$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/2ae40c95-4cc5-33a5-8aa3-054c920d5b48.roa File: 2ae40c95-4cc5-33a5-8aa3-054c920d5b48.roa (raw, json) Hash identifier: 0owBDgOJ5n/3I4LLvXHYax40rSXRof/sAwSe53sUpXg= Subject key identifier: C2:84:3F:9A:1E:15:F2:FD:52:82:75:C9:F9:17:0A:6C:12:F6:B9:7A Certificate issuer: /CN=cbf6809f-0b45-47d5-b7cc-7f892ddda0dc Certificate serial: 010D0C9F43285848100A81DD9A0B6D5DC9F2C000 Authority key identifier: 9B:06:A9:E2:32:92:2E:F1:AD:4C:84:04:3E:28:D8:DF:11:75:0D:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/2ae40c95-4cc5-33a5-8aa3-054c920d5b48.roa Signing time: Sun 01 Dec 2024 14:00:51 +0000 ROA not before: Sun 01 Dec 2024 14:00:51 +0000 ROA not after: Sat 01 Mar 2025 14:00:51 +0000 asID: 14618 IP address blocks: 192.58.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:10:0a:81:dd:9a:0b:6d:5d:c9:f2:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbf6809f-0b45-47d5-b7cc-7f892ddda0dc Validity Not Before: Dec 1 14:00:51 2024 GMT Not After : Mar 1 14:00:51 2025 GMT Subject: CN=0cb7726e-20c0-4c1f-9f89-71908f15429a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:07:dc:37:cf:a5:e4:75:df:2d:20:2c:45:33: 3e:02:eb:0b:ce:a7:02:f7:99:c3:3d:96:d5:5b:eb: f0:97:4c:ef:09:cd:b3:8c:17:ec:08:a6:b0:3f:18: c8:24:19:ee:d7:09:b9:ea:bf:4d:6e:34:ad:2f:f0: 32:d5:54:91:45:9b:22:6c:41:11:ec:da:c5:7d:10: 1d:0c:d0:46:68:36:d0:34:8f:ef:c3:92:a7:36:e6: c5:0b:3b:2e:20:06:b2:87:b4:57:78:b4:00:bc:48: 32:d8:dc:4e:f8:0b:14:18:b8:58:9f:50:c9:7b:94: d6:9e:49:c9:d5:35:a3:c9:a3:ae:a9:8b:eb:28:2f: e1:89:dd:9e:66:09:79:be:cc:af:88:fb:e4:83:a8: 5d:f3:54:2b:86:fe:99:9f:59:e1:76:19:f5:46:26: ac:17:1e:d5:d3:12:51:c9:85:e4:52:47:44:ef:8c: d3:d8:0b:83:a0:1b:0c:05:0d:41:b8:ec:e4:09:42: d7:88:a2:4a:78:7a:db:2e:fc:27:e7:09:35:a0:94: 4c:3c:8a:5e:6c:21:ef:df:63:dc:26:2d:39:dd:a8: 01:5a:9b:ca:5d:80:16:73:ba:53:a0:a0:d1:90:21: 88:e8:12:bc:6d:f9:00:ed:42:e1:d4:70:3e:c1:c9: c9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:84:3F:9A:1E:15:F2:FD:52:82:75:C9:F9:17:0A:6C:12:F6:B9:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/2ae40c95-4cc5-33a5-8aa3-054c920d5b48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.crl X509v3 Authority Key Identifier: keyid:9B:06:A9:E2:32:92:2E:F1:AD:4C:84:04:3E:28:D8:DF:11:75:0D:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.cer sbgp-ipAddrBlock: critical IPv4: 192.58.