$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/b89278a3-74c9-3ec5-a92f-44d3676f6324.roa File: b89278a3-74c9-3ec5-a92f-44d3676f6324.roa (raw, json) Hash identifier: Xub8GxkJjTCRBde7Fn7cR+JjVYkXjaKKv73ff0rK6Os= Subject key identifier: EF:DE:C3:75:9A:7C:60:A8:0A:1D:09:22:29:48:86:D8:DC:F6:34:AE Certificate issuer: /CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Certificate serial: 010D0C9F4328584827C52F3B80B28F9A48DA6700 Authority key identifier: 6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/b89278a3-74c9-3ec5-a92f-44d3676f6324.roa Signing time: Tue 10 Dec 2024 02:00:40 +0000 ROA not before: Tue 10 Dec 2024 02:00:40 +0000 ROA not after: Mon 10 Mar 2025 01:00:40 +0000 asID: 53991 IP address blocks: 216.245.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:27:c5:2f:3b:80:b2:8f:9a:48:da:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Validity Not Before: Dec 10 02:00:40 2024 GMT Not After : Mar 10 01:00:40 2025 GMT Subject: CN=688f0e78-d693-4553-bcfb-d2f7a735b132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a0:9f:87:d1:ba:70:3d:c5:4b:42:fe:75:4d: 4a:60:c0:a2:21:6f:b3:43:d4:cc:20:04:81:27:d0: 9b:dd:bd:33:0b:14:38:23:2d:7b:81:5d:e8:00:9a: ad:06:81:0c:43:4f:5b:30:e4:5c:5f:02:6a:63:ff: 55:d4:79:9b:e8:83:8b:c8:88:5a:f4:eb:89:98:7e: 26:21:44:68:c1:8d:f0:9d:44:f5:96:01:b0:1c:59: a5:4b:93:53:73:5c:75:7f:66:d0:1a:d5:e0:fb:96: 9f:22:e2:9b:24:f5:b5:57:d4:08:45:ab:a0:3e:70: 2e:ce:40:39:3a:e8:b0:3b:e3:45:f6:ee:7e:16:e1: 54:22:11:0b:ae:54:b4:95:ba:24:29:bd:d3:c4:f1: e1:23:76:09:62:c7:40:3c:57:8b:5b:4a:63:8e:8b: a7:6b:69:a3:0f:ee:ea:40:7d:9c:3e:80:3a:d4:e9: f8:98:1f:ea:0e:30:27:3f:b8:bc:c3:97:1f:60:2b: 74:79:4e:51:a8:0a:2f:7b:01:b0:c0:cd:e0:2f:e3: 4a:85:fc:db:9f:46:fa:29:02:25:54:29:ff:b1:00: 9f:3f:b1:0c:3b:f9:7d:65:97:43:bf:15:e2:34:a8: f6:9d:8a:50:fc:b7:16:ab:75:82:a0:59:ab:ac:a2: b5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DE:C3:75:9A:7C:60:A8:0A:1D:09:22:29:48:86:D8:DC:F6:34:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/b89278a3-74c9-3ec5-a92f-44d3676f6324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl X509v3 Authority Key Identifier: keyid:6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer sbgp-ipAddrBlock: critical IPv4: 216.245.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:70:6b:c5:14:ee:44:f2:8b:dd:db:6b:c6:a8:9b:cd:65:c6: 1b:be:08:4d:8a:be:a3:8e:3d:ca:53:83:98:c4:c1:e6:35:3e: 74:ac:e7:36:11:cb:99:5d:c4:05:21:1d:97:04:48:28:e7:7a: bc:f8:13:26:e2:77:02:a4:12:4d:87:11:0f:0e:41:d2:7a:14: 3b:d8:9f:06:0e:0c:d7:94:66:9b:d1:d7:c6:a6:00:fe:6f:6e: 1f:30:9e:31:d9:03:46:8d:b9:00:84:a6:fd:fa:45:ff:e8:1f: 03:5a:5d:9e:1a:f1:d1:ca:5f:a1:f2:07:e6:12:89:4d:59:a4: 67:7b:e8:9a:a3:de:3c:fa:18:ef:ec:96:c0:c1:47:41:f8:57: 03:b4:89:5c:19:12:c5:79:7a:8c:3f:63:6c:59:3c:a9:8e:99: cb:86:ff:51:66:4b:e5:c3:67:14:b6:3f:cf:36:7d:11:13:17: be:68:78:b1:7e:5f:5a:5a:da:d6:f8:3e:9e:be:ec:bb:9f:2d: 09:09:7a:fe:3b:9f:28:b3:39:d3:2b:f8:fa:b7:cf:42:79:5e: 60:d6:27:b2:53:f6:50:34:3a:ff:79:68:de:ec:ff:d3:d3:67: 88:00:f1:0c:ae:c0:ec:18:d6:6d:46:83:6e:16:de:9f:5d:79: 97:cb:c4:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgnxS87gLKPmkjaZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIyNjE3YzAtMDNmNC00YWQ3LTlkMTEtMzZiMmM2NDk2 YjdkMB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk Njg4ZjBlNzgtZDY5My00NTUzLWJjZmItZDJmN2E3MzViMTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6Cfh9G6cD3FS0L+dU1KYMCiIW+zQ9TMIASB J9Cb3b0zCxQ4Iy17gV3oAJqtBoEMQ09bMORcXwJqY/9V1Hmb6IOLyIha9OuJmH4m IURowY3wnUT1lgGwHFmlS5NTc1x1f2bQGtXg+5afIuKbJPW1V9QIRaugPnAuzkA5 OuiwO+NF9u5+FuFUIhELrlS0lbokKb3TxPHhI3YJYsdAPFeLW0pjjouna2mjD+7q QH2cPoA61On4mB/qDjAnP7i8w5cfYCt0eU5RqAovewGwwM3gL+NKhfzbn0b6KQIl VCn/sQCfP7EMO/l9ZZdDvxXiNKj2nYpQ/LcWq3WCoFmrrKK1JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/ew3WafGCoCh0JIilIhtjc9jSuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2 MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIyYzY0OTZiN2QvYjg5Mjc4YTMtNzRjOS0z ZWM1LWE5MmYtNDRkMzY3NmY2MzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGIyNjE3YzAtMDNmNC00YWQ3LTlk MTEtMzZiMmM2NDk2YjdkL2RiMjYxN2MwLTAzZjQtNGFkNy05ZDExLTM2YjJjNjQ5 NmI3ZC5jcmwwHwYDVR0jBBgwFoAUb4y8Y/4j18SoBgk6tbahaqOUWLswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIy YzY0OTZiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PWbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxwa8UU7kTyi93ba8aom81lxhu+CE2KvqOOPcpTg5jEweY1PnSs5zYR y5ldxAUhHZcESCjnerz4EybidwKkEk2HEQ8OQdJ6FDvYnwYODNeUZpvR18amAP5v bh8wnjHZA0aNuQCEpv36Rf/oHwNaXZ4a8dHKX6HyB+YSiU1ZpGd76Jqj3jz6GO/s lsDBR0H4VwO0iVwZEsV5eow/Y2xZPKmOmcuG/1FmS+XDZxS2P882fRETF75oeLF+ X1pa2tb4Pp6+7LufLQkJev47nyizOdMr+Pq3z0J5XmDWJ7JT9lA0Ov95aN7s/9PT Z4gA8QyuwOwY1m1Gg24W3p9deZfLxDQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:14 2025 by rpki-client