$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/d8561cc0-42de-398c-82a6-2cae487ec735.roa File: d8561cc0-42de-398c-82a6-2cae487ec735.roa (raw, json) Hash identifier: aWruCA4lrfHkN9dWeJh34oXg76SGL/htjJyTykYzcwA= Subject key identifier: E8:1D:6C:B9:B7:40:D2:96:8A:D1:AF:AF:D6:6B:57:DA:8B:92:DD:7A Certificate issuer: /CN=1b683a16-e9c4-489a-a5e9-3bb1b401f190 Certificate serial: 010D0C9F4328584812D52DE62213E43FA4D09100 Authority key identifier: BA:9B:1D:28:3D:C9:F8:2F:10:17:0C:0E:A5:14:79:05:16:35:4D:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/d8561cc0-42de-398c-82a6-2cae487ec735.roa Signing time: Mon 02 Dec 2024 14:00:51 +0000 ROA not before: Mon 02 Dec 2024 14:00:51 +0000 ROA not after: Sun 02 Mar 2025 14:00:51 +0000 asID: 18863 IP address blocks: 64.28.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/1b683a16-e9c4-489a-a5e9-3bb1b401f190.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/1b683a16-e9c4-489a-a5e9-3bb1b401f190.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:12:d5:2d:e6:22:13:e4:3f:a4:d0:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b683a16-e9c4-489a-a5e9-3bb1b401f190 Validity Not Before: Dec 2 14:00:51 2024 GMT Not After : Mar 2 14:00:51 2025 GMT Subject: CN=00443f21-3cdb-40af-a5e5-242f16f0f9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2e:5c:3c:8f:f7:69:78:05:dd:0d:00:55:06: cf:5d:aa:db:7f:f0:bf:af:0d:76:ca:4b:64:f4:fc: 6c:a0:92:7f:a6:53:48:bd:c5:19:eb:d1:66:08:52: 04:e5:d4:f4:12:57:50:8f:ef:76:08:76:aa:d4:3b: 3c:6e:b7:23:70:16:21:2a:52:03:cb:88:87:18:ac: 52:25:b8:64:fc:3b:06:11:a1:07:61:69:2e:2d:24: 26:b6:ab:33:09:8b:da:dd:c1:14:09:57:9d:d4:62: f3:fd:d2:db:c9:1a:c4:6e:c6:af:35:06:c8:69:57: 26:c4:96:7b:3b:a7:31:70:dd:49:f2:d4:87:e0:88: c8:2c:25:02:81:e3:27:dd:ca:23:24:cd:0c:e2:6f: 2c:cc:db:28:ac:15:86:e1:fb:16:e9:01:db:05:4c: c9:90:bd:4e:ea:ae:28:c9:55:a5:85:b5:3c:a2:a3: a7:04:98:a5:dc:04:4b:67:08:3c:65:ac:8d:2f:11: d9:dc:22:25:b3:7b:3b:18:76:aa:25:a0:1c:48:0c: e3:3d:8c:b5:de:61:df:29:1f:33:de:bd:f6:97:f5: 73:81:1d:07:69:1c:cd:dd:25:eb:f3:5f:f1:57:f3: ee:61:ec:11:5b:c4:c8:4e:8a:eb:5f:d6:a7:55:d3: d8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1D:6C:B9:B7:40:D2:96:8A:D1:AF:AF:D6:6B:57:DA:8B:92:DD:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/d8561cc0-42de-398c-82a6-2cae487ec735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/1b683a16-e9c4-489a-a5e9-3bb1b401f190.crl X509v3 Authority Key Identifier: keyid:BA:9B:1D:28:3D:C9:F8:2F:10:17:0C:0E:A5:14:79:05:16:35:4D:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190.cer sbgp-ipAddrBlock: critical IPv4: 64.28.