$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/14fc1c0d-8e12-3e23-93cd-8d6bda6fec92.roa File: 14fc1c0d-8e12-3e23-93cd-8d6bda6fec92.roa (raw, json) Hash identifier: k0LwuNmrZR4r8Q9HtaTCas4XxbdVRlM/0qmgw/4H/uU= Subject key identifier: B0:54:0A:66:07:7F:0E:6E:91:7F:45:84:7E:21:70:D2:99:AC:67:37 Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F43285848DEA11B6DE216ECB37BC22F00 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/14fc1c0d-8e12-3e23-93cd-8d6bda6fec92.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 21928 IP address blocks: 172.32.0.0/11 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:1b:6d:e2:16:ec:b3:7b:c2:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=28b6fe1a-cb14-477f-9403-d3e08d295f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:10:08:70:1d:fd:07:9b:d2:fd:03:07:38:c2: 6c:ec:db:1b:a1:5e:40:cc:57:d0:17:2f:71:41:b0: ec:12:ee:c6:f0:b7:dc:95:0c:6b:e1:03:28:43:7e: 6e:e9:7b:56:d3:a5:66:20:46:c9:fc:ec:20:3c:f0: 9e:ac:5d:a3:45:f8:f8:f1:8c:3b:e5:8b:58:58:d1: d2:5d:17:ac:16:ea:05:6a:56:ff:19:30:5c:92:10: 61:9d:a1:98:74:12:ef:fa:c3:e9:c3:42:4c:ea:13: 40:e2:6c:89:98:d5:f2:2f:e8:7e:8a:cc:a0:92:cd: 90:2f:d4:53:12:bf:e7:ec:94:74:73:cf:7b:af:01: 20:7e:a3:5e:84:e2:8e:52:27:72:7f:13:2a:58:cf: 31:5e:94:0c:9e:9c:54:8d:7d:0c:45:fe:0c:6f:8f: cf:47:4c:a2:2d:1a:fb:4d:85:f2:8a:7b:22:08:86: 74:62:f0:fb:97:a5:f8:8c:32:15:a6:13:8c:b8:0a: af:3d:01:1b:c1:7a:84:94:b5:0f:55:7f:7b:b7:56: ca:72:f1:d4:1d:88:7d:eb:49:42:70:c3:92:c9:9b: 1c:a2:51:40:cc:90:85:0a:ff:67:5f:71:06:a1:b6: 27:0a:35:c8:59:19:53:3c:cb:15:c5:c8:87:4c:99: 01:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:54:0A:66:07:7F:0E:6E:91:7F:45:84:7E:21:70:D2:99:AC:67:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/14fc1c0d-8e12-3e23-93cd-8d6bda6fec92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv4: 172.32.0.0/11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:0e:ca:f9:db:e3:b8:39:51:0f:36:a8:ef:9c:a1:05:f4:00: dc:30:12:68:e5:70:65:5c:3e:2b:ea:44:18:35:58:46:34:8f: 44:08:30:e1:91:d2:3d:ea:af:aa:14:2c:dc:44:51:f7:32:76: 98:a6:46:cf:7a:e6:54:ad:54:84:4d:7c:51:bd:57:6f:f8:64: cb:fb:c3:b1:32:e4:bb:63:75:1c:7e:08:fe:5e:a0:84:54:2f: ae:c0:ca:8b:52:96:5c:46:55:65:de:e3:68:0a:d2:05:3f:45: 53:49:7e:25:91:55:03:2a:ae:87:f3:1f:c1:03:07:8d:f7:4f: 89:a7:5d:c7:dc:f8:05:c4:45:5f:a3:1f:33:6e:86:96:0e:ba: d7:e4:36:d2:17:52:4a:05:c1:f1:d7:21:f4:b2:89:f0:b3:0a: b4:f6:ec:01:4d:1e:ac:fe:0f:89:b5:3a:b0:45:d3:b3:98:82: 6e:dd:15:df:ab:2d:95:a7:df:df:4c:e6:d9:d6:14:98:d0:dd: 90:e3:a3:7b:5f:3e:26:da:eb:ec:51:92:09:90:94:00:b3:d7: b1:db:7d:7c:6a:2b:f9:97:45:95:4f:d6:5a:f2:f2:52:66:09: 5a:89:d7:d4:de:ad:77:b4:0f:bc:47:08:fd:8b:4a:87:08:2a: 4b:af:92:fb -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjeoRtt4hbss3vCLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk MjhiNmZlMWEtY2IxNC00NzdmLTk0MDMtZDNlMDhkMjk1ZjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRAIcB39B5vS/QMHOMJs7NsboV5AzFfQFy9x QbDsEu7G8LfclQxr4QMoQ35u6XtW06VmIEbJ/OwgPPCerF2jRfj48Yw75YtYWNHS XResFuoFalb/GTBckhBhnaGYdBLv+sPpw0JM6hNA4myJmNXyL+h+isygks2QL9RT Er/n7JR0c897rwEgfqNehOKOUidyfxMqWM8xXpQMnpxUjX0MRf4Mb4/PR0yiLRr7 TYXyinsiCIZ0YvD7l6X4jDIVphOMuAqvPQEbwXqElLUPVX97t1bKcvHUHYh960lC cMOSyZscolFAzJCFCv9nX3EGobYnCjXIWRlTPMsVxciHTJkBdQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLBUCmYHfw5ukX9FhH4hcNKZrGc3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvMTRmYzFjMGQtOGUxMi0z ZTIzLTkzY2QtOGQ2YmRhNmZlYzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMFrCAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAPA7K+dvjuDlRDzao75yhBfQA3DASaOVwZVw+K+pEGDVYRjSPRAgw4ZHS PeqvqhQs3ERR9zJ2mKZGz3rmVK1UhE18Ub1Xb/hky/vDsTLku2N1HH4I/l6ghFQv rsDKi1KWXEZVZd7jaArSBT9FU0l+JZFVAyquh/MfwQMHjfdPiaddx9z4BcRFX6Mf M26Glg661+Q20hdSSgXB8dch9LKJ8LMKtPbsAU0erP4PibU6sEXTs5iCbt0V36st laff30zm2dYUmNDdkOOje18+Jtrr7FGSCZCUALPXsdt9fGor+ZdFlU/WWvLyUmYJ WonX1N6td7QPvEcI/YtKhwgqS6+S+w== -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:28 2025 by rpki-client