$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/743e10f3-0907-3c55-879e-7c961d5c41a4.roa File: 743e10f3-0907-3c55-879e-7c961d5c41a4.roa (raw, json) Hash identifier: uNLGh6LeNEZKNZjK2rlYmAViZtlE4seFXW9K1ny1gZY= Subject key identifier: 59:71:B8:8A:07:81:88:37:C2:63:A7:44:30:04:30:C8:27:CC:52:E5 Certificate issuer: /CN=b3b07b0c-a30d-4cac-9123-4d459839ea53 Certificate serial: 010D0C9F43285848AC60D3DB9DD0C3A2E0C5E500 Authority key identifier: 59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/743e10f3-0907-3c55-879e-7c961d5c41a4.roa Signing time: Sun 26 Jan 2025 14:00:52 +0000 ROA not before: Sun 26 Jan 2025 14:00:52 +0000 ROA not after: Sat 26 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 165.1.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ac:60:d3:db:9d:d0:c3:a2:e0:c5:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3b07b0c-a30d-4cac-9123-4d459839ea53 Validity Not Before: Jan 26 14:00:52 2025 GMT Not After : Apr 26 13:00:52 2025 GMT Subject: CN=9e6a5c22-988d-40dc-b2b9-ded74466d353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:85:28:23:53:31:50:bb:db:84:d7:a7:a2:5c: f8:97:84:95:35:4a:5e:41:93:f9:e1:22:94:08:de: c8:72:9e:36:80:57:c3:10:60:97:0f:4c:c4:1a:27: 8f:3e:59:f2:29:f1:30:dd:94:b1:5e:12:59:db:90: 11:43:e0:9d:5f:55:67:d8:a0:c2:cd:9c:d4:5b:0d: 26:3c:c7:18:21:0e:ef:f5:6e:6c:e7:c9:e4:cb:cc: 9a:98:19:37:8f:8d:6a:2b:f7:dc:df:c6:82:9c:8b: 31:da:3d:cd:d6:f5:02:45:3c:08:8f:8e:7f:4d:cf: 54:c9:43:52:58:1b:5e:06:3b:9d:5a:87:5f:86:a3: d5:03:4e:a3:29:31:64:41:ec:2f:69:98:17:ee:52: 47:3e:a6:30:d9:ac:26:17:00:bf:f5:fe:ac:23:93: d4:e3:06:3e:b8:ac:41:42:dd:14:c7:9e:2b:b3:e3: 82:be:df:cf:5a:54:73:d8:2c:f9:4e:79:ab:1b:54: a6:bf:fd:2e:d9:81:6d:95:63:a1:10:54:30:f7:d1: 4d:78:8e:04:77:61:2f:64:68:ae:54:81:d8:ae:d3: 11:cc:9c:66:d9:42:a1:f7:45:6c:37:30:50:42:48: a1:7b:dc:51:c5:92:67:6b:be:08:e0:90:80:79:df: 4f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:71:B8:8A:07:81:88:37:C2:63:A7:44:30:04:30:C8:27:CC:52:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/743e10f3-0907-3c55-879e-7c961d5c41a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl X509v3 Authority Key Identifier: keyid:59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer sbgp-ipAddrBlock: critical IPv4: 165.1.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b7:3b:a1:b2:7c:73:b1:d2:36:8e:8d:77:34:37:b3:43:af: 69:fc:68:3b:1f:ad:b9:c5:cd:6e:dd:04:3b:fe:9b:e6:d6:b0: d8:3f:da:61:fe:ee:81:23:a6:2d:1b:28:ed:00:1d:b8:04:0e: ce:f2:d4:44:0a:5d:8c:cd:fc:ee:a9:2b:7c:93:30:52:20:78: 21:8b:e2:ae:dd:7e:bd:0d:8d:ca:85:ec:23:21:ad:45:fd:10: 19:2c:94:e4:7e:71:46:e0:6e:b6:31:ed:31:5d:6a:f2:a8:af: c3:fa:97:04:ad:87:40:6f:96:6f:3c:0a:0e:ef:da:97:f5:b1: b8:2b:b4:22:b6:6e:b7:e4:bc:b2:ab:43:b3:3d:28:78:5f:a9: 76:b3:2a:47:d0:d2:7b:0d:e2:ee:27:2f:20:b7:88:c5:1e:c5: df:d5:bd:bc:00:7b:73:12:ff:ab:3f:cd:43:34:4e:05:da:ed: 40:c2:c5:f1:4f:fc:30:bc:d4:a9:df:0b:ea:8e:94:83:46:a4: c4:04:c8:a0:e5:57:a8:30:65:c8:fe:95:e8:f1:03:5d:81:55: 4a:c5:e0:f6:e0:63:09:0b:86:76:01:1e:ea:1c:55:22:39:52: 49:bb:62:36:0a:24:53:9f:ef:75:38:d6:99:03:03:0a:2f:cf: 14:ae:70:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEisYNPbndDDouDF5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjNiMDdiMGMtYTMwZC00Y2FjLTkxMjMtNGQ0NTk4Mzll YTUzMB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk OWU2YTVjMjItOTg4ZC00MGRjLWIyYjktZGVkNzQ0NjZkMzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYUoI1MxULvbhNenolz4l4SVNUpeQZP54SKU CN7Icp42gFfDEGCXD0zEGiePPlnyKfEw3ZSxXhJZ25ARQ+CdX1Vn2KDCzZzUWw0m PMcYIQ7v9W5s58nky8yamBk3j41qK/fc38aCnIsx2j3N1vUCRTwIj45/Tc9UyUNS WBteBjudWodfhqPVA06jKTFkQewvaZgX7lJHPqYw2awmFwC/9f6sI5PU4wY+uKxB Qt0Ux54rs+OCvt/PWlRz2Cz5TnmrG1Smv/0u2YFtlWOhEFQw99FNeI4Ed2EvZGiu VIHYrtMRzJxm2UKh90VsNzBQQkihe9xRxZJna74I4JCAed9PywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlxuIoHgYg3wmOnRDAEMMgnzFLlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iM2Iw N2IwYy1hMzBkLTRjYWMtOTEyMy00ZDQ1OTgzOWVhNTMvNzQzZTEwZjMtMDkwNy0z YzU1LTg3OWUtN2M5NjFkNWM0MWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjNiMDdiMGMtYTMwZC00Y2FjLTkx MjMtNGQ0NTk4MzllYTUzL2IzYjA3YjBjLWEzMGQtNGNhYy05MTIzLTRkNDU5ODM5 ZWE1My5jcmwwHwYDVR0jBBgwFoAUWSTnNMDpGiu4drcJNh98f3c3It8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iM2IwN2IwYy1hMzBkLTRjYWMtOTEyMy00ZDQ1 OTgzOWVhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpQEEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABK3O6GyfHOx0jaOjXc0N7NDr2n8aDsfrbnFzW7dBDv+m+bWsNg/2mH+ 7oEjpi0bKO0AHbgEDs7y1EQKXYzN/O6pK3yTMFIgeCGL4q7dfr0NjcqF7CMhrUX9 EBkslOR+cUbgbrYx7TFdavKor8P6lwSth0Bvlm88Cg7v2pf1sbgrtCK2brfkvLKr Q7M9KHhfqXazKkfQ0nsN4u4nLyC3iMUexd/VvbwAe3MS/6s/zUM0TgXa7UDCxfFP /DC81KnfC+qOlINGpMQEyKDlV6gwZcj+lejxA12BVUrF4PbgYwkLhnYBHuocVSI5 Ukm7YjYKJFOf73U41pkDAwovzxSucMg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:25 2025 by rpki-client