$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/1fc61e72-5b1c-358a-87b2-c4b81dedb809.roa File: 1fc61e72-5b1c-358a-87b2-c4b81dedb809.roa (raw, json) Hash identifier: jNTTteABSfLM09sOcFAjQec81PWXmoFbGVw0qKqNnGY= Subject key identifier: C1:B3:D0:30:A6:5D:58:22:A0:09:DD:86:C9:A2:F1:CF:43:7E:3D:A3 Certificate issuer: /CN=974309dc-20f5-4894-9707-f2e446573ea1 Certificate serial: 010D0C9F43285848A22B84A843D71D09D9856930 Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/1fc61e72-5b1c-358a-87b2-c4b81dedb809.roa Signing time: Wed 22 Jan 2025 22:15:31 +0000 ROA not before: Wed 22 Jan 2025 22:15:31 +0000 ROA not after: Tue 22 Apr 2025 21:15:31 +0000 asID: 16509 IP address blocks: 23.131.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:2b:84:a8:43:d7:1d:09:d9:85:69:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1 Validity Not Before: Jan 22 22:15:31 2025 GMT Not After : Apr 22 21:15:31 2025 GMT Subject: CN=1ea2b7c8-2c56-47ea-b958-56c8f46b8dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:28:8c:f0:c6:8c:3f:4e:ba:d8:42:61:5b:bc: 6f:22:da:9e:0f:c2:49:37:48:fd:71:21:ed:43:42: 9e:f1:a1:b1:48:52:e5:a9:2a:0d:68:07:ba:d3:e5: d9:c2:c9:60:e1:d0:08:42:37:be:27:c6:9b:39:04: dd:7d:0b:8d:46:c0:c4:e1:3c:1c:b0:78:7a:0e:3b: 6d:30:48:e7:43:b2:2f:cf:21:03:c3:b8:a4:93:fb: 02:ae:21:12:fd:20:82:b3:dd:8d:cb:89:0c:44:30: 97:7b:3a:58:ac:72:03:9e:9d:94:a3:6b:bc:22:7d: 0d:2d:cb:fa:b3:52:ac:ed:a4:f0:33:b8:bb:19:62: 19:6b:58:09:fb:b9:96:7a:72:65:95:7a:96:4f:99: ac:49:93:ac:ce:c7:c5:1e:4a:ea:61:2f:5e:81:3f: 70:e2:bc:21:b1:9f:da:a8:3c:3a:7c:22:09:6e:30: 34:67:13:0d:29:69:f6:9a:09:61:33:d2:6a:48:ad: e2:fe:2d:ea:2d:21:4f:a6:c2:1a:c0:c1:9b:f2:c3: 36:65:a5:6b:82:2d:e6:98:18:a1:b7:85:f1:d7:ae: e2:97:04:f6:e4:03:b3:c5:16:0b:d2:ee:21:83:09: b2:b7:da:e3:aa:48:35:de:30:cc:fd:6a:56:06:24: 5f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B3:D0:30:A6:5D:58:22:A0:09:DD:86:C9:A2:F1:CF:43:7E:3D:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/1fc61e72-5b1c-358a-87b2-c4b81dedb809.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl X509v3 Authority Key Identifier: keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer sbgp-ipAddrBlock: critical IPv4: 23.131.