$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/3a34883f-177e-3191-a33f-0a07fc991f5b.roa File: 3a34883f-177e-3191-a33f-0a07fc991f5b.roa (raw, json) Hash identifier: iFRHr8rzk45eFZK60uwWhOGDTJeYwXWuRffqyTnEsuE= Subject key identifier: 68:80:A5:A0:CE:09:CC:F1:4D:6E:4D:E5:CC:37:3D:E3:1A:3F:E1:6F Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F43285848B35B6D7F8987EC99A3625780 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/3a34883f-177e-3191-a33f-0a07fc991f5b.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 19886 IP address blocks: 171.162.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:6d:7f:89:87:ec:99:a3:62:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=b70c9a40-110f-4471-b2d7-8c2b74cbc926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9c:5a:d1:5f:78:2f:7d:59:a0:81:3d:fe:77: ad:57:f5:3f:27:99:f8:f1:ed:80:72:23:41:32:d7: 7c:2a:e3:ce:86:42:2e:a7:81:80:8c:18:15:76:0d: aa:b0:b2:09:21:f0:26:48:cd:73:14:7b:be:c8:19: d9:7c:5c:97:e7:d8:80:7a:a2:d9:cf:1f:c9:f3:c4: 8f:e8:2c:b0:7b:16:db:d4:82:0d:7e:6a:9f:8f:50: 56:3e:db:9f:92:31:42:4f:60:f1:b0:7c:80:3c:12: d9:f1:b2:63:c2:7b:6a:a6:6c:4a:5c:44:35:c0:66: 53:e7:90:3f:ee:62:d1:84:14:27:18:da:5d:e0:61: ad:c1:16:73:2a:18:fa:2a:58:52:88:c1:8a:fd:d4: 3a:c7:f3:7a:c3:56:8b:c0:83:64:93:00:3d:fd:3d: 6d:02:39:3b:9a:15:1d:b9:29:3c:45:80:25:97:5c: 0b:81:80:0c:e2:46:e4:8d:f0:f3:1a:f9:00:12:96: f8:58:d7:bb:33:d7:77:b6:61:b3:65:99:da:41:df: 61:26:f6:69:97:15:af:79:06:17:a4:41:db:fd:cd: 38:77:a3:91:79:9a:22:20:46:8f:b7:62:55:67:f9: cc:74:8d:3b:8d:1a:ee:08:e9:8b:25:b9:0e:c4:8a: e8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:80:A5:A0:CE:09:CC:F1:4D:6E:4D:E5:CC:37:3D:E3:1A:3F:E1:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/3a34883f-177e-3191-a33f-0a07fc991f5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:99:65:23:d1:a3:71:34:a1:82:20:46:71:96:a5:7b:7a:a0: 52:60:b4:39:56:63:34:5a:16:4c:af:dd:22:6a:99:d8:59:0a: 76:83:6f:12:9d:a9:0c:0b:c1:98:f0:3e:b4:4d:f2:5a:14:19: f4:28:af:f4:5c:96:83:16:e1:56:20:b5:fa:0e:8b:d9:f5:44: 67:cd:91:24:22:fe:ef:19:ff:5c:3d:8f:ac:a8:fc:f5:3a:91: e6:7f:c5:79:f4:ef:9b:88:17:b8:e9:d3:ba:9b:88:c7:b3:c7: d9:d4:13:05:2c:4e:2b:8e:ff:5a:f5:a6:22:7e:88:dd:be:e3: 19:a5:09:6e:b7:70:14:9c:cc:2d:60:89:97:b3:9d:5f:3d:d4: 8c:a2:21:42:48:ce:8a:52:f6:11:44:bf:0e:14:06:71:98:a5: a1:dc:4a:5e:f4:7a:46:e0:c1:cf:f0:ee:ad:bb:c7:64:99:bb: 11:a9:1d:76:24:c4:51:9c:46:f7:e4:0a:79:f6:1c:93:93:f7: 48:b1:29:26:a4:50:50:1d:16:4e:0f:bc:34:f6:b8:fd:3a:98: c4:51:e6:da:82:56:f5:d2:45:b3:42:b8:9d:d8:5e:99:02:8b: 76:dd:ef:79:33:48:1f:b3:bc:d6:a4:ca:26:62:86:77:bd:db: 0d:0c:ca:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW21/iYfsmaNiV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk YjcwYzlhNDAtMTEwZi00NDcxLWIyZDctOGMyYjc0Y2JjOTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipxa0V94L31ZoIE9/netV/U/J5n48e2AciNB Mtd8KuPOhkIup4GAjBgVdg2qsLIJIfAmSM1zFHu+yBnZfFyX59iAeqLZzx/J88SP 6Cywexbb1IINfmqfj1BWPtufkjFCT2DxsHyAPBLZ8bJjwntqpmxKXEQ1wGZT55A/ 7mLRhBQnGNpd4GGtwRZzKhj6KlhSiMGK/dQ6x/N6w1aLwINkkwA9/T1tAjk7mhUd uSk8RYAll1wLgYAM4kbkjfDzGvkAEpb4WNe7M9d3tmGzZZnaQd9hJvZplxWveQYX pEHb/c04d6OReZoiIEaPt2JVZ/nMdI07jRruCOmLJbkOxIroGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiApaDOCczxTW5N5cw3PeMaP+FvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvM2EzNDg4M2YtMTc3ZS0z MTkxLWEzM2YtMGEwN2ZjOTkxZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6IUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeZZSPRo3E0oYIgRnGWpXt6oFJgtDlWYzRaFkyv3SJqmdhZCnaDbxKd qQwLwZjwPrRN8loUGfQor/RcloMW4VYgtfoOi9n1RGfNkSQi/u8Z/1w9j6yo/PU6 keZ/xXn075uIF7jp07qbiMezx9nUEwUsTiuO/1r1piJ+iN2+4xmlCW63cBSczC1g iZeznV891IyiIUJIzopS9hFEvw4UBnGYpaHcSl70ekbgwc/w7q27x2SZuxGpHXYk xFGcRvfkCnn2HJOT90ixKSakUFAdFk4PvDT2uP06mMRR5tqCVvXSRbNCuJ3YXpkC i3bd73kzSB+zvNakyiZihne92w0MykY= -----END CERTIFICATE-----Generated at Fri Apr 11 21:33:17 2025 by rpki-client