$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/610c7ada-377e-34d0-9c81-d4d76be9e55d.roa File: 610c7ada-377e-34d0-9c81-d4d76be9e55d.roa (raw, json) Hash identifier: WDoIvJ06TTxEyyDRt7dZeSh4m/GKC+baBLwRn8ZeRMY= Subject key identifier: B0:8D:39:67:17:E5:D8:16:93:72:C8:25:8E:BC:B2:9A:C1:2F:7D:18 Certificate issuer: /CN=6aa8cf92-6ed1-444d-b120-4e622c110d10 Certificate serial: 010D0C9F43285848F65BD92FA214958D724EBE00 Authority key identifier: BD:32:61:B6:44:20:78:C5:81:2B:AB:2D:AB:4C:0D:8D:0A:05:EC:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/610c7ada-377e-34d0-9c81-d4d76be9e55d.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 398712 IP address blocks: 23.165.240.0/24 maxlen: 24 45.4.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/6aa8cf92-6ed1-444d-b120-4e622c110d10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/6aa8cf92-6ed1-444d-b120-4e622c110d10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:d9:2f:a2:14:95:8d:72:4e:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6aa8cf92-6ed1-444d-b120-4e622c110d10 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=74c9cebe-2e4f-4aac-b57e-32778df68101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:19:1b:b5:8e:46:da:72:a5:a3:69:b6:ef:4d: 9f:74:3f:37:6a:ba:6b:13:5a:3b:82:49:b7:c5:25: 60:65:d6:5b:69:fc:71:bf:71:c8:6a:b7:3f:d7:51: 48:99:68:d1:1d:d4:eb:11:ad:8e:dd:1f:59:96:00: 81:87:2c:ab:57:d7:23:f0:a2:80:30:f0:5b:d1:7b: 5f:70:42:68:f4:dd:6c:c7:ca:6d:ee:3b:66:6e:e0: 71:7c:b8:60:41:5a:e5:c7:cc:24:86:e2:44:42:83: 47:d4:75:32:23:bf:7f:bd:59:09:ae:ae:6f:8c:93: 6a:6f:c4:42:a5:17:1d:19:57:4f:de:e8:ef:15:b4: 86:5b:dd:37:33:3a:9d:2b:ef:f9:b5:c3:77:c1:eb: f5:6c:28:f7:e7:e3:1a:1b:c8:4d:ee:5c:99:fc:5e: a5:fa:f0:c7:70:43:66:5d:c4:81:19:82:53:a2:e2: 55:e2:99:cb:b6:9b:74:31:e4:72:4f:76:67:8d:d6: a7:96:26:2a:af:b7:07:c8:d4:3f:4c:5a:ed:a7:1c: 44:39:56:10:5a:1d:b2:71:af:0a:87:21:96:08:6c: 0a:0d:8e:e0:65:89:8e:28:c4:1d:80:45:1b:2d:81: 9d:32:c4:c5:dd:76:39:47:6e:ae:65:ee:2b:a1:9d: f8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:8D:39:67:17:E5:D8:16:93:72:C8:25:8E:BC:B2:9A:C1:2F:7D:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/610c7ada-377e-34d0-9c81-d4d76be9e55d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/6aa8cf92-6ed1-444d-b120-4e622c110d10.crl X509v3 Authority Key Identifier: keyid:BD:32:61:B6:44:20:78:C5:81:2B:AB:2D:AB:4C:0D:8D:0A:05:EC:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10.cer sbgp-ipAddrBlock: critical IPv4: 23.165.240.0/24 45.4.