$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2afed25b-a61d-3cc4-9fae-308ffa589871.roa File: 2afed25b-a61d-3cc4-9fae-308ffa589871.roa (raw, json) Hash identifier: KmCCYAj8W1ylUptUwJWFHe8Gq8kd5t6VHQogbV3/Myo= Subject key identifier: B4:90:FC:C1:FB:02:02:E9:48:DC:E6:47:43:1D:AC:A8:86:FF:5E:31 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F432858481C9A6E80443C7B9142FDDE28 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2afed25b-a61d-3cc4-9fae-308ffa589871.roa Signing time: Fri 06 Dec 2024 02:00:39 +0000 ROA not before: Fri 06 Dec 2024 02:00:39 +0000 ROA not after: Thu 06 Mar 2025 02:00:39 +0000 asID: 53508 IP address blocks: 142.79.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1c:9a:6e:80:44:3c:7b:91:42:fd:de:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Dec 6 02:00:39 2024 GMT Not After : Mar 6 02:00:39 2025 GMT Subject: CN=5bddc25b-5956-4d17-af16-7a7c520c3bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ba:6b:8f:af:64:1b:a1:45:39:b5:b5:8e:8b: 40:96:ce:4a:ab:df:c5:0c:d9:93:c6:4c:18:95:1f: 63:6f:98:df:8f:94:60:a5:0d:4c:2c:fa:e7:2a:10: 96:3e:1a:6c:ea:15:7d:8d:df:0c:ef:92:02:90:fc: 48:b2:fc:a1:fa:cd:07:53:15:4e:9a:24:f9:99:50: 1e:ee:83:90:ca:c4:71:bd:fd:26:07:b6:00:8f:e4: 17:ca:1d:96:80:a0:6c:92:c7:c1:37:b7:4f:87:e1: 81:b3:6c:f3:1a:c6:0b:55:d9:e1:19:ad:35:06:ec: fb:51:49:1b:a0:31:04:40:9b:21:15:86:d3:8a:7f: 49:3b:06:f5:0b:c4:33:cb:21:7b:bb:d4:64:30:fe: f9:64:bf:b3:f5:9d:8b:59:50:fe:9b:ba:2b:cb:79: 66:de:74:fe:5e:55:3a:1e:78:ce:ad:01:ce:95:ee: ec:18:9e:58:aa:60:ca:f5:77:f8:2b:54:33:1e:39: e9:d8:7d:f0:d9:d4:fb:0d:f9:f6:79:a7:9c:cf:aa: 23:e2:12:e4:3a:19:df:1f:0f:54:03:05:66:0b:b1: a3:16:70:a4:89:ed:96:e1:24:bd:ff:17:2a:37:a4: 45:a3:eb:8e:70:f0:67:70:31:33:33:35:31:f7:84: 2d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:90:FC:C1:FB:02:02:E9:48:DC:E6:47:43:1D:AC:A8:86:FF:5E:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2afed25b-a61d-3cc4-9fae-308ffa589871.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 142.79.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:86:d7:70:3c:e8:18:12:9a:3d:83:64:27:b2:16:a4:a6:ff: 57:fc:1a:b1:8f:fb:60:8f:8b:92:36:f1:95:7a:f1:80:15:b3: 5f:5e:d3:05:5a:ee:94:06:f6:89:d0:c2:46:fe:b6:02:40:13: 4a:dc:66:a5:53:e0:ed:00:c5:fe:c8:c3:d6:33:72:31:a9:0a: d8:e1:65:dd:e2:fb:da:3b:5e:40:6c:17:ca:7e:43:39:40:21: 00:7f:83:5a:b6:ca:dd:bc:af:13:56:83:da:28:77:f3:ce:f9: 84:6e:22:e6:cf:51:38:d2:d7:99:39:98:af:02:63:79:a9:9c: 6e:34:2f:f4:c6:4c:2b:2e:61:aa:e2:18:90:0a:00:42:97:11: 69:bc:1b:ee:8a:7e:93:75:9f:84:25:0b:d8:12:27:ef:17:ab: a8:39:ba:b4:8f:9b:f9:5e:44:2e:a9:4f:a3:b6:a8:9f:93:22: 72:80:9d:c8:eb:4f:dc:b1:e7:89:5e:39:be:a3:4f:f4:46:03: 57:aa:1d:0f:f3:98:3c:52:6a:c4:fe:95:ff:a3:04:7d:bb:ab: d0:2a:06:d6:b7:28:f5:b8:67:2a:15:86:9a:e0:6d:36:05:2f: 0f:22:a6:86:4c:d7:1d:6b:80:07:bd:99:d7:79:fe:b4:89:ef: e6:62:35:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgcmm6ARDx7kUL93igwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk NWJkZGMyNWItNTk1Ni00ZDE3LWFmMTYtN2E3YzUyMGMzYmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbprj69kG6FFObW1jotAls5Kq9/FDNmTxkwY lR9jb5jfj5RgpQ1MLPrnKhCWPhps6hV9jd8M75ICkPxIsvyh+s0HUxVOmiT5mVAe 7oOQysRxvf0mB7YAj+QXyh2WgKBsksfBN7dPh+GBs2zzGsYLVdnhGa01Buz7UUkb oDEEQJshFYbTin9JOwb1C8QzyyF7u9RkMP75ZL+z9Z2LWVD+m7ory3lm3nT+XlU6 HnjOrQHOle7sGJ5YqmDK9Xf4K1QzHjnp2H3w2dT7Dfn2eaecz6oj4hLkOhnfHw9U AwVmC7GjFnCkie2W4SS9/xcqN6RFo+uOcPBncDEzMzUx94QtSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSQ/MH7AgLpSNzmR0MdrKiG/14xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMmFmZWQyNWItYTYxZC0z Y2M0LTlmYWUtMzA4ZmZhNTg5ODcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjk9oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCG13A86BgSmj2DZCeyFqSm/1f8GrGP+2CPi5I28ZV68YAVs19e0wVa 7pQG9onQwkb+tgJAE0rcZqVT4O0Axf7Iw9YzcjGpCtjhZd3i+9o7XkBsF8p+QzlA IQB/g1q2yt28rxNWg9ood/PO+YRuIubPUTjS15k5mK8CY3mpnG40L/TGTCsuYari GJAKAEKXEWm8G+6KfpN1n4QlC9gSJ+8Xq6g5urSPm/leRC6pT6O2qJ+TInKAncjr T9yx54leOb6jT/RGA1eqHQ/zmDxSasT+lf+jBH27q9AqBta3KPW4ZyoVhprgbTYF Lw8ipoZM1x1rgAe9mdd5/rSJ7+ZiNRE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:01 2025 by rpki-client