$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/28d5ba8f-0f4b-3f95-a9a5-ed8a41d3d0e9.roa File: 28d5ba8f-0f4b-3f95-a9a5-ed8a41d3d0e9.roa (raw, json) Hash identifier: sjfbfDI98RYw3K4rbTqB3aWQHQ/jrqLr0UEog1ASUyE= Subject key identifier: 2E:AE:8B:E3:80:EC:1C:4F:60:AB:B3:25:AE:0A:BA:C0:BA:5F:AE:F7 Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F4328584832F0222338ED94F95D4E81C0 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/28d5ba8f-0f4b-3f95-a9a5-ed8a41d3d0e9.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 7018 IP address blocks: 23.227.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:22:23:38:ed:94:f9:5d:4e:81:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=efbc84f8-648b-4061-b94f-72b4514103a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9c:e3:f4:e7:c7:dc:5e:ab:a3:8f:37:14:59: d7:54:a9:de:b8:ba:5b:b7:45:fc:a6:f9:15:04:ce: b8:fd:67:04:87:79:2b:02:52:5f:99:c0:c9:01:51: 36:0f:be:c1:19:46:71:a6:5b:f2:99:55:f5:d1:9f: 2d:b8:4c:3e:0b:30:bf:20:5f:cb:46:19:2e:64:22: e1:a6:44:46:dc:5e:ce:63:91:3a:66:5a:00:d8:28: c3:ff:0c:97:37:73:f5:b4:28:ab:f1:74:ca:d3:4d: 18:bd:94:a8:8c:9c:d2:68:38:48:4d:d0:c6:34:fc: 7f:b5:a6:e7:b7:1a:67:2f:d5:e7:83:39:c7:ca:69: 99:64:3f:b9:2f:80:f5:ec:e3:5c:b0:65:01:dd:22: 4d:54:ec:bd:9a:01:cd:e1:03:20:8a:33:f0:f7:b4: 57:b3:30:90:05:f0:b5:ed:2f:ae:33:82:e6:57:b8: 34:52:c7:75:b6:6e:a1:b6:92:a1:f9:07:90:5b:d2: 43:69:d2:2f:b3:e7:3d:36:f7:75:e5:84:3d:86:03: 4e:06:01:99:4d:7f:23:6f:89:5a:83:69:31:2e:9f: b8:5e:ea:e7:73:6f:4b:4c:a5:1a:c9:b5:4c:bb:6f: ae:11:c4:39:05:7e:8b:73:bd:69:e2:35:90:41:b1: 5e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:AE:8B:E3:80:EC:1C:4F:60:AB:B3:25:AE:0A:BA:C0:BA:5F:AE:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/28d5ba8f-0f4b-3f95-a9a5-ed8a41d3d0e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 23.227.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:2b:91:32:a8:20:5c:e2:ac:92:53:c1:2d:db:b0:78:d3:f9: a6:9f:c8:b7:78:4d:e0:f9:7c:8e:f8:4e:78:69:7d:2f:ae:3e: 6e:22:55:77:64:6a:83:10:0d:5d:52:eb:77:70:fd:4b:37:62: 54:ea:c9:75:1e:6c:50:e3:04:5c:4b:b2:b3:b0:e4:84:f6:47: f4:73:8d:c9:bb:5c:b9:ee:58:a6:2e:b2:b3:a7:72:e6:dc:c0: 4f:85:07:9d:28:3a:00:be:f2:b0:3b:c2:63:09:1a:7a:d8:12: 80:0f:8b:f4:4a:12:25:ce:53:f3:ca:35:a8:bc:48:4b:89:da: e0:02:eb:03:de:0d:c7:4d:9f:a9:39:0e:35:34:b9:3b:33:f4: 78:7b:34:96:1b:92:e7:3d:0d:f2:6f:02:11:fe:a8:10:b7:a9: 76:ab:a5:d1:b7:91:b0:d0:d2:52:cd:71:03:9d:80:39:c6:d2: b3:17:8a:76:0a:82:bd:cf:5b:35:93:51:9d:f4:f6:50:5c:c2: 41:9b:a7:73:6d:c4:28:6a:5c:41:98:3a:52:56:40:9e:2d:6c: 68:08:36:7a:96:1c:3f:59:d9:ec:33:2a:ec:62:cc:0c:08:36: ee:75:a0:58:ac:0d:ae:68:d0:44:1b:f3:7b:ca:7c:88:c3:ba: a1:ad:8e:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8CIjOO2U+V1OgcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk ZWZiYzg0ZjgtNjQ4Yi00MDYxLWI5NGYtNzJiNDUxNDEwM2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpzj9OfH3F6ro483FFnXVKneuLpbt0X8pvkV BM64/WcEh3krAlJfmcDJAVE2D77BGUZxplvymVX10Z8tuEw+CzC/IF/LRhkuZCLh pkRG3F7OY5E6ZloA2CjD/wyXN3P1tCir8XTK000YvZSojJzSaDhITdDGNPx/tabn txpnL9XngznHymmZZD+5L4D17ONcsGUB3SJNVOy9mgHN4QMgijPw97RXszCQBfC1 7S+uM4LmV7g0Usd1tm6htpKh+QeQW9JDadIvs+c9Nvd15YQ9hgNOBgGZTX8jb4la g2kxLp+4Xurnc29LTKUaybVMu2+uEcQ5BX6Lc71p4jWQQbFeewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6ui+OA7BxPYKuzJa4KusC6X673MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvMjhkNWJhOGYtMGY0Yi0z Zjk1LWE5YTUtZWQ4YTQxZDNkMGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+NAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIrkTKoIFzirJJTwS3bsHjT+aafyLd4TeD5fI74TnhpfS+uPm4iVXdk aoMQDV1S63dw/Us3YlTqyXUebFDjBFxLsrOw5IT2R/Rzjcm7XLnuWKYusrOncubc wE+FB50oOgC+8rA7wmMJGnrYEoAPi/RKEiXOU/PKNai8SEuJ2uAC6wPeDcdNn6k5 DjU0uTsz9Hh7NJYbkuc9DfJvAhH+qBC3qXarpdG3kbDQ0lLNcQOdgDnG0rMXinYK gr3PWzWTUZ309lBcwkGbp3NtxChqXEGYOlJWQJ4tbGgINnqWHD9Z2ewzKuxizAwI Nu51oFisDa5o0EQb83vKfIjDuqGtjgc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:04 2025 by rpki-client