$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/bcc02f4b-8494-3205-a39a-df56acb1455b.roa File: bcc02f4b-8494-3205-a39a-df56acb1455b.roa (raw, json) Hash identifier: zmWKzCPfcPBsCRjg+ivJJDnNGQ7bMVCFr06IAbSGyb4= Subject key identifier: A7:EF:1D:54:95:52:5B:31:F1:92:9D:FE:2D:BB:B2:16:58:BA:55:F8 Certificate issuer: /CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Certificate serial: 010D0C9F43285848159FFD53EC636C41E3299D80 Authority key identifier: 8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/bcc02f4b-8494-3205-a39a-df56acb1455b.roa Signing time: Tue 03 Dec 2024 14:00:52 +0000 ROA not before: Tue 03 Dec 2024 14:00:52 +0000 ROA not after: Mon 03 Mar 2025 14:00:52 +0000 asID: 210110 IP address blocks: 23.247.132.0/22 maxlen: 24 104.249.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:15:9f:fd:53:ec:63:6c:41:e3:29:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Validity Not Before: Dec 3 14:00:52 2024 GMT Not After : Mar 3 14:00:52 2025 GMT Subject: CN=e418e154-3765-4892-8480-5062e529d0f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:9c:21:0d:1f:d6:2c:bc:d0:92:9e:2b:3d:9b: 16:5f:3c:a1:80:98:8e:41:0e:85:82:52:31:b2:0d: 6e:db:8c:4d:4a:70:9b:ff:c5:c2:e9:08:cd:2c:00: 50:f4:09:e2:ca:bc:d4:6b:40:b9:a4:50:9f:24:4b: a7:e1:8a:a2:8d:71:7b:54:88:ba:3a:f0:3c:70:a4: 8b:31:38:2f:71:79:55:6a:e2:7e:09:05:bd:56:24: a5:b9:76:b4:9a:03:a6:1c:31:62:45:82:de:a6:e2: 7b:cb:29:82:7b:9f:cc:93:3e:e6:98:2d:ca:a7:bd: a8:d0:69:75:18:b9:7b:e0:96:f2:97:b2:eb:a9:eb: 11:41:e7:f3:cf:4d:41:79:a1:28:88:b3:db:3f:72: 29:13:91:f5:d6:a0:64:8a:91:37:53:9d:d3:bc:c6: e2:e5:86:7f:da:b3:bc:7c:92:e2:0e:33:4a:20:c4: d1:88:9d:e0:bb:61:cb:ed:de:39:64:8f:ff:56:1f: 04:55:7d:c0:ae:03:5f:0f:c7:3f:da:12:3f:f0:b4: 44:0f:c2:80:58:89:73:a3:c7:82:77:16:2b:3d:9b: 4c:bc:df:81:27:39:28:f8:d1:8b:7d:bf:1c:4f:61: f1:fb:7c:1e:2a:25:2a:7e:4f:9a:76:72:90:c7:7e: 4c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EF:1D:54:95:52:5B:31:F1:92:9D:FE:2D:BB:B2:16:58:BA:55:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/bcc02f4b-8494-3205-a39a-df56acb1455b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl X509v3 Authority Key Identifier: keyid:8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer sbgp-ipAddrBlock: critical IPv4: 23.247.132.0/22 104.249.