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:46:bc:4c:a6:3a:12:41:57:00:0b:46:2b:eb:c0:a9:f5:ef: 16:ef:75:a7:8c:0f:d7:9e:90:11:ee:76:9a:ce:df:f7:6a:9c: 60:4e:c4:ba:35:a1:33:44:a2:03:f1:28:f9:cb:1a:54:96:35: 7f:89:22:35:98:8d:a1:a8:01:ed:62:4c:5d:2e:b4:18:37:dd: 95:f6:6b:dd:09:01:6e:57:95:2b:fd:76:a4:99:16:7d:a3:00: a3:40:31:6e:ad:72:e1:0c:89:fc:be:64:1b:01:6c:aa:91:2c: ec:a9:1c:b3:cd:75:d2:ab:f4:49:bd:42:b5:03:18:7e:2d:bb: c7:04:7f:2d:f3:34:68:8b:d9:41:f9:37:4c:09:b7:8e:3c:f3: 44:ea:ab:59:a5:d8:0a:26:98:d7:0a:f5:74:25:00:f3:08:3b: 7a:7c:3a:24:ed:87:38:ce:92:08:ab:74:b1:cc:3b:cd:47:df: 47:7a:95:45:48:aa:1a:8e:23:4b:0e:01:fd:2b:f5:2b:8d:17: 63:06:5f:d9:d4:54:75:28:92:bf:5d:43:df:39:b8:99:59:fc: 1a:5f:21:08:fa:12:86:a6:1a:3e:a2:54:88:50:be:d6:a5:72: c5:fc:91:8a:00:57:01:69:ca:31:ac:21:b6:00:e1:34:ab:ac: 89:dd:80:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgS1S3mIhPkP6TQkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI2ODNhMTYtZTljNC00ODlhLWE1ZTktM2JiMWI0MDFm MTkwMB4XDTI0MTIwMjE0MDA1MVoXDTI1MDMwMjE0MDA1MVowLzEtMCsGA1UEAxMk MDA0NDNmMjEtM2NkYi00MGFmLWE1ZTUtMjQyZjE2ZjBmOWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC5cPI/3aXgF3Q0AVQbPXarbf/C/rw12yktk 9PxsoJJ/plNIvcUZ69FmCFIE5dT0EldQj+92CHaq1Ds8brcjcBYhKlIDy4iHGKxS Jbhk/DsGEaEHYWkuLSQmtqszCYva3cEUCVed1GLz/dLbyRrEbsavNQbIaVcmxJZ7 O6cxcN1J8tSH4IjILCUCgeMn3cojJM0M4m8szNsorBWG4fsW6QHbBUzJkL1O6q4o yVWlhbU8oqOnBJil3ARLZwg8ZayNLxHZ3CIls3s7GHaqJaAcSAzjPYy13mHfKR8z 3r32l/VzgR0HaRzN3SXr81/xV/PuYewRW8TITorrX9anVdPYdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgdbLm3QNKWitGvr9ZrV9qLkt16MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjY4 M2ExNi1lOWM0LTQ4OWEtYTVlOS0zYmIxYjQwMWYxOTAvZDg1NjFjYzAtNDJkZS0z OThjLTgyYTYtMmNhZTQ4N2VjNzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWI2ODNhMTYtZTljNC00ODlhLWE1 ZTktM2JiMWI0MDFmMTkwLzFiNjgzYTE2LWU5YzQtNDg5YS1hNWU5LTNiYjFiNDAx ZjE5MC5jcmwwHwYDVR0jBBgwFoAUupsdKD3J+C8QFwwOpRR5BRY1TZMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjY4M2ExNi1lOWM0LTQ4OWEtYTVlOS0zYmIx YjQwMWYxOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBzuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBGvEymOhJBVwALRivrwKn17xbvdaeMD9eekBHudprO3/dqnGBOxLo1 oTNEogPxKPnLGlSWNX+JIjWYjaGoAe1iTF0utBg33ZX2a90JAW5XlSv9dqSZFn2j AKNAMW6tcuEMify+ZBsBbKqRLOypHLPNddKr9Em9QrUDGH4tu8cEfy3zNGiL2UH5 N0wJt44880Tqq1ml2AommNcK9XQlAPMIO3p8OiTthzjOkgirdLHMO81H30d6lUVI qhqOI0sOAf0r9SuNF2MGX9nUVHUokr9dQ985uJlZ/BpfIQj6EoamGj6iVIhQvtal csX8kYoAVwFpyjGsIbYA4TSrrIndgEU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:32:38 2025 by rpki-client