$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/7b0d64f7-19c5-364d-8282-979e8949aa0e.roa File: 7b0d64f7-19c5-364d-8282-979e8949aa0e.roa (raw, json) Hash identifier: /CQOg2QyPgaSp0U+5Y9VAc5buJx/DoOvFiK72PAhfa8= Subject key identifier: 13:66:DC:99:1E:BB:42:89:53:DD:BB:EB:7F:02:2B:C0:A1:22:9E:88 Certificate issuer: /CN=acc14dc4-6768-43c1-9d95-c89a552020c1 Certificate serial: 010D0C9F432858489EABD6425FB115F4A1E4E980 Authority key identifier: 22:E0:BD:D1:6D:77:45:BC:65:37:F2:40:C2:45:DC:3F:AA:A3:86:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/7b0d64f7-19c5-364d-8282-979e8949aa0e.roa Signing time: Tue 21 Jan 2025 16:10:50 +0000 ROA not before: Tue 21 Jan 2025 16:10:50 +0000 ROA not after: Mon 21 Apr 2025 15:10:50 +0000 asID: 400040 IP address blocks: 91.244.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/acc14dc4-6768-43c1-9d95-c89a552020c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/acc14dc4-6768-43c1-9d95-c89a552020c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:ab:d6:42:5f:b1:15:f4:a1:e4:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acc14dc4-6768-43c1-9d95-c89a552020c1 Validity Not Before: Jan 21 16:10:50 2025 GMT Not After : Apr 21 15:10:50 2025 GMT Subject: CN=23e5b63b-b65c-4a7e-aae3-a37fd2669d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:07:12:15:4d:57:1e:79:31:d8:38:dc:18:32: e3:73:ac:97:ce:38:62:f3:1f:3d:5f:7d:c4:c1:f7: a1:ba:f4:20:ef:9c:54:7c:05:aa:06:90:89:22:c8: 47:f2:40:c6:ed:54:3b:f3:3f:ec:c9:b6:2c:f6:64: 40:33:3a:d5:2b:28:08:c1:16:84:4e:04:06:f9:26: 83:e5:ce:6b:ea:e4:45:fe:c9:2b:83:9b:ba:0f:0b: 33:5c:65:17:7c:26:b6:af:75:c1:8e:11:cb:a6:4f: d2:2d:d2:ce:bb:66:24:3c:4f:12:25:29:f1:1e:8a: a1:5e:ff:ef:30:35:cd:6b:12:01:ad:cc:86:13:f9: 82:c5:b4:7e:95:6e:d2:ef:57:28:a8:58:f7:3e:75: 19:73:1d:9b:5e:8f:42:80:0e:c3:b7:c8:b5:85:b7: 9f:a6:ff:01:70:c8:49:e1:0f:51:3f:6c:d7:b0:e0: a0:a0:1e:23:33:9d:14:c5:9c:66:af:44:cf:2c:3e: 9a:8b:fe:8c:41:6e:3d:10:41:c8:40:5c:ee:0e:7c: 87:d0:e1:21:49:24:53:d7:55:7c:74:ea:00:68:7d: 28:19:6d:6c:22:e4:0b:69:19:44:55:2f:ab:e9:ca: a8:2c:a9:82:b1:f4:c4:b4:2d:e8:94:df:87:50:92: f3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:66:DC:99:1E:BB:42:89:53:DD:BB:EB:7F:02:2B:C0:A1:22:9E:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/7b0d64f7-19c5-364d-8282-979e8949aa0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/acc14dc4-6768-43c1-9d95-c89a552020c1.crl X509v3 Authority Key Identifier: keyid:22:E0:BD:D1:6D:77:45:BC:65:37:F2:40:C2:45:DC:3F:AA:A3:86:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1.cer sbgp-ipAddrBlock: critical IPv4: 91.244.