$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9c4b11f6-d69e-3633-a36b-b78ee3aa3aee.roa File: 9c4b11f6-d69e-3633-a36b-b78ee3aa3aee.roa (raw, json) Hash identifier: qrGCmRq6NsSnF5Gkq8P9WbsLTgOTso/Fj9x1Tn6BBDc= Subject key identifier: 52:04:B1:1D:94:F2:43:96:A9:6D:DD:9A:03:D4:A7:15:BE:BC:3A:53 Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F432858484C10303BE0627061CD2484A0 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9c4b11f6-d69e-3633-a36b-b78ee3aa3aee.roa Signing time: Mon 23 Dec 2024 02:00:40 +0000 ROA not before: Mon 23 Dec 2024 02:00:40 +0000 ROA not after: Sun 23 Mar 2025 01:00:40 +0000 asID: 396982 IP address blocks: 141.202.0.0/20 maxlen: 20 141.202.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4c:10:30:3b:e0:62:70:61:cd:24:84:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Dec 23 02:00:40 2024 GMT Not After : Mar 23 01:00:40 2025 GMT Subject: CN=54aa967d-1812-4720-b863-cd7a484cc6d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8e:65:88:a8:c4:bc:75:13:e8:01:0b:08:1e: 45:d7:20:87:de:6a:d6:c7:4b:a1:f5:db:8e:82:e8: 93:23:a9:a0:a7:68:7b:24:2d:66:1c:80:2d:41:e9: e3:81:31:6d:99:aa:da:d5:f7:bb:a5:d7:d1:78:6d: 71:78:76:be:c2:3d:f6:1b:10:a9:1c:94:69:90:46: 29:21:d1:38:34:9a:d6:a0:fe:74:99:00:ce:e6:83: 10:ff:50:f4:63:7c:02:09:8e:1b:bc:4b:d6:e0:70: 64:4a:a4:af:dd:72:ed:a8:b0:56:15:92:c1:a5:b1: 17:f8:ef:c9:d8:12:16:eb:ca:c5:4b:a7:53:0a:a2: f2:ce:e8:38:f9:6e:8e:72:f3:92:41:b5:a2:0a:1e: 1e:ae:68:7c:79:d9:9b:1b:82:4b:6a:b6:3e:a1:86: 69:c3:e9:c2:7f:80:0a:e7:61:35:fc:85:06:7f:8d: 69:1e:e1:c2:5a:05:3c:00:9c:26:e8:a0:2d:31:ec: e9:47:1d:a0:ae:b6:dd:ba:32:53:96:a2:a6:ee:76: ce:82:77:75:39:6a:d7:d0:7e:5c:69:79:a4:03:a5: 44:2b:31:98:e9:57:58:c4:34:11:71:22:1a:d5:e5: 83:28:dd:29:75:44:dc:88:a1:91:24:c3:5a:aa:4f: 1a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:04:B1:1D:94:F2:43:96:A9:6D:DD:9A:03:D4:A7:15:BE:BC:3A:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9c4b11f6-d69e-3633-a36b-b78ee3aa3aee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 141.202.0.0/20 141.202.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:02:2f:f2:e1:c2:2b:a7:d9:a0:a0:a6:eb:f6:ee:28:22:ea: 57:79:11:09:42:b8:6a:f1:00:41:62:a2:ca:5b:74:1d:c4:48: 97:38:ff:83:39:01:5e:13:60:6b:7a:5a:f0:8b:89:ab:c6:6d: 96:70:9e:11:b5:93:4b:83:50:d4:00:89:e5:12:09:d0:ea:a7: 77:26:c8:7f:80:a5:02:9e:f9:ad:a7:ec:60:85:52:5b:d5:85: c1:32:ec:74:c6:6c:da:5c:b7:7b:80:81:56:79:b6:63:05:77: 0f:34:d8:79:70:c1:dc:b5:b0:ff:01:d9:93:59:94:f4:1b:50: be:4e:7b:fc:1f:f8:5b:95:80:29:30:f6:47:38:87:e8:50:2d: e2:1b:12:ae:43:84:fe:1a:71:89:3d:91:d4:ce:c4:96:d0:97: ef:6d:0b:41:71:28:88:1e:97:e6:26:5d:69:a0:d7:cf:08:12: 87:4d:8f:5f:06:1a:82:b3:35:60:da:39:ed:08:94:00:0a:5b: 3e:2c:27:01:6a:9c:ef:66:4e:3d:41:9d:42:5a:6f:db:61:b4: 68:65:05:ad:1d:67:20:69:a2:80:37:1e:35:c4:dd:06:cd:c3: fd:ba:e9:f0:28:a2:59:59:ec:f7:72:49:4d:3f:e2:1a:4f:16: 80:85:06:d0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEhMEDA74GJwYc0khKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk NTRhYTk2N2QtMTgxMi00NzIwLWI4NjMtY2Q3YTQ4NGNjNmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhY5liKjEvHUT6AELCB5F1yCH3mrWx0uh9duO guiTI6mgp2h7JC1mHIAtQenjgTFtmara1fe7pdfReG1xeHa+wj32GxCpHJRpkEYp IdE4NJrWoP50mQDO5oMQ/1D0Y3wCCY4bvEvW4HBkSqSv3XLtqLBWFZLBpbEX+O/J 2BIW68rFS6dTCqLyzug4+W6OcvOSQbWiCh4ermh8edmbG4JLarY+oYZpw+nCf4AK 52E1/IUGf41pHuHCWgU8AJwm6KAtMezpRx2grrbdujJTlqKm7nbOgnd1OWrX0H5c aXmkA6VEKzGY6VdYxDQRcSIa1eWDKN0pdUTciKGRJMNaqk8aVwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFIEsR2U8kOWqW3dmgPUpxW+vDpTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvOWM0YjExZjYtZDY5ZS0z NjMzLWEzNmItYjc4ZWUzYWEzYWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEjcoAAwQA jcr+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABUCL/Lhwiun2aCgpuv27igi6ld5EQlCuGrxAEFiospbdB3E SJc4/4M5AV4TYGt6WvCLiavGbZZwnhG1k0uDUNQAieUSCdDqp3cmyH+ApQKe+a2n 7GCFUlvVhcEy7HTGbNpct3uAgVZ5tmMFdw802Hlwwdy1sP8B2ZNZlPQbUL5Oe/wf +FuVgCkw9kc4h+hQLeIbEq5DhP4acYk9kdTOxJbQl+9tC0FxKIgel+YmXWmg188I EodNj18GGoKzNWDaOe0IlAAKWz4sJwFqnO9mTj1BnUJab9thtGhlBa0dZyBpooA3 HjXE3QbNw/266fAoollZ7PdySU0/4hpPFoCFBtA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:23 2025 by rpki-client