$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/412a11c3-55d8-30a7-954e-7f92feb5901b.roa File: 412a11c3-55d8-30a7-954e-7f92feb5901b.roa (raw, json) Hash identifier: QwI+JGK6jnY8xfD7l5r+HGNCHmOCuyemAjSWWG2i5nM= Subject key identifier: 8E:3C:7B:EC:66:FE:0C:6C:40:A5:5A:4B:E2:A4:77:36:FE:39:D6:BF Certificate issuer: /CN=239e2a72-9347-4316-9be7-20bdf6512711 Certificate serial: 010D0C9F432858484EDACB95C4180EBEAFBD0E80 Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/412a11c3-55d8-30a7-954e-7f92feb5901b.roa Signing time: Tue 24 Dec 2024 02:00:38 +0000 ROA not before: Tue 24 Dec 2024 02:00:38 +0000 ROA not after: Mon 24 Mar 2025 01:00:38 +0000 asID: 62164 IP address blocks: 23.129.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4e:da:cb:95:c4:18:0e:be:af:bd:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711 Validity Not Before: Dec 24 02:00:38 2024 GMT Not After : Mar 24 01:00:38 2025 GMT Subject: CN=1a68212d-af4c-4a90-9599-11e103e61124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c3:15:09:62:aa:2e:7e:d2:1c:35:6b:bd:09: 6b:00:33:53:e6:1e:ba:dc:7f:9a:47:c1:cb:5f:34: 1c:1b:0a:0f:aa:a5:64:e0:d6:4e:64:90:92:71:e4: 9a:80:70:c6:d4:45:41:4e:91:6b:ec:8f:dd:bb:a7: 78:9e:6b:27:82:a3:61:81:c4:e1:3d:78:7b:a1:ad: 87:20:7e:74:4f:5d:e3:27:0d:91:dd:77:5d:03:42: a1:92:b7:f7:76:fd:95:75:44:45:72:2c:c9:c0:b3: cb:18:05:12:d2:dc:2d:09:a2:f2:b6:76:77:bd:cf: 59:a3:6d:f5:4b:13:89:35:6f:88:4b:27:c4:d2:4a: 7e:35:3d:f9:64:2a:00:e0:1c:cc:cc:76:64:f4:52: 3e:e8:ce:70:09:6e:79:b9:27:bd:76:42:df:ec:73: 38:c9:7e:0b:77:f4:30:60:b9:17:31:45:b5:f5:5a: 0e:81:fb:f6:94:8a:0c:ba:c9:ab:d7:1b:58:a5:d9: 60:7d:78:6d:0c:20:1e:ee:10:eb:52:24:ae:ec:80: 4b:1c:51:89:0a:5b:6f:f0:4a:79:c1:de:af:dc:0c: cb:62:74:23:56:b8:68:3f:02:17:5e:62:e8:ab:a5: 28:f7:a6:30:bc:dd:aa:c2:5f:c8:a6:fd:63:d0:13: c1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:3C:7B:EC:66:FE:0C:6C:40:A5:5A:4B:E2:A4:77:36:FE:39:D6:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/412a11c3-55d8-30a7-954e-7f92feb5901b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl X509v3 Authority Key Identifier: keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer sbgp-ipAddrBlock: critical IPv4: 23.129.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:94:e0:cc:69:73:c4:06:cf:31:bf:b6:69:3f:69:2c:31:ea: 1a:d9:a7:30:9f:17:80:aa:98:86:61:b6:8d:ba:e9:f5:1b:55: a3:b9:4f:ef:d0:1d:a6:78:4f:52:c6:ab:55:08:f1:0f:41:71: db:16:a5:9f:c5:0b:02:67:c5:2b:71:7e:f5:9c:7f:e9:8d:1b: 10:bb:85:82:e5:84:b9:d7:73:13:b2:77:fc:ca:cf:0f:a0:c9: ae:50:8e:87:52:49:80:0f:5b:cb:7b:ae:1c:80:2a:e1:fe:4d: 39:08:39:48:dd:ed:5b:b9:48:01:dc:e1:8e:a1:1c:ae:2f:9d: c6:13:30:aa:cf:28:05:4f:80:13:61:f1:da:de:52:21:8b:01: 2a:d2:cf:69:b3:66:9e:4a:9e:6b:30:ed:85:ff:a6:c6:e1:cd: d9:fb:a9:c2:6a:95:5c:de:ac:56:f5:a2:a9:84:7c:24:0f:1d: 5e:ab:e3:5e:32:72:46:c2:1e:0c:bc:ef:ee:43:92:75:ac:af: ee:48:67:e9:98:37:b3:9a:08:20:bb:4f:26:86:b2:da:51:05: 95:d4:fd:31:40:cb:b3:a2:16:88:9d:11:7a:92:39:cf:f9:cf: c1:fe:fa:a4:03:ca:4e:c9:8b:08:02:d0:3f:43:f6:f0:10:a1: 4d:30:a1:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhO2suVxBgOvq+9DoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjM5ZTJhNzItOTM0Ny00MzE2LTliZTctMjBiZGY2NTEy NzExMB4XDTI0MTIyNDAyMDAzOFoXDTI1MDMyNDAxMDAzOFowLzEtMCsGA1UEAxMk MWE2ODIxMmQtYWY0Yy00YTkwLTk1OTktMTFlMTAzZTYxMTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcMVCWKqLn7SHDVrvQlrADNT5h663H+aR8HL XzQcGwoPqqVk4NZOZJCSceSagHDG1EVBTpFr7I/du6d4nmsngqNhgcThPXh7oa2H IH50T13jJw2R3XddA0Khkrf3dv2VdURFcizJwLPLGAUS0twtCaLytnZ3vc9Zo231 SxOJNW+ISyfE0kp+NT35ZCoA4BzMzHZk9FI+6M5wCW55uSe9dkLf7HM4yX4Ld/Qw YLkXMUW19VoOgfv2lIoMusmr1xtYpdlgfXhtDCAe7hDrUiSu7IBLHFGJCltv8Ep5 wd6v3AzLYnQjVrhoPwIXXmLoq6Uo96YwvN2qwl/Ipv1j0BPBUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI48e+xm/gxsQKVaS+Kkdzb+Oda/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMzll MmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJkZjY1MTI3MTEvNDEyYTExYzMtNTVkOC0z MGE3LTk1NGUtN2Y5MmZlYjU5MDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjM5ZTJhNzItOTM0Ny00MzE2LTli ZTctMjBiZGY2NTEyNzExLzIzOWUyYTcyLTkzNDctNDMxNi05YmU3LTIwYmRmNjUx MjcxMS5jcmwwHwYDVR0jBBgwFoAUxwBadkJgEZ/tem9/Z5RiZOwta1QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMzllMmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJk ZjY1MTI3MTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4HoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCU4Mxpc8QGzzG/tmk/aSwx6hrZpzCfF4CqmIZhto266fUbVaO5T+/Q HaZ4T1LGq1UI8Q9BcdsWpZ/FCwJnxStxfvWcf+mNGxC7hYLlhLnXcxOyd/zKzw+g ya5QjodSSYAPW8t7rhyAKuH+TTkIOUjd7Vu5SAHc4Y6hHK4vncYTMKrPKAVPgBNh 8dreUiGLASrSz2mzZp5Knmsw7YX/psbhzdn7qcJqlVzerFb1oqmEfCQPHV6r414y ckbCHgy87+5DknWsr+5IZ+mYN7OaCCC7TyaGstpRBZXU/TFAy7OiFoidEXqSOc/5 z8H++qQDyk7JiwgC0D9D9vAQoU0wofI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:02 2025 by rpki-client