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:b4:0d:5a:25:28:47:b8:cf:8d:2e:25:06:d8:57:ec:71:51: 80:79:9b:6e:b2:86:22:28:d0:38:11:76:99:29:64:19:54:11: 36:82:33:2d:90:84:91:31:c7:b3:2b:10:28:88:51:ed:82:3f: 3b:23:28:c7:03:04:9c:9c:a1:c7:8a:71:c3:ba:34:d1:e7:79: 1c:b1:d6:c9:92:4b:56:17:8d:85:35:dc:48:ef:c0:c5:83:ed: 8e:d8:42:65:1f:45:eb:95:cf:e7:19:7b:fa:e6:b6:c7:3e:d1: a9:c5:94:7c:4e:6d:39:3c:17:0d:fb:40:f7:6f:b9:b9:f3:9f: 62:6a:07:3a:ce:ad:9e:d8:41:14:8c:b8:05:74:51:7f:f9:7a: 9e:7a:1a:59:33:cc:19:51:75:82:52:d9:3f:4f:f6:4a:b6:ad: 18:15:fe:24:2c:32:49:48:d0:55:25:5e:53:de:12:b6:ec:e2: de:22:12:c7:8e:ca:7b:86:49:d8:33:1b:4e:6f:c6:8b:82:0c: fb:2d:d7:32:3b:8b:fc:db:20:ca:6d:62:bd:5a:1e:d8:f5:2e: 3a:1b:03:b4:08:24:dc:ec:aa:b0:40:9b:d2:a6:58:52:e7:8c: cb:4d:e7:a9:15:1f:cd:9f:e2:b5:f5:24:61:62:fe:fd:52:70: 08:d5:88:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiiK4SoQ9cdCdmFaTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTc0MzA5ZGMtMjBmNS00ODk0LTk3MDctZjJlNDQ2NTcz ZWExMB4XDTI1MDEyMjIyMTUzMVoXDTI1MDQyMjIxMTUzMVowLzEtMCsGA1UEAxMk MWVhMmI3YzgtMmM1Ni00N2VhLWI5NTgtNTZjOGY0NmI4ZGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSiM8MaMP0662EJhW7xvItqeD8JJN0j9cSHt Q0Ke8aGxSFLlqSoNaAe60+XZwslg4dAIQje+J8abOQTdfQuNRsDE4TwcsHh6Djtt MEjnQ7IvzyEDw7ikk/sCriES/SCCs92Ny4kMRDCXezpYrHIDnp2Uo2u8In0NLcv6 s1Ks7aTwM7i7GWIZa1gJ+7mWenJllXqWT5msSZOszsfFHkrqYS9egT9w4rwhsZ/a qDw6fCIJbjA0ZxMNKWn2mglhM9JqSK3i/i3qLSFPpsIawMGb8sM2ZaVrgi3mmBih t4Xx167ilwT25AOzxRYL0u4hgwmyt9rjqkg13jDM/WpWBiRf0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGz0DCmXVgioAndhsmi8c9Dfj2jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85NzQz MDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0NDY1NzNlYTEvMWZjNjFlNzItNWIxYy0z NThhLTg3YjItYzRiODFkZWRiODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTc0MzA5ZGMtMjBmNS00ODk0LTk3 MDctZjJlNDQ2NTczZWExLzk3NDMwOWRjLTIwZjUtNDg5NC05NzA3LWYyZTQ0NjU3 M2VhMS5jcmwwHwYDVR0jBBgwFoAU8wpyK8l5Fe1rdy/fvqwHji6l1eEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NzQzMDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0 NDY1NzNlYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4NEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIq0DVolKEe4z40uJQbYV+xxUYB5m26yhiIo0DgRdpkpZBlUETaCMy2Q hJExx7MrECiIUe2CPzsjKMcDBJycoceKccO6NNHneRyx1smSS1YXjYU13EjvwMWD 7Y7YQmUfReuVz+cZe/rmtsc+0anFlHxObTk8Fw37QPdvubnzn2JqBzrOrZ7YQRSM uAV0UX/5ep56GlkzzBlRdYJS2T9P9kq2rRgV/iQsMklI0FUlXlPeErbs4t4iEseO ynuGSdgzG05vxouCDPst1zI7i/zbIMptYr1aHtj1LjobA7QIJNzsqrBAm9KmWFLn jMtN56kVH82f4rX1JGFi/v1ScAjViIA= -----END CERTIFICATE-----Generated at Wed Feb 19 20:44:42 2025 by rpki-client