$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/cb6f706c-eeb1-3e7a-8d91-fa880dd2300a.roa File: cb6f706c-eeb1-3e7a-8d91-fa880dd2300a.roa (raw, json) Hash identifier: gSxDTFYBrTZPYq1EboZN0SqXse+k6E6rApli/HOs4vA= Subject key identifier: 57:4B:52:6F:09:41:75:F3:97:8F:35:6B:F8:8F:A8:20:63:19:23:10 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F432858480BDA7D4EE9C1A18FFE161900 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/cb6f706c-eeb1-3e7a-8d91-fa880dd2300a.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 63293 IP address blocks: 157.240.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:7d:4e:e9:c1:a1:8f:fe:16:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=b34d35dc-fdff-46f6-92b4-42c82464a2ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2b:6e:15:cd:55:3d:3e:cb:d3:69:83:d3:c2: d7:a8:c6:2f:cb:9e:cb:57:8e:08:a0:d4:ba:3f:c6: 3e:08:6c:a6:a2:d2:b0:43:5a:57:70:a5:99:9e:63: 94:5f:f3:51:f3:9f:36:7c:7e:8f:2e:63:bd:47:4b: 7f:16:0d:12:7c:46:a2:f7:71:c7:1e:24:ef:29:cd: 58:f8:2f:53:26:0a:8f:2e:1e:86:ef:63:d0:b4:9f: be:35:89:5a:a3:8d:74:a0:7d:f8:99:27:c3:2e:95: 29:be:30:a1:71:2a:ac:6a:0b:a8:6e:fa:fb:62:8e: be:0b:e6:a7:54:33:8e:86:16:99:31:7e:b0:e8:cf: ab:d9:b2:26:6d:a7:06:bd:50:5b:09:5d:98:a3:0f: ea:5b:f0:79:e7:da:65:fd:62:8a:89:41:b0:78:f1: 4e:0d:87:b7:14:9b:ab:0a:81:d5:cc:d1:23:48:89: db:c2:d9:4a:8a:ef:2c:ae:e2:e4:2b:b9:c8:bf:b4: a9:8a:54:27:85:39:39:5e:e5:b0:2c:a4:6d:d7:41: 33:10:f3:1c:b8:bb:6f:09:47:ed:34:f0:02:06:68: 12:77:38:6c:08:11:fc:e0:fa:9b:a8:24:03:f5:8e: 2c:ba:71:68:60:37:01:a3:3d:20:ae:7d:16:ce:18: f3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4B:52:6F:09:41:75:F3:97:8F:35:6B:F8:8F:A8:20:63:19:23:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/cb6f706c-eeb1-3e7a-8d91-fa880dd2300a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:c5:bf:fe:3f:09:f8:ae:ad:6b:ae:1a:2f:90:78:04:d7:71: 84:22:5d:1c:e0:09:b2:31:43:63:d1:ca:55:af:54:17:ab:b9: ca:a6:a1:cb:e5:3e:91:52:3f:15:b0:9a:1d:4b:c1:b7:6f:1b: da:63:1e:ae:84:e0:fb:04:36:74:c1:20:06:70:7a:03:30:20: af:58:7a:af:78:fe:9f:13:d5:8f:d8:cd:4d:71:a0:44:15:87: 4e:3d:f8:cc:a8:c4:e5:6c:60:48:13:6a:fb:f2:a5:cb:68:d9: ba:9e:e8:4d:be:4b:d3:08:75:32:8c:df:3f:fa:bb:8b:ae:52: e7:a3:74:74:9e:d3:4b:61:d8:68:39:72:7b:77:bc:ab:d4:ce: b5:26:94:9f:c8:80:01:cc:3f:84:70:77:a6:b0:d7:fa:5e:08: d2:ca:c9:bb:dc:05:3f:b0:9e:00:e1:9c:13:13:0a:07:36:87: f0:94:71:ee:ff:68:1d:35:2c:4a:3b:90:51:9d:84:93:8b:b4: 91:91:ac:19:33:55:52:1e:e0:7b:02:96:4d:de:7d:6f:7b:3a: f9:15:55:71:bd:0b:74:6d:ed:cc:77:e8:78:75:a6:ca:a4:67: 73:bc:f6:1f:73:cf:d1:08:c3:ad:6c:cc:a3:35:be:2e:82:39: 82:69:c3:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgL2n1O6cGhj/4WGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk YjM0ZDM1ZGMtZmRmZi00NmY2LTkyYjQtNDJjODI0NjRhMmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzytuFc1VPT7L02mD08LXqMYvy57LV44IoNS6 P8Y+CGymotKwQ1pXcKWZnmOUX/NR8582fH6PLmO9R0t/Fg0SfEai93HHHiTvKc1Y +C9TJgqPLh6G72PQtJ++NYlao410oH34mSfDLpUpvjChcSqsaguobvr7Yo6+C+an VDOOhhaZMX6w6M+r2bImbacGvVBbCV2Yow/qW/B559pl/WKKiUGwePFODYe3FJur CoHVzNEjSInbwtlKiu8sruLkK7nIv7SpilQnhTk5XuWwLKRt10EzEPMcuLtvCUft NPACBmgSdzhsCBH84PqbqCQD9Y4sunFoYDcBoz0grn0WzhjzAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdLUm8JQXXzl481a/iPqCBjGSMQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvY2I2ZjcwNmMtZWViMS0z ZTdhLThkOTEtZmE4ODBkZDIzMDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfC4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXFv/4/CfiurWuuGi+QeATXcYQiXRzgCbIxQ2PRylWvVBerucqmocvl PpFSPxWwmh1LwbdvG9pjHq6E4PsENnTBIAZwegMwIK9Yeq94/p8T1Y/YzU1xoEQV h049+MyoxOVsYEgTavvypcto2bqe6E2+S9MIdTKM3z/6u4uuUuejdHSe00th2Gg5 cnt3vKvUzrUmlJ/IgAHMP4Rwd6aw1/peCNLKybvcBT+wngDhnBMTCgc2h/CUce7/ aB01LEo7kFGdhJOLtJGRrBkzVVIe4HsClk3efW97OvkVVXG9C3Rt7cx36Hh1psqk Z3O89h9zz9EIw61szKM1vi6COYJpwzY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:17 2025 by rpki-client