$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/95f72258-e028-38f3-9aa4-eb809a802750.roa File: 95f72258-e028-38f3-9aa4-eb809a802750.roa (raw, json) Hash identifier: 42h7z9dFxfgczpSPQkB2GX6TAXoMF66hUql5AggJqiA= Subject key identifier: 80:9A:F3:21:F4:44:4C:40:9C:63:3D:21:F0:F0:03:5D:6D:6F:C4:E6 Certificate issuer: /CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c Certificate serial: 010D0C9F4328584827C536D1D3CF8059FF595B00 Authority key identifier: 44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/95f72258-e028-38f3-9aa4-eb809a802750.roa Signing time: Tue 10 Dec 2024 02:00:40 +0000 ROA not before: Tue 10 Dec 2024 02:00:40 +0000 ROA not after: Mon 10 Mar 2025 01:00:40 +0000 asID: 32217 IP address blocks: 23.156.192.0/24 maxlen: 24 23.174.112.0/24 maxlen: 24 142.202.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:27:c5:36:d1:d3:cf:80:59:ff:59:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c Validity Not Before: Dec 10 02:00:40 2024 GMT Not After : Mar 10 01:00:40 2025 GMT Subject: CN=eb757b30-4e80-49d1-81ef-4ae5a16e7c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d6:6f:ca:1a:a4:33:71:be:73:a5:ef:09:1f: 7f:39:7e:19:2c:97:97:4f:b7:ee:4f:e9:f9:33:38: 01:89:44:c6:dd:5a:47:b0:f5:1c:9e:34:36:89:92: 29:3a:79:7f:20:2c:e1:c3:61:d6:14:95:6e:4d:11: bc:b0:b8:2b:d5:c4:34:13:c7:f7:7f:51:46:43:58: 57:cf:0d:69:83:85:b4:0f:32:b4:a3:12:5b:c2:a2: 21:d8:da:40:62:70:64:4e:8d:ab:e9:2a:04:9c:78: 93:14:46:3b:51:47:0f:a1:ca:8f:f7:4c:6a:01:ca: 20:09:ee:51:35:f8:c7:8e:d9:57:2b:7c:96:49:cb: ec:a1:fa:da:ce:5b:78:bd:d2:69:74:d4:45:26:9c: be:72:54:ea:fd:6a:a2:f7:f5:fb:eb:bd:3b:36:2b: ad:97:6e:00:9f:e4:e4:47:16:3d:0d:00:eb:24:1e: a8:9a:a7:66:f4:09:7d:9a:6d:3e:1d:de:1a:2f:c8: 2b:8a:be:fe:b7:7e:c8:8a:bd:11:70:33:10:2c:3d: 9e:81:2b:01:b7:3b:29:d6:14:b0:c2:8a:dd:ec:b5: 66:b2:d2:17:f1:2f:8d:82:3a:3b:ac:18:cb:fa:7a: c9:f8:59:c8:39:93:aa:a4:d3:94:2e:64:0c:cc:be: 15:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9A:F3:21:F4:44:4C:40:9C:63:3D:21:F0:F0:03:5D:6D:6F:C4:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/95f72258-e028-38f3-9aa4-eb809a802750.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl X509v3 Authority Key Identifier: keyid:44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer sbgp-ipAddrBlock: critical IPv4: 23.156.192.0/24 23.174.112.0/24 142.202.