$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/d24168f5-a980-3a14-a89b-7351a9920158.roa File: d24168f5-a980-3a14-a89b-7351a9920158.roa (raw, json) Hash identifier: CIYNKIhcRS5mirwaDYlztgkK4eKIBCwrEzl9Y8SnivY= Subject key identifier: 6E:4D:81:26:9A:7B:AB:BB:8D:20:9C:82:97:9D:AB:6D:36:38:95:74 Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F432858480BDA6F4897816C4BC1651C00 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/d24168f5-a980-3a14-a89b-7351a9920158.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 22147 IP address blocks: 208.118.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:6f:48:97:81:6c:4b:c1:65:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=e7452a35-c765-4ebe-8430-f18e95c313de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:69:b0:2f:c9:a4:f1:b0:a1:05:c5:70:d0:aa: f4:9f:53:5b:27:ea:dc:f7:72:a7:99:a3:b4:b0:e0: 93:5d:bc:07:bd:b9:ab:15:9d:1b:8d:83:d0:ea:ac: 76:b3:30:f1:b6:71:62:41:ff:79:48:ba:31:59:05: cb:61:72:23:53:60:13:db:25:e3:63:44:9d:d8:a1: 3e:49:17:6a:36:0e:10:34:ca:9a:ca:68:e4:ba:da: d9:36:74:21:c2:27:a1:29:b2:cf:c2:36:6f:eb:25: ed:fa:00:16:33:17:a7:aa:3c:18:b5:e7:31:36:7d: 5f:80:7e:0c:c3:6d:07:73:e3:a6:6e:bf:66:ac:9f: fb:2c:27:7d:37:05:57:87:fc:1a:ed:66:46:b4:3f: 9b:02:fd:95:8d:20:f6:16:57:1c:83:eb:50:bf:41: 56:89:4e:48:ca:9b:01:6f:db:c8:9c:23:3b:a2:59: f9:a1:97:93:f5:10:e4:82:6e:41:bf:80:d0:ee:08: 0a:1d:ad:88:c5:7f:37:54:da:84:2c:2e:cc:7e:6c: 9d:e8:a5:10:0b:2d:7b:a0:a3:8d:40:62:05:8e:1e: d3:ef:36:70:4d:c1:07:3d:1a:91:f6:43:fe:94:cf: 78:34:2d:9a:0e:dd:51:3f:70:c9:e7:f4:ba:bf:bd: e0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4D:81:26:9A:7B:AB:BB:8D:20:9C:82:97:9D:AB:6D:36:38:95:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/d24168f5-a980-3a14-a89b-7351a9920158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv4: 208.118.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:4a:b7:90:9b:84:2a:90:fe:2b:6a:93:b6:78:f6:0b:48:fe: 24:87:d8:10:f6:07:00:cc:6f:02:f5:94:6f:78:6f:77:ba:16: 97:7b:20:40:13:97:17:f6:af:36:05:9a:32:11:9a:e2:b9:9e: ed:98:2e:35:72:9c:8d:d7:1d:71:c6:9e:a8:d8:cb:cf:e3:f8: 8c:a4:48:29:78:63:07:0a:20:cb:e6:01:4e:ab:83:60:6b:6c: 45:bc:95:63:74:74:33:71:5a:a7:a1:b3:76:28:a2:e0:8a:ff: 36:a9:05:fe:80:a6:ca:eb:d9:37:3b:85:d2:e2:28:3f:75:57: 07:f1:68:79:d7:7f:8a:ed:98:a4:8b:f5:81:bd:d0:15:18:94: 25:74:a4:54:4d:ce:58:a9:68:fb:f7:60:ad:79:21:c5:f3:c6: cf:8d:b5:16:f4:bb:05:56:bc:c3:90:2a:99:73:2d:ca:c8:c8: e6:ef:d7:04:94:58:6a:f3:33:a9:35:38:e6:79:16:99:df:dc: bc:bf:ba:58:01:42:d5:9a:3d:27:79:7c:3c:7f:66:3d:6e:c0: 02:aa:dc:22:0a:f7:3f:a0:6c:f9:9d:ca:6e:3e:8d:5b:bb:83: 83:28:ff:95:8d:66:4d:9e:93:b2:5c:e1:de:b5:14:3d:b1:b0: 59:01:35:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgL2m9Il4FsS8FlHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk ZTc0NTJhMzUtYzc2NS00ZWJlLTg0MzAtZjE4ZTk1YzMxM2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGmwL8mk8bChBcVw0Kr0n1NbJ+rc93KnmaO0 sOCTXbwHvbmrFZ0bjYPQ6qx2szDxtnFiQf95SLoxWQXLYXIjU2AT2yXjY0Sd2KE+ SRdqNg4QNMqaymjkutrZNnQhwiehKbLPwjZv6yXt+gAWMxenqjwYtecxNn1fgH4M w20Hc+Ombr9mrJ/7LCd9NwVXh/wa7WZGtD+bAv2VjSD2Flccg+tQv0FWiU5IypsB b9vInCM7oln5oZeT9RDkgm5Bv4DQ7ggKHa2IxX83VNqELC7Mfmyd6KUQCy17oKON QGIFjh7T7zZwTcEHPRqR9kP+lM94NC2aDt1RP3DJ5/S6v73gYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5NgSaae6u7jSCcgpedq202OJV0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvZDI0MTY4ZjUtYTk4MC0z YTE0LWE4OWItNzM1MWE5OTIwMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HbsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1Kt5CbhCqQ/itqk7Z49gtI/iSH2BD2BwDMbwL1lG94b3e6Fpd7IEAT lxf2rzYFmjIRmuK5nu2YLjVynI3XHXHGnqjYy8/j+IykSCl4YwcKIMvmAU6rg2Br bEW8lWN0dDNxWqehs3YoouCK/zapBf6Apsrr2Tc7hdLiKD91VwfxaHnXf4rtmKSL 9YG90BUYlCV0pFRNzlipaPv3YK15IcXzxs+NtRb0uwVWvMOQKplzLcrIyObv1wSU WGrzM6k1OOZ5Fpnf3Ly/ulgBQtWaPSd5fDx/Zj1uwAKq3CIK9z+gbPmdym4+jVu7 g4Mo/5WNZk2ek7Jc4d61FD2xsFkBNSg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:04 2025 by rpki-client