$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0655a237-1542-4d7b-9294-28c73bb1f8da/5be5ad73-a914-3384-9e14-732ca96fcc5d.roa File: 5be5ad73-a914-3384-9e14-732ca96fcc5d.roa (raw, json) Hash identifier: CN2pRL09vQUVwQoBZokmSxxPu5ZkFJVFBMT70Xae1fA= Subject key identifier: 88:C2:47:0D:A7:4F:AF:B5:63:22:42:AA:1A:8B:BF:77:CF:15:15:34 Certificate issuer: /CN=0655a237-1542-4d7b-9294-28c73bb1f8da Certificate serial: 010D0C9F432858489E6B64ADDF7A933E0D1B9300 Authority key identifier: B1:85:3E:F6:2F:39:04:E8:FB:1E:B7:65:52:88:16:30:08:FB:07:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0655a237-1542-4d7b-9294-28c73bb1f8da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0655a237-1542-4d7b-9294-28c73bb1f8da/5be5ad73-a914-3384-9e14-732ca96fcc5d.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 396982 IP address blocks: 208.67.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0655a237-1542-4d7b-9294-28c73bb1f8da/0655a237-1542-4d7b-9294-28c73bb1f8da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0655a237-1542-4d7b-9294-28c73bb1f8da/0655a237-1542-4d7b-9294-28c73bb1f8da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0655a237-1542-4d7b-9294-28c73bb1f8da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:64:ad:df:7a:93:3e:0d:1b:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0655a237-1542-4d7b-9294-28c73bb1f8da Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=9369bedd-2056-4373-b471-73da90086b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ba:0b:71:8e:fc:4b:78:ea:5d:c0:22:33:5b: 98:68:44:29:94:a1:c8:c9:34:f5:37:d2:53:67:87: a7:9c:aa:57:ac:c7:ee:22:c5:9e:2f:a3:02:ab:b7: 01:47:06:6d:e3:72:e6:a4:2a:e0:8d:71:6c:45:aa: 31:26:ea:2b:c5:f0:da:94:2d:37:ed:1f:80:b3:60: 14:86:2d:6c:03:2e:dc:04:bd:6e:f9:cb:1b:30:a4: 25:7e:c9:14:6f:7f:01:a3:65:33:0f:b3:d9:d6:67: 42:d7:d2:0f:72:e6:2e:dc:5e:1b:69:a7:85:71:f5: e6:05:da:46:f9:62:16:50:54:e6:cc:7a:ff:cd:04: ce:0e:dd:e6:05:23:9a:e0:dd:3a:e5:fc:6e:97:92: 00:c0:a6:29:91:26:bd:d2:5d:1a:fd:24:ab:5f:4c: 3c:db:dc:44:8d:c1:63:83:e4:c9:52:7e:2a:08:aa: d8:50:a8:7b:40:11:22:25:3b:a9:1b:b0:df:fa:30: 97:1e:9b:ca:09:7b:0b:a3:43:3c:3f:b9:bb:7c:ec: cd:0b:15:79:e7:71:2c:1d:ba:ff:c4:e7:f1:00:f6: 96:33:18:c6:fc:3b:45:2f:95:2f:d3:67:14:91:11: 8a:87:97:df:25:01:dc:82:fa:a3:be:de:f3:a6:51: 4f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C2:47:0D:A7:4F:AF:B5:63:22:42:AA:1A:8B:BF:77:CF:15:15:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0655a237-1542-4d7b-9294-28c73bb1f8da/5be5ad73-a914-3384-9e14-732ca96fcc5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0655a237-1542-4d7b-9294-28c73bb1f8da/0655a237-1542-4d7b-9294-28c73bb1f8da.crl X509v3 Authority Key Identifier: keyid:B1:85:3E:F6:2F:39:04:E8:FB:1E:B7:65:52:88:16:30:08:FB:07:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0655a237-1542-4d7b-9294-28c73bb1f8da.cer sbgp-ipAddrBlock: critical IPv4: 208.67.