$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a104eebe-1440-46ec-8e49-7cb808ab3600/67679c3d-d4b3-3596-9478-58c3982b5449.roa File: 67679c3d-d4b3-3596-9478-58c3982b5449.roa (raw, json) Hash identifier: 1/+7YiYTP/n5NXJ1W9ASLpjlSgzXPWWIomVhlhOvgBQ= Subject key identifier: 49:D0:35:7E:08:3D:DE:B9:56:5F:7D:30:B7:78:49:FA:76:02:DE:CB Certificate issuer: /CN=a104eebe-1440-46ec-8e49-7cb808ab3600 Certificate serial: 010D0C9F432858483885477C739C6005A0906BC0 Authority key identifier: A8:83:F4:7E:F8:CD:D4:64:C2:FE:56:EE:40:F7:F5:31:6D:0A:95:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a104eebe-1440-46ec-8e49-7cb808ab3600.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a104eebe-1440-46ec-8e49-7cb808ab3600/67679c3d-d4b3-3596-9478-58c3982b5449.roa Signing time: Mon 16 Dec 2024 02:00:39 +0000 ROA not before: Mon 16 Dec 2024 02:00:39 +0000 ROA not after: Sun 16 Mar 2025 01:00:39 +0000 asID: 397257 IP address blocks: 23.174.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a104eebe-1440-46ec-8e49-7cb808ab3600/a104eebe-1440-46ec-8e49-7cb808ab3600.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a104eebe-1440-46ec-8e49-7cb808ab3600/a104eebe-1440-46ec-8e49-7cb808ab3600.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a104eebe-1440-46ec-8e49-7cb808ab3600.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:38:85:47:7c:73:9c:60:05:a0:90:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a104eebe-1440-46ec-8e49-7cb808ab3600 Validity Not Before: Dec 16 02:00:39 2024 GMT Not After : Mar 16 01:00:39 2025 GMT Subject: CN=8fb88251-e829-4852-ba1a-56f3fd455b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:aa:64:6b:7d:82:94:ea:ca:fd:77:88:ba:4d: f8:13:47:cd:82:e2:a8:f5:ab:06:da:18:c6:64:9c: 1e:8f:d3:c8:3d:09:01:cc:69:c4:d5:d5:3a:e7:b5: 19:26:fe:ee:79:d2:f7:94:f0:4d:ff:05:8d:80:60: 4f:9b:01:5f:fb:71:9a:c1:0f:79:73:9a:df:a9:cb: e3:ad:a4:93:b6:bd:7b:bd:2d:34:fe:ce:ac:29:83: 12:41:c2:c4:ff:32:19:40:89:be:96:7b:10:63:36: ac:07:6f:11:d8:01:55:b7:61:f2:1c:67:a8:7f:98: cf:25:68:b6:f3:10:29:75:67:9d:0a:b2:0c:14:44: 24:52:b0:d6:b5:16:0d:19:ff:df:0b:9b:c3:72:f2: 76:de:4f:54:2e:ea:bb:04:64:ad:80:9c:4c:4b:cd: d7:c3:34:91:58:b9:5e:36:08:06:17:e5:5c:a5:ff: aa:58:7d:17:2c:1a:78:f3:b3:a7:db:c1:a6:02:5e: 77:b4:0d:a9:a8:d9:9a:6d:86:ca:4a:22:8e:5c:bb: 4d:e2:02:8d:78:09:0e:c9:b2:38:70:bd:54:2f:2d: 8b:5c:ad:43:f7:af:72:c2:99:a6:44:96:37:83:82: 26:60:d3:9a:4f:78:1e:72:47:86:61:3b:cd:33:00: 1f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D0:35:7E:08:3D:DE:B9:56:5F:7D:30:B7:78:49:FA:76:02:DE:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a104eebe-1440-46ec-8e49-7cb808ab3600/67679c3d-d4b3-3596-9478-58c3982b5449.