$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/23902af4-0c49-3014-9394-6b31fa2836cd.roa File: 23902af4-0c49-3014-9394-6b31fa2836cd.roa (raw, json) Hash identifier: yN5Uw1c/vkdLwK5BJ0FIPSxG8cpxTp0ND7bBVdKIHp8= Subject key identifier: 6B:7C:04:8A:39:30:28:1F:89:5B:B9:2B:95:B1:45:EB:10:4D:F7:50 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584863CAFB9D867B672929170DC0 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/23902af4-0c49-3014-9394-6b31fa2836cd.roa Signing time: Tue 31 Dec 2024 14:00:53 +0000 ROA not before: Tue 31 Dec 2024 14:00:53 +0000 ROA not after: Mon 31 Mar 2025 13:00:53 +0000 asID: 9084 IP address blocks: 154.1.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:63:ca:fb:9d:86:7b:67:29:29:17:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Dec 31 14:00:53 2024 GMT Not After : Mar 31 13:00:53 2025 GMT Subject: CN=aa88e5cb-8914-4409-b542-739a0d8ca5e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:eb:95:3f:91:d7:21:6f:d3:ba:03:90:7a:b3: 5e:42:32:cb:88:58:b2:7d:d3:db:24:9b:82:13:58: 41:b6:d1:f0:26:e4:00:2b:a8:51:54:c9:0d:fd:40: ea:7e:69:9f:c8:47:20:1f:86:79:3f:9e:1c:2c:61: 78:43:67:9a:ac:e8:b9:6d:ec:ef:8e:30:11:75:8a: 27:30:cb:f7:91:3a:ac:85:66:8e:42:af:f5:bb:15: d5:a2:44:da:93:d4:95:28:72:d6:b4:35:b4:aa:cd: 96:d2:72:3a:e7:c6:fc:ff:6a:69:ca:17:38:55:18: 76:a1:f2:61:71:22:49:38:e2:37:05:5e:aa:43:a5: ff:b0:fc:f9:91:ca:cf:54:cb:cc:dd:09:e0:99:c7: 0b:04:99:c9:aa:a3:44:2a:1a:6e:4a:ed:4d:e7:d6: b5:5b:65:fd:97:45:ca:0e:44:78:9f:b6:0c:26:de: 70:96:8f:32:83:b1:02:77:ef:68:45:ff:23:d5:83: f8:0e:ae:73:40:91:e1:34:65:3b:fd:49:99:02:68: 54:5b:c0:55:b0:45:35:b6:f7:d4:35:9b:09:f4:89: f0:57:94:ae:7f:50:20:eb:7a:a3:ec:ab:46:9d:df: b4:67:2d:95:db:f9:25:98:11:4a:f1:31:8c:29:35: a8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7C:04:8A:39:30:28:1F:89:5B:B9:2B:95:B1:45:EB:10:4D:F7:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/23902af4-0c49-3014-9394-6b31fa2836cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 154.1.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:88:c5:b0:d0:f6:dd:25:69:fa:1a:a2:65:64:1a:1e:f5:d4: 69:a6:46:d1:9d:98:d9:fc:05:85:d2:55:c6:a2:d3:38:36:b6: 62:20:f5:9f:6d:95:ee:27:43:ba:1f:e3:17:29:22:f3:bd:97: d8:06:f4:8d:9c:1e:7e:90:69:1a:41:52:46:2a:be:11:d7:0d: 10:fc:ba:16:65:18:73:05:0e:da:3f:9b:cc:63:5d:d7:b5:24: 34:54:05:08:86:5e:53:30:61:15:4a:91:73:11:61:90:c5:2a: f9:ff:19:ec:a5:ad:e9:11:7a:83:07:58:28:3d:21:ee:b9:0f: 39:be:10:4d:6b:46:b3:c3:21:76:58:51:49:d2:d1:d5:37:1e: a4:b8:96:94:a8:44:a2:96:12:6f:d2:d8:4f:3b:3f:65:7a:a4: ef:d1:0c:13:7b:21:06:5d:1f:b8:2c:1b:ac:1f:6c:92:96:08: 5c:53:5f:29:d0:f3:8d:f0:a5:0a:c6:f5:1f:96:b5:07:b4:83: 1c:87:a0:06:f3:6e:e4:b6:e9:f9:a0:dc:b9:76:b6:9f:30:0b: 83:ba:09:dc:5f:d4:a1:10:a7:9a:e5:6a:72:84:8d:a3:92:45: 2f:4d:52:a0:95:4e:88:a8:51:9a:5e:04:19:24:40:6c:27:d2: 73:ac:a3:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhjyvudhntnKSkXDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk YWE4OGU1Y2ItODkxNC00NDA5LWI1NDItNzM5YTBkOGNhNWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuuVP5HXIW/TugOQerNeQjLLiFiyfdPbJJuC E1hBttHwJuQAK6hRVMkN/UDqfmmfyEcgH4Z5P54cLGF4Q2earOi5bezvjjARdYon MMv3kTqshWaOQq/1uxXVokTak9SVKHLWtDW0qs2W0nI658b8/2ppyhc4VRh2ofJh cSJJOOI3BV6qQ6X/sPz5kcrPVMvM3QngmccLBJnJqqNEKhpuSu1N59a1W2X9l0XK DkR4n7YMJt5wlo8yg7ECd+9oRf8j1YP4Dq5zQJHhNGU7/UmZAmhUW8BVsEU1tvfU NZsJ9InwV5Suf1Ag63qj7KtGnd+0Zy2V2/klmBFK8TGMKTWoMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGt8BIo5MCgfiVu5K5WxResQTfdQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvMjM5MDJhZjQtMGM0OS0z MDE0LTkzOTQtNmIzMWZhMjgzNmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmgGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISIxbDQ9t0lafoaomVkGh711GmmRtGdmNn8BYXSVcai0zg2tmIg9Z9t le4nQ7of4xcpIvO9l9gG9I2cHn6QaRpBUkYqvhHXDRD8uhZlGHMFDto/m8xjXde1 JDRUBQiGXlMwYRVKkXMRYZDFKvn/GeylrekReoMHWCg9Ie65Dzm+EE1rRrPDIXZY UUnS0dU3HqS4lpSoRKKWEm/S2E87P2V6pO/RDBN7IQZdH7gsG6wfbJKWCFxTXynQ 843wpQrG9R+WtQe0gxyHoAbzbuS26fmg3Ll2tp8wC4O6Cdxf1KEQp5rlanKEjaOS RS9NUqCVToioUZpeBBkkQGwn0nOso0E= -----END CERTIFICATE-----Generated at Sun Feb 16 20:55:53 2025 by rpki-client