$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/cc3f750d-0905-3e47-862f-b41ca36a1c13.roa File: cc3f750d-0905-3e47-862f-b41ca36a1c13.roa (raw, json) Hash identifier: tr+fZtwjT/7oF+A1gSdSYT0Nnwf4COkzxMtyc6M8bEk= Subject key identifier: 4E:17:AC:72:4A:85:EA:11:8F:89:7F:66:75:76:BE:CB:8B:41:A3:F6 Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F43285848090FB66EADD039E624DDBCC0 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/cc3f750d-0905-3e47-862f-b41ca36a1c13.roa Signing time: Fri 29 Nov 2024 02:00:39 +0000 ROA not before: Fri 29 Nov 2024 02:00:39 +0000 ROA not after: Thu 27 Feb 2025 02:00:39 +0000 asID: 16509 IP address blocks: 155.63.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:09:0f:b6:6e:ad:d0:39:e6:24:dd:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Nov 29 02:00:39 2024 GMT Not After : Feb 27 02:00:39 2025 GMT Subject: CN=5392f8cf-749d-415c-9ae6-5e23e3daca7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:09:ca:ff:fa:c3:23:f1:5c:97:ed:f2:fc:1f: 41:5a:b8:48:6b:27:4f:b6:de:f5:6d:4d:95:74:03: fd:bc:b7:dc:7e:05:af:ac:35:ed:b9:50:34:56:b3: d6:6b:4c:aa:42:bf:f5:97:b6:b1:04:29:5e:8f:30: db:d8:7b:a1:ea:fb:c8:95:3d:dd:60:8a:27:3c:b2: 4b:ef:38:57:c2:27:a1:5b:4b:42:93:1c:f8:0a:89: 77:d1:0f:44:0a:e2:dd:4c:81:d0:69:e3:d0:28:f7: bb:f3:a3:13:6b:91:54:f8:5c:0e:97:79:0c:29:f7: e9:0e:ae:25:f6:dd:93:4b:60:82:1d:6f:70:e2:87: c3:79:25:4d:7f:b5:d2:2f:d4:fc:de:91:bf:3a:e7: 73:55:91:93:b3:ba:70:b3:b4:37:0f:2a:b3:60:d8: 9e:80:73:23:04:6e:03:9e:5d:40:48:ea:fa:b8:4e: 25:14:68:1b:8e:b6:bf:f5:40:e9:d6:6f:a4:78:4c: 9e:7e:c8:6a:a2:29:0c:2a:b0:d3:d9:fe:e3:74:c8: fb:f8:ca:67:cb:cf:14:5b:e5:60:3d:33:47:e8:73: f7:da:33:52:48:59:a6:f9:94:06:a1:2e:20:39:5c: d8:c8:d8:2a:22:5d:dc:7c:5e:96:97:42:4c:9b:a7: e9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:17:AC:72:4A:85:EA:11:8F:89:7F:66:75:76:BE:CB:8B:41:A3:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/cc3f750d-0905-3e47-862f-b41ca36a1c13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:1a:41:7b:e9:26:9c:59:34:8d:84:92:53:71:df:84:af:04: 37:2b:2d:1e:00:95:f1:40:54:6f:ea:c0:69:a7:4f:f2:cf:b2: 90:7b:89:dc:7b:ba:d0:7e:a7:3d:c4:fc:4d:6b:8d:03:71:ad: a1:54:9a:23:32:8e:39:10:df:92:40:5d:6f:e3:c9:91:cb:7a: ba:a9:78:7f:0c:ac:79:d3:a9:cf:ad:6e:b4:bf:ba:42:ce:6e: a2:a9:3b:d7:c9:93:36:76:39:c1:24:82:83:b3:88:04:9e:8e: 1e:e8:4f:47:c6:65:90:d6:b2:fd:d3:b1:7d:56:73:95:bc:b2: df:5f:9d:48:89:d5:ca:a5:5a:7c:b1:59:98:e8:ca:4e:af:75: 5b:0b:dd:47:87:c3:ec:67:3f:68:7c:86:b4:03:34:0d:43:0e: bf:3e:a7:74:cb:7a:0a:c7:9f:ad:1a:ad:ef:9a:0b:02:34:2a: ff:bf:b8:8c:41:6a:0e:59:c5:8c:eb:bc:f0:dd:ab:50:56:25: ab:30:09:e2:ee:7f:8b:57:dc:60:2b:a4:13:5e:8a:75:75:17: 45:80:3f:cf:d1:19:a0:47:38:ba:5f:6f:8d:21:ca:9e:15:04: 25:90:e5:9a:f1:1a:ca:bd:24:7b:58:80:d0:c0:4a:9a:39:fa: e2:f2:8d:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgJD7ZurdA55iTdvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI0MTEyOTAyMDAzOVoXDTI1MDIyNzAyMDAzOVowLzEtMCsGA1UEAxMk NTM5MmY4Y2YtNzQ5ZC00MTVjLTlhZTYtNWUyM2UzZGFjYTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngnK//rDI/Fcl+3y/B9BWrhIaydPtt71bU2V dAP9vLfcfgWvrDXtuVA0VrPWa0yqQr/1l7axBClejzDb2Huh6vvIlT3dYIonPLJL 7zhXwiehW0tCkxz4Col30Q9ECuLdTIHQaePQKPe786MTa5FU+FwOl3kMKffpDq4l 9t2TS2CCHW9w4ofDeSVNf7XSL9T83pG/OudzVZGTs7pws7Q3DyqzYNiegHMjBG4D nl1ASOr6uE4lFGgbjra/9UDp1m+keEyefshqoikMKrDT2f7jdMj7+Mpny88UW+Vg PTNH6HP32jNSSFmm+ZQGoS4gOVzYyNgqIl3cfF6Wl0JMm6fptQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4XrHJKheoRj4l/ZnV2vsuLQaP2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvY2MzZjc1MGQtMDkwNS0z ZTQ3LTg2MmYtYjQxY2EzNmExYzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmz/ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQaQXvpJpxZNI2EklNx34SvBDcrLR4AlfFAVG/qwGmnT/LPspB7idx7 utB+pz3E/E1rjQNxraFUmiMyjjkQ35JAXW/jyZHLerqpeH8MrHnTqc+tbrS/ukLO bqKpO9fJkzZ2OcEkgoOziASejh7oT0fGZZDWsv3TsX1Wc5W8st9fnUiJ1cqlWnyx WZjoyk6vdVsL3UeHw+xnP2h8hrQDNA1DDr8+p3TLegrHn60are+aCwI0Kv+/uIxB ag5ZxYzrvPDdq1BWJaswCeLuf4tX3GArpBNeinV1F0WAP8/RGaBHOLpfb40hyp4V BCWQ5ZrxGsq9JHtYgNDASpo5+uLyjek= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:09 2025 by rpki-client