$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/6fce4d9a-5022-3f96-9c6b-68f49698d64d.roa File: 6fce4d9a-5022-3f96-9c6b-68f49698d64d.roa (raw, json) Hash identifier: vKJqEosLQxC1/jljopjc8Y4k68ndvfYOQijM/KpP3uU= Subject key identifier: 73:76:73:D5:65:FE:BA:B8:E3:64:EE:D3:55:69:B2:87:21:53:BC:3E Certificate issuer: /CN=7df7e023-145a-4cd7-8721-998050ab91e2 Certificate serial: 010D0C9F43285848D21137F92D35DD95A3D98680 Authority key identifier: 78:2D:65:31:23:A4:D4:35:35:F5:89:BA:CB:56:D1:0C:58:E3:56:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/6fce4d9a-5022-3f96-9c6b-68f49698d64d.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 11848 IP address blocks: 170.199.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/7df7e023-145a-4cd7-8721-998050ab91e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/7df7e023-145a-4cd7-8721-998050ab91e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:37:f9:2d:35:dd:95:a3:d9:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df7e023-145a-4cd7-8721-998050ab91e2 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=3c8c8050-83aa-4325-8641-94f8a01f3a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b1:ee:0d:18:b0:8e:bf:39:f6:0b:a7:f0:44: bf:be:e5:ec:c8:52:2c:f3:15:3e:a3:88:93:83:a1: 16:31:4b:50:36:30:af:a1:2e:d6:3e:61:fd:59:3c: 94:70:02:17:93:b9:58:94:a6:a7:af:86:4e:1c:71: 70:e7:99:8c:9e:b1:d0:ec:00:5d:27:11:72:d7:3d: 8b:ee:51:98:9a:b7:46:d7:2a:cc:b0:11:0c:50:cd: 21:9d:da:8e:9e:3e:42:2f:62:48:23:d4:90:fc:7f: a2:6d:85:c1:27:de:7f:b9:e0:ee:db:4a:67:05:af: dd:e6:ce:bb:78:cf:0b:fd:e0:23:1a:8f:5a:f1:e1: 27:91:6f:f7:65:52:19:08:dd:b6:47:eb:47:c5:c4: fd:8e:fc:36:23:3c:aa:98:4d:d1:0e:4c:0d:95:b3: 64:44:e7:4d:3f:73:78:8d:45:3e:7a:1e:b9:f0:88: be:23:74:37:d7:af:15:19:23:ee:6b:27:89:e1:23: 47:06:3c:e4:c5:ce:84:15:33:89:bf:f8:07:20:3c: df:1e:27:44:5c:1a:7e:d9:c3:32:1f:08:c1:02:e7: 36:d5:a6:82:6a:8d:22:5c:74:50:dd:ba:07:a5:5c: 0f:97:ea:de:4b:72:48:d0:06:9c:dc:a6:e1:ac:ae: 1a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:76:73:D5:65:FE:BA:B8:E3:64:EE:D3:55:69:B2:87:21:53:BC:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/6fce4d9a-5022-3f96-9c6b-68f49698d64d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/7df7e023-145a-4cd7-8721-998050ab91e2.crl X509v3 Authority Key Identifier: keyid:78:2D:65:31:23:A4:D4:35:35:F5:89:BA:CB:56:D1:0C:58:E3:56:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2.cer sbgp-ipAddrBlock: critical IPv4: 170.199.