$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/16b704f1-00d2-3275-b255-32b4eae3f37c.roa File: 16b704f1-00d2-3275-b255-32b4eae3f37c.roa (raw, json) Hash identifier: ok7IHCPHOp9g65Tkom64Tb2KNWHhGEaSXgFL7o4yKUQ= Subject key identifier: 8D:33:47:67:11:F9:CD:59:8E:C9:1F:8F:10:0F:E0:08:59:04:86:5E Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F432858486D904E2A8C1D364AA9DC1A00 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/16b704f1-00d2-3275-b255-32b4eae3f37c.roa Signing time: Sat 04 Jan 2025 02:00:39 +0000 ROA not before: Sat 04 Jan 2025 02:00:39 +0000 ROA not after: Fri 04 Apr 2025 01:00:39 +0000 asID: 1239 IP address blocks: 204.119.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6d:90:4e:2a:8c:1d:36:4a:a9:dc:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Jan 4 02:00:39 2025 GMT Not After : Apr 4 01:00:39 2025 GMT Subject: CN=33dd4edd-6772-4418-9ae4-35a6351d90bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:20:a0:52:aa:4e:ac:a5:39:9d:89:65:cc:82: f4:67:3d:5a:dd:4a:7d:67:6a:58:03:b8:cf:ac:9b: 02:0e:68:11:b0:d2:5f:73:2e:89:ab:f7:7e:8b:58: 05:ea:94:6b:2a:86:44:b7:5c:a9:31:e1:f9:88:76: 62:cb:88:c9:56:a2:e7:37:64:a0:05:df:08:19:64: 3e:46:9d:a4:b9:1d:34:bc:9d:d2:f3:5f:5f:b0:da: 33:ba:d0:07:e7:e7:5e:7f:06:96:96:12:38:a8:6a: 57:1c:8f:41:35:16:81:24:e8:7a:90:40:73:35:4f: a5:ef:96:ff:54:13:81:83:fa:61:b4:60:89:5d:2f: 7c:fc:1f:16:29:6d:f6:f3:95:d1:8f:6c:dd:1b:ab: 4d:63:8c:f9:f4:ad:6d:46:34:3a:14:a6:c0:8c:3f: af:8f:61:47:ce:69:04:b9:07:df:ff:75:dc:50:df: 25:47:e7:6a:1f:2f:5d:3e:da:c9:76:73:e2:94:36: a2:9a:50:d9:db:66:1e:cd:fa:23:6b:05:e1:92:52: ce:57:83:3e:d5:4d:99:37:b2:e9:b5:eb:f3:da:0d: e5:5f:fe:54:e2:6f:a3:77:a4:ea:cb:6c:9f:d3:39: fe:20:63:91:74:d2:35:4c:dc:03:0a:e6:53:c9:3a: 3e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:33:47:67:11:F9:CD:59:8E:C9:1F:8F:10:0F:E0:08:59:04:86:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/16b704f1-00d2-3275-b255-32b4eae3f37c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 204.119.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:21:49:31:b8:98:d0:43:91:35:f0:ad:4e:c3:70:32:27:68: 4e:bf:12:ee:d1:22:d2:cc:89:72:da:ef:14:fe:cb:d2:ce:d3: 82:9b:74:7c:91:79:10:10:d1:cd:9e:1c:bb:27:a9:7f:86:f8: f7:ff:81:0c:1a:97:00:c6:e1:09:94:29:d9:a6:b3:8c:af:c1: f4:4e:f5:8f:62:ed:7f:35:c4:32:79:61:6a:0b:50:a0:23:e8: 19:e8:a5:5e:81:f8:73:98:0c:ba:ed:9f:88:14:af:cd:02:54: 1b:79:de:ee:fb:31:98:f7:b7:f6:b0:45:a5:79:7f:23:91:b9: a5:42:d0:b0:46:29:bb:cc:24:8f:72:21:15:3a:d5:f0:c1:46: 3a:2c:25:72:07:00:77:f8:9d:b4:c5:a0:74:a9:33:42:5d:6e: e9:0d:da:b2:81:2c:41:65:60:73:f7:0e:b0:fd:19:aa:3a:74: fb:77:ab:d3:11:c9:44:6c:5e:bf:83:c7:77:17:1c:45:95:99: 34:ca:f3:78:7e:2c:bc:4a:2d:88:fb:b3:15:ce:ee:c6:94:8b: e8:38:4e:1b:9d:a3:5f:f1:d8:50:78:df:7c:2f:17:49:38:36: 9d:db:55:10:90:76:ec:b8:4a:ef:42:9a:9d:65:da:a0:e7:3c: 64:89:3f:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkE4qjB02SqncGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk MzNkZDRlZGQtNjc3Mi00NDE4LTlhZTQtMzVhNjM1MWQ5MGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSCgUqpOrKU5nYllzIL0Zz1a3Up9Z2pYA7jP rJsCDmgRsNJfcy6Jq/d+i1gF6pRrKoZEt1ypMeH5iHZiy4jJVqLnN2SgBd8IGWQ+ Rp2kuR00vJ3S819fsNozutAH5+defwaWlhI4qGpXHI9BNRaBJOh6kEBzNU+l75b/ VBOBg/phtGCJXS98/B8WKW3285XRj2zdG6tNY4z59K1tRjQ6FKbAjD+vj2FHzmkE uQff/3XcUN8lR+dqHy9dPtrJdnPilDaimlDZ22YezfojawXhklLOV4M+1U2ZN7Lp tevz2g3lX/5U4m+jd6Tqy2yf0zn+IGORdNI1TNwDCuZTyTo+RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0zR2cR+c1ZjskfjxAP4AhZBIZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvMTZiNzA0ZjEtMDBkMi0z Mjc1LWIyNTUtMzJiNGVhZTNmMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzHfpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwhSTG4mNBDkTXwrU7DcDInaE6/Eu7RItLMiXLa7xT+y9LO04KbdHyR eRAQ0c2eHLsnqX+G+Pf/gQwalwDG4QmUKdmms4yvwfRO9Y9i7X81xDJ5YWoLUKAj 6BnopV6B+HOYDLrtn4gUr80CVBt53u77MZj3t/awRaV5fyORuaVC0LBGKbvMJI9y IRU61fDBRjosJXIHAHf4nbTFoHSpM0JdbukN2rKBLEFlYHP3DrD9Gao6dPt3q9MR yURsXr+Dx3cXHEWVmTTK83h+LLxKLYj7sxXO7saUi+g4Thudo1/x2FB433wvF0k4 Np3bVRCQduy4Su9Cmp1l2qDnPGSJP9U= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:59 2025 by rpki-client