$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa File: ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa (raw, json) Hash identifier: OTfLwYJL6E3pSOeI8+rpEGBpOUw0AJcdzxE787Nd92U= Subject key identifier: C5:FF:B4:1A:07:B7:9E:75:D9:2E:84:78:CE:61:55:F2:0C:2E:B8:F0 Certificate issuer: /CN=1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8 Certificate serial: 010D0C9F4328584886B0785ABEF781ABC7353100 Authority key identifier: A3:09:D6:17:BA:B5:31:E5:FF:31:15:22:A3:4C:14:52:22:60:53:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa Signing time: Mon 13 Jan 2025 02:00:40 +0000 ROA not before: Mon 13 Jan 2025 02:00:40 +0000 ROA not after: Sun 13 Apr 2025 01:00:40 +0000 asID: 398292 IP address blocks: 23.158.48.0/24 maxlen: 24 169.197.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:86:b0:78:5a:be:f7:81:ab:c7:35:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8 Validity Not Before: Jan 13 02:00:40 2025 GMT Not After : Apr 13 01:00:40 2025 GMT Subject: CN=8a5823df-28bb-4e53-ad68-008e45f79302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:00:d6:6a:97:8e:9e:0d:f3:2c:86:e1:ea:5b: 47:93:6b:cb:14:c4:51:fc:fc:e4:17:59:f3:1b:c2: d1:bd:67:1b:6f:c3:4d:30:9f:ca:b1:e6:b1:84:7d: 93:21:c4:68:04:6f:70:77:f8:7c:76:f5:98:71:74: 23:49:3c:6b:6f:b7:70:d3:ff:e8:90:8a:ef:b5:38: 17:d3:cc:3b:3a:99:9c:ab:b0:d6:93:1c:8b:90:3b: f7:9c:4d:d0:b7:1e:8d:4f:15:6b:69:6b:0d:09:17: ee:38:77:be:fc:34:eb:46:5f:10:27:06:67:5a:8e: e6:fe:c9:2a:e6:aa:79:c5:e5:a1:fd:f7:e1:6c:50: 2c:cb:d4:ff:ba:d1:af:90:19:bb:eb:70:34:24:bc: a4:04:c6:2c:ba:88:21:6f:fd:55:e5:2a:db:86:87: 64:09:ba:73:5e:b2:49:85:55:16:1f:af:0f:e9:e4: 4e:3f:44:67:ec:e8:90:95:06:5a:79:1f:f2:7a:65: 08:2b:6a:33:9d:03:41:33:3f:77:a8:30:6f:38:75: cd:d7:d4:35:c0:23:46:ea:e1:81:e2:87:47:fa:c4: 75:32:ab:b7:75:3a:60:9f:d1:85:5c:ad:97:c7:66: 69:56:d6:0b:d9:50:85:dc:3a:a3:98:ff:54:3c:6e: f3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FF:B4:1A:07:B7:9E:75:D9:2E:84:78:CE:61:55:F2:0C:2E:B8:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.crl X509v3 Authority Key Identifier: keyid:A3:09:D6:17:BA:B5:31:E5:FF:31:15:22:A3:4C:14:52:22:60:53:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.cer sbgp-ipAddrBlock: critical IPv4: 23.158.48.0/24 169.197.