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:4f:b5:dc:9c:d3:33:d0:b9:51:ec:e1:cb:1f:8d:9b:f0:55: a9:f4:56:88:d0:76:f3:a0:93:38:14:c5:90:69:fe:e5:f7:6c: a1:7f:d3:9f:52:d2:8d:db:96:d0:59:83:b8:44:a6:87:71:67: 1a:c9:03:54:00:7e:8a:20:c6:ce:f8:a1:01:e9:21:3e:6c:8a: 93:60:d8:22:81:5a:73:0e:c5:76:e9:e0:2f:89:24:c7:4b:54: 45:b6:6f:18:19:e0:89:cf:fe:43:cf:35:30:58:12:11:2c:05: eb:75:9c:58:5e:87:2a:97:aa:d2:3d:89:a4:0e:1f:b9:d8:be: 84:8a:6a:64:ac:8e:be:ae:06:bd:01:e4:9f:68:be:65:a5:37: ed:7b:23:19:cb:70:a5:c7:eb:ba:42:ea:64:b6:f0:d1:d8:03: 47:c9:9b:42:45:dc:77:28:18:fc:bf:46:ec:d1:0f:50:fd:5a: 2e:21:36:76:35:60:ab:fd:32:46:8c:35:c2:5c:ab:7b:bd:d4: 3a:e5:b7:5f:fb:e7:66:0a:19:b8:00:c7:f0:7d:b3:42:12:ae: 6b:f5:81:a8:01:70:5d:c6:3c:15:bb:0c:e5:56:8c:4b:8e:48: 1e:49:47:61:1f:20:4b:ef:e0:82:29:3c:40:8f:98:92:fa:7d: e0:3b:00:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEieq9ZCX7EV9KHk6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWNjMTRkYzQtNjc2OC00M2MxLTlkOTUtYzg5YTU1MjAy MGMxMB4XDTI1MDEyMTE2MTA1MFoXDTI1MDQyMTE1MTA1MFowLzEtMCsGA1UEAxMk MjNlNWI2M2ItYjY1Yy00YTdlLWFhZTMtYTM3ZmQyNjY5ZDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAcSFU1XHnkx2DjcGDLjc6yXzjhi8x89X33E wfehuvQg75xUfAWqBpCJIshH8kDG7VQ78z/sybYs9mRAMzrVKygIwRaETgQG+SaD 5c5r6uRF/skrg5u6DwszXGUXfCa2r3XBjhHLpk/SLdLOu2YkPE8SJSnxHoqhXv/v MDXNaxIBrcyGE/mCxbR+lW7S71coqFj3PnUZcx2bXo9CgA7Dt8i1hbefpv8BcMhJ 4Q9RP2zXsOCgoB4jM50UxZxmr0TPLD6ai/6MQW49EEHIQFzuDnyH0OEhSSRT11V8 dOoAaH0oGW1sIuQLaRlEVS+r6cqoLKmCsfTEtC3olN+HUJLzowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNm3Jkeu0KJU927638CK8ChIp6IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hY2Mx NGRjNC02NzY4LTQzYzEtOWQ5NS1jODlhNTUyMDIwYzEvN2IwZDY0ZjctMTljNS0z NjRkLTgyODItOTc5ZTg5NDlhYTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWNjMTRkYzQtNjc2OC00M2MxLTlk OTUtYzg5YTU1MjAyMGMxL2FjYzE0ZGM0LTY3NjgtNDNjMS05ZDk1LWM4OWE1NTIw MjBjMS5jcmwwHwYDVR0jBBgwFoAUIuC90W13RbxlN/JAwkXcP6qjhiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hY2MxNGRjNC02NzY4LTQzYzEtOWQ5NS1jODlh NTUyMDIwYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/TEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5Ptdyc0zPQuVHs4csfjZvwVan0VojQdvOgkzgUxZBp/uX3bKF/059S 0o3bltBZg7hEpodxZxrJA1QAfoogxs74oQHpIT5sipNg2CKBWnMOxXbp4C+JJMdL VEW2bxgZ4InP/kPPNTBYEhEsBet1nFhehyqXqtI9iaQOH7nYvoSKamSsjr6uBr0B 5J9ovmWlN+17IxnLcKXH67pC6mS28NHYA0fJm0JF3HcoGPy/RuzRD1D9Wi4hNnY1 YKv9MkaMNcJcq3u91Drlt1/752YKGbgAx/B9s0ISrmv1gagBcF3GPBW7DOVWjEuO SB5JR2EfIEvv4IIpPECPmJL6feA7AOI= -----END CERTIFICATE-----Generated at Sat Apr 5 04:41:25 2025 by rpki-client