$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7f1ad145-2f41-341d-8595-a8d6dba4792b.roa File: 7f1ad145-2f41-341d-8595-a8d6dba4792b.roa (raw, json) Hash identifier: kF/hXxVgInxEFcb71v9Emw/GBjtirttdiEHEgb5BlFo= Subject key identifier: 12:8E:62:61:D8:56:EF:AC:19:2B:67:DA:DE:D6:E4:6A:E1:C0:8B:61 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F432858481C9A716BDDC937E860DC0E00 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7f1ad145-2f41-341d-8595-a8d6dba4792b.roa Signing time: Fri 06 Dec 2024 02:00:39 +0000 ROA not before: Fri 06 Dec 2024 02:00:39 +0000 ROA not after: Thu 06 Mar 2025 02:00:39 +0000 asID: 53508 IP address blocks: 24.244.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1c:9a:71:6b:dd:c9:37:e8:60:dc:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Dec 6 02:00:39 2024 GMT Not After : Mar 6 02:00:39 2025 GMT Subject: CN=3ae674b2-42e6-4c11-8ed1-36105d65344d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a7:ef:c7:30:1f:75:b0:bb:14:5c:f1:8f:81: 1c:6e:1f:d4:13:e0:0c:c3:ab:83:27:31:5e:82:0b: bc:01:33:0c:63:ab:e6:e4:ee:27:ec:48:84:b9:7f: 1a:7b:18:1f:90:6b:c6:e3:62:82:89:43:9d:20:17: 8c:94:3b:39:3b:17:36:2e:aa:bb:e4:5b:39:cc:ee: 62:51:6e:26:da:00:aa:5a:bc:c3:80:4f:d4:0e:10: 6e:c2:ff:ca:24:b0:8f:87:7e:08:7f:2d:9e:6a:03: 1f:7e:af:48:5d:47:67:ef:d8:60:54:fa:db:b5:43: 78:88:bc:a5:28:b9:50:b6:94:5f:30:28:6c:53:bf: c5:78:50:c4:e3:cf:53:01:5e:29:a0:c6:21:0b:be: 3a:5b:ea:2b:06:c6:9b:ff:fe:3b:97:f6:5e:41:ca: 1a:35:f8:4f:3e:e7:b4:76:49:1e:b2:dd:70:cc:95: a1:4d:d1:1f:03:35:9e:20:3e:f4:af:68:73:dd:cc: d0:7f:fc:2c:cd:ed:29:0b:ae:46:75:e8:79:e8:59: db:bb:3f:41:17:05:d5:4e:24:ec:ce:be:b0:6a:9b: e8:c4:1f:3d:bd:f5:55:72:90:03:2a:29:46:dc:e6: 36:1f:f8:ba:63:d5:45:83:d0:2b:4a:2a:b5:45:5a: db:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8E:62:61:D8:56:EF:AC:19:2B:67:DA:DE:D6:E4:6A:E1:C0:8B:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7f1ad145-2f41-341d-8595-a8d6dba4792b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 24.244.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:f1:cb:56:9a:da:c2:a7:01:30:13:cb:ef:81:7e:19:9c:71: aa:e5:fe:6f:c3:c3:15:3e:78:90:86:f6:81:b4:cf:68:b8:a6: 0b:f3:47:6f:5d:ed:e4:bb:5b:3b:76:31:a4:d2:ca:70:b4:06: 9f:a8:9f:16:d1:b0:33:bb:32:c9:02:43:23:6a:ae:4a:e4:33: 91:3b:70:6a:8b:5b:08:1e:28:9d:66:b1:e5:44:3b:73:f3:bc: dd:d6:67:85:02:ab:0b:5a:5d:47:2d:1c:3a:9c:18:ca:11:4e: e3:0c:31:50:00:8e:59:3a:22:6b:54:fd:29:96:98:eb:c6:1a: 52:d3:24:0e:df:19:6d:8c:ab:34:02:e0:e0:ea:45:85:0f:72: 95:5b:19:82:5a:7b:e5:66:71:a2:e2:7f:b9:a4:3e:b6:17:88: 3b:fc:69:07:6d:5a:04:94:0e:44:82:4a:10:bb:c9:02:b5:a9: 9d:84:65:b0:20:f8:72:c8:54:2c:35:86:5c:ad:98:a1:aa:a2: a2:ef:bb:f8:f0:1c:ef:f2:21:21:d6:ef:8a:76:6d:8b:fe:43: 67:d9:10:69:91:4f:59:62:ca:4e:c1:5d:39:0a:57:ff:4f:96: 48:e4:87:48:43:8c:09:63:77:8e:58:5d:4d:94:e1:14:fc:44: b2:dc:30:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgcmnFr3ck36GDcDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk M2FlNjc0YjItNDJlNi00YzExLThlZDEtMzYxMDVkNjUzNDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6fvxzAfdbC7FFzxj4Ecbh/UE+AMw6uDJzFe ggu8ATMMY6vm5O4n7EiEuX8aexgfkGvG42KCiUOdIBeMlDs5Oxc2Lqq75Fs5zO5i UW4m2gCqWrzDgE/UDhBuwv/KJLCPh34Ify2eagMffq9IXUdn79hgVPrbtUN4iLyl KLlQtpRfMChsU7/FeFDE489TAV4poMYhC746W+orBsab//47l/ZeQcoaNfhPPue0 dkkest1wzJWhTdEfAzWeID70r2hz3czQf/wsze0pC65Gdeh56Fnbuz9BFwXVTiTs zr6wapvoxB89vfVVcpADKilG3OY2H/i6Y9VFg9ArSiq1RVrbqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKOYmHYVu+sGStn2t7W5GrhwIthMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvN2YxYWQxNDUtMmY0MS0z NDFkLTg1OTUtYThkNmRiYTQ3OTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPRmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfxy1aa2sKnATATy++Bfhmccarl/m/DwxU+eJCG9oG0z2i4pgvzR29d 7eS7Wzt2MaTSynC0Bp+onxbRsDO7MskCQyNqrkrkM5E7cGqLWwgeKJ1mseVEO3Pz vN3WZ4UCqwtaXUctHDqcGMoRTuMMMVAAjlk6ImtU/SmWmOvGGlLTJA7fGW2MqzQC 4ODqRYUPcpVbGYJae+VmcaLif7mkPrYXiDv8aQdtWgSUDkSCShC7yQK1qZ2EZbAg +HLIVCw1hlytmKGqoqLvu/jwHO/yISHW74p2bYv+Q2fZEGmRT1liyk7BXTkKV/9P lkjkh0hDjAljd45YXU2U4RT8RLLcMK4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:16 2025 by rpki-client