$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/11a766c2-5bc6-35dc-b412-2d788c81802f.roa File: 11a766c2-5bc6-35dc-b412-2d788c81802f.roa (raw, json) Hash identifier: yAbvrp3cs7kdTA5WIXP3ltggigmmGflVUa4albC2JYA= Subject key identifier: 75:2B:2F:00:B5:4D:32:0E:9A:46:A3:0F:A3:14:40:71:66:01:BB:C3 Certificate issuer: /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Certificate serial: 010D0C9F43285848F22C6E921225D3830F21BDD0 Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/11a766c2-5bc6-35dc-b412-2d788c81802f.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 46238 IP address blocks: 70.37.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:6e:92:12:25:d3:83:0f:21:bd:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=12fee745-a67d-4cdf-b64e-d2d065f062e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:95:b8:8f:a7:3f:10:50:36:f9:40:33:15:e2: f2:44:06:c7:1f:81:c6:9b:3c:cb:6c:e3:35:75:43: af:04:22:5b:29:f6:a1:b1:de:90:7e:89:91:ad:1b: 01:f5:98:f0:5d:86:8a:73:fc:3e:0a:46:f9:56:1e: c3:6f:d2:7f:72:bb:66:47:2b:a2:14:ab:6e:70:48: 39:bc:19:2d:3a:8f:46:cf:ba:63:44:69:9c:6e:82: 45:5c:0c:10:00:e3:47:3a:87:2b:eb:7e:c9:9d:c9: 87:eb:2c:10:bf:b0:a5:f2:17:15:2d:76:f3:86:18: e2:64:d2:27:57:f1:c7:21:dc:09:87:9e:fe:81:ff: ed:fd:ec:b4:f7:63:ed:1f:15:60:65:f8:0f:4c:4f: 5d:73:a6:e2:4c:2e:7d:1c:37:c9:a3:c4:d4:57:ea: 95:9b:1e:2b:56:1b:5e:d1:de:be:46:69:b0:eb:07: 50:20:cf:27:8f:36:3e:cf:7f:8d:0a:d3:38:8d:30: 0f:0b:07:80:00:38:04:8d:3e:e7:37:1d:ef:93:6b: 2b:04:aa:47:52:bb:26:4d:e7:d2:64:73:e4:fa:85: c8:b0:3a:53:da:31:1a:83:02:36:54:2c:b0:2a:87: 97:3e:65:54:10:7c:4b:a3:23:d1:30:47:ed:e6:8c: 31:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2B:2F:00:B5:4D:32:0E:9A:46:A3:0F:A3:14:40:71:66:01:BB:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/11a766c2-5bc6-35dc-b412-2d788c81802f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl X509v3 Authority Key Identifier: keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer sbgp-ipAddrBlock: critical IPv4: 70.37.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:ff:f8:65:1d:3d:17:34:e4:1b:64:1d:3f:5d:85:a1:66:33: 03:b1:ea:00:2e:1e:b6:8b:2a:85:5f:bd:f3:0f:89:f3:2b:82: c3:a3:9c:91:41:67:67:75:ee:3e:3c:f1:04:1f:98:9f:eb:86: 58:c7:79:03:57:f4:29:37:a3:44:73:9a:c8:0e:10:78:2e:9e: 9d:19:79:60:eb:af:d8:bd:68:e6:33:39:ed:18:9f:2c:af:6a: 41:ae:cc:3c:99:94:a3:39:1c:ec:3b:eb:1e:5e:d0:32:aa:13: 8d:16:91:da:03:26:b6:43:dc:73:f4:b7:b9:22:53:10:af:8e: 7a:a1:2f:7f:a9:ff:89:1e:4c:c2:f2:50:80:19:06:31:84:52: 29:06:e2:e1:29:f3:68:5e:e7:ea:d4:e0:c2:eb:57:67:8d:93: 82:b2:2e:63:9d:74:d1:43:89:f7:2f:81:dd:8f:27:25:2b:70: a2:a9:17:94:49:13:c1:c6:e4:7b:42:9d:03:a6:e6:24:47:79: 09:d1:13:67:a2:47:aa:23:5e:17:56:df:75:a8:9f:54:63:3f: 88:6d:0b:e2:c1:65:2d:86:7e:80:7f:12:05:e5:5b:d2:73:e1: 81:e2:40:04:57:fb:72:2b:29:b1:e4:79:13:84:69:79:61:48: 23:e5:a6:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLG6SEiXTgw8hvdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjNTk5NTktZTg5OC00MmFkLTlkMGEtZjFiODdhN2Qw MTE0MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk MTJmZWU3NDUtYTY3ZC00Y2RmLWI2NGUtZDJkMDY1ZjA2MmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JW4j6c/EFA2+UAzFeLyRAbHH4HGmzzLbOM1 dUOvBCJbKfahsd6QfomRrRsB9ZjwXYaKc/w+Ckb5Vh7Db9J/crtmRyuiFKtucEg5 vBktOo9Gz7pjRGmcboJFXAwQAONHOocr637JncmH6ywQv7Cl8hcVLXbzhhjiZNIn V/HHIdwJh57+gf/t/ey092PtHxVgZfgPTE9dc6biTC59HDfJo8TUV+qVmx4rVhte 0d6+Rmmw6wdQIM8njzY+z3+NCtM4jTAPCweAADgEjT7nNx3vk2srBKpHUrsmTefS ZHPk+oXIsDpT2jEagwI2VCywKoeXPmVUEHxLoyPRMEft5owxyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUrLwC1TTIOmkajD6MUQHFmAbvDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1 OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4N2E3ZDAxMTQvMTFhNzY2YzItNWJjNi0z NWRjLWI0MTItMmQ3ODhjODE4MDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWFjNTk5NTktZTg5OC00MmFkLTlk MGEtZjFiODdhN2QwMTE0L2FhYzU5OTU5LWU4OTgtNDJhZC05ZDBhLWYxYjg3YTdk MDExNC5jcmwwHwYDVR0jBBgwFoAUul4Dp25dfBcjybWEUNyNWEuvgL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4 N2E3ZDAxMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRiXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGb/+GUdPRc05BtkHT9dhaFmMwOx6gAuHraLKoVfvfMPifMrgsOjnJFB Z2d17j488QQfmJ/rhljHeQNX9Ck3o0RzmsgOEHgunp0ZeWDrr9i9aOYzOe0Ynyyv akGuzDyZlKM5HOw76x5e0DKqE40WkdoDJrZD3HP0t7kiUxCvjnqhL3+p/4keTMLy UIAZBjGEUikG4uEp82he5+rU4MLrV2eNk4KyLmOddNFDifcvgd2PJyUrcKKpF5RJ E8HG5HtCnQOm5iRHeQnRE2eiR6ojXhdW33Won1RjP4htC+LBZS2GfoB/EgXlW9Jz 4YHiQARX+3IrKbHkeROEaXlhSCPlpjE= -----END CERTIFICATE-----Generated at Fri Mar 14 13:18:30 2025 by rpki-client