$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/358c0fd2-f2dc-357c-8822-31ed52d1d684.roa File: 358c0fd2-f2dc-357c-8822-31ed52d1d684.roa (raw, json) Hash identifier: REWS8UvDR7sC2Clf8aKpPe26p4EH1RLuvhevvmjhlGk= Subject key identifier: F1:6D:2A:89:5B:97:6C:78:08:81:68:45:07:95:3D:76:A1:E4:B3:9D Certificate issuer: /CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db Certificate serial: 010D0C9F4328584819CFC12FCA9FE1C7F7758B00 Authority key identifier: 03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/358c0fd2-f2dc-357c-8822-31ed52d1d684.roa Signing time: Thu 05 Dec 2024 02:00:39 +0000 ROA not before: Thu 05 Dec 2024 02:00:39 +0000 ROA not after: Wed 05 Mar 2025 02:00:39 +0000 asID: 398960 IP address blocks: 23.168.144.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:19:cf:c1:2f:ca:9f:e1:c7:f7:75:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db Validity Not Before: Dec 5 02:00:39 2024 GMT Not After : Mar 5 02:00:39 2025 GMT Subject: CN=52db9126-e03c-426c-9808-b6b9371f2d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8c:58:87:4b:0a:4f:d0:8c:1a:0f:fe:c7:71: 72:d0:0b:ad:5f:67:21:08:85:e9:21:24:b0:bf:9b: 4b:33:e3:39:8c:e0:65:02:72:41:dc:da:fa:3d:f6: 3b:43:08:d1:f1:ed:60:92:fc:22:de:b4:10:53:8a: e5:a5:ff:2f:92:41:e6:96:b1:c6:46:66:dc:43:b1: 31:7c:68:c8:76:4a:7a:8d:2c:49:e9:58:f4:1a:a0: 6f:b1:f9:88:63:a8:6a:a8:13:cf:b1:85:f8:bd:af: 78:74:49:af:04:98:f4:9a:56:34:1a:74:3f:b4:dd: dd:ec:af:55:5a:d9:af:70:50:96:d0:97:55:50:b1: 9a:b4:62:49:36:92:3a:34:36:21:73:9a:44:f7:94: 3f:f2:c9:93:71:5f:91:19:a0:60:9d:49:6b:e2:15: d9:20:f2:66:04:a5:a5:b6:8d:e9:a0:e2:af:53:a8: 76:49:15:ce:f0:32:19:06:de:55:8f:91:96:aa:08: 24:1a:b1:91:6b:a5:ae:e9:bf:7b:d7:be:40:c1:f1: 71:83:99:3c:0b:92:ad:db:62:12:60:ee:f3:e5:50: e3:e8:53:4f:08:7e:51:0a:68:a7:0c:a0:08:ff:1c: 04:a0:b7:bb:ea:54:f1:92:6d:48:e0:1b:11:9b:6a: c8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6D:2A:89:5B:97:6C:78:08:81:68:45:07:95:3D:76:A1:E4:B3:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/358c0fd2-f2dc-357c-8822-31ed52d1d684.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl X509v3 Authority Key Identifier: keyid:03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer sbgp-ipAddrBlock: critical IPv4: 23.168.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:81:59:b6:f2:09:9b:84:f1:f3:be:2d:81:b3:49:62:a1:89: da:aa:75:a5:b5:45:8e:a3:06:0a:f5:81:fe:29:8c:99:c1:20: 97:f8:7a:bd:6f:13:71:bb:e7:8d:b5:56:ce:c8:d2:9a:bb:d3: 74:dd:e2:30:0f:45:e1:73:af:b3:88:8f:1e:c7:c7:54:1a:be: ec:df:31:31:a1:71:21:22:2a:08:e1:a0:a1:9e:f7:16:c5:8c: f6:b7:b6:e8:7f:cd:17:f6:38:cd:3e:71:f1:8f:4c:25:57:1b: 6c:7e:ec:17:cd:df:d4:05:0a:8c:7d:3b:1e:64:6b:bb:cd:b1: bc:72:f2:90:2e:b3:53:5a:15:d4:8e:b3:79:d9:48:02:ff:6d: 63:d1:6c:48:ff:be:73:2c:5a:3d:10:17:bd:2a:24:8f:49:5e: b2:4b:a2:d7:1e:4c:77:19:8a:c9:75:da:f1:b8:8f:e9:44:56: d4:85:5e:05:26:80:0f:ab:c2:15:4b:ad:22:75:e5:19:9c:27: 1f:c0:76:91:52:75:4f:35:68:01:46:88:d5:80:e9:3d:f1:9e: 67:a2:17:52:de:cf:81:f3:37:9a:cc:ba:37:e4:9b:2c:50:6b: 6f:67:bc:46:5e:78:0d:cc:e9:67:3f:60:89:6e:c3:b4:ea:38: b9:3a:00:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgZz8Evyp/hx/d1iwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThlMjY0OGUtODg2OS00YWZkLWEwYmQtYTFhYzdjMWYy M2RiMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk NTJkYjkxMjYtZTAzYy00MjZjLTk4MDgtYjZiOTM3MWYyZDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoxYh0sKT9CMGg/+x3Fy0AutX2chCIXpISSw v5tLM+M5jOBlAnJB3Nr6PfY7QwjR8e1gkvwi3rQQU4rlpf8vkkHmlrHGRmbcQ7Ex fGjIdkp6jSxJ6Vj0GqBvsfmIY6hqqBPPsYX4va94dEmvBJj0mlY0GnQ/tN3d7K9V WtmvcFCW0JdVULGatGJJNpI6NDYhc5pE95Q/8smTcV+RGaBgnUlr4hXZIPJmBKWl to3poOKvU6h2SRXO8DIZBt5Vj5GWqggkGrGRa6Wu6b97175AwfFxg5k8C5Kt22IS YO7z5VDj6FNPCH5RCminDKAI/xwEoLe76lTxkm1I4BsRm2rIkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFtKolbl2x4CIFoRQeVPXah5LOdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xOGUy NjQ4ZS04ODY5LTRhZmQtYTBiZC1hMWFjN2MxZjIzZGIvMzU4YzBmZDItZjJkYy0z NTdjLTg4MjItMzFlZDUyZDFkNjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMThlMjY0OGUtODg2OS00YWZkLWEw YmQtYTFhYzdjMWYyM2RiLzE4ZTI2NDhlLTg4NjktNGFmZC1hMGJkLWExYWM3YzFm MjNkYi5jcmwwHwYDVR0jBBgwFoAUA9CNha/VYO1h+yq5qYqSTv68/rAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xOGUyNjQ4ZS04ODY5LTRhZmQtYTBiZC1hMWFj N2MxZjIzZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6iQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+BWbbyCZuE8fO+LYGzSWKhidqqdaW1RY6jBgr1gf4pjJnBIJf4er1v E3G75421Vs7I0pq703Td4jAPReFzr7OIjx7Hx1QavuzfMTGhcSEiKgjhoKGe9xbF jPa3tuh/zRf2OM0+cfGPTCVXG2x+7BfN39QFCox9Ox5ka7vNsbxy8pAus1NaFdSO s3nZSAL/bWPRbEj/vnMsWj0QF70qJI9JXrJLotceTHcZisl12vG4j+lEVtSFXgUm gA+rwhVLrSJ15RmcJx/AdpFSdU81aAFGiNWA6T3xnmeiF1Lez4HzN5rMujfkmyxQ a29nvEZeeA3M6Wc/YIluw7TqOLk6AP4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:21 2025 by rpki-client