$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/a49b889f-76a4-3203-9129-fe4a745eeb7c.roa File: a49b889f-76a4-3203-9129-fe4a745eeb7c.roa (raw, json) Hash identifier: OzoNcV8drw0hHxjefCr1hpq4GEczvJ750GCm9EdGz64= Subject key identifier: B6:E5:11:45:E3:95:CB:BE:D1:60:EA:B7:2A:26:D9:4A:CC:A0:6E:7A Certificate issuer: /CN=fff22b91-ff6b-40b0-b626-033566818ca6 Certificate serial: 010D0C9F432858485CD02CC5DBFEAA645A0C7280 Authority key identifier: B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/a49b889f-76a4-3203-9129-fe4a745eeb7c.roa Signing time: Sun 29 Dec 2024 02:00:39 +0000 ROA not before: Sun 29 Dec 2024 02:00:39 +0000 ROA not after: Sat 29 Mar 2025 01:00:39 +0000 asID: 19905 IP address blocks: 23.252.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5c:d0:2c:c5:db:fe:aa:64:5a:0c:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fff22b91-ff6b-40b0-b626-033566818ca6 Validity Not Before: Dec 29 02:00:39 2024 GMT Not After : Mar 29 01:00:39 2025 GMT Subject: CN=f1dbcbeb-fe21-43d0-a710-e738b7942ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a5:c5:0a:77:1c:f4:e3:59:07:31:7d:54:fa: 04:bf:39:e7:ad:ae:2d:68:fc:5d:89:1c:ab:74:9b: 37:f0:26:56:87:f7:f5:a8:39:d5:df:bf:c5:ba:37: 21:00:ad:02:ef:88:db:86:29:33:f0:62:5d:f9:95: 47:c0:6c:90:f9:44:40:c7:0b:ef:e3:9f:25:9f:63: 4d:bf:45:00:ca:3f:7d:4f:39:9d:d8:15:8e:2a:e5: c5:c4:9f:e0:eb:7f:9e:fd:10:01:e9:b4:ca:a4:df: 31:1e:3d:ba:89:99:24:87:b6:67:f5:d3:cf:d9:26: 44:c1:1a:2a:ce:03:9b:d6:1b:ca:9b:29:d5:55:3c: ca:79:83:98:3b:01:c6:e8:99:ab:43:3a:f5:bd:b4: 59:5c:b0:27:0c:ac:85:7d:18:73:2c:ff:62:1e:97: de:4f:8c:a6:a2:62:fc:1f:0a:da:f9:a6:f1:42:ff: b1:4a:5c:65:17:0c:1c:8a:a8:d3:4f:76:58:08:b1: eb:18:d0:7f:7d:91:c4:b5:ef:4e:c2:88:94:52:49: f8:db:db:ad:d4:3e:87:d8:e4:5b:41:c3:29:e7:38: 96:c8:fe:1a:34:20:f6:95:26:a0:e5:ad:4c:bf:19: 90:8f:ff:1f:d2:1e:a2:71:ce:d9:e0:56:5e:4c:13: 03:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E5:11:45:E3:95:CB:BE:D1:60:EA:B7:2A:26:D9:4A:CC:A0:6E:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/a49b889f-76a4-3203-9129-fe4a745eeb7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl X509v3 Authority Key Identifier: keyid:B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer sbgp-ipAddrBlock: critical IPv4: 23.252.