$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/c4a59c11-de1f-3741-8b9f-b65994e31210.roa File: c4a59c11-de1f-3741-8b9f-b65994e31210.roa (raw, json) Hash identifier: FLYD8AOmM6YfHKrLvjHJ+srBM8ibwSVF/g+4GY8dY0Y= Subject key identifier: D2:6D:21:43:1C:FE:EB:C1:8A:F6:E3:5F:A0:85:57:95:78:D2:B3:19 Certificate issuer: /CN=1dd142d7-5311-487b-9c11-f16950e4d57d Certificate serial: 010D0C9F4328584819CFCB93DB0CDACD8FC17600 Authority key identifier: 47:2D:B1:E4:1E:4C:0B:09:C7:5E:2C:AB:35:6C:84:10:8B:80:F6:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/c4a59c11-de1f-3741-8b9f-b65994e31210.roa Signing time: Thu 05 Dec 2024 02:00:39 +0000 ROA not before: Thu 05 Dec 2024 02:00:39 +0000 ROA not after: Wed 05 Mar 2025 02:00:39 +0000 asID: 32627 IP address blocks: 173.241.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/1dd142d7-5311-487b-9c11-f16950e4d57d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/1dd142d7-5311-487b-9c11-f16950e4d57d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:19:cf:cb:93:db:0c:da:cd:8f:c1:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd142d7-5311-487b-9c11-f16950e4d57d Validity Not Before: Dec 5 02:00:39 2024 GMT Not After : Mar 5 02:00:39 2025 GMT Subject: CN=2ccca0e8-013b-4085-bee0-72e1b81e4a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d7:1c:b5:83:36:d6:48:ea:1e:4a:86:78:ac: 82:da:11:c8:38:d0:50:81:2c:7c:c6:8b:ca:db:00: e3:5d:c0:d5:e2:1f:3b:6f:ce:41:2d:06:b7:18:a7: e5:a0:87:b2:1f:33:1f:db:7b:f1:14:4c:9b:74:b8: 64:a9:ab:2e:82:e0:5c:cf:a8:7c:f4:51:f2:b0:7a: 0b:0a:97:8b:7e:02:95:25:17:00:73:ab:03:30:b9: 83:80:4e:61:25:f5:c8:9d:79:f4:5a:5e:1d:47:2d: 49:9b:2d:18:99:4b:5e:53:31:f0:0b:a2:9d:2d:06: 8f:b5:a9:b6:55:d1:05:30:65:8b:98:e7:a8:4a:0b: e5:d4:18:c6:99:d4:a9:24:25:d5:a0:8d:02:6e:99: fa:63:9a:04:a1:10:d9:db:5b:1c:4b:7b:31:95:3d: c6:10:3c:a9:1e:8e:7e:4e:c7:76:9d:d1:1f:82:94: 05:b3:99:bd:f1:cd:d1:80:45:21:4a:fc:43:af:85: fe:c7:ba:19:4d:e5:e9:ef:c9:2d:a5:d8:64:37:93: 7e:72:37:0a:2d:a3:a7:fc:12:22:4b:6e:4d:03:83: 3b:e2:e5:a3:b9:7c:47:31:38:56:5f:7c:22:3f:69: 48:0b:79:dd:e5:66:a5:b2:e6:0e:5c:73:98:15:cd: b2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6D:21:43:1C:FE:EB:C1:8A:F6:E3:5F:A0:85:57:95:78:D2:B3:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/c4a59c11-de1f-3741-8b9f-b65994e31210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/1dd142d7-5311-487b-9c11-f16950e4d57d.crl X509v3 Authority Key Identifier: keyid:47:2D:B1:E4:1E:4C:0B:09:C7:5E:2C:AB:35:6C:84:10:8B:80:F6:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d.cer sbgp-ipAddrBlock: critical IPv4: 173.241.