$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/f2344786-e936-3125-abb5-5f6da46e1208.roa File: f2344786-e936-3125-abb5-5f6da46e1208.roa (raw, json) Hash identifier: cv1bTNFjAIClkaYchhvq3eD0HeQQQjLG0lzYNtHrzIA= Subject key identifier: 88:B1:38:CA:BD:D8:43:BE:53:40:7E:4C:1A:47:64:AD:1E:30:2A:81 Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Certificate serial: 010D0C9F43285848424AD711E617C10B8A175800 Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/f2344786-e936-3125-abb5-5f6da46e1208.roa Signing time: Thu 19 Dec 2024 14:00:52 +0000 ROA not before: Thu 19 Dec 2024 14:00:52 +0000 ROA not after: Wed 19 Mar 2025 13:00:52 +0000 asID: 399804 IP address blocks: 216.126.231.0/24 maxlen: 24 2604:4cc0:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:42:4a:d7:11:e6:17:c1:0b:8a:17:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Validity Not Before: Dec 19 14:00:52 2024 GMT Not After : Mar 19 13:00:52 2025 GMT Subject: CN=0a8e83b2-b392-4c3d-b57c-0dfd25ece360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:13:fb:0b:05:dd:0d:be:91:72:7d:fe:23:af: a5:ed:dc:48:2c:59:36:af:5b:88:ca:92:86:48:65: 37:13:00:94:03:5c:2d:c8:9c:55:0f:ef:9c:e4:82: da:35:ee:8b:ce:4d:be:37:98:63:1f:b8:ab:30:a0: 13:ca:07:86:d4:2f:b9:8e:9c:19:50:21:74:b8:95: 51:8c:2f:fb:42:fa:b9:b8:af:00:d9:ba:40:93:3e: b1:0f:3d:5e:f8:25:91:56:56:94:27:31:2e:ff:72: 19:6b:7d:d8:0f:23:79:1a:57:d1:9a:71:06:6a:dc: f3:4c:94:84:28:df:0f:4f:fd:f9:14:96:35:d0:a7: a5:4d:63:b5:ea:8e:58:1a:e3:d7:09:b6:60:7a:2a: 93:62:b2:33:9e:f8:66:dc:cc:f7:1b:c9:75:d2:5d: 6a:ac:26:6b:6a:7a:11:d2:4d:7e:0a:d9:2b:64:67: b9:23:3a:ef:9a:4d:9e:a4:19:26:f9:37:50:42:87: e4:6b:a5:b6:b0:3f:29:c0:5b:94:ee:63:ae:3b:9c: e2:8e:5c:fd:96:b1:5f:4d:e0:86:e2:c9:79:f1:b3: 95:c0:8c:04:d6:1d:e1:57:5b:a5:cd:f4:bc:b3:0d: c5:7d:3b:9c:09:0b:19:58:3f:0b:62:6b:e8:5e:7e: 18:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B1:38:CA:BD:D8:43:BE:53:40:7E:4C:1A:47:64:AD:1E:30:2A:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/f2344786-e936-3125-abb5-5f6da46e1208.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl X509v3 Authority Key Identifier: keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer sbgp-ipAddrBlock: critical IPv4: 216.126.231.0/24 IPv6: 2604:4cc0:11::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:80:42:c3:09:ec:9f:b2:d8:eb:f4:c9:d5:1a:e5:a6:61:04: 88:43:19:39:d0:77:a2:58:d8:8b:b6:6f:e2:90:16:93:b2:b4: eb:2a:d6:fa:0c:bc:f9:e5:ce:40:c7:e0:a9:41:f8:8e:d8:47: 2a:dd:d5:5f:a9:c2:5d:b7:1b:9a:e7:3a:fa:75:9e:46:c0:53: d2:e0:88:18:ec:e1:ae:de:d7:1d:cc:17:24:51:32:50:2b:d1: 84:14:bd:ea:d4:25:0e:3c:64:58:89:bb:d7:ef:66:a3:18:04: 47:d3:e1:ee:dd:60:fb:e7:67:92:50:2e:ea:9b:e1:93:fd:a9: 1d:ac:b5:b5:67:3b:0d:bd:07:c8:d8:ca:8c:ff:04:aa:8a:45: 60:17:9c:6d:35:a7:b6:d2:29:72:cc:47:4e:42:45:60:83:eb: d1:64:6b:aa:58:99:fa:00:17:e8:80:f3:bb:3b:92:0e:ab:2a: 13:a5:8c:4f:3e:4f:b2:08:a7:77:13:69:6e:27:ff:6b:b3:d3: f6:df:e9:3f:50:6b:2f:f2:a2:c0:1b:02:a0:43:d7:3c:20:05: 72:e5:7e:68:62:ef:a7:10:5b:1a:8c:69:46:f6:0a:88:86:0b: f0:a8:ec:95:44:96:8f:fc:98:1d:4a:2c:64:41:d4:a0:d0:73: ee:77:bb:bc -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEhCStcR5hfBC4oXWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3 Y2IzMB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk MGE4ZTgzYjItYjM5Mi00YzNkLWI1N2MtMGRmZDI1ZWNlMzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBP7CwXdDb6Rcn3+I6+l7dxILFk2r1uIypKG SGU3EwCUA1wtyJxVD++c5ILaNe6Lzk2+N5hjH7irMKATygeG1C+5jpwZUCF0uJVR jC/7Qvq5uK8A2bpAkz6xDz1e+CWRVlaUJzEu/3IZa33YDyN5GlfRmnEGatzzTJSE KN8PT/35FJY10KelTWO16o5YGuPXCbZgeiqTYrIznvhm3Mz3G8l10l1qrCZranoR 0k1+CtkrZGe5Izrvmk2epBkm+TdQQofka6W2sD8pwFuU7mOuO5zijlz9lrFfTeCG 4sl58bOVwIwE1h3hV1ulzfS8sw3FfTucCQsZWD8LYmvoXn4Y6wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFIixOMq92EO+U0B+TBpHZK0eMCqBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0 OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvZjIzNDQ3ODYtZTkzNi0z MTI1LWFiYjUtNWY2ZGE0NmUxMjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw OGUxYzdjYjMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA2H7nMA8E AgACMAkDBwAmBEzAABEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXYBCwwnsn7LY6/TJ1RrlpmEEiEMZOdB3 oljYi7Zv4pAWk7K06yrW+gy8+eXOQMfgqUH4jthHKt3VX6nCXbcbmuc6+nWeRsBT 0uCIGOzhrt7XHcwXJFEyUCvRhBS96tQlDjxkWIm71+9moxgER9Ph7t1g++dnklAu 6pvhk/2pHay1tWc7Db0HyNjKjP8EqopFYBecbTWnttIpcsxHTkJFYIPr0WRrqliZ +gAX6IDzuzuSDqsqE6WMTz5PsgindxNpbif/a7PT9t/pP1BrL/KiwBsCoEPXPCAF cuV+aGLvpxBbGoxpRvYKiIYL8KjslUSWj/yYHUosZEHUoNBz7ne7vA== -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:10 2025 by rpki-client