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:1e:93:5f:9e:a8:25:fa:72:40:f7:9d:45:99:2e:2c:3e:f6: 8f:32:43:67:72:26:6c:d3:4d:5a:84:b4:6e:de:75:a0:b1:48: 2a:9f:66:4e:58:ca:c6:c2:e1:d6:93:60:0c:22:8a:1f:b4:8f: 86:c5:c4:05:0e:5d:0d:fd:5b:3c:a1:3c:3e:85:53:e4:48:ed: 18:73:b2:ec:af:b2:a1:57:60:2c:0e:fc:fc:b6:24:6a:b1:c5: 68:8e:53:01:d6:b0:e7:d5:0a:ae:db:1b:b6:ef:37:ac:5d:0a: 45:82:e6:ae:6a:0c:a2:24:be:61:ed:84:ee:4f:ba:f3:7c:e5: 0a:d2:a1:46:15:5d:3d:92:4e:c7:ef:a8:da:37:1e:16:13:a8: 01:de:21:74:44:f7:d3:2e:1d:96:01:95:c6:db:60:f0:2b:29: 90:2c:06:d9:0c:ac:70:19:41:10:04:22:15:22:d1:c7:11:1f: 3c:65:0f:e7:77:0d:62:e1:f8:09:6c:04:cf:9a:1e:24:f4:a0: 4c:fb:b4:10:42:f6:a9:76:54:2f:22:e3:e7:11:62:c0:28:4d: 67:23:11:29:b5:9d:b7:93:06:68:d2:a6:d2:4a:2f:6c:0e:77: a2:08:c0:39:71:9e:dc:20:6a:bf:05:f8:69:59:7b:f1:38:48: 5b:75:14:2c -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEgnxTbR08+AWf9ZWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhlMWY5ZWEtMjRiZi00YzIyLWExODItZmM5MjVkNWE4 MTljMB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk ZWI3NTdiMzAtNGU4MC00OWQxLTgxZWYtNGFlNWExNmU3YzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tZvyhqkM3G+c6XvCR9/OX4ZLJeXT7fuT+n5 MzgBiUTG3VpHsPUcnjQ2iZIpOnl/ICzhw2HWFJVuTRG8sLgr1cQ0E8f3f1FGQ1hX zw1pg4W0DzK0oxJbwqIh2NpAYnBkTo2r6SoEnHiTFEY7UUcPocqP90xqAcogCe5R NfjHjtlXK3yWScvsofrazlt4vdJpdNRFJpy+clTq/Wqi9/X76707Niutl24An+Tk RxY9DQDrJB6omqdm9Al9mm0+Hd4aL8grir7+t37Iir0RcDMQLD2egSsBtzsp1hSw word7LVmstIX8S+Ngjo7rBjL+nrJ+FnIOZOqpNOULmQMzL4VXQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFICa8yH0RExAnGM9IfDwA11tb8TmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yOGUx ZjllYS0yNGJmLTRjMjItYTE4Mi1mYzkyNWQ1YTgxOWMvOTVmNzIyNTgtZTAyOC0z OGYzLTlhYTQtZWI4MDlhODAyNzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjhlMWY5ZWEtMjRiZi00YzIyLWEx ODItZmM5MjVkNWE4MTljLzI4ZTFmOWVhLTI0YmYtNGMyMi1hMTgyLWZjOTI1ZDVh ODE5Yy5jcmwwHwYDVR0jBBgwFoAURJcM9+Kw97NRT515flzDl/luGxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yOGUxZjllYS0yNGJmLTRjMjItYTE4Mi1mYzky NWQ1YTgxOWMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAF5zAAwQA F65wAwQBjsp0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADsek1+eqCX6ckD3nUWZLiw+9o8yQ2dyJmzTTVqE tG7edaCxSCqfZk5YysbC4daTYAwiih+0j4bFxAUOXQ39WzyhPD6FU+RI7Rhzsuyv sqFXYCwO/Py2JGqxxWiOUwHWsOfVCq7bG7bvN6xdCkWC5q5qDKIkvmHthO5PuvN8 5QrSoUYVXT2STsfvqNo3HhYTqAHeIXRE99MuHZYBlcbbYPArKZAsBtkMrHAZQRAE IhUi0ccRHzxlD+d3DWLh+AlsBM+aHiT0oEz7tBBC9ql2VC8i4+cRYsAoTWcjESm1 nbeTBmjSptJKL2wOd6IIwDlxntwgar8F+GlZe/E4SFt1FCw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:57 2025 by rpki-client