$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/04a09eab-355b-3055-8dec-cbb659cc0dbf.roa File: 04a09eab-355b-3055-8dec-cbb659cc0dbf.roa (raw, json) Hash identifier: 1TeBs3bN+MuJZcqb+HcQyBwcPvA7MzaqItX4NbAhGEY= Subject key identifier: 94:FE:18:C0:1E:42:08:8E:DB:46:0A:4B:3A:85:BF:1B:7B:D8:B0:A0 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F43285848467ABD9884A6377716095A80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/04a09eab-355b-3055-8dec-cbb659cc0dbf.roa Signing time: Sat 21 Dec 2024 02:00:39 +0000 ROA not before: Sat 21 Dec 2024 02:00:39 +0000 ROA not after: Fri 21 Mar 2025 01:00:39 +0000 asID: 13576 IP address blocks: 208.53.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:46:7a:bd:98:84:a6:37:77:16:09:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Dec 21 02:00:39 2024 GMT Not After : Mar 21 01:00:39 2025 GMT Subject: CN=57932360-11a7-442c-99c2-e9ee7908f279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:50:5e:21:a7:c4:d1:70:32:cf:24:14:1c:19: 43:7a:42:df:0a:e6:07:9d:82:99:42:b2:b5:d7:f2: 93:04:c9:52:4c:ad:83:bf:19:2c:06:2d:ab:61:a1: e2:6e:7e:3e:65:00:08:e6:43:f0:d5:8a:82:43:8f: df:a0:76:14:35:7c:5c:c3:e0:03:d1:d9:20:79:78: 2c:9f:4c:d6:42:eb:b5:b3:2a:fe:ca:0f:82:a2:aa: 5f:47:2f:f7:bc:a2:8f:54:2f:f6:89:25:c3:c4:33: ea:27:f9:11:8e:ff:e6:b2:95:d0:63:b5:c9:d3:bf: 7b:ac:8d:11:28:60:5f:7e:fb:2f:44:6a:aa:48:85: 8f:49:6a:dc:43:df:5f:e6:27:e4:af:50:21:5f:f0: 15:5c:4d:88:e0:18:e5:22:9e:0b:1d:bf:ff:fd:ff: ae:b9:23:4c:1e:62:37:ed:f9:19:da:4f:1f:d4:c4: 8f:a7:8d:71:41:e4:4b:9c:b8:58:94:55:34:3d:20: b5:62:2f:51:86:5f:9a:8a:c8:0e:3a:2b:88:5d:6b: 90:2d:d6:76:1e:35:63:92:45:6c:20:ba:30:ec:9b: 1f:72:c9:fb:00:f4:ec:4e:19:b0:59:af:d3:62:7c: ae:34:ec:b5:33:21:de:0c:e6:2c:cb:0e:25:ed:b2: 9e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FE:18:C0:1E:42:08:8E:DB:46:0A:4B:3A:85:BF:1B:7B:D8:B0:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/04a09eab-355b-3055-8dec-cbb659cc0dbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:73:4b:22:d1:06:a0:14:34:27:c7:30:e6:ed:14:4e:b4:64: 79:c8:91:6f:cf:00:98:bc:a9:6e:cc:f4:f6:bd:bd:f4:12:1c: 4a:54:f2:66:4c:9f:b1:09:79:0a:7b:54:10:26:4a:5e:9c:26: ae:4d:2e:13:53:68:cb:9c:30:fe:df:03:4e:ac:d1:1e:b0:63: 85:fa:f4:16:23:10:85:97:7c:35:16:e0:b7:7b:ea:bb:42:81: 82:e4:08:0d:e0:ad:9b:85:db:df:28:5e:ad:39:bb:57:82:c9: 66:fc:34:17:e4:d4:89:14:a9:10:f2:d1:1f:0f:0b:fa:67:88: c6:6e:36:50:11:d0:fc:fd:b7:e6:eb:1e:ee:47:e2:5d:b4:de: d9:cb:c8:6f:86:05:67:c7:a1:d9:aa:37:98:4c:d2:f8:70:d6: 9d:d1:c0:fa:6c:24:2a:61:07:a3:ad:a4:5d:54:06:fd:7e:55: a1:4b:0a:f3:42:5f:b8:60:c7:b4:c9:68:3d:50:36:78:cc:20: 23:1b:94:cc:62:d4:24:b6:52:e7:bd:66:5d:da:88:8f:61:1c: 58:90:0b:a6:aa:a0:9e:0f:3a:30:ee:68:bd:2e:48:f1:0b:95: 83:db:4a:87:84:c4:ce:5f:f6:d6:3d:9f:4f:80:b9:01:29:93: 00:7a:58:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhGer2YhKY3dxYJWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI0MTIyMTAyMDAzOVoXDTI1MDMyMTAxMDAzOVowLzEtMCsGA1UEAxMk NTc5MzIzNjAtMTFhNy00NDJjLTk5YzItZTllZTc5MDhmMjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1BeIafE0XAyzyQUHBlDekLfCuYHnYKZQrK1 1/KTBMlSTK2DvxksBi2rYaHibn4+ZQAI5kPw1YqCQ4/foHYUNXxcw+AD0dkgeXgs n0zWQuu1syr+yg+CoqpfRy/3vKKPVC/2iSXDxDPqJ/kRjv/mspXQY7XJ0797rI0R KGBffvsvRGqqSIWPSWrcQ99f5ifkr1AhX/AVXE2I4BjlIp4LHb///f+uuSNMHmI3 7fkZ2k8f1MSPp41xQeRLnLhYlFU0PSC1Yi9Rhl+aisgOOiuIXWuQLdZ2HjVjkkVs ILow7Jsfcsn7APTsThmwWa/TYnyuNOy1MyHeDOYsyw4l7bKeAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJT+GMAeQgiO20YKSzqFvxt72LCgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMDRhMDllYWItMzU1Yi0z MDU1LThkZWMtY2JiNjU5Y2MwZGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0DXsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANtzSyLRBqAUNCfHMObtFE60ZHnIkW/PAJi8qW7M9Pa9vfQSHEpU8mZM n7EJeQp7VBAmSl6cJq5NLhNTaMucMP7fA06s0R6wY4X69BYjEIWXfDUW4Ld76rtC gYLkCA3grZuF298oXq05u1eCyWb8NBfk1IkUqRDy0R8PC/pniMZuNlAR0Pz9t+br Hu5H4l203tnLyG+GBWfHodmqN5hM0vhw1p3RwPpsJCphB6OtpF1UBv1+VaFLCvNC X7hgx7TJaD1QNnjMICMblMxi1CS2Uue9Zl3aiI9hHFiQC6aqoJ4POjDuaL0uSPEL lYPbSoeExM5f9tY9n0+AuQEpkwB6WCc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:11:35 2025 by rpki-client