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:78:d1:bf:7e:0d:37:dd:4c:65:48:8f:ad:77:0f:7d:02:ae: b9:42:46:fa:2b:ed:e8:1a:13:cd:d1:b1:fc:85:2b:82:b9:85: 3e:be:aa:e7:d5:84:42:f8:32:d3:af:b8:26:f0:a3:e2:2a:d6: 23:ba:4a:80:6a:e0:94:1e:da:37:0d:1e:03:07:75:01:52:b2: 59:bd:43:81:40:c1:43:73:a9:86:1c:ce:7c:92:23:c7:80:4f: f1:e0:c2:dc:c3:ba:a9:90:26:e1:c9:f7:1d:32:25:99:45:76: 37:44:32:a0:41:b0:0b:b1:78:6d:30:5e:db:0b:21:ce:c7:a6: b4:af:52:c7:a4:69:4c:a7:91:f5:8f:c7:d6:90:6d:56:13:d6: 72:a0:b5:b8:33:d4:b8:a0:27:2c:a3:d2:43:88:4f:de:71:3d: d3:67:33:a7:3f:e9:b8:09:b0:8e:af:86:af:a8:c4:0f:cf:bb: 8a:d4:9d:4e:4f:e2:08:76:99:5e:c7:9c:a0:c9:88:70:fb:39: d9:25:e8:c7:e5:76:a6:d7:75:9e:7b:13:51:aa:1d:26:9c:a9: 6d:0d:c1:af:f8:5a:ba:9d:25:d9:e4:a0:56:dc:6f:93:18:cb: 2f:e5:da:6a:23:90:de:93:ac:15:62:6b:56:e1:c2:9f:25:48: fe:19:71:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea2St33qTPg0bkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY1NWEyMzctMTU0Mi00ZDdiLTkyOTQtMjhjNzNiYjFm OGRhMB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk OTM2OWJlZGQtMjA1Ni00MzczLWI0NzEtNzNkYTkwMDg2YjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7oLcY78S3jqXcAiM1uYaEQplKHIyTT1N9JT Z4ennKpXrMfuIsWeL6MCq7cBRwZt43LmpCrgjXFsRaoxJuorxfDalC037R+As2AU hi1sAy7cBL1u+csbMKQlfskUb38Bo2UzD7PZ1mdC19IPcuYu3F4baaeFcfXmBdpG +WIWUFTmzHr/zQTODt3mBSOa4N065fxul5IAwKYpkSa90l0a/SSrX0w829xEjcFj g+TJUn4qCKrYUKh7QBEiJTupG7Df+jCXHpvKCXsLo0M8P7m7fOzNCxV553EsHbr/ xOfxAPaWMxjG/DtFL5Uv02cUkRGKh5ffJQHcgvqjvt7zplFP4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjCRw2nT6+1YyJCqhqLv3fPFRU0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wNjU1 YTIzNy0xNTQyLTRkN2ItOTI5NC0yOGM3M2JiMWY4ZGEvNWJlNWFkNzMtYTkxNC0z Mzg0LTllMTQtNzMyY2E5NmZjYzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDY1NWEyMzctMTU0Mi00ZDdiLTky OTQtMjhjNzNiYjFmOGRhLzA2NTVhMjM3LTE1NDItNGQ3Yi05Mjk0LTI4YzczYmIx ZjhkYS5jcmwwHwYDVR0jBBgwFoAUsYU+9i85BOj7HrdlUogWMAj7B5wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wNjU1YTIzNy0xNTQyLTRkN2ItOTI5NC0yOGM3 M2JiMWY4ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGV40b9+DTfdTGVIj613D30CrrlCRvor7egaE83RsfyFK4K5hT6+qufV hEL4MtOvuCbwo+Iq1iO6SoBq4JQe2jcNHgMHdQFSslm9Q4FAwUNzqYYcznySI8eA T/HgwtzDuqmQJuHJ9x0yJZlFdjdEMqBBsAuxeG0wXtsLIc7HprSvUsekaUynkfWP x9aQbVYT1nKgtbgz1LigJyyj0kOIT95xPdNnM6c/6bgJsI6vhq+oxA/Pu4rUnU5P 4gh2mV7HnKDJiHD7Odkl6MfldqbXdZ57E1GqHSacqW0Nwa/4WrqdJdnkoFbcb5MY yy/l2mojkN6TrBVia1bhwp8lSP4ZcYc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:32:07 2025 by rpki-client