$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4098e103-d04a-3465-a7e1-f3debf7a9e61.roa File: 4098e103-d04a-3465-a7e1-f3debf7a9e61.roa (raw, json) Hash identifier: frCu1L7jyvxYZp51sCEt5nA9av+NcmdJV2G2zHL+e8M= Subject key identifier: 88:E0:A9:0A:D4:02:4B:42:B6:E4:CC:50:B2:48:72:D7:57:B9:89:73 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F432858487FB5D864A4ECA98EC6FD7D00 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4098e103-d04a-3465-a7e1-f3debf7a9e61.roa Signing time: Fri 10 Jan 2025 14:00:51 +0000 ROA not before: Fri 10 Jan 2025 14:00:51 +0000 ROA not after: Thu 10 Apr 2025 13:00:51 +0000 asID: 16509 IP address blocks: 23.239.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7f:b5:d8:64:a4:ec:a9:8e:c6:fd:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jan 10 14:00:51 2025 GMT Not After : Apr 10 13:00:51 2025 GMT Subject: CN=5c5f8b77-8b74-43e2-9a4d-6fe1f6118dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2c:02:c0:a2:22:68:5d:b7:e7:17:35:90:2a: c6:13:48:33:48:c9:f7:c3:7a:02:ab:be:15:a5:1f: cb:59:09:10:18:84:8c:76:16:0c:e8:3e:07:7e:4e: 37:c7:da:2a:88:07:1b:62:36:56:28:84:c7:96:20: 7b:fd:de:c6:00:9b:c1:99:0b:f3:6d:31:3a:ca:32: fd:fb:e3:e2:50:20:94:a5:10:43:5f:88:49:6b:39: 0f:44:21:5b:85:dc:5b:f2:35:30:88:ee:d0:21:61: 53:80:d5:aa:85:25:fb:14:98:56:48:f4:a0:00:0d: 62:52:88:bb:e2:31:d8:a1:89:da:34:4e:1c:d6:77: 86:3e:3d:a8:5a:06:a7:f7:09:7b:68:e0:f6:5e:41: e1:46:ec:1d:73:63:b1:27:3f:07:6c:3d:2c:55:c2: a8:fb:6b:22:60:03:6e:8d:3a:5f:d9:96:32:4a:45: 21:bf:bf:48:89:53:ef:0e:03:ec:ec:52:e7:85:99: 38:2a:64:47:b1:34:e4:eb:93:d8:23:8e:03:2f:81: b7:59:f0:6b:b9:75:bf:35:34:af:b0:bd:a9:b5:6b: 91:63:04:ec:11:2f:ae:67:0b:28:44:c7:bf:72:ce: 56:0c:ce:f5:11:7a:f8:d5:5e:9a:40:3a:f0:98:ec: 04:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E0:A9:0A:D4:02:4B:42:B6:E4:CC:50:B2:48:72:D7:57:B9:89:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4098e103-d04a-3465-a7e1-f3debf7a9e61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:76:95:b2:06:10:67:a9:9e:23:54:1a:12:e4:74:c1:53:f6: d5:22:34:f4:35:ec:31:b3:1e:7d:51:cd:1a:61:d1:9c:87:88: f0:b1:28:39:c1:0f:b7:6d:4e:69:e2:ad:3c:12:c4:21:8f:ff: 2c:3d:f2:e4:b3:d4:bb:d1:98:47:ea:ac:02:60:40:79:7f:e2: 35:c8:9f:c4:f0:da:37:eb:f0:ec:ee:64:71:e4:c7:7c:8a:c4: 08:3c:7a:63:ad:60:2d:d6:65:38:b6:ee:2c:3e:ef:b2:51:da: 3a:d4:8b:f5:b0:00:58:73:6c:b0:68:71:59:6e:f9:ed:ad:e7: 84:17:7f:3a:fe:43:f2:7f:da:45:3d:dc:be:fc:b5:fc:15:22: 54:fe:ba:fa:98:03:c2:a7:f5:a9:ef:6e:7a:14:d2:8c:4d:d1: c4:d5:40:84:80:ba:0b:cd:79:1f:f7:9a:4e:96:6e:12:59:75: c5:f6:25:35:b9:e7:b8:ea:5d:1e:79:3e:68:66:8a:3e:bc:77: a0:fc:15:13:3b:d7:9f:14:dc:94:d9:51:2e:f1:f4:c2:5c:d0: ca:2f:55:9c:96:2e:62:b7:df:8d:ca:5a:49:72:d8:97:02:24: 96:20:cf:c8:4d:0a:f5:36:53:ee:f6:ae:63:fb:4c:54:16:73: 67:b3:6b:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh/tdhkpOypjsb9fQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDExMDE0MDA1MVoXDTI1MDQxMDEzMDA1MVowLzEtMCsGA1UEAxMk NWM1ZjhiNzctOGI3NC00M2UyLTlhNGQtNmZlMWY2MTE4ZGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCwCwKIiaF235xc1kCrGE0gzSMn3w3oCq74V pR/LWQkQGISMdhYM6D4Hfk43x9oqiAcbYjZWKITHliB7/d7GAJvBmQvzbTE6yjL9 ++PiUCCUpRBDX4hJazkPRCFbhdxb8jUwiO7QIWFTgNWqhSX7FJhWSPSgAA1iUoi7 4jHYoYnaNE4c1neGPj2oWgan9wl7aOD2XkHhRuwdc2OxJz8HbD0sVcKo+2siYANu jTpf2ZYySkUhv79IiVPvDgPs7FLnhZk4KmRHsTTk65PYI44DL4G3WfBruXW/NTSv sL2ptWuRYwTsES+uZwsoRMe/cs5WDM71EXr41V6aQDrwmOwE/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjgqQrUAktCtuTMULJIctdXuYlzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNDA5OGUxMDMtZDA0YS0z NDY1LWE3ZTEtZjNkZWJmN2E5ZTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABt2lbIGEGepniNUGhLkdMFT9tUiNPQ17DGzHn1RzRph0ZyHiPCxKDnB D7dtTmnirTwSxCGP/yw98uSz1LvRmEfqrAJgQHl/4jXIn8Tw2jfr8OzuZHHkx3yK xAg8emOtYC3WZTi27iw+77JR2jrUi/WwAFhzbLBocVlu+e2t54QXfzr+Q/J/2kU9 3L78tfwVIlT+uvqYA8Kn9anvbnoU0oxN0cTVQISAugvNeR/3mk6WbhJZdcX2JTW5 57jqXR55Pmhmij68d6D8FRM7158U3JTZUS7x9MJc0MovVZyWLmK3343KWkly2JcC JJYgz8hNCvU2U+72rmP7TFQWc2ezayA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:23 2025 by rpki-client