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:c1:f7:bf:b6:0d:01:d6:c0:5d:5f:c6:66:75:e8:3f:b1:c4: 5f:d9:4d:fa:4f:b1:22:1d:fb:dc:ee:3c:08:04:f9:18:11:ff: 12:5c:94:09:8b:53:72:a1:9a:e0:c0:66:b1:87:f2:b3:47:a6: 3c:bd:b7:10:31:2a:a6:01:fd:7e:2f:ac:fb:85:b8:4b:bd:d5: 0b:c5:d7:30:a0:39:de:83:cb:57:58:ed:59:40:19:b0:2b:cd: d5:ec:10:f7:16:41:39:4d:64:32:10:66:aa:69:f7:6a:98:11: 79:89:bb:97:d8:0d:df:bf:91:d9:ed:88:c0:0b:4d:da:15:05: d4:ca:2d:36:08:75:01:26:b8:af:e9:3f:d2:a6:66:55:62:e4: e1:55:17:d1:b4:4e:f2:d6:b1:c4:8f:b2:38:ae:b8:d0:19:d5: a8:0e:e9:69:d6:1d:a6:b5:7d:4b:f9:ab:3f:83:7d:fa:76:e0: ad:bc:0a:e8:a5:49:e4:73:da:0c:bb:a2:39:88:cf:97:1f:67: 10:40:2e:19:e4:01:ab:30:9f:95:cd:88:03:a9:8c:95:89:ea: 27:17:1d:16:14:ad:64:04:48:8c:fb:9b:f4:8c:40:0f:94:9a: 1f:8b:06:1c:9f:ed:d7:34:a3:8e:80:69:b4:28:cb:73:c8:6c: f4:e3:7a:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgZz8uT2wzazY/BdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkMTQyZDctNTMxMS00ODdiLTljMTEtZjE2OTUwZTRk NTdkMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk MmNjY2EwZTgtMDEzYi00MDg1LWJlZTAtNzJlMWI4MWU0YThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9cctYM21kjqHkqGeKyC2hHIONBQgSx8xovK 2wDjXcDV4h87b85BLQa3GKfloIeyHzMf23vxFEybdLhkqasuguBcz6h89FHysHoL CpeLfgKVJRcAc6sDMLmDgE5hJfXInXn0Wl4dRy1Jmy0YmUteUzHwC6KdLQaPtam2 VdEFMGWLmOeoSgvl1BjGmdSpJCXVoI0Cbpn6Y5oEoRDZ21scS3sxlT3GEDypHo5+ Tsd2ndEfgpQFs5m98c3RgEUhSvxDr4X+x7oZTeXp78ktpdhkN5N+cjcKLaOn/BIi S25NA4M74uWjuXxHMThWX3wiP2lIC3nd5WalsuYOXHOYFc2ydQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJtIUMc/uvBivbjX6CFV5V40rMZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xZGQx NDJkNy01MzExLTQ4N2ItOWMxMS1mMTY5NTBlNGQ1N2QvYzRhNTljMTEtZGUxZi0z NzQxLThiOWYtYjY1OTk0ZTMxMjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWRkMTQyZDctNTMxMS00ODdiLTlj MTEtZjE2OTUwZTRkNTdkLzFkZDE0MmQ3LTUzMTEtNDg3Yi05YzExLWYxNjk1MGU0 ZDU3ZC5jcmwwHwYDVR0jBBgwFoAURy2x5B5MCwnHXiyrNWyEEIuA9qEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xZGQxNDJkNy01MzExLTQ4N2ItOWMxMS1mMTY5 NTBlNGQ1N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfFQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELB97+2DQHWwF1fxmZ16D+xxF/ZTfpPsSId+9zuPAgE+RgR/xJclAmL U3KhmuDAZrGH8rNHpjy9txAxKqYB/X4vrPuFuEu91QvF1zCgOd6Dy1dY7VlAGbAr zdXsEPcWQTlNZDIQZqpp92qYEXmJu5fYDd+/kdntiMALTdoVBdTKLTYIdQEmuK/p P9KmZlVi5OFVF9G0TvLWscSPsjiuuNAZ1agO6WnWHaa1fUv5qz+Dffp24K28Cuil SeRz2gy7ojmIz5cfZxBALhnkAaswn5XNiAOpjJWJ6icXHRYUrWQESIz7m/SMQA+U mh+LBhyf7dc0o46AabQoy3PIbPTjeh0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:28 2025 by rpki-client