$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/99e0a2b2-bb67-37ba-837a-b54f0ac68617.roa File: 99e0a2b2-bb67-37ba-837a-b54f0ac68617.roa (raw, json) Hash identifier: TiMY2B7bbJA359pPpz0fF4nJU9wvKe8TY+Pd9Bldn2c= Subject key identifier: 17:AB:1F:36:C5:77:03:14:69:18:18:74:4A:B0:51:C3:38:70:B9:8C Certificate issuer: /CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6 Certificate serial: 010D0C9F432858488815EB18A29F5A36F6D65E00 Authority key identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/99e0a2b2-bb67-37ba-837a-b54f0ac68617.roa Signing time: Mon 13 Jan 2025 14:00:52 +0000 ROA not before: Mon 13 Jan 2025 14:00:52 +0000 ROA not after: Sun 13 Apr 2025 13:00:52 +0000 asID: 23675 IP address blocks: 208.70.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:88:15:eb:18:a2:9f:5a:36:f6:d6:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6 Validity Not Before: Jan 13 14:00:52 2025 GMT Not After : Apr 13 13:00:52 2025 GMT Subject: CN=aa25272b-719f-4693-aaa5-320d7771a602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:36:26:7d:98:da:2e:40:bc:35:2b:5a:21:41: ec:d9:fe:b5:2e:dc:26:33:58:84:ee:2a:8b:95:51: 15:11:9c:0d:0f:4b:5c:c6:22:3a:bc:81:8d:57:76: 64:fd:bd:3e:c7:e5:21:64:fa:b6:82:fd:42:eb:7a: a4:af:ea:00:75:5b:8b:99:96:e9:c3:c9:ca:9e:d6: ec:1e:b1:72:bb:9f:77:c4:2d:e9:39:74:a9:e0:7a: 87:7d:e5:1e:a9:0e:9e:68:90:39:35:bf:ff:95:7c: 58:15:33:e1:48:b7:80:f6:1d:a8:88:bf:71:b6:6f: 13:f7:bf:18:ad:d8:85:73:a8:fd:b6:cf:a2:2b:0c: 07:e0:cd:13:84:ad:fa:7f:a3:9e:03:59:9b:18:bf: 0d:16:d5:82:ba:f1:37:36:36:88:c0:7d:8e:5e:a9: d6:8f:f1:0f:ab:1a:77:30:fc:0e:74:d1:ab:c4:3c: 75:85:fc:c1:e7:44:2f:b5:1e:31:42:d1:8b:2f:55: e6:ca:6e:52:a8:b3:50:bb:07:4c:a6:23:24:e1:db: 9a:2a:7d:1d:3c:4c:d3:b9:dc:f1:fe:bc:1f:a0:c3: df:28:93:da:70:29:9f:2c:88:05:83:d2:a3:b5:68: f0:d2:d6:6a:55:43:a0:58:ca:ca:62:95:68:44:ad: 70:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AB:1F:36:C5:77:03:14:69:18:18:74:4A:B0:51:C3:38:70:B9:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/99e0a2b2-bb67-37ba-837a-b54f0ac68617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl X509v3 Authority Key Identifier: keyid:E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer sbgp-ipAddrBlock: critical IPv4: 208.70.