$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3c3f1331-082e-3016-8d90-383739e6a21b.roa File: 3c3f1331-082e-3016-8d90-383739e6a21b.roa (raw, json) Hash identifier: yzOpD0Crd8/8+qDxgAGWBmRSh7Jjd7pTOsBy6tEZzZc= Subject key identifier: 88:A8:83:50:08:6A:AC:0B:51:D1:8C:1F:86:59:13:BF:B9:77:AF:54 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F432858481F6538C23F7BAADB760D2100 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3c3f1331-082e-3016-8d90-383739e6a21b.roa Signing time: Sat 07 Dec 2024 02:00:39 +0000 ROA not before: Sat 07 Dec 2024 02:00:39 +0000 ROA not after: Fri 07 Mar 2025 02:00:39 +0000 asID: 16509 IP address blocks: 207.202.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1f:65:38:c2:3f:7b:aa:db:76:0d:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Dec 7 02:00:39 2024 GMT Not After : Mar 7 02:00:39 2025 GMT Subject: CN=a6b00108-6e90-40d4-a832-dfbd73a90a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c2:d5:43:b2:6a:69:9f:c2:4e:17:97:de:89: 93:57:84:76:ee:2d:fe:e6:8f:40:bc:46:ff:db:6b: 9e:fd:79:53:19:ec:a6:75:d1:c9:ce:6e:5a:c5:a4: 15:58:e8:4f:26:c6:92:75:70:f9:45:95:46:6c:11: 42:f3:c6:9e:b3:5f:29:98:6c:5c:4b:c5:f9:fd:f4: 60:83:e2:f9:1b:b4:10:03:76:65:48:44:a7:b8:09: 60:1d:81:d6:33:c0:6b:b4:07:cd:29:93:0a:93:8f: ed:1b:35:e8:ea:bc:f8:5f:f0:d4:6d:11:95:eb:9e: c2:f5:be:59:d7:16:7f:42:34:35:95:7e:4d:55:fc: 55:4c:b3:79:8b:e3:4a:ce:2b:1e:d6:36:d3:ad:34: 77:35:32:0a:5d:74:91:3c:9b:cb:0d:86:29:3a:57: 4f:72:5b:2b:aa:ce:34:ea:ec:ed:99:73:22:bc:6f: 2e:bc:fd:f3:7e:5f:4c:bd:22:ab:d5:06:d5:55:d2: 57:13:d2:fe:43:e2:ab:d8:06:74:b5:2c:17:29:53: 9a:de:92:55:48:1f:8f:cf:7a:d0:78:e2:0f:60:e0: 93:f4:f3:99:b2:c4:7d:d1:c7:71:93:06:2d:c8:b4: 4c:39:48:4f:75:db:66:d6:de:42:a6:7c:e1:99:67: 67:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A8:83:50:08:6A:AC:0B:51:D1:8C:1F:86:59:13:BF:B9:77:AF:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3c3f1331-082e-3016-8d90-383739e6a21b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:44:d3:be:9c:69:79:42:2c:5c:44:0b:16:de:1a:d2:7b:36: 58:2c:32:3a:24:b4:c1:ff:c4:b3:77:e6:0b:8f:df:ea:33:65: e5:58:2c:22:2f:47:01:c3:12:39:1b:c2:97:96:7b:fd:6a:1b: 3f:c4:d3:2b:e5:22:d0:07:ca:be:ed:ee:3b:a9:59:af:32:c9: 96:24:dd:45:79:e7:25:d6:bb:76:a7:c6:59:78:b1:67:0d:39: b6:e4:c9:6b:5d:14:d0:72:ab:a4:f2:3e:2e:48:6a:7d:3a:ad: 65:b8:b6:ac:e3:25:c5:3e:3c:95:3c:ef:f5:c9:91:9b:6a:76: 52:ea:1b:87:e2:4a:4d:18:39:89:86:4e:8b:42:f1:b0:4b:8e: d2:d2:ac:fc:65:48:cc:9a:ed:92:95:05:68:f5:0a:09:36:c7: 07:34:b8:f5:bb:c7:c7:c0:9d:9b:d2:bb:4c:a5:fa:98:d4:e4: b1:21:8c:da:c9:db:1b:50:47:90:48:fe:de:01:d8:c1:4a:12: 88:5a:65:db:6a:fd:02:02:50:2d:fd:87:18:6b:92:3e:f9:7e: 3a:a4:fd:9b:32:a3:4f:d0:aa:a6:b9:c3:41:56:f1:cb:fa:53: f4:23:e7:fb:08:b6:69:ee:8b:95:be:ae:e2:be:cf:5a:f2:6b: 02:57:d5:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgfZTjCP3uq23YNIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk YTZiMDAxMDgtNmU5MC00MGQ0LWE4MzItZGZiZDczYTkwYTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MLVQ7JqaZ/CTheX3omTV4R27i3+5o9AvEb/ 22ue/XlTGeymddHJzm5axaQVWOhPJsaSdXD5RZVGbBFC88aes18pmGxcS8X5/fRg g+L5G7QQA3ZlSESnuAlgHYHWM8BrtAfNKZMKk4/tGzXo6rz4X/DUbRGV657C9b5Z 1xZ/QjQ1lX5NVfxVTLN5i+NKzise1jbTrTR3NTIKXXSRPJvLDYYpOldPclsrqs40 6uztmXMivG8uvP3zfl9MvSKr1QbVVdJXE9L+Q+Kr2AZ0tSwXKVOa3pJVSB+Pz3rQ eOIPYOCT9POZssR90cdxkwYtyLRMOUhPddtm1t5CpnzhmWdnqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiog1AIaqwLUdGMH4ZZE7+5d69UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvM2MzZjEzMzEtMDgyZS0z MDE2LThkOTAtMzgzNzM5ZTZhMjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJE076caXlCLFxECxbeGtJ7NlgsMjoktMH/xLN35guP3+ozZeVYLCIv RwHDEjkbwpeWe/1qGz/E0yvlItAHyr7t7jupWa8yyZYk3UV55yXWu3anxll4sWcN ObbkyWtdFNByq6TyPi5Ian06rWW4tqzjJcU+PJU87/XJkZtqdlLqG4fiSk0YOYmG TotC8bBLjtLSrPxlSMya7ZKVBWj1Cgk2xwc0uPW7x8fAnZvSu0yl+pjU5LEhjNrJ 2xtQR5BI/t4B2MFKEohaZdtq/QICUC39hxhrkj75fjqk/Zsyo0/Qqqa5w0FW8cv6 U/Qj5/sItmnui5W+ruK+z1ryawJX1Wk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:08 2025 by rpki-client