$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5bd5c421-00d7-353c-96b1-6bc26ea625e3.roa File: 5bd5c421-00d7-353c-96b1-6bc26ea625e3.roa (raw, json) Hash identifier: nPB9LahWir4gjlQkBkTtfkPUUUn1yeLiSz481xxcbMY= Subject key identifier: F6:A9:AD:3D:68:6F:2E:CB:8A:DF:3D:B0:CA:03:80:33:8A:A0:67:23 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584832FE8E284A2F902B2048D080 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5bd5c421-00d7-353c-96b1-6bc26ea625e3.roa Signing time: Sat 14 Dec 2024 02:30:12 +0000 ROA not before: Sat 14 Dec 2024 02:30:12 +0000 ROA not after: Fri 14 Mar 2025 01:30:12 +0000 asID: 401256 IP address blocks: 64.62.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:fe:8e:28:4a:2f:90:2b:20:48:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Dec 14 02:30:12 2024 GMT Not After : Mar 14 01:30:12 2025 GMT Subject: CN=253fbf7e-2331-4a92-8341-106adc5cb3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:65:ae:24:af:f0:ae:77:bc:85:e5:3b:f0:62: 36:61:9f:f8:ec:4d:8a:8f:49:35:5e:eb:ac:cb:c3: 7e:70:55:1c:3f:03:81:66:2c:d4:df:e1:81:f3:86: 64:0e:68:e5:97:c7:4e:c5:89:a6:3e:58:7c:d1:88: 86:37:a6:49:47:f2:a4:35:48:33:47:02:6e:18:31: 96:f3:1b:8c:6f:c5:55:c3:71:b0:11:c5:e2:74:03: 68:c8:74:38:67:bc:d7:5a:d6:26:a0:9e:46:eb:43: 24:d5:2c:d9:dc:5b:e7:73:b0:02:44:08:9c:65:ab: 9f:88:ca:f9:d2:7a:04:a8:62:7d:d3:49:43:dc:62: ad:11:30:d3:1d:55:d8:50:bb:d9:6a:bf:d6:1b:ae: e5:f1:f4:43:db:f8:32:1e:20:ab:64:83:a6:82:05: 97:c1:bd:5e:56:a3:6b:66:e0:76:8b:f4:7b:5b:ff: f5:1e:0b:b0:8e:4f:e8:84:6b:1d:4f:2a:e6:fd:db: 73:e8:14:cc:e3:8b:99:42:78:b2:88:f0:ea:0a:17: 08:02:ad:5d:fe:3c:61:fc:a0:c0:e9:21:0b:8f:48: f7:b8:f6:91:66:32:38:de:e7:82:be:08:02:99:48: df:f9:5b:f4:3e:bd:62:f7:12:07:7b:7d:a2:49:be: 97:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A9:AD:3D:68:6F:2E:CB:8A:DF:3D:B0:CA:03:80:33:8A:A0:67:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5bd5c421-00d7-353c-96b1-6bc26ea625e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 64.62.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:a0:3b:79:f3:e8:f0:17:bf:63:88:99:72:83:dc:bd:a8:88: 8e:ad:fe:e4:e3:40:36:1d:eb:0f:e0:26:4a:09:82:3e:94:2d: 55:75:70:14:87:a3:a9:3f:77:e8:bd:24:93:9b:59:a3:8d:12: 50:bc:40:c0:4f:bc:e4:8b:1a:4b:4a:34:ad:5b:ea:ef:9e:80: f5:5c:29:39:d5:53:4a:0c:fa:43:5f:bc:ce:f6:60:19:3a:34: 6c:26:f5:17:4a:ba:2f:0b:11:71:61:c0:0a:4d:46:8e:f2:1e: fd:23:4f:ad:16:3f:ab:7b:53:c2:58:3e:c9:5e:e2:71:65:f9: d7:a2:a6:c0:37:4c:22:da:30:34:be:b3:1f:7a:92:c4:b0:28: fa:ff:2f:42:db:1e:fd:4f:37:b4:0f:4e:f7:c7:17:55:6e:74: 20:94:dc:71:76:02:25:7b:84:11:d8:5b:c5:29:dd:7e:93:7b: da:3a:d4:95:c2:b5:4e:13:66:fa:57:22:5d:67:ef:30:12:1e: ea:67:af:88:0e:67:d9:ee:f5:3b:d5:b5:6c:b9:e7:41:34:90: c9:db:f6:25:21:ad:37:31:0a:2f:f4:a7:68:71:9e:7e:d5:f1: 6c:cb:c7:3f:41:c0:6b:13:27:56:47:83:20:67:49:2d:5d:ad: b7:75:7a:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy/o4oSi+QKyBI0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTIxNDAyMzAxMloXDTI1MDMxNDAxMzAxMlowLzEtMCsGA1UEAxMk MjUzZmJmN2UtMjMzMS00YTkyLTgzNDEtMTA2YWRjNWNiM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WWuJK/wrne8heU78GI2YZ/47E2Kj0k1Xuus y8N+cFUcPwOBZizU3+GB84ZkDmjll8dOxYmmPlh80YiGN6ZJR/KkNUgzRwJuGDGW 8xuMb8VVw3GwEcXidANoyHQ4Z7zXWtYmoJ5G60Mk1SzZ3Fvnc7ACRAicZaufiMr5 0noEqGJ900lD3GKtETDTHVXYULvZar/WG67l8fRD2/gyHiCrZIOmggWXwb1eVqNr ZuB2i/R7W//1Hguwjk/ohGsdTyrm/dtz6BTM44uZQniyiPDqChcIAq1d/jxh/KDA 6SELj0j3uPaRZjI43ueCvggCmUjf+Vv0Pr1i9xIHe32iSb6XnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaprT1oby7Lit89sMoDgDOKoGcjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWJkNWM0MjEtMDBkNy0z NTNjLTk2YjEtNmJjMjZlYTYyNWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD7nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADygO3nz6PAXv2OImXKD3L2oiI6t/uTjQDYd6w/gJkoJgj6ULVV1cBSH o6k/d+i9JJObWaONElC8QMBPvOSLGktKNK1b6u+egPVcKTnVU0oM+kNfvM72YBk6 NGwm9RdKui8LEXFhwApNRo7yHv0jT60WP6t7U8JYPsle4nFl+deipsA3TCLaMDS+ sx96ksSwKPr/L0LbHv1PN7QPTvfHF1VudCCU3HF2AiV7hBHYW8Up3X6Te9o61JXC tU4TZvpXIl1n7zASHupnr4gOZ9nu9TvVtWy550E0kMnb9iUhrTcxCi/0p2hxnn7V 8WzLxz9BwGsTJ1ZHgyBnSS1drbd1eqw= -----END CERTIFICATE-----Generated at Wed Feb 5 04:52:04 2025 by rpki-client