$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/5ff7147d-8e91-310d-9be6-0d3247e2703c.roa File: 5ff7147d-8e91-310d-9be6-0d3247e2703c.roa (raw, json) Hash identifier: sisHLZvnYp/FbYNkUVfifasPJ2kVNBDh42+CcM4ljnQ= Subject key identifier: 14:78:67:1A:7B:28:1E:FD:1C:13:D6:05:2E:66:79:0B:00:E4:56:19 Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Certificate serial: 010D0C9F43285848D7A6581B3461BB1EC3DE1940 Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/5ff7147d-8e91-310d-9be6-0d3247e2703c.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 174 IP address blocks: 65.169.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:58:1b:34:61:bb:1e:c3:de:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=735fe460-5a1b-41ff-8ffc-462da99a0b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ae:1a:f6:29:82:25:ba:9b:4c:96:c7:31:94: 01:cf:6b:e5:6c:f0:2b:52:be:3c:71:b4:e0:1a:52: b0:1e:ef:e7:41:03:92:77:91:24:ea:68:28:1f:16: 9e:08:20:4e:04:53:39:b5:d9:56:70:ef:8b:50:7c: ac:6d:b4:3d:80:39:26:b9:c2:3a:1a:d0:31:58:14: 6f:b0:7b:4b:6a:76:43:22:9f:a8:d1:ad:b0:ed:cb: e2:26:56:e1:1b:ea:28:d1:02:7a:9d:98:94:9d:fc: f0:aa:e7:33:1e:7e:e7:af:0b:dc:11:3c:d2:65:51: 53:81:4d:b3:82:3c:df:f4:a3:3e:6c:77:47:d7:38: ee:80:f9:29:11:74:5e:c2:8a:54:af:03:52:43:db: df:0b:49:0d:7b:bb:bc:54:3f:f6:d0:f8:32:f8:d0: 4a:14:7d:8d:51:32:d3:a5:df:92:53:ec:1e:ed:d0: 45:45:fa:4b:75:d8:2c:8e:eb:c5:dd:fd:a2:80:e2: 0a:21:73:83:4b:b7:7d:81:1f:c1:2f:e3:78:4c:9c: 16:15:3e:18:84:ae:18:8c:7a:4d:38:06:e9:fa:4d: 3a:ab:f9:b0:84:50:6a:33:16:f7:c0:c7:04:cd:4e: ad:c9:c4:a4:76:ab:fa:ff:e5:7d:04:3f:c5:2b:df: 0c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:78:67:1A:7B:28:1E:FD:1C:13:D6:05:2E:66:79:0B:00:E4:56:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/5ff7147d-8e91-310d-9be6-0d3247e2703c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl X509v3 Authority Key Identifier: keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer sbgp-ipAddrBlock: critical IPv4: 65.169.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:0b:50:eb:a1:c6:55:14:14:c8:9e:07:c4:bd:23:49:1a:85: 7c:8e:35:09:80:91:59:a5:60:d1:17:57:b0:53:52:97:69:ac: 4f:0c:94:14:d7:fb:17:bc:ab:b3:b7:1e:4c:3c:ed:e8:5d:8c: ff:38:53:c1:b6:ea:f1:de:b7:fe:b3:d5:d0:1e:59:4d:82:86: 88:df:5c:1d:4a:5f:7a:21:ee:03:c1:d4:79:1e:93:77:88:c6: 8a:4a:bb:cc:ab:93:bf:b8:51:63:c3:f2:61:87:dd:a0:36:51: 0e:9d:3d:2b:7c:5d:ec:bc:d8:85:18:87:14:92:9d:e7:fd:00: b4:d9:f1:a6:66:36:b4:65:b2:ea:b0:3e:7c:ca:ae:c8:d3:99: 95:ae:1b:39:53:40:92:bd:2c:80:f0:0b:65:e0:e6:cc:39:b1: 60:04:a9:a2:60:4c:f9:ac:49:70:11:ef:60:92:1c:e3:ed:9b: b2:f7:61:a4:d6:ae:90:ca:25:43:a2:f3:d4:0d:98:f4:9e:e3: 0e:19:54:bc:99:58:b4:56:8d:63:1a:de:bc:36:f8:c4:15:b3: ab:a4:59:7a:92:68:81:b6:e6:fd:6e:cf:62:7e:d7:ef:8d:65: a0:24:e0:8a:f3:c0:24:fe:2c:eb:d8:00:56:fe:2d:27:cf:27: 19:49:a7:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXplgbNGG7HsPeGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk ZjZkMB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk NzM1ZmU0NjAtNWExYi00MWZmLThmZmMtNDYyZGE5OWEwYjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq4a9imCJbqbTJbHMZQBz2vlbPArUr48cbTg GlKwHu/nQQOSd5Ek6mgoHxaeCCBOBFM5tdlWcO+LUHysbbQ9gDkmucI6GtAxWBRv sHtLanZDIp+o0a2w7cviJlbhG+oo0QJ6nZiUnfzwquczHn7nrwvcETzSZVFTgU2z gjzf9KM+bHdH1zjugPkpEXRewopUrwNSQ9vfC0kNe7u8VD/20Pgy+NBKFH2NUTLT pd+SU+we7dBFRfpLddgsjuvF3f2igOIKIXODS7d9gR/BL+N4TJwWFT4YhK4YjHpN OAbp+k06q/mwhFBqMxb3wMcEzU6tycSkdqv6/+V9BD/FK98M8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBR4Zxp7KB79HBPWBS5meQsA5FYZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvNWZmNzE0N2QtOGU5MS0z MTBkLTliZTYtMGQzMjQ3ZTI3MDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQakmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJELUOuhxlUUFMieB8S9I0kahXyONQmAkVmlYNEXV7BTUpdprE8MlBTX +xe8q7O3Hkw87ehdjP84U8G26vHet/6z1dAeWU2ChojfXB1KX3oh7gPB1Hkek3eI xopKu8yrk7+4UWPD8mGH3aA2UQ6dPSt8Xey82IUYhxSSnef9ALTZ8aZmNrRlsuqw PnzKrsjTmZWuGzlTQJK9LIDwC2Xg5sw5sWAEqaJgTPmsSXAR72CSHOPtm7L3YaTW rpDKJUOi89QNmPSe4w4ZVLyZWLRWjWMa3rw2+MQVs6ukWXqSaIG25v1uz2J+1++N ZaAk4IrzwCT+LOvYAFb+LSfPJxlJp+k= -----END CERTIFICATE-----Generated at Sun Apr 6 18:17:55 2025 by rpki-client