$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/bb82a73d-b97e-38d8-8669-e5c01c82cf5a.roa File: bb82a73d-b97e-38d8-8669-e5c01c82cf5a.roa (raw, json) Hash identifier: Yze7AM18cjl1yzVExXQe0NeFYHPfSEhCXmKNH/aoe2g= Subject key identifier: 93:E3:A5:BE:56:A0:48:61:C2:CE:AF:3D:33:4C:8D:25:0B:C6:78:2C Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858485B6AECAB42F74BF90A9E7680 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/bb82a73d-b97e-38d8-8669-e5c01c82cf5a.roa Signing time: Sat 28 Dec 2024 14:00:52 +0000 ROA not before: Sat 28 Dec 2024 14:00:52 +0000 ROA not after: Fri 28 Mar 2025 13:00:52 +0000 asID: 174 IP address blocks: 216.227.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5b:6a:ec:ab:42:f7:4b:f9:0a:9e:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Dec 28 14:00:52 2024 GMT Not After : Mar 28 13:00:52 2025 GMT Subject: CN=186aa9b3-4081-4be5-85b9-0255111d9c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3c:72:f3:b1:af:51:b8:02:c0:3f:80:b5:de: 38:9b:be:0e:d1:03:cc:09:ce:15:80:02:ba:7d:5e: 5c:12:31:e6:ee:e8:c4:56:aa:fa:8c:e5:02:2a:14: cb:4f:f1:62:dc:70:e7:2d:46:f8:e5:af:15:17:ab: 10:bc:4b:22:20:e9:23:2f:14:07:e3:52:26:26:af: 1f:4c:fc:a2:a1:80:7c:bf:65:f6:06:de:fc:11:95: 7c:72:60:1a:f4:10:2e:f5:e2:47:ed:a1:c1:50:16: 1b:e2:3a:08:71:67:ef:64:a5:d6:30:50:39:aa:5a: 9b:a9:7d:44:1f:54:7d:33:65:31:35:01:1a:96:1e: 17:79:4c:a7:8c:31:59:36:7f:92:01:4b:d0:8b:f6: 3d:e8:d2:03:95:fe:1f:1c:d2:8a:04:8d:50:76:83: ed:4e:19:49:fa:30:3c:92:32:7d:c0:a7:7f:e0:84: 03:9c:08:67:9a:c0:c4:3d:1c:47:8a:39:be:5b:75: 7f:9e:6c:e1:10:24:ac:cd:e7:67:73:d1:e6:98:8c: 14:28:3c:1b:53:6c:7c:0c:26:54:9c:f9:59:9f:de: fc:0b:61:b8:bd:23:bc:fc:5d:dd:77:ba:41:35:c7: 22:ae:3d:c4:8e:a2:31:b8:ba:1d:96:ce:57:0b:2f: 61:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E3:A5:BE:56:A0:48:61:C2:CE:AF:3D:33:4C:8D:25:0B:C6:78:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/bb82a73d-b97e-38d8-8669-e5c01c82cf5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 216.227.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:9a:ee:64:f6:c7:a0:28:9a:b3:db:ff:02:26:ca:3f:03:0b: 83:ca:fb:4d:85:49:d1:75:f5:ca:68:a2:2a:52:89:f5:b6:41: e7:74:f2:6c:f4:b5:a8:29:bd:0c:a7:9a:45:c0:71:b1:64:6d: ce:01:e9:3b:17:41:b2:a0:58:fa:3b:5a:30:5e:cb:e3:f0:64: 22:56:21:c0:3b:79:9f:87:b9:9c:24:01:c5:d5:15:f1:4b:36: bc:37:8d:03:02:70:fd:25:d9:f1:37:db:a0:a4:b5:12:2a:79: 72:b5:51:71:33:61:f0:7e:8c:6d:e7:23:5d:a8:3c:9a:57:f4: a5:6e:e3:80:59:e8:a5:8d:9c:63:cc:42:aa:ac:ba:aa:ea:93: fa:a1:b7:45:66:8e:ae:8a:57:bc:d6:7f:2d:fe:22:07:11:84: 78:c7:76:92:f9:83:d4:ae:6b:24:07:a4:c7:2e:e9:ab:25:b4: c1:d2:5b:b6:23:66:96:78:3b:5a:e6:4c:80:eb:ea:99:a8:38: 60:9a:7d:53:5a:66:b5:1c:08:7a:94:b1:5f:d8:b1:96:fa:bc: 0c:6d:8a:13:44:ce:dc:b6:8e:53:01:e1:02:a7:bd:c6:46:9b: 43:db:e9:a4:98:69:8b:51:32:ab:77:a5:d0:54:08:7a:70:4d: f3:bc:70:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbauyrQvdL+QqedoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk MTg2YWE5YjMtNDA4MS00YmU1LTg1YjktMDI1NTExMWQ5YzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTxy87GvUbgCwD+Atd44m74O0QPMCc4VgAK6 fV5cEjHm7ujEVqr6jOUCKhTLT/Fi3HDnLUb45a8VF6sQvEsiIOkjLxQH41ImJq8f TPyioYB8v2X2Bt78EZV8cmAa9BAu9eJH7aHBUBYb4joIcWfvZKXWMFA5qlqbqX1E H1R9M2UxNQEalh4XeUynjDFZNn+SAUvQi/Y96NIDlf4fHNKKBI1QdoPtThlJ+jA8 kjJ9wKd/4IQDnAhnmsDEPRxHijm+W3V/nmzhECSszednc9HmmIwUKDwbU2x8DCZU nPlZn978C2G4vSO8/F3dd7pBNccirj3EjqIxuLodls5XCy9hWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPjpb5WoEhhws6vPTNMjSULxngsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYmI4MmE3M2QtYjk3ZS0z OGQ4LTg2NjktZTVjMDFjODJjZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OOCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCa7mT2x6AomrPb/wImyj8DC4PK+02FSdF19cpooipSifW2Qed08mz0 tagpvQynmkXAcbFkbc4B6TsXQbKgWPo7WjBey+PwZCJWIcA7eZ+HuZwkAcXVFfFL Nrw3jQMCcP0l2fE326CktRIqeXK1UXEzYfB+jG3nI12oPJpX9KVu44BZ6KWNnGPM Qqqsuqrqk/qht0Vmjq6KV7zWfy3+IgcRhHjHdpL5g9SuayQHpMcu6asltMHSW7Yj ZpZ4O1rmTIDr6pmoOGCafVNaZrUcCHqUsV/YsZb6vAxtihNEzty2jlMB4QKnvcZG m0Pb6aSYaYtRMqt3pdBUCHpwTfO8cPs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:55 2025 by rpki-client