$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db4c8a39-6acc-31cf-bfb3-0fa5ea626dc3.roa File: db4c8a39-6acc-31cf-bfb3-0fa5ea626dc3.roa (raw, json) Hash identifier: N26nnlSRNqnEB8pupnkly6vBQOje/RiMYpLnHNwLt4w= Subject key identifier: BB:68:02:CC:93:46:07:81:0D:1D:89:3C:D4:F9:6D:3F:46:F0:51:A0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C581799B65250B3664463B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db4c8a39-6acc-31cf-bfb3-0fa5ea626dc3.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 23.236.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:79:9b:65:25:0b:36:64:46:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=6dc1a8af-00c9-4ea0-b653-71684f5fbde3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9d:73:3b:e0:8c:ee:7b:e9:09:3f:3f:f2:b5: 9a:d4:2d:35:da:51:60:ac:34:5c:1c:08:dc:c4:29: 92:e4:d5:2a:f1:f3:63:39:82:3d:37:9e:25:b4:3d: 09:37:5c:1e:55:2f:1f:ab:a2:87:b3:c1:de:c0:87: bb:77:d3:e6:de:36:70:c2:9d:fd:d9:20:7d:01:a4: 2c:f9:fd:bc:e0:ec:0a:56:da:97:36:63:0c:a9:4d: 46:32:99:e2:5e:f3:38:52:10:82:11:3b:e2:e1:61: 11:b3:93:16:08:39:2c:6d:84:f0:67:d6:e2:ab:fb: a0:c2:06:23:ca:ab:62:57:e1:29:b9:ad:1b:8e:d0: 45:cf:b6:58:67:64:22:4d:ae:3f:ac:f1:ac:75:ef: 48:1c:41:94:5d:61:60:55:37:c6:5a:a0:df:82:80: f6:0b:2b:7f:65:8d:65:48:b2:49:ad:c1:73:de:cb: aa:08:09:e9:13:f4:d0:f5:a2:9b:ae:57:4a:26:c4: 1b:37:43:b8:b2:af:08:bc:04:f0:6c:30:92:78:37: 18:e4:c1:d4:76:f2:8d:c5:d4:da:32:e7:b1:e8:26: d7:0e:23:23:64:4e:3b:d7:fa:9a:d1:31:2d:3e:04: 71:74:7f:a3:e1:50:15:65:8b:96:cc:f2:5e:28:e7: c9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:68:02:CC:93:46:07:81:0D:1D:89:3C:D4:F9:6D:3F:46:F0:51:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db4c8a39-6acc-31cf-bfb3-0fa5ea626dc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 23.236.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:62:61:71:e9:6d:07:65:51:a6:38:e8:b7:6e:9e:e7:92:99: 1c:a4:02:9b:93:85:f3:0c:46:b4:ea:0e:4c:c5:4b:c5:6f:82: c1:20:33:bc:0e:d3:7f:19:c6:77:f8:74:b6:38:b8:12:0e:d5: cc:a4:29:4f:36:26:69:b6:2c:55:80:7c:a1:1f:7a:35:42:4f: 86:d9:ff:90:5d:5a:6b:1a:23:62:0a:d0:20:fc:b7:63:5a:fa: b0:6e:78:5a:70:ea:a0:36:bd:32:7b:24:4b:c1:9f:34:99:26: ec:e5:ca:ea:28:04:9d:72:c6:35:10:9d:4a:b9:03:3f:02:61: ee:e0:4e:9c:1f:30:82:99:9c:0e:79:13:7b:93:c2:b5:f3:86: bc:10:6c:42:92:b4:6c:81:5a:27:07:a4:df:e5:d8:9a:da:d1: 14:da:9f:8b:f1:05:c5:3c:d4:f8:db:4b:5c:58:e2:be:ea:9e: 54:3a:a2:2a:74:c6:47:e6:32:ba:d5:83:ca:d7:7c:59:d4:b7: f7:70:63:ab:1f:0d:d3:80:b7:8a:a9:0e:a4:0d:8a:21:18:d6: b0:ee:90:48:30:98:d8:40:d3:1b:b5:4c:31:5b:7b:11:96:c6: 79:b8:c2:e0:34:4e:10:aa:c1:96:a5:12:09:23:a0:a9:9f:bf: 48:d5:ca:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXmbZSULNmRGO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NmRjMWE4YWYtMDBjOS00ZWEwLWI2NTMtNzE2ODRmNWZiZGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ1zO+CM7nvpCT8/8rWa1C012lFgrDRcHAjc xCmS5NUq8fNjOYI9N54ltD0JN1weVS8fq6KHs8HewIe7d9Pm3jZwwp392SB9AaQs +f284OwKVtqXNmMMqU1GMpniXvM4UhCCETvi4WERs5MWCDksbYTwZ9biq/ugwgYj yqtiV+Epua0bjtBFz7ZYZ2QiTa4/rPGsde9IHEGUXWFgVTfGWqDfgoD2Cyt/ZY1l SLJJrcFz3suqCAnpE/TQ9aKbrldKJsQbN0O4sq8IvATwbDCSeDcY5MHUdvKNxdTa Muex6CbXDiMjZE471/qa0TEtPgRxdH+j4VAVZYuWzPJeKOfJwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtoAsyTRgeBDR2JPNT5bT9G8FGgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGI0YzhhMzktNmFjYy0z MWNmLWJmYjMtMGZhNWVhNjI2ZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+wwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5iYXHpbQdlUaY46LdunueSmRykApuThfMMRrTqDkzFS8VvgsEgM7wO 038Zxnf4dLY4uBIO1cykKU82Jmm2LFWAfKEfejVCT4bZ/5BdWmsaI2IK0CD8t2Na +rBueFpw6qA2vTJ7JEvBnzSZJuzlyuooBJ1yxjUQnUq5Az8CYe7gTpwfMIKZnA55 E3uTwrXzhrwQbEKStGyBWicHpN/l2Jra0RTan4vxBcU81PjbS1xY4r7qnlQ6oip0 xkfmMrrVg8rXfFnUt/dwY6sfDdOAt4qpDqQNiiEY1rDukEgwmNhA0xu1TDFbexGW xnm4wuA0ThCqwZalEgkjoKmfv0jVysU= -----END CERTIFICATE-----Generated at Fri Mar 14 10:42:31 2025 by rpki-client