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:62:e7:0f:3f:ea:8e:bc:43:c9:86:5b:71:b5:ee:f5:7e:a5: 64:c1:b5:e9:47:05:45:22:15:cf:09:b7:b3:6f:40:9e:8e:d6: 5f:07:1c:34:20:56:b3:0f:f6:29:0c:01:df:c9:d3:ef:bb:ca: 30:75:5c:fa:16:32:78:99:cf:d4:f3:59:52:ac:b1:a6:09:66: 94:6b:e5:a8:7b:46:7b:d7:fb:51:69:a9:36:e9:b1:33:3e:33: e2:9d:d5:55:7d:cf:52:c4:34:4e:2f:86:f8:e6:1c:c6:7e:07: 09:90:ec:dd:7f:ef:78:73:80:f3:a2:2b:71:72:44:01:c9:cc: 09:b6:fb:ac:c5:65:b9:67:7c:c5:b8:b0:56:d2:4c:a7:1a:ad: dc:87:9a:9c:a5:ea:b2:ac:32:b8:5b:85:ce:52:87:8a:c4:96: 34:92:be:ad:6b:23:d4:f1:03:ce:f7:7f:af:b5:8b:76:ca:15: ad:79:c0:81:b3:0e:6e:85:0b:78:b4:38:23:ca:8c:e5:a4:ee: 4d:1e:bb:f3:fd:50:6b:0d:18:c2:3f:85:82:b1:02:fd:eb:73: 53:3a:40:50:bb:63:03:dc:9e:1b:3a:14:2c:b0:06:c7:43:42: 62:5d:b6:26:58:eb:db:65:88:b4:8f:69:f4:b9:af:46:22:54: 99:d5:d1:0c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEj2W9kvohSVjXJOvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmFhOGNmOTItNmVkMS00NDRkLWIxMjAtNGU2MjJjMTEw ZDEwMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk NzRjOWNlYmUtMmU0Zi00YWFjLWI1N2UtMzI3NzhkZjY4MTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRkbtY5G2nKlo2m2702fdD83arprE1o7gkm3 xSVgZdZbafxxv3HIarc/11FImWjRHdTrEa2O3R9ZlgCBhyyrV9cj8KKAMPBb0Xtf cEJo9N1sx8pt7jtmbuBxfLhgQVrlx8wkhuJEQoNH1HUyI79/vVkJrq5vjJNqb8RC pRcdGVdP3ujvFbSGW903MzqdK+/5tcN3wev1bCj35+MaG8hN7lyZ/F6l+vDHcENm XcSBGYJTouJV4pnLtpt0MeRyT3ZnjdanliYqr7cHyNQ/TFrtpxxEOVYQWh2yca8K hyGWCGwKDY7gZYmOKMQdgEUbLYGdMsTF3XY5R26uZe4roZ34aQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLCNOWcX5dgWk3LIJY68sprBL30YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YWE4 Y2Y5Mi02ZWQxLTQ0NGQtYjEyMC00ZTYyMmMxMTBkMTAvNjEwYzdhZGEtMzc3ZS0z NGQwLTljODEtZDRkNzZiZTllNTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmFhOGNmOTItNmVkMS00NDRkLWIx MjAtNGU2MjJjMTEwZDEwLzZhYThjZjkyLTZlZDEtNDQ0ZC1iMTIwLTRlNjIyYzEx MGQxMC5jcmwwHwYDVR0jBBgwFoAUvTJhtkQgeMWBK6stq0wNjQoF7HMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82YWE4Y2Y5Mi02ZWQxLTQ0NGQtYjEyMC00ZTYy MmMxMTBkMTAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF6XwAwQC LQTEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHZi5w8/6o68Q8mGW3G17vV+pWTBtelHBUUiFc8Jt7NvQJ6O 1l8HHDQgVrMP9ikMAd/J0++7yjB1XPoWMniZz9TzWVKssaYJZpRr5ah7RnvX+1Fp qTbpsTM+M+Kd1VV9z1LENE4vhvjmHMZ+BwmQ7N1/73hzgPOiK3FyRAHJzAm2+6zF ZblnfMW4sFbSTKcardyHmpyl6rKsMrhbhc5Sh4rEljSSvq1rI9TxA873f6+1i3bK Fa15wIGzDm6FC3i0OCPKjOWk7k0eu/P9UGsNGMI/hYKxAv3rc1M6QFC7YwPcnhs6 FCywBsdDQmJdtiZY69tliLSPafS5r0YiVJnV0Qw= -----END CERTIFICATE-----Generated at Tue Apr 8 15:57:10 2025 by rpki-client