$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/41901fb9-e852-38fe-9a4b-13a788c646db.roa File: 41901fb9-e852-38fe-9a4b-13a788c646db.roa (raw, json) Hash identifier: UirDMBDdZG9u3X/7ho1trpMzcMBL1hlCREeW1iM/vLc= Subject key identifier: 21:E3:05:02:E4:D8:88:37:EB:6E:0B:62:A2:FF:0D:FB:A2:6D:78:A9 Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F432858484C102B9BF01C1AB720F9BEC0 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/41901fb9-e852-38fe-9a4b-13a788c646db.roa Signing time: Mon 23 Dec 2024 02:00:40 +0000 ROA not before: Mon 23 Dec 2024 02:00:40 +0000 ROA not after: Sun 23 Mar 2025 01:00:40 +0000 asID: 16509 IP address blocks: 216.245.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4c:10:2b:9b:f0:1c:1a:b7:20:f9:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Dec 23 02:00:40 2024 GMT Not After : Mar 23 01:00:40 2025 GMT Subject: CN=3ed2f3ea-6cad-41d0-ba4e-34fe80bf24ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:da:db:b8:8e:a4:20:ae:f5:aa:6a:43:31:98: c2:15:62:e0:f0:8a:6e:d1:ca:c3:63:e6:54:be:2f: 5d:ba:3a:74:fe:06:ed:34:32:83:02:ad:d2:ca:f0: 06:f6:2b:0a:73:6a:9b:eb:41:f4:e7:18:48:69:17: 22:7b:16:34:21:c1:3e:ef:de:f1:85:87:5a:79:6c: e8:18:57:cd:e1:b7:86:12:5b:ca:db:45:54:f0:b2: 9d:c9:09:a4:55:3c:ea:44:0e:e1:18:55:8b:06:8d: 41:16:9d:41:9a:c4:dc:46:ab:bf:71:c1:e6:99:b5: d3:f4:0a:92:94:13:f4:b0:98:ec:f7:c7:fe:02:2e: 18:3e:86:59:2a:55:ad:39:a2:01:5f:07:f3:68:72: 70:9a:64:72:7c:d6:a5:92:93:27:7e:f7:f8:08:78: b3:b5:89:ba:b7:a9:e5:cc:fa:f2:60:90:9a:8c:20: 58:26:14:59:44:87:be:10:f0:16:c3:82:2e:ed:73: fb:30:fb:2b:11:f6:9d:8b:92:8e:db:ed:17:93:30: 47:ba:6b:df:bb:ed:06:17:d2:0d:dc:a6:cb:6b:79: 21:d1:d1:f5:38:04:79:70:74:71:01:42:32:01:ff: 67:a7:78:2a:75:18:c8:5f:a0:08:5b:a5:e2:2f:77: 79:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E3:05:02:E4:D8:88:37:EB:6E:0B:62:A2:FF:0D:FB:A2:6D:78:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/41901fb9-e852-38fe-9a4b-13a788c646db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 216.245.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:3c:6d:6f:83:0b:c0:a2:5a:1b:ce:3f:f9:7b:04:37:de:e6: c8:20:73:39:df:c4:0d:f7:89:05:e5:5a:5a:1a:33:a1:52:a2: f2:2d:7e:6e:41:18:08:a5:f8:bd:53:95:ee:a7:e7:a6:10:37: 07:46:69:be:d7:31:02:89:a5:50:32:63:b0:27:e8:d8:ca:b9: c0:05:8f:da:c1:42:1c:43:97:42:c5:7e:03:79:c9:3c:7e:cd: 5f:24:e3:e7:51:4e:5c:c3:0e:6b:2d:b1:21:b4:ff:c4:a7:f0: e2:d1:fb:90:0a:b9:2d:04:85:f8:d5:ea:3b:44:5e:03:2c:24: 9f:f4:09:47:68:c8:86:64:81:db:ae:e3:c9:0c:b8:de:ed:53: 23:62:2a:83:ab:46:05:48:bb:9b:5c:98:5e:15:f7:52:0d:ca: b8:06:d9:b8:0a:53:7e:52:81:c4:6c:1b:70:7f:1d:89:7e:78: 01:f5:45:83:39:2a:58:29:41:bd:d8:89:fa:e5:67:1c:03:51: 2e:47:a3:05:ee:64:92:43:f0:2e:2f:a1:7d:1d:be:c1:5f:fd: 82:9a:0a:9d:f5:99:9a:9a:f5:bb:6a:ee:1a:e8:c0:be:2b:16: 40:ae:67:05:df:ec:13:f9:c9:b7:a5:9d:e2:11:9c:71:4a:ec: 30:2d:17:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMECub8BwatyD5vsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk M2VkMmYzZWEtNmNhZC00MWQwLWJhNGUtMzRmZTgwYmYyNGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNrbuI6kIK71qmpDMZjCFWLg8Ipu0crDY+ZU vi9dujp0/gbtNDKDAq3SyvAG9isKc2qb60H05xhIaRciexY0IcE+797xhYdaeWzo GFfN4beGElvK20VU8LKdyQmkVTzqRA7hGFWLBo1BFp1BmsTcRqu/ccHmmbXT9AqS lBP0sJjs98f+Ai4YPoZZKlWtOaIBXwfzaHJwmmRyfNalkpMnfvf4CHiztYm6t6nl zPryYJCajCBYJhRZRIe+EPAWw4Iu7XP7MPsrEfadi5KO2+0XkzBHumvfu+0GF9IN 3KbLa3kh0dH1OAR5cHRxAUIyAf9np3gqdRjIX6AIW6XiL3d5mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHjBQLk2Ig3624LYqL/DfuibXipMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvNDE5MDFmYjktZTg1Mi0z OGZlLTlhNGItMTNhNzg4YzY0NmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PW1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEg8bW+DC8CiWhvOP/l7BDfe5sggcznfxA33iQXlWloaM6FSovItfm5B GAil+L1Tle6n56YQNwdGab7XMQKJpVAyY7An6NjKucAFj9rBQhxDl0LFfgN5yTx+ zV8k4+dRTlzDDmstsSG0/8Sn8OLR+5AKuS0EhfjV6jtEXgMsJJ/0CUdoyIZkgduu 48kMuN7tUyNiKoOrRgVIu5tcmF4V91INyrgG2bgKU35SgcRsG3B/HYl+eAH1RYM5 KlgpQb3YifrlZxwDUS5HowXuZJJD8C4voX0dvsFf/YKaCp31mZqa9btq7hrowL4r FkCuZwXf7BP5ybelneIRnHFK7DAtF98= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:52 2025 by rpki-client