$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/e68b221b-741d-34a1-b72f-7ae3905f31f5.roa File: e68b221b-741d-34a1-b72f-7ae3905f31f5.roa (raw, json) Hash identifier: DQVgSk22gFE4Yd0TRLIdtYVYi0lDCbcnv6dUKTxwTUc= Subject key identifier: 23:9B:08:F0:C2:69:2A:5F:54:AA:76:B4:A5:42:71:55:D0:71:93:19 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F432858484515826932835E16F5198940 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/e68b221b-741d-34a1-b72f-7ae3905f31f5.roa Signing time: Fri 20 Dec 2024 14:00:51 +0000 ROA not before: Fri 20 Dec 2024 14:00:51 +0000 ROA not after: Thu 20 Mar 2025 13:00:51 +0000 asID: 16509 IP address blocks: 23.239.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:45:15:82:69:32:83:5e:16:f5:19:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Dec 20 14:00:51 2024 GMT Not After : Mar 20 13:00:51 2025 GMT Subject: CN=91d0f11c-d743-4010-a257-621dd4b212a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ab:71:41:19:b2:59:8c:50:e6:9f:68:63:3a: 88:88:37:95:42:90:ab:bf:d6:e1:0f:03:ec:6d:e6: 41:6c:f6:58:f4:6c:cd:2c:92:77:f5:88:2f:5a:f3: fd:b5:45:06:f5:33:fc:dd:e8:7e:22:1f:7d:02:70: a1:82:ea:66:96:c7:bf:c7:17:4b:9a:dc:6d:a2:49: eb:b4:3a:fb:64:a5:e2:46:b6:2a:d3:24:23:3e:81: b5:0b:d3:e6:d1:ff:00:06:49:d3:16:88:b7:b0:9e: 6a:cf:6e:87:e6:f8:4c:e2:e8:ce:c3:69:2c:b9:dd: 13:d0:9e:ba:8e:6a:aa:69:e2:ec:4a:19:0b:60:6e: 46:1f:40:ba:6f:c3:55:63:5c:9e:f7:af:59:ba:c6: e9:e1:d6:8f:77:6f:05:57:eb:38:d5:67:a4:cd:39: 75:f2:c0:ec:43:25:85:57:46:44:b2:e0:50:28:eb: 41:cc:b2:37:4a:10:96:be:53:f4:88:86:8d:35:6c: 02:be:48:a4:31:ed:58:39:83:ba:26:01:c7:d1:b6: f9:5e:68:11:96:d2:b0:2b:0f:de:72:45:15:b1:e8: 07:48:a7:5a:11:34:15:f2:ee:6f:ec:57:6e:53:08: a7:8c:dd:fc:e6:75:53:28:51:7a:98:f3:22:d3:fa: 2c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9B:08:F0:C2:69:2A:5F:54:AA:76:B4:A5:42:71:55:D0:71:93:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/e68b221b-741d-34a1-b72f-7ae3905f31f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:aa:ee:c0:91:2e:ed:55:93:7c:45:6d:79:98:43:6f:66:8e: a8:8c:dc:4c:08:cd:1a:32:8f:89:c4:0c:26:38:30:fa:4e:de: 81:87:47:1b:2d:ae:e4:0a:94:05:87:12:ac:8e:38:85:ff:56: 18:18:6f:3a:d7:bc:e3:d0:d0:c0:a3:94:1f:14:21:a5:a2:bd: 82:0f:26:67:69:76:81:92:44:f7:ec:98:88:b1:8c:1d:6f:d6: 32:7f:d7:38:06:eb:5c:ef:8d:38:e2:0c:12:87:40:73:08:9c: 9d:08:9b:f4:2d:fb:f0:e9:6c:36:1c:b0:65:76:4c:2c:e7:10: 2c:3e:b6:6e:d7:7e:ca:77:86:3e:f5:b5:2e:35:9f:e0:ea:cb: 5a:18:5f:72:30:15:2c:59:69:e6:42:40:30:22:ee:26:f8:ec: cd:54:d9:42:3a:f3:2a:ba:95:4b:19:b4:2a:9a:a6:48:ca:7c: 6b:cd:51:7b:42:68:3a:c6:15:f6:41:8d:5e:d1:bd:5f:4a:fd: ee:1c:61:83:95:49:72:24:0d:17:7c:a2:56:90:f5:c8:79:be: a8:7c:75:0c:41:34:f0:60:de:11:e8:b6:2a:54:8c:cf:68:c6: ee:a3:48:76:bb:ce:fd:68:1b:f5:a2:9b:71:8e:b3:69:10:af: 31:b7:f5:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFFYJpMoNeFvUZiUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk OTFkMGYxMWMtZDc0My00MDEwLWEyNTctNjIxZGQ0YjIxMmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KtxQRmyWYxQ5p9oYzqIiDeVQpCrv9bhDwPs beZBbPZY9GzNLJJ39YgvWvP9tUUG9TP83eh+Ih99AnChgupmlse/xxdLmtxtoknr tDr7ZKXiRrYq0yQjPoG1C9Pm0f8ABknTFoi3sJ5qz26H5vhM4ujOw2ksud0T0J66 jmqqaeLsShkLYG5GH0C6b8NVY1ye969Zusbp4daPd28FV+s41WekzTl18sDsQyWF V0ZEsuBQKOtBzLI3ShCWvlP0iIaNNWwCvkikMe1YOYO6JgHH0bb5XmgRltKwKw/e ckUVsegHSKdaETQV8u5v7FduUwinjN385nVTKFF6mPMi0/osNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCObCPDCaSpfVKp2tKVCcVXQcZMZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZTY4YjIyMWItNzQxZC0z NGExLWI3MmYtN2FlMzkwNWYzMWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMGq7sCRLu1Vk3xFbXmYQ29mjqiM3EwIzRoyj4nEDCY4MPpO3oGHRxst ruQKlAWHEqyOOIX/VhgYbzrXvOPQ0MCjlB8UIaWivYIPJmdpdoGSRPfsmIixjB1v 1jJ/1zgG61zvjTjiDBKHQHMInJ0Im/Qt+/DpbDYcsGV2TCznECw+tm7Xfsp3hj71 tS41n+Dqy1oYX3IwFSxZaeZCQDAi7ib47M1U2UI68yq6lUsZtCqapkjKfGvNUXtC aDrGFfZBjV7RvV9K/e4cYYOVSXIkDRd8olaQ9ch5vqh8dQxBNPBg3hHotipUjM9o xu6jSHa7zv1oG/Wim3GOs2kQrzG39YE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:12 2025 by rpki-client