$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3709be2-74c4-3393-be56-b814f2679abc.roa File: b3709be2-74c4-3393-be56-b814f2679abc.roa (raw, json) Hash identifier: 54MESaslyMzr8FabvRAj0tBm2GBKWK9yw30Xly/G7RY= Subject key identifier: 85:50:56:D5:41:99:FD:DF:0A:E6:7B:0B:59:59:76:DC:93:61:4E:53 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858483F804580855FB1C6191DCC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3709be2-74c4-3393-be56-b814f2679abc.roa Signing time: Wed 18 Dec 2024 14:00:52 +0000 ROA not before: Wed 18 Dec 2024 14:00:52 +0000 ROA not after: Tue 18 Mar 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.79.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3f:80:45:80:85:5f:b1:c6:19:1d:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 18 14:00:52 2024 GMT Not After : Mar 18 13:00:52 2025 GMT Subject: CN=34ee0868-4fa4-4fa9-a190-cda53abfc6fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5d:c9:6b:22:67:82:8c:20:26:08:03:51:5d: 09:43:44:b4:80:a8:48:0e:32:0f:93:5b:62:f3:df: cf:1f:6a:c7:95:d9:70:ee:ad:28:fe:f6:ed:c2:e8: a3:81:39:59:f1:da:b7:34:3a:e8:73:ee:19:1a:01: 12:29:ce:c9:79:b1:0c:f3:ca:e8:a5:86:d7:97:80: 76:a1:c5:93:92:b9:20:ec:5c:af:81:ca:a3:37:d7: 87:42:34:71:e3:08:1e:a0:14:75:1f:de:26:38:28: 1c:d8:4a:e5:3e:61:b2:06:f2:28:11:e4:36:59:19: 5d:6b:95:ec:ed:5c:4e:0f:2f:e5:43:85:dd:27:48: b5:01:61:8a:2b:88:1d:f7:1a:04:48:60:fc:6c:b6: e4:3d:bf:8e:d1:12:35:b1:41:ef:09:ab:5c:af:d0: e4:cb:c1:45:e3:00:f9:8c:42:8c:cb:81:39:32:ff: e7:20:db:bc:59:de:d6:43:6e:6b:a2:bb:fe:78:ed: 47:cb:9a:1e:63:f5:a4:14:53:f9:cc:6c:19:57:0a: c1:02:d2:da:47:8b:3c:30:dd:65:f8:43:f2:83:16: 7f:de:9b:f3:70:82:8a:f6:dd:47:70:f8:71:60:cf: 1a:7c:56:d5:73:2c:02:e2:a2:1c:8f:8f:d7:fe:55: 39:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:50:56:D5:41:99:FD:DF:0A:E6:7B:0B:59:59:76:DC:93:61:4E:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3709be2-74c4-3393-be56-b814f2679abc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.79.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:32:d8:2c:e3:98:f7:8a:37:60:6d:17:ec:e3:b1:31:80:5f: c4:a2:66:bc:4f:3c:79:1e:5a:fe:c3:01:06:2d:55:5f:d3:8b: b6:f7:8f:0b:f5:0c:43:74:3e:aa:7c:8f:12:0a:20:77:73:86: 18:75:63:d6:ca:ea:f5:85:94:07:a8:cc:24:9f:4b:42:a1:71: 84:3e:61:b6:ae:09:f8:a9:eb:9d:dd:0a:2b:3e:43:27:62:dc: 06:ac:14:91:f1:d3:0d:56:2d:df:a5:00:24:61:21:dc:6d:24: 90:11:f1:6b:c3:fb:ff:25:33:72:af:94:c6:cb:36:ee:73:fa: c3:77:09:10:6a:88:11:b9:27:07:8a:86:18:ba:5d:74:12:e9: 3e:32:65:e8:b2:6e:93:51:67:e3:15:85:8d:a3:67:33:ea:63: d3:97:d0:ad:11:f5:70:1b:72:d6:6f:e3:31:08:2e:07:48:c2: 7d:82:17:63:a5:29:ac:a4:3d:5d:da:fe:fb:73:0b:80:22:b9: 32:22:7f:6f:c7:28:d7:78:c4:9f:0f:91:a2:c5:71:09:72:87: 59:91:dd:dc:9c:a5:92:00:82:91:dd:2a:89:4b:33:b4:ba:1f: 79:da:af:29:62:db:0b:47:54:18:4d:9a:b4:82:93:ff:99:c7: 5a:f7:db:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg/gEWAhV+xxhkdzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTIxODE0MDA1MloXDTI1MDMxODEzMDA1MlowLzEtMCsGA1UEAxMk MzRlZTA4NjgtNGZhNC00ZmE5LWExOTAtY2RhNTNhYmZjNmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi13JayJngowgJggDUV0JQ0S0gKhIDjIPk1ti 89/PH2rHldlw7q0o/vbtwuijgTlZ8dq3NDroc+4ZGgESKc7JebEM88ropYbXl4B2 ocWTkrkg7FyvgcqjN9eHQjRx4wgeoBR1H94mOCgc2ErlPmGyBvIoEeQ2WRlda5Xs 7VxODy/lQ4XdJ0i1AWGKK4gd9xoESGD8bLbkPb+O0RI1sUHvCatcr9Dky8FF4wD5 jEKMy4E5Mv/nINu8Wd7WQ25rorv+eO1Hy5oeY/WkFFP5zGwZVwrBAtLaR4s8MN1l +EPygxZ/3pvzcIKK9t1HcPhxYM8afFbVcywC4qIcj4/X/lU5hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVQVtVBmf3fCuZ7C1lZdtyTYU5TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjM3MDliZTItNzRjNC0z MzkzLWJlNTYtYjgxNGYyNjc5YWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF08wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcy2CzjmPeKN2BtF+zjsTGAX8SiZrxPPHkeWv7DAQYtVV/Ti7b3jwv1 DEN0Pqp8jxIKIHdzhhh1Y9bK6vWFlAeozCSfS0KhcYQ+YbauCfip653dCis+Qydi 3AasFJHx0w1WLd+lACRhIdxtJJAR8WvD+/8lM3KvlMbLNu5z+sN3CRBqiBG5JweK hhi6XXQS6T4yZeiybpNRZ+MVhY2jZzPqY9OX0K0R9XAbctZv4zEILgdIwn2CF2Ol KaykPV3a/vtzC4AiuTIif2/HKNd4xJ8PkaLFcQlyh1mR3dycpZIAgpHdKolLM7S6 H3naryli2wtHVBhNmrSCk/+Zx1r324A= -----END CERTIFICATE-----Generated at Sun Feb 16 20:54:19 2025 by rpki-client