$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/1d03ded5-67ad-3adf-8fac-21785cf59a34.roa File: 1d03ded5-67ad-3adf-8fac-21785cf59a34.roa (raw, json) Hash identifier: krVG5r71N4+bCe5tIVTl4psZ9jER4iBFC/dBp3vD+UA= Subject key identifier: 0E:EE:FC:37:20:A0:E7:EB:04:4E:AC:82:81:F4:B8:96:51:C1:41:15 Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F43285848B62614AF343577A54439FC80 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/1d03ded5-67ad-3adf-8fac-21785cf59a34.roa Signing time: Thu 30 Jan 2025 02:00:40 +0000 ROA not before: Thu 30 Jan 2025 02:00:40 +0000 ROA not after: Wed 30 Apr 2025 01:00:40 +0000 asID: 22773 IP address blocks: 23.234.160.0/22 maxlen: 22 23.234.164.0/22 maxlen: 22 23.234.168.0/22 maxlen: 22 23.234.172.0/22 maxlen: 22 23.234.176.0/22 maxlen: 22 23.234.180.0/22 maxlen: 22 23.234.184.0/22 maxlen: 22 23.234.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:26:14:af:34:35:77:a5:44:39:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Jan 30 02:00:40 2025 GMT Not After : Apr 30 01:00:40 2025 GMT Subject: CN=cf763c49-0f4c-4b24-bcf5-a7c728b94271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ae:59:88:9b:8e:72:3d:de:10:d0:48:e7:ce: 51:b2:e4:84:6f:91:0f:2b:2c:5d:24:d3:42:e2:9c: c1:64:00:00:26:be:bd:88:1d:3a:ef:f1:ad:90:a7: 17:47:14:94:8d:3c:a3:4a:4d:d3:9c:b4:2d:4f:3d: e0:c4:af:3d:76:ee:2d:01:a5:32:db:e5:56:4d:1f: 6a:80:50:c7:19:1c:63:05:96:2f:e7:bc:08:01:ad: 75:ca:af:1b:06:8e:09:a4:4a:39:bb:03:2b:62:9a: bf:ef:fe:80:99:70:f8:91:b0:98:51:2c:8f:9b:f1: 37:18:06:4c:2f:9a:e1:47:24:f3:5b:7b:36:e4:ef: 71:4e:ac:98:1f:f7:d4:8d:be:3f:fe:b2:19:48:ea: f8:f5:4f:df:44:2d:de:48:06:b3:7b:e2:cc:0a:d7: 3e:0f:37:cb:a4:79:53:66:53:d8:52:80:c1:31:e3: 30:34:49:79:e8:92:ce:f5:e3:1e:ba:9a:10:63:16: b1:e9:41:1b:06:a6:50:d9:ba:15:ed:c9:48:ce:cd: 82:74:63:bf:eb:db:28:cd:d2:2a:95:78:13:4e:5f: d3:03:48:41:45:55:de:48:1d:4f:38:28:7c:3b:d2: fa:da:ba:d3:b8:69:df:61:49:5b:1e:31:3f:bc:d2: 5a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:EE:FC:37:20:A0:E7:EB:04:4E:AC:82:81:F4:B8:96:51:C1:41:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/1d03ded5-67ad-3adf-8fac-21785cf59a34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 23.234.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:f2:e4:30:f6:6a:1c:10:4c:49:34:f0:5b:a6:52:84:7e:d4: 5b:c0:f8:ff:6f:8d:a6:93:24:3c:02:43:dd:70:9a:e5:c0:8d: 4e:85:e5:8a:1b:91:ff:02:db:81:29:85:f2:02:4d:03:bf:94: 2e:3f:c0:fd:71:5e:ce:28:30:9c:a4:c5:01:d0:c3:b2:62:70: 96:c1:02:9e:1c:88:d8:fb:29:b3:1a:2b:38:b3:90:e2:88:da: ca:91:7c:ff:39:e5:d8:98:c0:db:10:3e:15:1b:2e:15:73:9e: 75:c9:02:b8:84:3c:e9:68:a3:a6:ca:b6:4f:78:67:3e:5d:30: 6a:35:41:62:41:90:2c:5e:07:a9:04:94:47:47:10:1f:b1:74: 5c:70:a1:73:c1:91:79:41:78:7c:96:3d:e9:50:d5:3f:26:28: 3d:6f:6e:c1:91:9d:ab:ce:e2:9b:38:8c:69:6b:16:77:27:27: 70:65:e9:14:1e:09:0e:37:a7:3a:b4:26:b1:d5:3a:fd:3e:8d: e7:63:32:50:49:b8:4b:a3:c9:5a:70:ee:d4:23:d7:f3:43:03: c1:68:e0:cd:ee:01:31:4e:17:3e:06:2a:aa:37:db:be:2c:bc: c1:73:6f:65:87:c0:14:f6:29:f6:9e:9e:82:59:f2:06:f4:f6: 69:e0:9e:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi2JhSvNDV3pUQ5/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI1MDEzMDAyMDA0MFoXDTI1MDQzMDAxMDA0MFowLzEtMCsGA1UEAxMk Y2Y3NjNjNDktMGY0Yy00YjI0LWJjZjUtYTdjNzI4Yjk0MjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj65ZiJuOcj3eENBI585RsuSEb5EPKyxdJNNC 4pzBZAAAJr69iB067/GtkKcXRxSUjTyjSk3TnLQtTz3gxK89du4tAaUy2+VWTR9q gFDHGRxjBZYv57wIAa11yq8bBo4JpEo5uwMrYpq/7/6AmXD4kbCYUSyPm/E3GAZM L5rhRyTzW3s25O9xTqyYH/fUjb4//rIZSOr49U/fRC3eSAaze+LMCtc+DzfLpHlT ZlPYUoDBMeMwNEl56JLO9eMeupoQYxax6UEbBqZQ2boV7clIzs2CdGO/69sozdIq lXgTTl/TA0hBRVXeSB1POCh8O9L62rrTuGnfYUlbHjE/vNJatwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7u/DcgoOfrBE6sgoH0uJZRwUEVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvMWQwM2RlZDUtNjdhZC0z YWRmLThmYWMtMjE3ODVjZjU5YTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF+qgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKvy5DD2ahwQTEk08FumUoR+1FvA+P9vjaaTJDwCQ91wmuXAjU6F5Yob kf8C24EphfICTQO/lC4/wP1xXs4oMJykxQHQw7JicJbBAp4ciNj7KbMaKzizkOKI 2sqRfP855diYwNsQPhUbLhVznnXJAriEPOloo6bKtk94Zz5dMGo1QWJBkCxeB6kE lEdHEB+xdFxwoXPBkXlBeHyWPelQ1T8mKD1vbsGRnavO4ps4jGlrFncnJ3Bl6RQe CQ43pzq0JrHVOv0+jedjMlBJuEujyVpw7tQj1/NDA8Fo4M3uATFOFz4GKqo3274s vMFzb2WHwBT2KfaenoJZ8gb09mngns0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:16 2025 by rpki-client