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:46:a6:21:e9:cf:a7:49:d3:2e:69:79:64:02:9e:a1:3c:11: cb:67:35:3b:b4:91:be:97:45:e0:73:42:b9:3b:9f:99:31:15: c0:66:47:d7:83:8e:a1:14:9e:a3:23:5b:a4:c5:11:d2:db:e9: f1:e1:64:11:cd:c1:ab:50:d6:95:c8:86:99:dd:1f:b1:e4:5e: 1a:6d:1e:ec:f3:6b:55:8f:0d:c5:67:5b:02:2b:94:1c:cb:c8: 6f:79:b3:8c:e2:82:b5:95:02:f1:86:23:92:af:0c:f5:bd:5a: cf:a1:31:14:2c:6a:7b:64:8e:49:d5:a5:67:fe:37:4f:80:fe: 29:eb:cd:86:a8:09:33:38:9b:05:9c:6a:bd:ce:3a:3c:d7:d1: 58:4f:8a:35:f5:50:9e:af:ce:69:c6:8f:0c:98:bf:45:6d:c5: 3c:6f:0d:fe:26:e1:6e:6c:e2:69:00:4b:34:f1:08:ba:7f:98: 3c:86:62:25:cd:37:97:4c:41:6e:d7:70:f9:ab:18:d6:a2:48: ae:a2:ad:10:cf:b2:ea:d8:7a:42:ec:a2:0c:da:14:cb:34:a0: 8a:4e:1d:bd:44:2d:f6:b0:f3:92:b3:81:28:88:89:3a:8f:07: c2:c3:61:e6:06:86:d9:7a:95:cb:69:76:0f:95:43:09:5b:9a: 0d:d3:61:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSETf5LTXdlaPZhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RmN2UwMjMtMTQ1YS00Y2Q3LTg3MjEtOTk4MDUwYWI5 MWUyMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk M2M4YzgwNTAtODNhYS00MzI1LTg2NDEtOTRmOGEwMWYzYTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bHuDRiwjr859gun8ES/vuXsyFIs8xU+o4iT g6EWMUtQNjCvoS7WPmH9WTyUcAIXk7lYlKanr4ZOHHFw55mMnrHQ7ABdJxFy1z2L 7lGYmrdG1yrMsBEMUM0hndqOnj5CL2JII9SQ/H+ibYXBJ95/ueDu20pnBa/d5s67 eM8L/eAjGo9a8eEnkW/3ZVIZCN22R+tHxcT9jvw2IzyqmE3RDkwNlbNkROdNP3N4 jUU+eh658Ii+I3Q3168VGSPuayeJ4SNHBjzkxc6EFTOJv/gHIDzfHidEXBp+2cMy HwjBAuc21aaCao0iXHRQ3boHpVwPl+reS3JI0Aac3KbhrK4adQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHN2c9Vl/rq442Tu01VpsochU7w+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83ZGY3 ZTAyMy0xNDVhLTRjZDctODcyMS05OTgwNTBhYjkxZTIvNmZjZTRkOWEtNTAyMi0z Zjk2LTljNmItNjhmNDk2OThkNjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvN2RmN2UwMjMtMTQ1YS00Y2Q3LTg3 MjEtOTk4MDUwYWI5MWUyLzdkZjdlMDIzLTE0NWEtNGNkNy04NzIxLTk5ODA1MGFi OTFlMi5jcmwwHwYDVR0jBBgwFoAUeC1lMSOk1DU19Ym6y1bRDFjjVu4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83ZGY3ZTAyMy0xNDVhLTRjZDctODcyMS05OTgw NTBhYjkxZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqsfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJGpiHpz6dJ0y5peWQCnqE8EctnNTu0kb6XReBzQrk7n5kxFcBmR9eD jqEUnqMjW6TFEdLb6fHhZBHNwatQ1pXIhpndH7HkXhptHuzza1WPDcVnWwIrlBzL yG95s4zigrWVAvGGI5KvDPW9Ws+hMRQsantkjknVpWf+N0+A/inrzYaoCTM4mwWc ar3OOjzX0VhPijX1UJ6vzmnGjwyYv0VtxTxvDf4m4W5s4mkASzTxCLp/mDyGYiXN N5dMQW7XcPmrGNaiSK6irRDPsurYekLsogzaFMs0oIpOHb1ELfaw85KzgSiIiTqP B8LDYeYGhtl6lctpdg+VQwlbmg3TYS4= -----END CERTIFICATE-----Generated at Fri Apr 4 16:18:53 2025 by rpki-client