$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/18e83aa2-2384-3c89-b95f-7230e577205d.roa File: 18e83aa2-2384-3c89-b95f-7230e577205d.roa (raw, json) Hash identifier: WJkAdS145KXn4fFtkycrKh4xQ2zv7OqhL+NafJB7sDQ= Subject key identifier: FD:0D:A1:0B:4B:94:8D:D2:94:53:0A:9A:E0:28:EE:D1:D0:0D:36:84 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F43285848748B1FF9306DB09F90AA7F00 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/18e83aa2-2384-3c89-b95f-7230e577205d.roa Signing time: Mon 06 Jan 2025 14:00:52 +0000 ROA not before: Mon 06 Jan 2025 14:00:52 +0000 ROA not after: Sun 06 Apr 2025 13:00:52 +0000 asID: 11290 IP address blocks: 170.249.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:74:8b:1f:f9:30:6d:b0:9f:90:aa:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jan 6 14:00:52 2025 GMT Not After : Apr 6 13:00:52 2025 GMT Subject: CN=a0c723fc-17ec-4968-972a-28761aac3ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8d:55:34:7f:17:16:a4:fb:36:8b:01:71:c0: b5:f3:31:f8:e9:79:df:07:c0:b8:80:5c:c0:f2:e1: c5:ff:68:05:18:ee:66:80:f8:7f:05:56:38:2b:4b: 39:1e:5b:90:e4:91:90:7e:25:4d:63:72:b4:37:16: d1:ea:1c:ef:38:a1:94:18:d9:0a:1a:e7:7c:03:e3: fc:b0:30:6f:71:a5:25:61:56:80:f4:63:b8:62:6d: ae:8b:2d:5e:9f:f6:e5:2f:b1:c5:16:0d:3a:4e:c1: 8f:27:fa:56:fd:04:4f:ac:55:e1:6e:57:a4:ce:18: ae:3c:32:c4:6a:e0:17:db:e1:9b:db:16:43:9d:6b: c8:c3:79:a4:ea:b1:e4:18:52:28:70:50:c0:2e:28: 93:39:d6:74:7a:81:07:c7:bd:f7:56:42:12:cd:4e: 75:c6:47:2a:45:e5:c3:5d:26:22:d5:e2:18:05:3f: 23:d8:39:53:b8:0a:fd:8d:03:67:21:ad:c0:ac:b7: c4:61:96:e3:5f:8f:ae:f8:05:b3:c5:47:90:fe:cd: 57:a7:c9:0b:98:33:53:fc:30:6e:1f:ca:af:34:77: 27:28:c0:e1:c6:2c:27:61:ab:59:bc:2b:ed:d4:4e: 61:49:56:0b:96:e8:63:6e:34:e1:ee:fa:e9:bd:b9: 0b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0D:A1:0B:4B:94:8D:D2:94:53:0A:9A:E0:28:EE:D1:D0:0D:36:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/18e83aa2-2384-3c89-b95f-7230e577205d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 170.249.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:f5:0b:f9:4b:dc:32:ac:dd:31:38:3d:65:6a:d7:47:7c:45: 16:fd:e6:0a:48:39:99:c4:a1:af:a8:71:a3:4f:b9:be:16:a6: 04:6d:9f:cd:cb:1a:91:51:fd:a1:6d:6e:a7:4f:99:44:ed:11: cd:af:ec:b0:bc:82:3b:93:35:c8:32:46:54:57:ea:e7:0e:89: 1f:ec:10:50:84:d1:16:64:69:07:26:f8:a8:21:ef:12:89:8e: 36:d4:23:07:7b:ac:0a:f2:42:86:21:45:2f:9f:f0:e4:3f:ec: e4:ef:45:60:92:3d:70:5e:d1:21:3a:cb:cd:ac:d1:a5:b2:46: 12:06:9c:c3:e2:3d:f3:4f:f2:42:6b:b4:41:6f:f5:95:7a:90: 95:ac:47:e8:d8:6e:d4:ba:5f:fe:73:d0:36:fc:5f:a9:17:0e: 7f:31:70:91:b5:0f:05:cb:e5:80:1e:28:5c:57:eb:86:0f:0c: 2b:42:cd:e7:f7:5a:4a:39:97:50:f0:42:34:0f:b1:13:db:db: 24:ad:8f:7a:8a:e3:b1:e3:58:10:6f:3d:84:66:0a:4a:6f:b1: fd:27:0f:b8:5d:c4:09:95:a0:ab:e3:8b:66:31:07:3b:78:75: b7:79:25:18:1d:96:68:7f:5f:1c:33:be:02:74:d7:6f:7f:b3: 3c:fb:ff:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh0ix/5MG2wn5CqfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDEwNjE0MDA1MloXDTI1MDQwNjEzMDA1MlowLzEtMCsGA1UEAxMk YTBjNzIzZmMtMTdlYy00OTY4LTk3MmEtMjg3NjFhYWMzZWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY1VNH8XFqT7NosBccC18zH46XnfB8C4gFzA 8uHF/2gFGO5mgPh/BVY4K0s5HluQ5JGQfiVNY3K0NxbR6hzvOKGUGNkKGud8A+P8 sDBvcaUlYVaA9GO4Ym2uiy1en/blL7HFFg06TsGPJ/pW/QRPrFXhblekzhiuPDLE auAX2+Gb2xZDnWvIw3mk6rHkGFIocFDALiiTOdZ0eoEHx733VkISzU51xkcqReXD XSYi1eIYBT8j2DlTuAr9jQNnIa3ArLfEYZbjX4+u+AWzxUeQ/s1Xp8kLmDNT/DBu H8qvNHcnKMDhxiwnYatZvCvt1E5hSVYLluhjbjTh7vrpvbkLbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0NoQtLlI3SlFMKmuAo7tHQDTaEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMThlODNhYTItMjM4NC0z Yzg5LWI5NWYtNzIzMGU1NzcyMDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqvkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE31C/lL3DKs3TE4PWVq10d8RRb95gpIOZnEoa+ocaNPub4WpgRtn83L GpFR/aFtbqdPmUTtEc2v7LC8gjuTNcgyRlRX6ucOiR/sEFCE0RZkaQcm+Kgh7xKJ jjbUIwd7rAryQoYhRS+f8OQ/7OTvRWCSPXBe0SE6y82s0aWyRhIGnMPiPfNP8kJr tEFv9ZV6kJWsR+jYbtS6X/5z0Db8X6kXDn8xcJG1DwXL5YAeKFxX64YPDCtCzef3 Wko5l1DwQjQPsRPb2yStj3qK47HjWBBvPYRmCkpvsf0nD7hdxAmVoKvji2YxBzt4 dbd5JRgdlmh/XxwzvgJ0129/szz7/3I= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:12 2025 by rpki-client