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:e1:d7:6c:c2:8f:31:c1:c4:29:d7:0b:25:34:95:d9:bc:e8: 7b:b7:74:81:33:7d:a2:8b:5b:6f:74:12:1d:19:e5:ff:f4:6d: 7e:06:31:5a:17:18:52:13:66:17:35:5e:f3:e0:64:21:94:e9: 39:74:24:1c:1f:cd:78:f4:46:fa:27:c6:8c:b8:c1:73:3f:4c: 8b:f8:67:36:f0:6b:2e:a2:b5:bb:4d:f7:7d:e2:2e:84:24:ce: 3d:d3:4d:df:d8:aa:fd:0a:aa:e7:16:fa:08:ee:90:62:b6:20: 7d:4b:44:41:72:33:ce:39:dc:4a:92:45:90:92:45:0e:fb:42: 4a:2a:a2:a4:2b:c9:00:8e:51:86:0d:9f:4d:76:a1:d8:11:b2: ad:d3:c7:c7:a9:38:ce:27:62:23:97:be:4f:cb:15:8f:7d:6a: 27:32:6c:8e:52:d7:3d:bc:16:2c:1e:e8:0a:b7:9f:8e:2c:63: 99:45:33:06:f2:af:ca:14:b0:84:00:d0:b6:83:2f:4d:bf:64: 35:e3:1b:3c:f3:2a:3d:bc:29:24:5e:b4:a8:1b:01:c4:d8:36: 0f:03:f6:4b:4e:dc:31:94:43:e9:96:8c:77:87:4a:54:29:78: 73:9f:f7:47:b2:ee:ce:9a:2c:6e:8a:3e:b1:92:af:25:d4:e3: 29:cd:b1:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhc0CzF2/6qZFoMcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZmMjJiOTEtZmY2Yi00MGIwLWI2MjYtMDMzNTY2ODE4 Y2E2MB4XDTI0MTIyOTAyMDAzOVoXDTI1MDMyOTAxMDAzOVowLzEtMCsGA1UEAxMk ZjFkYmNiZWItZmUyMS00M2QwLWE3MTAtZTczOGI3OTQyYWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaXFCncc9ONZBzF9VPoEvznnra4taPxdiRyr dJs38CZWh/f1qDnV37/FujchAK0C74jbhikz8GJd+ZVHwGyQ+URAxwvv458ln2NN v0UAyj99Tzmd2BWOKuXFxJ/g63+e/RAB6bTKpN8xHj26iZkkh7Zn9dPP2SZEwRoq zgOb1hvKmynVVTzKeYOYOwHG6JmrQzr1vbRZXLAnDKyFfRhzLP9iHpfeT4ymomL8 Hwra+abxQv+xSlxlFwwciqjTT3ZYCLHrGNB/fZHEte9OwoiUUkn429ut1D6H2ORb QcMp5ziWyP4aNCD2lSag5a1MvxmQj/8f0h6icc7Z4FZeTBMDjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLblEUXjlcu+0WDqtyom2UrMoG56MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYy MmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1NjY4MThjYTYvYTQ5Yjg4OWYtNzZhNC0z MjAzLTkxMjktZmU0YTc0NWVlYjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmZmMjJiOTEtZmY2Yi00MGIwLWI2 MjYtMDMzNTY2ODE4Y2E2L2ZmZjIyYjkxLWZmNmItNDBiMC1iNjI2LTAzMzU2Njgx OGNhNi5jcmwwHwYDVR0jBBgwFoAUs2wgdxWP2FoP8heKC0ORLS4Spx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYyMmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1 NjY4MThjYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHh12zCjzHBxCnXCyU0ldm86Hu3dIEzfaKLW290Eh0Z5f/0bX4GMVoX GFITZhc1XvPgZCGU6Tl0JBwfzXj0Rvonxoy4wXM/TIv4Zzbway6itbtN933iLoQk zj3TTd/Yqv0KqucW+gjukGK2IH1LREFyM8453EqSRZCSRQ77QkoqoqQryQCOUYYN n012odgRsq3Tx8epOM4nYiOXvk/LFY99aicybI5S1z28Fiwe6Aq3n44sY5lFMwby r8oUsIQA0LaDL02/ZDXjGzzzKj28KSRetKgbAcTYNg8D9ktO3DGUQ+mWjHeHSlQp eHOf90ey7s6aLG6KPrGSryXU4ynNsSs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:01 2025 by rpki-client