$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0a42a172-0f73-3008-af81-6fbc4d92431b.roa File: 0a42a172-0f73-3008-af81-6fbc4d92431b.roa (raw, json) Hash identifier: qMwEFWcRZ8X8ilaTVYNlaE1KN4HofkmOwjmw5DEgk00= Subject key identifier: D6:9B:BD:54:01:A9:99:09:24:96:50:71:5E:9C:BE:42:1E:6A:24:19 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285848159FFC7E5186C7434012E400 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0a42a172-0f73-3008-af81-6fbc4d92431b.roa Signing time: Tue 03 Dec 2024 14:00:52 +0000 ROA not before: Tue 03 Dec 2024 14:00:52 +0000 ROA not after: Mon 03 Mar 2025 14:00:52 +0000 asID: 133752 IP address blocks: 23.19.52.0/24 maxlen: 24 23.19.53.0/24 maxlen: 24 2607:f5b5:2::/48 maxlen: 48 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:15:9f:fc:7e:51:86:c7:43:40:12:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Dec 3 14:00:52 2024 GMT Not After : Mar 3 14:00:52 2025 GMT Subject: CN=48ca4b86-31fb-41d0-aa0d-09b7f1c79c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2d:29:c1:fe:5c:50:66:42:3c:d7:4c:ff:54: 72:f0:cb:d8:74:7d:96:ba:d8:5d:bf:d5:41:e7:03: 16:5e:a4:79:d4:b1:35:6c:bd:7c:79:9c:4c:fa:89: 2d:ae:2a:44:78:5e:30:7e:36:ba:30:a3:cf:90:92: 10:f6:5f:65:5d:9c:20:4b:d1:43:ad:2c:fd:b8:bd: ac:34:48:b1:58:a9:09:b1:4b:be:cc:2e:82:47:26: 05:f8:f0:57:bd:f8:50:bc:af:38:be:5f:d9:99:0a: 62:11:6c:f9:0e:76:53:42:f5:29:e2:f3:88:39:dc: 7c:b8:2b:5f:b0:2f:47:d9:f8:71:f2:56:f9:f0:ee: 23:5f:d7:3c:c7:7d:45:78:d4:53:7f:b3:56:6d:c5: cb:e3:a8:9e:f8:42:fa:0f:b4:f5:31:78:bb:10:c9: 7d:13:4e:d0:db:67:20:ec:e6:4b:2b:a7:d4:15:e7: 09:18:db:0d:16:25:70:01:12:ab:72:0e:7d:29:94: d4:4e:4d:81:44:56:11:17:aa:63:f7:84:a0:1b:ff: a1:89:17:58:b4:e1:8a:45:ec:25:f1:f5:83:c5:6d: 63:69:5e:37:2d:ed:72:d3:4b:81:0f:90:e8:bf:35: 9f:f0:2f:0c:11:48:61:02:83:7a:61:db:6e:c1:f2: b8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9B:BD:54:01:A9:99:09:24:96:50:71:5E:9C:BE:42:1E:6A:24:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0a42a172-0f73-3008-af81-6fbc4d92431b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.52.0/23 IPv6: 2607:f5b5:2::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:6a:dd:4e:ca:7d:5b:d2:f9:c1:6c:27:c3:e8:1f:e7:3d:a6: 58:b2:d3:16:90:25:bb:fa:fd:cb:97:78:a4:0d:a7:ec:48:31: c2:f0:bf:6d:f3:3c:28:9f:b2:e0:4d:ab:63:8a:a7:da:ff:b3: 3a:33:d7:2e:44:7b:88:86:d3:f2:ed:d4:d1:9f:37:b7:f8:df: 83:e0:2d:01:e9:e7:0f:f2:65:58:34:17:32:9f:bb:de:c6:f3: 24:30:0d:0c:95:42:d2:a3:ef:a3:dd:6f:63:a0:41:19:02:04: ef:47:f6:85:86:81:4d:11:6f:da:ca:fe:9d:f2:21:da:a1:a4: e6:dc:96:ce:36:3d:1b:11:5e:a1:e8:5e:cc:fd:28:f4:e5:c2: d2:da:20:6c:13:84:ee:33:fc:76:ee:a4:03:77:37:75:33:98: 87:85:10:cc:5b:01:7c:23:28:85:cf:08:e1:a9:c9:f8:a4:55: f0:17:bc:bd:cc:04:c9:8b:a9:e6:fb:d5:0f:c1:19:08:2a:bb: 00:6f:24:4e:c6:79:42:66:45:c4:15:15:d0:93:c2:79:70:b1: 66:23:e1:0d:2c:5f:3a:94:a9:5c:a9:af:04:37:ad:fe:db:42: 30:36:f2:98:10:d2:ad:e8:f7:a5:1d:a2:2b:e3:ae:e6:b2:3a: 32:dd:15:9b -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEgVn/x+UYbHQ0AS5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI0MTIwMzE0MDA1MloXDTI1MDMwMzE0MDA1MlowLzEtMCsGA1UEAxMk NDhjYTRiODYtMzFmYi00MWQwLWFhMGQtMDliN2YxYzc5YzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS0pwf5cUGZCPNdM/1Ry8MvYdH2Wuthdv9VB 5wMWXqR51LE1bL18eZxM+oktripEeF4wfja6MKPPkJIQ9l9lXZwgS9FDrSz9uL2s NEixWKkJsUu+zC6CRyYF+PBXvfhQvK84vl/ZmQpiEWz5DnZTQvUp4vOIOdx8uCtf sC9H2fhx8lb58O4jX9c8x31FeNRTf7NWbcXL46ie+EL6D7T1MXi7EMl9E07Q22cg 7OZLK6fUFecJGNsNFiVwARKrcg59KZTUTk2BRFYRF6pj94SgG/+hiRdYtOGKRewl 8fWDxW1jaV43Le1y00uBD5DovzWf8C8MEUhhAoN6YdtuwfK4JwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFNabvVQBqZkJJJZQcV6cvkIeaiQZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMGE0MmExNzItMGY3My0z MDA4LWFmODEtNmZiYzRkOTI0MzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBFxM0MA8E AgACMAkDBwEmB/W1AAIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGWrdTsp9W9L5wWwnw+gf5z2mWLLTFpAl u/r9y5d4pA2n7EgxwvC/bfM8KJ+y4E2rY4qn2v+zOjPXLkR7iIbT8u3U0Z83t/jf g+AtAennD/JlWDQXMp+73sbzJDANDJVC0qPvo91vY6BBGQIE70f2hYaBTRFv2sr+ nfIh2qGk5tyWzjY9GxFeoehezP0o9OXC0togbBOE7jP8du6kA3c3dTOYh4UQzFsB fCMohc8I4anJ+KRV8Be8vcwEyYup5vvVD8EZCCq7AG8kTsZ5QmZFxBUV0JPCeXCx ZiPhDSxfOpSpXKmvBDet/ttCMDbymBDSrej3pR2iK+Ou5rI6Mt0Vmw== -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:23 2025 by rpki-client