$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/085d01ba-b69e-30ae-a421-c117de494284.roa File: 085d01ba-b69e-30ae-a421-c117de494284.roa (raw, json) Hash identifier: cI0s/FbI6ichDgQ11WJyBbC+mplwdV0s62g0fPOlLGk= Subject key identifier: 1C:A4:8E:88:E8:70:16:F0:4E:D1:CA:4C:4C:62:C3:95:6E:1B:2E:E9 Certificate issuer: /CN=fff22b91-ff6b-40b0-b626-033566818ca6 Certificate serial: 010D0C9F432858485CD02C540B35046BC0773F80 Authority key identifier: B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/085d01ba-b69e-30ae-a421-c117de494284.roa Signing time: Sun 29 Dec 2024 02:00:39 +0000 ROA not before: Sun 29 Dec 2024 02:00:39 +0000 ROA not after: Sat 29 Mar 2025 01:00:39 +0000 asID: 16823 IP address blocks: 23.252.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5c:d0:2c:54:0b:35:04:6b:c0:77:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fff22b91-ff6b-40b0-b626-033566818ca6 Validity Not Before: Dec 29 02:00:39 2024 GMT Not After : Mar 29 01:00:39 2025 GMT Subject: CN=7a3d7750-d623-4431-b6bf-ca4729ccb060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:61:cf:8e:65:a0:01:c0:1d:e7:eb:48:3b:36: 14:64:5e:fc:c6:c8:18:bd:ff:81:45:a5:58:bd:68: e7:06:ed:8e:cb:18:ad:57:a7:fb:60:19:7d:26:d0: ee:7f:d5:49:53:50:82:68:41:c6:d0:8c:fe:1e:74: 25:bf:bb:7c:19:5b:49:cb:be:5c:4a:89:29:ea:ac: b4:8b:a2:05:bb:76:30:6e:f3:65:6e:2a:e6:43:17: 1e:6c:e2:ee:46:b6:18:16:86:24:24:3a:d0:0f:c0: bf:31:dd:6b:a7:5a:fa:e6:0e:c9:91:cd:41:61:9b: 5d:58:4e:46:4a:18:e3:e1:94:d8:db:a1:28:db:d6: 78:a3:0d:5b:2f:18:37:ae:9c:3f:5d:72:95:2a:da: f6:cf:cb:3d:ba:d1:60:00:c9:c7:14:e3:7d:74:08: 30:32:be:b4:3a:5a:92:7a:a9:d1:a3:59:e4:dd:f0: 8c:11:25:24:69:10:1a:17:87:82:6d:e2:25:f9:37: af:1e:de:84:f7:d5:4f:6e:9c:6c:49:2b:50:f8:26: 46:52:7a:cf:ca:07:19:c7:a0:3f:cf:58:e0:81:4e: 3c:08:dd:3f:00:61:4a:d4:a1:39:0b:d9:f4:bd:5f: 49:04:80:b2:77:2f:4c:50:15:23:51:88:9b:7d:83: 92:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A4:8E:88:E8:70:16:F0:4E:D1:CA:4C:4C:62:C3:95:6E:1B:2E:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/085d01ba-b69e-30ae-a421-c117de494284.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl X509v3 Authority Key Identifier: keyid:B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer sbgp-ipAddrBlock: critical IPv4: 23.252.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:9a:59:88:1e:c6:d2:7c:36:f4:a9:8c:72:a0:f2:bf:37:b4: 9d:74:6c:59:8e:f7:47:62:c6:f6:07:77:e9:40:6c:eb:46:68: 22:e9:6a:ed:3f:1c:be:e6:c2:9a:53:b2:79:6f:03:32:f7:4f: 5e:b8:68:fb:3c:2a:e4:a7:cf:84:f6:e1:c0:32:b6:64:bc:c8: d9:49:7f:9f:bc:6e:b1:35:44:29:7c:49:4b:9a:3c:37:b9:5e: f6:4a:02:a5:d3:1c:61:c2:14:4b:76:49:b9:33:a7:30:5d:e8: 1b:94:9d:4b:54:8a:3d:c6:29:94:2c:c6:1f:af:ca:cb:2f:6f: 09:f1:9d:20:79:8b:72:dc:13:11:e6:2a:9d:21:8e:85:e3:01: 8b:8d:39:e0:9d:f7:32:08:fe:43:71:fc:36:a6:11:40:94:76: c7:06:21:83:6e:67:8e:a1:9c:4b:e1:a0:39:d3:52:58:cd:33: 4f:e6:57:39:93:16:58:63:b6:7c:96:71:a4:6a:cc:ef:c1:28: 69:a6:08:34:74:51:38:0c:f8:a7:51:f2:30:8d:9a:da:d1:cd: 86:58:76:88:09:c9:3b:26:60:68:3d:d5:21:bb:9c:a8:d3:f8: 58:7f:99:8d:39:a7:b4:fb:d2:01:bc:3e:65:55:d9:bb:16:96: ea:e7:c3:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhc0CxUCzUEa8B3P4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZmMjJiOTEtZmY2Yi00MGIwLWI2MjYtMDMzNTY2ODE4 Y2E2MB4XDTI0MTIyOTAyMDAzOVoXDTI1MDMyOTAxMDAzOVowLzEtMCsGA1UEAxMk N2EzZDc3NTAtZDYyMy00NDMxLWI2YmYtY2E0NzI5Y2NiMDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmHPjmWgAcAd5+tIOzYUZF78xsgYvf+BRaVY vWjnBu2OyxitV6f7YBl9JtDuf9VJU1CCaEHG0Iz+HnQlv7t8GVtJy75cSokp6qy0 i6IFu3YwbvNlbirmQxcebOLuRrYYFoYkJDrQD8C/Md1rp1r65g7Jkc1BYZtdWE5G Shjj4ZTY26Eo29Z4ow1bLxg3rpw/XXKVKtr2z8s9utFgAMnHFON9dAgwMr60OlqS eqnRo1nk3fCMESUkaRAaF4eCbeIl+TevHt6E99VPbpxsSStQ+CZGUnrPygcZx6A/ z1jggU48CN0/AGFK1KE5C9n0vV9JBICydy9MUBUjUYibfYOSMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBykjojocBbwTtHKTExiw5VuGy7pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYy MmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1NjY4MThjYTYvMDg1ZDAxYmEtYjY5ZS0z MGFlLWE0MjEtYzExN2RlNDk0Mjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmZmMjJiOTEtZmY2Yi00MGIwLWI2 MjYtMDMzNTY2ODE4Y2E2L2ZmZjIyYjkxLWZmNmItNDBiMC1iNjI2LTAzMzU2Njgx OGNhNi5jcmwwHwYDVR0jBBgwFoAUs2wgdxWP2FoP8heKC0ORLS4Spx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYyMmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1 NjY4MThjYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqaWYgextJ8NvSpjHKg8r83tJ10bFmO90dixvYHd+lAbOtGaCLpau0/ HL7mwppTsnlvAzL3T164aPs8KuSnz4T24cAytmS8yNlJf5+8brE1RCl8SUuaPDe5 XvZKAqXTHGHCFEt2SbkzpzBd6BuUnUtUij3GKZQsxh+vyssvbwnxnSB5i3LcExHm Kp0hjoXjAYuNOeCd9zII/kNx/DamEUCUdscGIYNuZ46hnEvhoDnTUljNM0/mVzmT FlhjtnyWcaRqzO/BKGmmCDR0UTgM+KdR8jCNmtrRzYZYdogJyTsmYGg91SG7nKjT +Fh/mY05p7T70gG8PmVV2bsWlurnw5M= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:58 2025 by rpki-client