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a104eebe-1440-46ec-8e49-7cb808ab3600/a104eebe-1440-46ec-8e49-7cb808ab3600.crl X509v3 Authority Key Identifier: keyid:A8:83:F4:7E:F8:CD:D4:64:C2:FE:56:EE:40:F7:F5:31:6D:0A:95:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a104eebe-1440-46ec-8e49-7cb808ab3600.cer sbgp-ipAddrBlock: critical IPv4: 23.174.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:13:98:6a:c9:5f:11:9d:f3:6e:2b:84:7a:2a:8c:d8:e0:b9: cd:7a:f5:26:ec:99:0b:a5:fd:41:06:b0:4c:0f:6a:7e:51:2d: 5e:8f:03:15:c2:e3:27:76:5c:9b:89:59:49:72:b3:18:e4:04: 69:fd:b7:ea:17:1c:6b:23:7a:a9:e8:16:db:c3:73:c0:27:b3: 19:20:c4:03:fc:8c:37:22:cc:58:d0:2d:73:78:e9:65:e5:f9: 28:b8:c6:d0:28:f2:e6:3c:d8:5e:2c:9a:94:fa:49:fe:6e:ee: 2b:59:b6:72:f8:ae:82:38:0d:1f:9e:07:ab:d3:bf:5c:17:15: c3:36:a1:1b:cf:62:e7:18:c7:44:f0:b6:c9:8d:26:64:0c:2d: 5d:96:cd:3e:dd:a1:c9:24:03:8c:89:a2:6b:9e:90:66:2f:03: 13:27:a3:d6:55:d8:2d:a9:4a:9b:2c:b8:2f:0b:d2:92:5b:0a: 82:ee:6f:8d:68:1f:8e:6a:15:95:95:72:38:50:0f:48:7a:b1: 46:a2:5c:e1:28:d7:da:86:e1:08:e6:f9:79:f8:40:49:18:77: ec:8e:6b:ce:7a:38:76:15:21:af:70:c1:1e:94:4a:9d:cc:fa: 39:63:96:a2:16:aa:8c:24:cc:13:89:f7:e9:a0:96:c9:21:e1: f4:8c:d9:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg4hUd8c5xgBaCQa8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTEwNGVlYmUtMTQ0MC00NmVjLThlNDktN2NiODA4YWIz NjAwMB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk OGZiODgyNTEtZTgyOS00ODUyLWJhMWEtNTZmM2ZkNDU1YjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6pka32ClOrK/XeIuk34E0fNguKo9asG2hjG ZJwej9PIPQkBzGnE1dU657UZJv7uedL3lPBN/wWNgGBPmwFf+3GawQ95c5rfqcvj raSTtr17vS00/s6sKYMSQcLE/zIZQIm+lnsQYzasB28R2AFVt2HyHGeof5jPJWi2 8xApdWedCrIMFEQkUrDWtRYNGf/fC5vDcvJ23k9ULuq7BGStgJxMS83XwzSRWLle NggGF+Vcpf+qWH0XLBp487On28GmAl53tA2pqNmabYbKSiKOXLtN4gKNeAkOybI4 cL1ULy2LXK1D969ywpmmRJY3g4ImYNOaT3geckeGYTvNMwAfWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnQNX4IPd65Vl99MLd4Sfp2At7LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hMTA0 ZWViZS0xNDQwLTQ2ZWMtOGU0OS03Y2I4MDhhYjM2MDAvNjc2NzljM2QtZDRiMy0z NTk2LTk0NzgtNThjMzk4MmI1NDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTEwNGVlYmUtMTQ0MC00NmVjLThl NDktN2NiODA4YWIzNjAwL2ExMDRlZWJlLTE0NDAtNDZlYy04ZTQ5LTdjYjgwOGFi MzYwMC5jcmwwHwYDVR0jBBgwFoAUqIP0fvjN1GTC/lbuQPf1MW0Klc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hMTA0ZWViZS0xNDQwLTQ2ZWMtOGU0OS03Y2I4 MDhhYjM2MDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF66gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsTmGrJXxGd824rhHoqjNjguc169SbsmQul/UEGsEwPan5RLV6PAxXC 4yd2XJuJWUlysxjkBGn9t+oXHGsjeqnoFtvDc8AnsxkgxAP8jDcizFjQLXN46WXl +Si4xtAo8uY82F4smpT6Sf5u7itZtnL4roI4DR+eB6vTv1wXFcM2oRvPYucYx0Tw tsmNJmQMLV2WzT7dockkA4yJomuekGYvAxMno9ZV2C2pSpssuC8L0pJbCoLub41o H45qFZWVcjhQD0h6sUaiXOEo19qG4Qjm+Xn4QEkYd+yOa856OHYVIa9wwR6USp3M +jljlqIWqowkzBOJ9+mglskh4fSM2eM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:50 2025 by rpki-client