$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/0b137322-9ca3-31c8-9319-f32301edc7c7.roa File: 0b137322-9ca3-31c8-9319-f32301edc7c7.roa (raw, json) Hash identifier: oDVVKka9A7DPAqCc0RDDwKdQ2AzpkY7yF+3I05UFM0I= Subject key identifier: D5:77:18:E2:44:7C:F2:7F:A6:FE:43:0A:92:82:33:25:34:7E:57:76 Certificate issuer: /CN=b24224ba-8340-4a2e-986a-5e1f9b2c2182 Certificate serial: 010D0C9F43285848A99632B2B48670C6EFA3CB20 Authority key identifier: F3:D3:ED:75:10:95:A0:58:67:73:5A:61:EF:97:F9:D6:F3:16:94:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/0b137322-9ca3-31c8-9319-f32301edc7c7.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397913 IP address blocks: 204.235.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/b24224ba-8340-4a2e-986a-5e1f9b2c2182.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/b24224ba-8340-4a2e-986a-5e1f9b2c2182.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:32:b2:b4:86:70:c6:ef:a3:cb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b24224ba-8340-4a2e-986a-5e1f9b2c2182 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=6333c75f-87d2-45c2-a167-a29e455d3e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:67:77:6e:1c:31:ec:f5:fe:9d:27:ec:bc:6a: 6b:b1:68:44:51:8b:14:5c:37:41:61:fd:1b:6f:50: cc:1e:bd:6c:0f:51:62:de:7f:d2:d3:da:e4:22:20: 93:5e:9f:2e:1a:18:3a:8b:a4:ae:b7:b1:2e:79:70: 34:7d:e3:5f:3f:61:ee:db:6d:3c:1a:99:56:3a:ed: dd:df:15:6d:91:8d:8f:cf:5b:b5:31:02:73:d0:24: 57:e6:e4:f4:e5:97:f3:f1:10:b5:25:7f:5a:be:82: c5:28:20:1b:74:3a:78:1b:3c:01:4c:99:5e:e7:7b: 9a:d8:24:0e:c0:ec:65:77:b6:b8:c3:15:0a:5b:15: ee:f2:39:e4:56:53:ba:8b:71:f0:1e:22:db:7f:21: 39:5f:ad:1e:a4:8b:60:09:f4:6c:ff:a6:ef:79:c6: e4:c1:4f:98:18:41:4d:0e:06:97:25:fd:4c:f0:72: 61:cf:59:74:c3:c7:39:1b:b2:e9:23:5f:24:3a:79: 12:ca:92:f2:70:40:58:6e:eb:9c:40:55:d1:7d:e5: 53:3b:84:02:b9:a2:a3:f5:88:cb:48:61:8e:36:3f: 17:77:f5:ec:88:e1:0b:72:00:51:1f:7b:06:05:d4: 98:3d:ad:f8:9d:f1:f5:e6:b4:0f:de:10:bb:66:36: 14:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:77:18:E2:44:7C:F2:7F:A6:FE:43:0A:92:82:33:25:34:7E:57:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/0b137322-9ca3-31c8-9319-f32301edc7c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/b24224ba-8340-4a2e-986a-5e1f9b2c2182.crl X509v3 Authority Key Identifier: keyid:F3:D3:ED:75:10:95:A0:58:67:73:5A:61:EF:97:F9:D6:F3:16:94:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182.cer sbgp-ipAddrBlock: critical IPv4: 204.235.