83:58:3a:95:82:d9:7b:e6:f0:b4:06:77:70: 88:29:2e:b7:d8:0e:e4:a2:63:b0:2b:4b:04:bc:cb:ce:a9:46: 8a:3f:2d:18:9b:a1:32:c6:06:c2:cb:2c:0b:a1:c4:53:b7:d5: d5:71:02:1e:08:ee:a5:6e:26:aa:f9:79:ac:8d:8a:1b:68:57: 72:2b:6e:95:ca:7f:42:fb:aa:e8:bb:2d:da:d3:25:d8:d1:2b: 85:54:c9:7b:b3:07:3e:d3:f6:e0:d7:e0:5b:18:bb:9f:ee:1f: 5a:4f:be:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgr9V78fFqHQz+hGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI0MTIxMTE0MDEwMloXDTI1MDMxMTEzMDEwMlowLzEtMCsGA1UEAxMk N2VkMmE3MDEtMjUzMS00ZGVmLTllZGMtZGYzMTdlNTNkODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsQlR7hK+dVhcthxBha77x5QUBKZMTXqpbQv 94wUaLaT/gt8AYtxSYUwXuJxMO0wpNWN4odTq1oYrQw0PNkQ2bNggCJsx3XAVKtB gDjFAbAxJznznBURM2l7JO4L9EAE2e8aFQtwswZcZJL1E+AgK4csOrnll8iqKiTR s7neWoBnQyarTdNpTtNe9Qi8a+KwHgQY7vSmmdrO5pHqNzityIUAAXXeE/aN9zrs ChKwsEfgk8bMwzC7Fm65u6HSidKmqz443kCL770Teg1yy9IjqtuufgsW8MJqnuKK YbJxamitQKmHJIQAsi19H8AMQRKA5Dm05IrAook5DoIl43OwWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOd1+5BI0/xX1bOhs+DX3OHV5r39MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvYzAyNGJiZWUtMjNiNy0z MmEwLWE3MzItYTRjN2MwYTJiNThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKgXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNXwruQqJ477TdtszHdOniQK7YEO6AemnPlkY1tGqWYTLxGP6qCsZ5O +tvBeyr5Hnxpg6qmGTVpcBxkCYBNe0+OkV27ymFk5THNnKerMwO3nmXOxOwavjbZ jryvj3h0GZTckvXsktqX9GA1AYKmmmNXFHWEjOQUQwAHcrZfeafC0L9HffQHFzFq 6sRNIc1CVbrJ+rhsg1g6lYLZe+bwtAZ3cIgpLrfYDuSiY7ArSwS8y86pRoo/LRib oTLGBsLLLAuhxFO31dVxAh4I7qVuJqr5eayNihtoV3IrbpXKf0L7qui7LdrTJdjR K4VUyXuzBz7T9uDX4FsYu5/uH1pPvrw= -----END CERTIFICATE-----Generated at Wed Feb 19 20:39:35 2025 by rpki-client