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:5d:ee:1f:1a:5d:1a:8b:63:9f:66:34:f2:61:2a:01:90:d1: ca:ed:24:74:4a:4c:d1:f9:88:91:36:79:4f:88:97:b1:11:10: 51:2e:36:42:35:12:d5:45:83:3e:9f:dd:18:9f:98:24:88:a7: 10:2e:d5:4a:65:9c:7d:f6:3f:76:2f:a5:a0:93:e4:ea:06:7e: aa:91:31:8e:8b:c6:b4:b3:78:f4:b6:e1:c4:81:54:28:02:8d: d1:f1:8d:56:58:6a:44:d3:f6:9e:86:41:74:9c:4d:2f:a7:a5: 0e:1e:ab:48:34:93:be:77:23:0f:40:d2:f5:a7:ff:36:4f:98: e2:8b:17:6c:a8:2d:a9:40:8a:39:6d:c2:02:04:04:6f:bf:8e: 5e:3b:22:0d:00:8e:62:c6:b6:16:01:24:90:89:4f:1b:c4:d9: 8c:e2:5b:4c:f5:e2:fc:79:58:cb:5d:d6:68:06:f1:16:c3:69: 50:81:33:dd:49:fe:bf:78:9e:56:68:5e:84:c7:c4:25:38:79: 63:63:fa:1c:18:81:5a:c1:7d:91:47:29:cb:c0:fb:3f:16:27: cc:51:dd:84:aa:87:84:31:56:ee:49:be:ab:8f:87:f8:60:ea: 07:43:f6:a1:a7:7b:25:24:c0:e3:78:d1:05:af:5d:2a:40:27: 7a:6f:41:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCoHdmgttXcnywAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmNjgwOWYtMGI0NS00N2Q1LWI3Y2MtN2Y4OTJkZGRh MGRjMB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk MGNiNzcyNmUtMjBjMC00YzFmLTlmODktNzE5MDhmMTU0MjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwfcN8+l5HXfLSAsRTM+AusLzqcC95nDPZbV W+vwl0zvCc2zjBfsCKawPxjIJBnu1wm56r9NbjStL/Ay1VSRRZsibEER7NrFfRAd DNBGaDbQNI/vw5KnNubFCzsuIAayh7RXeLQAvEgy2NxO+AsUGLhYn1DJe5TWnknJ 1TWjyaOuqYvrKC/hid2eZgl5vsyviPvkg6hd81Qrhv6Zn1nhdhn1RiasFx7V0xJR yYXkUkdE74zT2AuDoBsMBQ1BuOzkCULXiKJKeHrbLvwn5wk1oJRMPIpebCHv32Pc Ji053agBWpvKXYAWc7pToKDRkCGI6BK8bfkA7ULh1HA+wcnJ1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKEP5oeFfL9UoJ1yfkXCmwS9rl6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jYmY2 ODA5Zi0wYjQ1LTQ3ZDUtYjdjYy03Zjg5MmRkZGEwZGMvMmFlNDBjOTUtNGNjNS0z M2E1LThhYTMtMDU0YzkyMGQ1YjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2JmNjgwOWYtMGI0NS00N2Q1LWI3 Y2MtN2Y4OTJkZGRhMGRjL2NiZjY4MDlmLTBiNDUtNDdkNS1iN2NjLTdmODkyZGRk YTBkYy5jcmwwHwYDVR0jBBgwFoAUmwap4jKSLvGtTIQEPijY3xF1DZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jYmY2ODA5Zi0wYjQ1LTQ3ZDUtYjdjYy03Zjg5 MmRkZGEwZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDr8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxd7h8aXRqLY59mNPJhKgGQ0crtJHRKTNH5iJE2eU+Il7EREFEuNkI1 EtVFgz6f3RifmCSIpxAu1UplnH32P3YvpaCT5OoGfqqRMY6LxrSzePS24cSBVCgC jdHxjVZYakTT9p6GQXScTS+npQ4eq0g0k753Iw9A0vWn/zZPmOKLF2yoLalAijlt wgIEBG+/jl47Ig0AjmLGthYBJJCJTxvE2YziW0z14vx5WMtd1mgG8RbDaVCBM91J /r94nlZoXoTHxCU4eWNj+hwYgVrBfZFHKcvA+z8WJ8xR3YSqh4QxVu5JvquPh/hg 6gdD9qGneyUkwON40QWvXSpAJ3pvQes= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:20 2025 by rpki-client