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:8e:60:88:47:d3:fa:75:60:88:7f:e3:33:60:0f:f5:17:e1: 48:dc:d3:be:03:89:d0:98:a1:47:1c:10:ad:0e:b4:b9:29:11: cb:0a:67:f7:fa:0c:2f:a7:99:cf:f4:c9:39:fb:24:ff:9b:2d: 85:e7:18:bb:11:77:ab:a4:a0:a4:22:56:ee:94:ff:4e:eb:d7: 4a:28:88:0a:c9:fa:2c:29:7a:b9:58:a4:f6:4d:bb:89:d0:48: 34:d0:19:53:e7:96:77:ee:fb:8e:32:74:de:30:74:a6:7b:c1: 73:ab:1a:e2:b7:ef:ce:34:7d:a1:e1:fa:78:a0:43:ba:95:3a: 2d:61:1b:86:26:1d:7f:f6:b8:ec:9b:b2:80:2a:29:97:a6:b8: d7:1d:3c:37:c4:a8:a0:a0:56:fa:14:dc:ea:db:84:fe:5b:55: 03:80:b0:b0:ee:4f:0b:e3:72:5f:9a:f1:ba:1d:94:83:b2:8b: d1:55:b8:9a:47:29:61:a8:f0:08:c8:b0:c9:3b:40:00:d0:26: 65:cb:ba:73:77:c8:8e:f7:6e:02:47:8a:ac:13:65:6a:63:9b: d4:5b:97:c2:e6:a2:a3:8d:9a:15:76:46:70:b8:24:d9:00:86: 8e:d6:e7:a3:a6:60:a5:8d:00:e1:fe:30:22:14:1a:86:4b:a6: 06:9a:01:d4 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEgVn/1T7GNsQeMpnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3ZmY1Y2MtZThhZS00MGY4LWJjYjktMzkwODEwZWI4 MjFlMB4XDTI0MTIwMzE0MDA1MloXDTI1MDMwMzE0MDA1MlowLzEtMCsGA1UEAxMk ZTQxOGUxNTQtMzc2NS00ODkyLTg0ODAtNTA2MmU1MjlkMGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JwhDR/WLLzQkp4rPZsWXzyhgJiOQQ6FglIx sg1u24xNSnCb/8XC6QjNLABQ9AniyrzUa0C5pFCfJEun4YqijXF7VIi6OvA8cKSL MTgvcXlVauJ+CQW9ViSluXa0mgOmHDFiRYLepuJ7yymCe5/Mkz7mmC3Kp72o0Gl1 GLl74Jbyl7LrqesRQefzz01BeaEoiLPbP3IpE5H11qBkipE3U53TvMbi5YZ/2rO8 fJLiDjNKIMTRiJ3gu2HL7d45ZI//Vh8EVX3ArgNfD8c/2hI/8LRED8KAWIlzo8eC dxYrPZtMvN+BJzko+NGLfb8cT2Hx+3weKiUqfk+adnKQx35M1wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKfvHVSVUlsx8ZKd/i27shZYulX4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdm ZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4MTBlYjgyMWUvYmNjMDJmNGItODQ5NC0z MjA1LWEzOWEtZGY1NmFjYjE0NTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWE3ZmY1Y2MtZThhZS00MGY4LWJj YjktMzkwODEwZWI4MjFlLzFhN2ZmNWNjLWU4YWUtNDBmOC1iY2I5LTM5MDgxMGVi ODIxZS5jcmwwHwYDVR0jBBgwFoAUjcqIVSKcOh2gFz9eNrHSpw0vYCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdmZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4 MTBlYjgyMWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCF/eEAwQC aPmsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAE+OYIhH0/p1YIh/4zNgD/UX4Ujc074DidCYoUccEK0OtLkp EcsKZ/f6DC+nmc/0yTn7JP+bLYXnGLsRd6ukoKQiVu6U/07r10ooiArJ+iwperlY pPZNu4nQSDTQGVPnlnfu+44ydN4wdKZ7wXOrGuK37840faHh+nigQ7qVOi1hG4Ym HX/2uOybsoAqKZemuNcdPDfEqKCgVvoU3OrbhP5bVQOAsLDuTwvjcl+a8bodlIOy i9FVuJpHKWGo8AjIsMk7QADQJmXLunN3yI73bgJHiqwTZWpjm9Rbl8LmoqONmhV2 RnC4JNkAho7W56OmYKWNAOH+MCIUGoZLpgaaAdQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:25 2025 by rpki-client