$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c385f14f-caf2-3315-957b-4d9e053824be.roa File: c385f14f-caf2-3315-957b-4d9e053824be.roa (raw, json) Hash identifier: OOOVXUTchd8skjHmbKSZ8uShCEXPmo51FztTziqFE3E= Subject key identifier: 72:AF:D3:A0:77:16:79:1F:F7:FF:94:A8:EF:37:29:A6:C9:58:1A:9E Certificate issuer: /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Certificate serial: 010D0C9F43285848C9B0DF0B7910A9FCE3A8E550 Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c385f14f-caf2-3315-957b-4d9e053824be.roa Signing time: Thu 06 Feb 2025 02:00:39 +0000 ROA not before: Thu 06 Feb 2025 02:00:39 +0000 ROA not after: Wed 07 May 2025 01:00:39 +0000 asID: 40495 IP address blocks: 174.137.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c9:b0:df:0b:79:10:a9:fc:e3:a8:e5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Validity Not Before: Feb 6 02:00:39 2025 GMT Not After : May 7 01:00:39 2025 GMT Subject: CN=c14cb8b4-8dee-411f-acae-891fce63ae27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3d:05:61:16:a3:21:cd:68:ad:99:92:38:c9: 9f:c2:1d:3b:18:50:72:72:8e:d9:d7:69:4c:a3:6d: 84:13:13:62:0c:4e:ad:f1:04:31:5a:e7:b0:cb:39: e9:37:d9:10:96:f7:0f:4a:f7:cc:da:2d:34:c4:02: 61:28:fd:cf:71:f5:7c:e6:26:70:1c:f0:4d:31:70: b7:95:49:ff:70:2a:be:ed:f4:88:94:44:14:54:f9: b2:e1:b4:b1:81:d0:b7:2c:ee:7c:df:81:f2:21:06: 03:02:57:27:81:a4:b9:26:69:ba:c6:60:df:c8:64: d0:49:11:3d:1f:d4:1c:86:90:14:26:e2:5d:50:8a: 25:c8:12:1e:ca:05:ef:62:82:8c:aa:48:c2:a4:e6: de:c5:d0:b0:89:0c:d3:29:0e:a7:41:c5:ca:75:80: 7f:b0:6e:2f:c8:78:f2:29:d0:8b:04:55:03:1b:17: d5:bd:7f:fb:47:bf:38:71:d4:00:6b:e4:8a:dd:8b: 62:6f:c3:dd:84:37:ca:4e:a0:c4:08:e7:5a:21:b9: b2:b2:e2:c7:62:5c:bc:61:32:f9:26:14:b2:d3:ab: 73:c4:c9:5b:14:4b:c1:e0:78:a5:51:98:61:6e:e0: 97:ce:97:be:11:93:cf:1f:0a:60:a0:99:f0:28:e3: 33:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AF:D3:A0:77:16:79:1F:F7:FF:94:A8:EF:37:29:A6:C9:58:1A:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c385f14f-caf2-3315-957b-4d9e053824be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl X509v3 Authority Key Identifier: keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer sbgp-ipAddrBlock: critical IPv4: 174.137.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:47:cb:b5:25:51:61:b1:f2:9f:e4:f9:7c:a0:44:df:5c:04: 8c:6a:8f:ec:6c:b2:c6:8a:bb:1e:de:b6:49:50:92:63:1f:0a: 24:10:95:5e:a4:b0:8b:79:a5:8f:3b:6a:0f:a6:1e:a6:76:47: 02:12:89:fe:9e:53:30:77:ca:42:0c:7f:0e:93:12:0d:41:52: cf:a9:64:69:63:5f:5a:89:e8:bd:57:d0:96:a3:f9:0d:b4:cb: 50:d1:d5:27:84:97:ac:ee:6e:dc:e7:8c:2b:7b:61:8e:99:87: 31:32:e4:9b:3c:52:62:8b:00:55:9b:33:75:86:4e:4c:78:fd: 1f:ee:ff:cd:50:de:05:f7:1f:54:59:70:f5:c0:14:b6:e4:26: 35:d5:f8:87:9a:c4:b7:43:9b:0c:f2:b6:6c:df:09:36:1e:4b: af:94:be:e3:2a:3f:53:ea:03:5f:63:51:b8:b4:15:ba:ec:59: fc:57:97:c7:bd:11:3d:b4:57:2a:cc:fc:c1:89:79:0c:04:fc: d0:f1:f4:c3:ba:18:8f:cb:7e:b7:be:29:86:d4:b8:17:77:fe: e0:ab:a6:21:7f:02:c0:80:5e:d4:c8:7c:04:a6:31:a8:e9:03: c7:6b:e9:64:29:f8:27:47:77:15:ef:03:78:4b:98:8a:30:6b: 2b:63:f5:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjJsN8LeRCp/OOo5VAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWVjMDg2ZTItMzA1NC00YjM5LWFjNjktNmY3NDUzZWQx ODhmMB4XDTI1MDIwNjAyMDAzOVoXDTI1MDUwNzAxMDAzOVowLzEtMCsGA1UEAxMk YzE0Y2I4YjQtOGRlZS00MTFmLWFjYWUtODkxZmNlNjNhZTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT0FYRajIc1orZmSOMmfwh07GFByco7Z12lM o22EExNiDE6t8QQxWuewyznpN9kQlvcPSvfM2i00xAJhKP3PcfV85iZwHPBNMXC3 lUn/cCq+7fSIlEQUVPmy4bSxgdC3LO5834HyIQYDAlcngaS5Jmm6xmDfyGTQSRE9 H9QchpAUJuJdUIolyBIeygXvYoKMqkjCpObexdCwiQzTKQ6nQcXKdYB/sG4vyHjy KdCLBFUDGxfVvX/7R784cdQAa+SK3Ytib8PdhDfKTqDECOdaIbmysuLHYly8YTL5 JhSy06tzxMlbFEvB4HilUZhhbuCXzpe+EZPPHwpgoJnwKOMz0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKv06B3Fnkf9/+UqO83KabJWBqeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMw ODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0NTNlZDE4OGYvYzM4NWYxNGYtY2FmMi0z MzE1LTk1N2ItNGQ5ZTA1MzgyNGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWVjMDg2ZTItMzA1NC00YjM5LWFj NjktNmY3NDUzZWQxODhmLzFlYzA4NmUyLTMwNTQtNGIzOS1hYzY5LTZmNzQ1M2Vk MTg4Zi5jcmwwHwYDVR0jBBgwFoAUs5ge2ktB1FAXDDXcH9pAYauvSX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMwODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0 NTNlZDE4OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErolwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZHy7UlUWGx8p/k+XygRN9cBIxqj+xsssaKux7etklQkmMfCiQQlV6k sIt5pY87ag+mHqZ2RwISif6eUzB3ykIMfw6TEg1BUs+pZGljX1qJ6L1X0Jaj+Q20 y1DR1SeEl6zubtznjCt7YY6ZhzEy5Js8UmKLAFWbM3WGTkx4/R/u/81Q3gX3H1RZ cPXAFLbkJjXV+IeaxLdDmwzytmzfCTYeS6+UvuMqP1PqA19jUbi0FbrsWfxXl8e9 ET20VyrM/MGJeQwE/NDx9MO6GI/Lfre+KYbUuBd3/uCrpiF/AsCAXtTIfASmMajp A8dr6WQp+CdHdxXvA3hLmIowaytj9cw= -----END CERTIFICATE-----Generated at Fri Mar 14 10:04:07 2025 by rpki-client