$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/a7c7708c-a8b9-3ab8-be88-97548bbc3121.roa File: a7c7708c-a8b9-3ab8-be88-97548bbc3121.roa (raw, json) Hash identifier: WqF9HXv2iMqilCWdEr623ELVz5OqceZL1B2SCuwQ8nc= Subject key identifier: 72:1B:C8:70:58:72:BA:D5:69:D7:EB:55:9C:B6:59:10:6F:7B:1B:85 Certificate issuer: /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Certificate serial: 010D0C9F43285848C9B0DED06DF060A497E52A80 Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/a7c7708c-a8b9-3ab8-be88-97548bbc3121.roa Signing time: Thu 06 Feb 2025 02:00:39 +0000 ROA not before: Thu 06 Feb 2025 02:00:39 +0000 ROA not after: Wed 07 May 2025 01:00:39 +0000 asID: 40495 IP address blocks: 174.137.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c9:b0:de:d0:6d:f0:60:a4:97:e5:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Validity Not Before: Feb 6 02:00:39 2025 GMT Not After : May 7 01:00:39 2025 GMT Subject: CN=e11a8a1d-476b-40e7-87ea-3af11a226338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:67:fb:24:77:a8:ea:7e:bf:69:79:37:8f:a3: 9c:a4:59:e4:48:36:8e:c5:1c:9e:eb:9c:0c:cf:e9: d4:34:6d:3f:f9:9d:96:3b:93:6d:f2:30:7f:53:7d: 5d:54:22:dd:1d:70:03:b7:46:74:f7:67:fd:46:15: a8:fb:84:38:5b:23:1b:89:50:8b:75:50:4e:7e:49: 80:62:cd:0e:45:2e:34:69:0d:84:13:71:ce:de:cf: 7c:af:13:5e:94:3c:d7:4b:e1:4c:39:75:03:be:79: ac:4e:23:7e:e7:aa:d3:0c:5b:52:4e:bb:2e:6a:82: b7:a7:7f:ff:d5:b9:da:20:5f:3e:98:28:00:07:30: 3e:cb:fb:82:bb:23:2e:e6:1f:62:39:81:fe:d3:f4: ca:b8:a3:6b:9e:aa:ff:c9:0e:94:bb:97:00:8e:ec: 5a:6c:99:a4:9a:d8:a2:ad:1a:73:19:ef:15:2a:84: 00:fe:38:ab:3c:a8:64:4d:f0:9b:19:26:b0:c3:78: 98:20:e2:75:90:be:8f:cf:43:86:a6:77:02:b5:d5: 2b:b5:da:05:92:43:1d:49:cc:7a:9c:8d:97:93:47: 1e:8c:45:48:29:fa:0a:80:d3:2c:1f:22:54:c7:75: 30:16:51:14:52:95:42:07:d1:27:66:5a:42:c9:8c: e3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1B:C8:70:58:72:BA:D5:69:D7:EB:55:9C:B6:59:10:6F:7B:1B:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/a7c7708c-a8b9-3ab8-be88-97548bbc3121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl X509v3 Authority Key Identifier: keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer sbgp-ipAddrBlock: critical IPv4: 174.137.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:14:3f:e1:b6:f5:b5:4c:33:91:c1:df:3f:74:f9:20:fe:4a: e4:a7:1c:33:c9:19:a2:0a:c9:5c:8c:da:05:b5:69:82:d8:8c: 8c:e9:cd:79:19:b2:21:0c:64:0f:49:a8:ae:2c:ed:ee:9c:af: 96:5b:23:65:86:51:e5:da:bf:c8:b2:1f:c4:76:1b:c2:83:17: 7d:5c:0a:ee:76:c6:f0:0d:25:55:15:98:42:7b:d1:5e:2a:2a: d3:b8:21:a6:4e:2b:38:61:3b:72:b9:ba:52:2b:f0:67:dd:9f: 5a:49:95:89:1d:f0:f6:6d:aa:a0:cb:97:48:4e:7e:55:30:5e: 0d:75:25:e8:b2:98:7e:17:17:9d:f8:ca:01:04:52:7b:a8:e3: 10:1b:83:0a:4e:09:87:3c:de:a4:1b:61:e3:02:72:8e:4e:77: 41:01:45:84:16:cc:37:43:fd:99:db:a8:28:af:93:13:20:56: b3:75:d5:88:bc:ae:2e:7f:19:e1:6c:27:ce:30:d0:b8:0f:82: 2c:53:95:de:55:31:fd:32:01:0c:f9:5e:20:b2:c3:be:09:4a: ca:46:35:a2:ce:c9:d7:f2:57:13:0f:df:ca:a8:de:53:d1:75: 28:0f:25:a1:de:ce:4e:a3:dd:33:71:9a:70:f4:50:17:ab:16: 94:de:96:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjJsN7QbfBgpJflKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWVjMDg2ZTItMzA1NC00YjM5LWFjNjktNmY3NDUzZWQx ODhmMB4XDTI1MDIwNjAyMDAzOVoXDTI1MDUwNzAxMDAzOVowLzEtMCsGA1UEAxMk ZTExYThhMWQtNDc2Yi00MGU3LTg3ZWEtM2FmMTFhMjI2MzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGf7JHeo6n6/aXk3j6OcpFnkSDaOxRye65wM z+nUNG0/+Z2WO5Nt8jB/U31dVCLdHXADt0Z092f9RhWo+4Q4WyMbiVCLdVBOfkmA Ys0ORS40aQ2EE3HO3s98rxNelDzXS+FMOXUDvnmsTiN+56rTDFtSTrsuaoK3p3// 1bnaIF8+mCgABzA+y/uCuyMu5h9iOYH+0/TKuKNrnqr/yQ6Uu5cAjuxabJmkmtii rRpzGe8VKoQA/jirPKhkTfCbGSaww3iYIOJ1kL6Pz0OGpncCtdUrtdoFkkMdScx6 nI2Xk0cejEVIKfoKgNMsHyJUx3UwFlEUUpVCB9EnZlpCyYzjawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIbyHBYcrrVadfrVZy2WRBvexuFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMw ODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0NTNlZDE4OGYvYTdjNzcwOGMtYThiOS0z YWI4LWJlODgtOTc1NDhiYmMzMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWVjMDg2ZTItMzA1NC00YjM5LWFj NjktNmY3NDUzZWQxODhmLzFlYzA4NmUyLTMwNTQtNGIzOS1hYzY5LTZmNzQ1M2Vk MTg4Zi5jcmwwHwYDVR0jBBgwFoAUs5ge2ktB1FAXDDXcH9pAYauvSX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMwODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0 NTNlZDE4OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArol3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0UP+G29bVMM5HB3z90+SD+SuSnHDPJGaIKyVyM2gW1aYLYjIzpzXkZ siEMZA9JqK4s7e6cr5ZbI2WGUeXav8iyH8R2G8KDF31cCu52xvANJVUVmEJ70V4q KtO4IaZOKzhhO3K5ulIr8Gfdn1pJlYkd8PZtqqDLl0hOflUwXg11JeiymH4XF534 ygEEUnuo4xAbgwpOCYc83qQbYeMCco5Od0EBRYQWzDdD/ZnbqCivkxMgVrN11Yi8 ri5/GeFsJ84w0LgPgixTld5VMf0yAQz5XiCyw74JSspGNaLOydfyVxMP38qo3lPR dSgPJaHezk6j3TNxmnD0UBerFpTelmw= -----END CERTIFICATE-----Generated at Fri Mar 14 13:33:52 2025 by rpki-client