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:e9:b9:2d:7b:cf:3b:6e:ae:e6:02:6d:93:b1:01:3f:74:40: b7:27:16:e9:60:2d:3d:7a:04:1c:80:3b:bf:b1:b3:7e:a0:4f: 16:b6:f4:cb:3f:a6:86:e4:10:26:1e:67:cc:7f:2b:ba:cf:72: 96:fa:41:ef:cc:a4:6c:94:ad:2d:c6:d3:d8:ca:02:11:5c:1d: ce:0a:77:f3:38:b6:76:4c:ec:07:e1:67:6c:69:b6:66:03:e5: 27:25:06:a7:da:33:ea:2d:38:2a:07:ed:1a:6d:4e:87:91:8e: b9:41:bc:64:ca:64:26:2f:c7:d4:93:cd:0c:b1:8a:ff:0a:2a: 9b:f5:26:bc:c3:fe:8a:35:df:c6:c8:54:22:8b:ff:68:e2:8b: bf:57:e1:fd:56:b9:6d:78:9e:0c:fb:18:58:94:90:69:bb:e3: fe:52:82:ef:e4:03:fa:86:1f:7c:18:ec:02:3a:4c:17:b6:62: a2:74:37:b6:a3:ba:71:c9:d1:14:5b:4c:36:86:50:46:9e:91: 38:7e:05:3d:78:45:6f:5f:2b:d1:cc:dd:e3:a3:b1:0c:03:aa: 07:d2:67:23:a0:18:02:f8:29:b1:2d:2b:e2:c3:c8:8e:06:df: 11:7f:bf:4a:b8:f8:55:71:e7:bf:07:57:74:83:e5:f8:1e:7f: 0c:51:73:15 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEiGsHhavveBq8c1MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU2M2ZhM2MtYjYyMy00NWVkLWJjNTAtNWM1ZjZjZTFl ZWU4MB4XDTI1MDExMzAyMDA0MFoXDTI1MDQxMzAxMDA0MFowLzEtMCsGA1UEAxMk OGE1ODIzZGYtMjhiYi00ZTUzLWFkNjgtMDA4ZTQ1Zjc5MzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzADWapeOng3zLIbh6ltHk2vLFMRR/PzkF1nz G8LRvWcbb8NNMJ/KseaxhH2TIcRoBG9wd/h8dvWYcXQjSTxrb7dw0//okIrvtTgX 08w7Opmcq7DWkxyLkDv3nE3Qtx6NTxVraWsNCRfuOHe+/DTrRl8QJwZnWo7m/skq 5qp5xeWh/ffhbFAsy9T/utGvkBm763A0JLykBMYsuoghb/1V5SrbhodkCbpzXrJJ hVUWH68P6eROP0Rn7OiQlQZaeR/yemUIK2oznQNBMz93qDBvOHXN19Q1wCNG6uGB 4odH+sR1Mqu3dTpgn9GFXK2Xx2ZpVtYL2VCF3DqjmP9UPG7z2QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMX/tBoHt5512S6EeM5hVfIMLrjwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xZTYz ZmEzYy1iNjIzLTQ1ZWQtYmM1MC01YzVmNmNlMWVlZTgvZmZhNmViYTEtMThjNS0z ZWRmLWFhMWEtYzU0Y2Q0MDA1ZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWU2M2ZhM2MtYjYyMy00NWVkLWJj NTAtNWM1ZjZjZTFlZWU4LzFlNjNmYTNjLWI2MjMtNDVlZC1iYzUwLTVjNWY2Y2Ux ZWVlOC5jcmwwHwYDVR0jBBgwFoAUownWF7q1MeX/MRUio0wUUiJgU40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xZTYzZmEzYy1iNjIzLTQ1ZWQtYmM1MC01YzVm NmNlMWVlZTguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF54wAwQC qcWcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAD3puS17zzturuYCbZOxAT90QLcnFulgLT16BByAO7+xs36g Txa29Ms/pobkECYeZ8x/K7rPcpb6Qe/MpGyUrS3G09jKAhFcHc4Kd/M4tnZM7Afh Z2xptmYD5SclBqfaM+otOCoH7RptToeRjrlBvGTKZCYvx9STzQyxiv8KKpv1JrzD /oo138bIVCKL/2jii79X4f1WuW14ngz7GFiUkGm74/5Sgu/kA/qGH3wY7AI6TBe2 YqJ0N7ajunHJ0RRbTDaGUEaekTh+BT14RW9fK9HM3eOjsQwDqgfSZyOgGAL4KbEt K+LDyI4G3xF/v0q4+FVx578HV3SD5fgefwxRcxU= -----END CERTIFICATE-----Generated at Sun Feb 16 20:23:15 2025 by rpki-client