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:c7:c5:66:b3:a8:98:c9:e5:c5:e3:a1:94:df:11:a6:5e:8f: 9d:7d:1c:5b:00:84:26:e7:19:04:00:bb:dc:96:7f:b0:c3:b1: e1:5b:79:26:b5:b2:22:2a:55:6b:86:b0:74:4f:ff:ef:92:51: 3b:c0:78:56:95:c9:22:8d:81:e0:60:73:55:7d:af:12:f4:25: 25:c2:95:75:da:7a:1c:8c:7c:3e:a8:b3:fa:61:09:4b:24:f8: 91:7f:a4:6d:b8:1c:0e:6e:2b:cf:f5:b7:6f:d3:ed:00:22:42: 04:75:5f:ce:76:a1:2e:d4:b6:c3:21:92:19:7a:f0:9f:e6:87: 7a:fc:08:69:3f:53:72:53:aa:ee:56:0a:62:f5:25:ca:f6:65: 5f:11:42:fd:4f:24:9d:8c:79:a7:c0:1d:a1:70:78:7d:a5:17: f6:a5:02:27:09:3e:ca:a2:e8:0a:b0:7f:5c:a6:c4:b5:fe:17: 0e:c9:fe:ec:f9:53:31:27:5f:a0:59:0b:b6:7f:1f:24:55:0e: 77:fc:d0:fc:e0:77:d3:d3:e4:5c:fc:b5:6b:61:07:db:cb:9e: 6e:70:04:50:91:75:ef:b1:cd:bf:4c:70:26:23:c2:85:27:d7: 9e:76:83:f6:2d:12:4a:f8:b7:fb:37:1c:80:3b:5e:3f:fe:02: 95:6a:81:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipljKytIZwxu+jyyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI0MjI0YmEtODM0MC00YTJlLTk4NmEtNWUxZjliMmMy MTgyMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk NjMzM2M3NWYtODdkMi00NWMyLWExNjctYTI5ZTQ1NWQzZTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Wd3bhwx7PX+nSfsvGprsWhEUYsUXDdBYf0b b1DMHr1sD1Fi3n/S09rkIiCTXp8uGhg6i6Sut7EueXA0feNfP2Hu2208GplWOu3d 3xVtkY2Pz1u1MQJz0CRX5uT05Zfz8RC1JX9avoLFKCAbdDp4GzwBTJle53ua2CQO wOxld7a4wxUKWxXu8jnkVlO6i3HwHiLbfyE5X60epItgCfRs/6bvecbkwU+YGEFN DgaXJf1M8HJhz1l0w8c5G7LpI18kOnkSypLycEBYbuucQFXRfeVTO4QCuaKj9YjL SGGONj8Xd/XsiOELcgBRH3sGBdSYPa34nfH15rQP3hC7ZjYU4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNV3GOJEfPJ/pv5DCpKCMyU0fld2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMjQy MjRiYS04MzQwLTRhMmUtOTg2YS01ZTFmOWIyYzIxODIvMGIxMzczMjItOWNhMy0z MWM4LTkzMTktZjMyMzAxZWRjN2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjI0MjI0YmEtODM0MC00YTJlLTk4 NmEtNWUxZjliMmMyMTgyL2IyNDIyNGJhLTgzNDAtNGEyZS05ODZhLTVlMWY5YjJj MjE4Mi5jcmwwHwYDVR0jBBgwFoAU89PtdRCVoFhnc1ph75f51vMWlLwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMjQyMjRiYS04MzQwLTRhMmUtOTg2YS01ZTFm OWIyYzIxODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzOugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTHxWazqJjJ5cXjoZTfEaZej519HFsAhCbnGQQAu9yWf7DDseFbeSa1 siIqVWuGsHRP/++SUTvAeFaVySKNgeBgc1V9rxL0JSXClXXaehyMfD6os/phCUsk +JF/pG24HA5uK8/1t2/T7QAiQgR1X852oS7UtsMhkhl68J/mh3r8CGk/U3JTqu5W CmL1Jcr2ZV8RQv1PJJ2MeafAHaFweH2lF/alAicJPsqi6Aqwf1ymxLX+Fw7J/uz5 UzEnX6BZC7Z/HyRVDnf80Pzgd9PT5Fz8tWthB9vLnm5wBFCRde+xzb9McCYjwoUn 1552g/YtEkr4t/s3HIA7Xj/+ApVqgTw= -----END CERTIFICATE-----Generated at Sun Feb 16 20:49:44 2025 by rpki-client