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:83:b4:17:f7:53:5e:b3:29:c7:ff:88:89:62:16:f2:90:3b: 72:e1:45:56:62:3e:67:f4:64:44:be:f0:fb:40:b1:94:07:41: d8:60:92:9c:ec:03:43:9c:af:6d:35:f7:81:ff:4b:f8:be:93: b8:92:86:63:34:b5:af:f8:4e:19:9a:4d:6f:9d:fb:78:ad:5e: 55:49:22:8b:07:73:a2:ea:c5:e3:25:d5:99:fe:b5:96:ca:98: dd:5c:eb:f0:52:ce:7b:1b:b3:bb:68:56:07:d5:68:c4:e1:9c: b1:32:ed:47:73:ad:e9:fa:76:f5:61:fe:36:74:ac:88:64:48: 4c:40:a1:d4:a8:4e:b9:c0:64:e3:7b:7d:cf:dc:a4:3c:27:c9: 46:c9:8c:cf:ac:e9:fd:b7:28:df:de:ec:a9:10:db:35:77:7f: a5:ae:f8:73:a5:dd:f9:9c:b6:0e:26:07:9b:b4:7b:6a:da:59: 9f:d8:2a:29:21:90:b0:fc:b2:4c:a3:2d:2f:bd:f0:45:7c:45: 7c:b6:c2:96:ba:58:38:ca:06:7d:bd:3d:46:c5:3d:3d:55:34: 5f:77:36:0e:15:89:64:ef:59:b1:6b:68:f1:f8:3a:3f:78:1f: f8:21:7b:c0:18:55:d5:cc:cd:5f:48:ef:7f:5e:c4:eb:de:f2: a8:a8:00:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiIFesYop9aNvbWXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzdjNGM2MmEtM2Y2ZC00YzFjLThiZGItMzcwNjI0NmNi ZmQ2MB4XDTI1MDExMzE0MDA1MloXDTI1MDQxMzEzMDA1MlowLzEtMCsGA1UEAxMk YWEyNTI3MmItNzE5Zi00NjkzLWFhYTUtMzIwZDc3NzFhNjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizYmfZjaLkC8NStaIUHs2f61LtwmM1iE7iqL lVEVEZwND0tcxiI6vIGNV3Zk/b0+x+UhZPq2gv1C63qkr+oAdVuLmZbpw8nKntbs HrFyu593xC3pOXSp4HqHfeUeqQ6eaJA5Nb//lXxYFTPhSLeA9h2oiL9xtm8T978Y rdiFc6j9ts+iKwwH4M0ThK36f6OeA1mbGL8NFtWCuvE3NjaIwH2OXqnWj/EPqxp3 MPwOdNGrxDx1hfzB50QvtR4xQtGLL1Xmym5SqLNQuwdMpiMk4duaKn0dPEzTudzx /rwfoMPfKJPacCmfLIgFg9KjtWjw0tZqVUOgWMrKYpVoRK1wSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBerHzbFdwMUaRgYdEqwUcM4cLmMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2M0 YzYyYS0zZjZkLTRjMWMtOGJkYi0zNzA2MjQ2Y2JmZDYvOTllMGEyYjItYmI2Ny0z N2JhLTgzN2EtYjU0ZjBhYzY4NjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzdjNGM2MmEtM2Y2ZC00YzFjLThi ZGItMzcwNjI0NmNiZmQ2Lzc3YzRjNjJhLTNmNmQtNGMxYy04YmRiLTM3MDYyNDZj YmZkNi5jcmwwHwYDVR0jBBgwFoAU4p3oDYbgi/0iz/5leJQg8L1y3xMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2M0YzYyYS0zZjZkLTRjMWMtOGJkYi0zNzA2 MjQ2Y2JmZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKuDtBf3U16zKcf/iIliFvKQO3LhRVZiPmf0ZES+8PtAsZQHQdhgkpzs A0Ocr20194H/S/i+k7iShmM0ta/4ThmaTW+d+3itXlVJIosHc6LqxeMl1Zn+tZbK mN1c6/BSznsbs7toVgfVaMThnLEy7Udzren6dvVh/jZ0rIhkSExAodSoTrnAZON7 fc/cpDwnyUbJjM+s6f23KN/e7KkQ2zV3f6Wu+HOl3fmctg4mB5u0e2raWZ/YKikh kLD8skyjLS+98EV8RXy2wpa6WDjKBn29PUbFPT1VNF93Ng4ViWTvWbFraPH4Oj94 H/ghe8AYVdXMzV9I739exOve8qioAEg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:51 2025 by rpki-client