$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/c3ce66bf-4cb7-36f4-a357-e0e778927525.roa File: c3ce66bf-4cb7-36f4-a357-e0e778927525.roa (raw, json) Hash identifier: s8iou6g3u3gA3g+EVxOxzILPR9zkcY6g8mWbGlHjDoU= Subject key identifier: BE:DE:31:2F:59:18:08:5F:60:93:33:D7:C2:6B:DE:3F:A0:2B:2A:65 Certificate issuer: /CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287 Certificate serial: 010D0C9F4328584900215726CCD1F4A15F8EAC40 Authority key identifier: 11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/c3ce66bf-4cb7-36f4-a357-e0e778927525.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 1239 IP address blocks: 23.239.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:57:26:cc:d1:f4:a1:5f:8e:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=b54a4658-cdf1-4d9d-ad8c-e64f3346c6b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:80:18:60:8b:b7:6e:78:ea:bc:10:cc:81:0b: 7f:bd:f8:b1:85:16:51:a1:44:fb:93:18:88:07:eb: 90:3a:5b:8b:02:88:51:77:28:68:85:72:a0:b3:e3: 74:49:6b:fb:e8:f9:ce:8b:39:bc:a9:c8:c6:34:d8: 91:02:ef:da:b3:11:4a:c1:d5:86:f2:a4:92:d9:13: 59:47:31:ce:c1:b7:45:78:b6:da:b6:73:98:04:ad: 6e:6b:71:28:f4:66:c6:80:32:43:63:f7:ff:e2:fb: 4f:83:02:c3:d2:e8:05:b0:c7:7d:00:87:36:76:6c: 67:50:3f:fc:76:0a:2c:c3:ef:ed:ea:b7:e9:ef:91: 54:f4:5e:92:6c:bb:ca:00:71:87:5f:25:0d:ad:b5: fc:6a:f0:55:59:b1:9c:fc:15:96:97:f9:4c:2b:d7: 13:fc:25:5d:6a:7a:70:9a:30:ff:59:65:5e:7f:33: ec:eb:2e:24:19:8f:4a:70:17:34:aa:96:77:ad:e7: f1:17:b0:00:1a:b2:81:ba:76:f4:15:39:5a:0e:de: 4a:2b:73:71:50:16:d8:db:65:1a:c8:b9:6a:57:b8: f9:51:3a:d0:8d:5f:64:87:4f:83:7a:f2:e0:26:3b: 30:e3:a7:f5:dc:78:51:14:da:09:f1:eb:bf:a2:47: 5c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DE:31:2F:59:18:08:5F:60:93:33:D7:C2:6B:DE:3F:A0:2B:2A:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/c3ce66bf-4cb7-36f4-a357-e0e778927525.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl X509v3 Authority Key Identifier: keyid:11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer sbgp-ipAddrBlock: critical IPv4: 23.239.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:2b:45:88:75:35:00:3f:11:7e:41:1c:a3:d1:d6:51:82:c0: fc:1a:6e:4f:ab:94:9d:ad:71:14:36:e8:73:10:21:42:b1:0a: 02:91:50:95:a3:6d:ee:59:bb:fd:76:df:6e:fc:40:1f:87:95: 80:1c:41:4e:4f:c5:b2:36:3a:c9:fc:3a:3b:9b:e0:b6:1b:d5: 47:6d:a5:4a:11:01:b5:8f:ed:95:28:82:e0:15:03:9c:82:46: b8:18:d5:35:c2:59:85:0b:b5:29:f9:f6:d1:88:2b:a3:a4:8f: 02:27:70:72:b0:5d:0f:91:2e:46:35:b0:11:f7:c7:0b:fd:11: ea:b1:bb:78:16:8b:47:46:b3:f7:c2:20:b2:b8:06:8f:75:56: ab:65:d7:d5:c6:3a:bb:81:27:c0:5e:cd:31:c6:85:83:f9:b3: 93:4a:e9:92:9d:b8:13:32:fb:af:4f:e4:46:dc:07:8b:1f:7b: 1f:c2:60:a6:81:11:27:7f:f8:a8:fd:3a:82:48:a6:58:a8:6a: 22:52:c8:41:65:ba:bf:7d:00:10:cb:0e:40:0b:28:ba:2a:01: d5:39:df:0b:18:3b:53:98:ef:c5:bf:e4:fb:2d:31:b4:4e:df: 4b:b6:86:cd:11:e9:09:06:fe:60:9a:cc:70:0a:c3:f1:35:8e: 2a:e8:b8:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIVcmzNH0oV+OrEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjODViYTQtOGQ3Mi00OGVkLWExNjYtYTc2ZGMyZjA0 Mjg3MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk YjU0YTQ2NTgtY2RmMS00ZDlkLWFkOGMtZTY0ZjMzNDZjNmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIAYYIu3bnjqvBDMgQt/vfixhRZRoUT7kxiI B+uQOluLAohRdyhohXKgs+N0SWv76PnOizm8qcjGNNiRAu/asxFKwdWG8qSS2RNZ RzHOwbdFeLbatnOYBK1ua3Eo9GbGgDJDY/f/4vtPgwLD0ugFsMd9AIc2dmxnUD/8 dgosw+/t6rfp75FU9F6SbLvKAHGHXyUNrbX8avBVWbGc/BWWl/lMK9cT/CVdanpw mjD/WWVefzPs6y4kGY9KcBc0qpZ3refxF7AAGrKBunb0FTlaDt5KK3NxUBbY22Ua yLlqV7j5UTrQjV9kh0+DevLgJjsw46f13HhRFNoJ8eu/okdcewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7eMS9ZGAhfYJMz18Jr3j+gKyplMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4 NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZkYzJmMDQyODcvYzNjZTY2YmYtNGNiNy0z NmY0LWEzNTctZTBlNzc4OTI3NTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWZjODViYTQtOGQ3Mi00OGVkLWEx NjYtYTc2ZGMyZjA0Mjg3LzFmYzg1YmE0LThkNzItNDhlZC1hMTY2LWE3NmRjMmYw NDI4Ny5jcmwwHwYDVR0jBBgwFoAUEbxdAebJG/t/I+XSIpHWtCikkgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZk YzJmMDQyODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF++gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcrRYh1NQA/EX5BHKPR1lGCwPwabk+rlJ2tcRQ26HMQIUKxCgKRUJWj be5Zu/123278QB+HlYAcQU5PxbI2Osn8Ojub4LYb1UdtpUoRAbWP7ZUoguAVA5yC RrgY1TXCWYULtSn59tGIK6OkjwIncHKwXQ+RLkY1sBH3xwv9Eeqxu3gWi0dGs/fC ILK4Bo91Vqtl19XGOruBJ8BezTHGhYP5s5NK6ZKduBMy+69P5EbcB4sfex/CYKaB ESd/+Kj9OoJIplioaiJSyEFlur99ABDLDkALKLoqAdU53wsYO1OY78W/5PstMbRO 30u2hs0R6QkG/mCazHAKw/E1jirouDQ= -----END CERTIFICATE-----Generated at Sat Apr 26 15:58:42 2025 by rpki-client