$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/a2cb31dc-d379-3c6b-b2a3-24605c2a4827.roa File: a2cb31dc-d379-3c6b-b2a3-24605c2a4827.roa (raw, json) Hash identifier: aGnNan9u6+v9kzVdEiBdrZOg6c+PaUeQvDkCmcepvf0= Subject key identifier: 7A:D3:0E:42:BE:DE:9C:FD:FC:D4:15:41:D8:32:A7:EA:FE:EF:59:C2 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F43285848467AB98AEFDB8F04AABC3680 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/a2cb31dc-d379-3c6b-b2a3-24605c2a4827.roa Signing time: Sat 21 Dec 2024 02:00:39 +0000 ROA not before: Sat 21 Dec 2024 02:00:39 +0000 ROA not after: Fri 21 Mar 2025 01:00:39 +0000 asID: 63293 IP address blocks: 157.240.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:46:7a:b9:8a:ef:db:8f:04:aa:bc:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Dec 21 02:00:39 2024 GMT Not After : Mar 21 01:00:39 2025 GMT Subject: CN=0e27d75c-2e16-4c5f-b45d-16056ab4d567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8d:59:29:ab:c5:d7:99:7f:f8:05:29:a1:43: b4:24:3c:e9:34:f8:d9:97:c9:93:5c:21:ee:72:ec: 69:ef:b4:e8:11:df:f3:76:ea:6c:8d:60:aa:00:e7: 46:12:d2:1a:f4:7f:9d:f4:33:ae:e7:03:65:de:40: 6d:22:e1:7d:41:29:b0:4b:ac:3b:7c:82:c7:44:e2: 60:9b:0c:47:fd:ec:af:8d:1f:0c:fd:c4:df:7d:9d: 67:91:3d:5d:c2:2f:e0:dd:f6:c6:f9:6a:cf:95:17: 44:67:56:ce:b6:de:b3:1c:85:2d:a5:6a:db:4b:18: ce:e6:d2:0a:0a:bb:0c:69:49:de:7f:6d:18:b7:99: b9:25:b4:d8:5f:a6:0d:49:2d:88:65:36:58:8d:ae: ae:42:44:e0:be:f1:e7:e3:15:18:b9:e6:bd:8d:1e: 92:42:49:6e:aa:f4:55:6a:9a:1c:a2:f1:45:d1:99: dd:c4:d1:cd:d8:03:d4:fa:66:1f:3d:e9:c7:83:aa: f7:9e:89:ba:d6:df:be:7c:8c:f3:8d:31:06:3b:9a: c6:e2:26:46:b0:98:81:34:7e:bf:1e:28:15:5a:0f: 10:09:0c:58:54:c5:fe:8b:4a:71:3d:d0:ca:13:69: 25:94:d2:b7:64:27:b5:8d:03:ff:96:56:30:ca:cd: e8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D3:0E:42:BE:DE:9C:FD:FC:D4:15:41:D8:32:A7:EA:FE:EF:59:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/a2cb31dc-d379-3c6b-b2a3-24605c2a4827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:e3:bd:32:de:66:d0:df:91:62:1a:fd:e0:89:b4:c8:c2:06: fc:a9:35:08:2c:b7:7d:fc:c4:f9:24:18:4b:dc:96:6d:a4:47: 0c:13:fd:f6:f1:ca:ec:2f:87:dd:07:5f:fa:43:31:5f:e6:51: 5c:1f:b7:f8:7f:fd:1a:3f:43:7e:45:06:f5:36:e1:3f:c7:49: eb:44:9c:96:cf:ee:01:b3:13:13:71:50:39:7d:ff:97:c3:5f: d7:6b:4f:e4:5d:8a:8c:3b:e0:34:81:d8:e3:96:07:13:1d:dc: 4f:f0:59:e3:b8:f0:19:54:1d:03:31:15:2a:65:67:33:d3:d4: ec:5b:64:98:23:6b:2c:e7:2e:ec:83:44:52:88:17:2d:f0:e4: 16:4e:89:98:f1:09:0f:9c:bc:63:97:56:a9:7d:7b:8a:ca:73: 5b:9b:0c:72:25:f3:93:db:15:09:4e:41:8a:58:ae:26:5f:25: e2:84:04:9d:94:85:61:2f:89:34:61:a1:89:34:ca:fc:80:87: 7e:4c:af:7d:56:b0:8a:d3:97:89:49:1a:3e:45:32:25:ba:dc: 78:47:73:9d:64:38:25:1c:5d:51:03:c6:0e:b6:39:46:2f:0a: 5e:d5:f4:e3:03:76:93:6d:c7:39:78:b8:50:3f:0b:54:28:4f: 35:25:ca:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhGermK79uPBKq8NoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI0MTIyMTAyMDAzOVoXDTI1MDMyMTAxMDAzOVowLzEtMCsGA1UEAxMk MGUyN2Q3NWMtMmUxNi00YzVmLWI0NWQtMTYwNTZhYjRkNTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY1ZKavF15l/+AUpoUO0JDzpNPjZl8mTXCHu cuxp77ToEd/zdupsjWCqAOdGEtIa9H+d9DOu5wNl3kBtIuF9QSmwS6w7fILHROJg mwxH/eyvjR8M/cTffZ1nkT1dwi/g3fbG+WrPlRdEZ1bOtt6zHIUtpWrbSxjO5tIK CrsMaUnef20Yt5m5JbTYX6YNSS2IZTZYja6uQkTgvvHn4xUYuea9jR6SQkluqvRV apocovFF0ZndxNHN2APU+mYfPenHg6r3nom61t++fIzzjTEGO5rG4iZGsJiBNH6/ HigVWg8QCQxYVMX+i0pxPdDKE2kllNK3ZCe1jQP/llYwys3oCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrTDkK+3pz9/NQVQdgyp+r+71nCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvYTJjYjMxZGMtZDM3OS0z YzZiLWIyYTMtMjQ2MDVjMmE0ODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfC9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7jvTLeZtDfkWIa/eCJtMjCBvypNQgst338xPkkGEvclm2kRwwT/fbx yuwvh90HX/pDMV/mUVwft/h//Ro/Q35FBvU24T/HSetEnJbP7gGzExNxUDl9/5fD X9drT+Rdiow74DSB2OOWBxMd3E/wWeO48BlUHQMxFSplZzPT1OxbZJgjayznLuyD RFKIFy3w5BZOiZjxCQ+cvGOXVql9e4rKc1ubDHIl85PbFQlOQYpYriZfJeKEBJ2U hWEviTRhoYk0yvyAh35Mr31WsIrTl4lJGj5FMiW63HhHc51kOCUcXVEDxg62OUYv Cl7V9OMDdpNtxzl4uFA/C1QoTzUlyuE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:05 2025 by rpki-client