$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/008ecab5-1d8d-3d77-88c0-4d4d9d70afe6.roa File: 008ecab5-1d8d-3d77-88c0-4d4d9d70afe6.roa (raw, json) Hash identifier: bwFxJbp3jnS2FRp0fU6li5Z7bfIVjuxCtKSySUJST+w= Subject key identifier: E8:93:D7:14:A5:71:C9:92:2E:57:A6:51:24:E9:EC:55:A7:3C:3D:9A Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584909E69F881F42AF8194D85C00 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/008ecab5-1d8d-3d77-88c0-4d4d9d70afe6.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 16509 IP address blocks: 170.114.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:9f:88:1f:42:af:81:94:d8:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=bce8ba7d-b606-47ab-a020-409417f897f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:57:b1:28:5e:6c:35:31:86:60:12:b0:4e:a9: bd:d7:28:61:89:56:3e:82:bf:1b:1d:1e:92:c3:92: f3:7d:33:e5:a3:9f:7d:ad:05:32:80:3d:cd:70:af: f0:d6:d5:b1:a9:d4:c8:aa:ed:a9:68:17:79:b5:7c: 49:e2:b5:9c:bb:36:27:b3:44:81:27:4b:2f:de:cf: c5:9c:cc:96:18:9c:9a:e3:e4:61:e6:5f:b6:a2:6a: 91:d2:73:77:30:ec:fd:75:4e:d5:17:07:4c:be:10: a3:bb:e5:24:6d:79:78:87:ce:c9:a5:0c:a2:b3:88: 87:c8:64:c9:30:20:76:61:13:54:82:23:8d:3f:3c: 25:e5:a4:e6:5d:eb:c7:58:4d:d8:5d:51:a3:bd:b4: df:c5:33:42:09:11:ea:f2:6f:23:a9:4e:b0:55:a5: c5:c5:9b:91:e7:fc:63:0f:f3:92:e3:66:17:71:2b: 6e:a3:05:58:68:4a:b4:b0:f9:0e:d0:7f:c2:81:01: 97:2d:e1:64:e5:63:b0:57:a2:a0:a0:52:b4:3a:6f: cd:21:b0:9c:6d:f1:99:ce:4d:10:25:2b:5b:b3:5d: 4e:0b:e0:0f:09:cb:89:fe:54:a5:47:b0:ea:e4:1c: c8:82:99:19:96:f8:b3:19:07:0d:f9:77:ca:98:4d: ad:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:93:D7:14:A5:71:C9:92:2E:57:A6:51:24:E9:EC:55:A7:3C:3D:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/008ecab5-1d8d-3d77-88c0-4d4d9d70afe6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:0c:77:b4:09:08:13:3a:68:ea:ee:e3:ac:a3:f3:05:ab:3d: c4:14:43:99:ad:0a:fe:53:86:22:f0:9c:27:8c:a4:1e:92:b4: aa:3f:42:ba:15:c5:f6:37:40:01:da:ef:e3:9d:15:62:be:30: 3d:a7:2e:7c:89:e6:cb:ef:c6:4e:1c:4e:4c:3b:df:07:a3:ef: a6:3d:a9:96:c4:6d:fd:1a:f2:12:84:d1:94:28:6c:f0:da:5d: 71:88:9d:e3:42:fd:a8:9c:b8:d7:62:c0:6c:91:5e:0c:5a:5c: 0b:56:d5:96:8e:4f:87:92:36:9b:c1:d7:ec:be:52:e7:ee:3c: c9:f6:9b:03:1a:06:03:b2:41:ce:03:d3:b4:03:32:d3:c5:4d: 1d:81:46:5b:ac:25:9f:9f:36:62:2b:11:81:14:48:c8:69:6c: 5f:18:cc:1f:f3:3b:70:01:39:6a:ca:18:a3:c6:a6:36:fa:ef: 41:cf:b8:5e:55:ba:b3:f9:aa:73:72:a3:c0:5f:96:4d:65:34: f6:52:70:a1:8d:b3:f7:f7:ee:5b:21:e2:19:00:c4:60:dd:33: 7e:80:c9:e4:bc:fe:7d:e0:ba:c2:1f:98:5d:b0:a9:8f:fa:f9: 42:a4:88:0c:d9:58:34:43:e5:cd:ed:7d:46:47:a7:95:ef:9a: d5:70:9b:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5p+IH0KvgZTYXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk YmNlOGJhN2QtYjYwNi00N2FiLWEwMjAtNDA5NDE3Zjg5N2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVexKF5sNTGGYBKwTqm91yhhiVY+gr8bHR6S w5LzfTPlo599rQUygD3NcK/w1tWxqdTIqu2paBd5tXxJ4rWcuzYns0SBJ0sv3s/F nMyWGJya4+Rh5l+2omqR0nN3MOz9dU7VFwdMvhCju+UkbXl4h87JpQyis4iHyGTJ MCB2YRNUgiONPzwl5aTmXevHWE3YXVGjvbTfxTNCCRHq8m8jqU6wVaXFxZuR5/xj D/OS42YXcStuowVYaEq0sPkO0H/CgQGXLeFk5WOwV6KgoFK0Om/NIbCcbfGZzk0Q JStbs11OC+APCcuJ/lSlR7Dq5BzIgpkZlvizGQcN+XfKmE2t0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiT1xSlccmSLlemUSTp7FWnPD2aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMDA4ZWNhYjUtMWQ4ZC0z ZDc3LTg4YzAtNGQ0ZDlkNzBhZmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqnIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQMd7QJCBM6aOru46yj8wWrPcQUQ5mtCv5ThiLwnCeMpB6StKo/QroV xfY3QAHa7+OdFWK+MD2nLnyJ5svvxk4cTkw73wej76Y9qZbEbf0a8hKE0ZQobPDa XXGIneNC/aicuNdiwGyRXgxaXAtW1ZaOT4eSNpvB1+y+UufuPMn2mwMaBgOyQc4D 07QDMtPFTR2BRlusJZ+fNmIrEYEUSMhpbF8YzB/zO3ABOWrKGKPGpjb670HPuF5V urP5qnNyo8Bflk1lNPZScKGNs/f37lsh4hkAxGDdM36AyeS8/n3gusIfmF2wqY/6 +UKkiAzZWDRD5c3tfUZHp5XvmtVwm/Q= -----END CERTIFICATE-----Generated at Sat Apr 5 12:23:46 2025 by rpki-client