$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/cd2611c6-ffc3-3c8d-bb19-a52fc768874c.roa File: cd2611c6-ffc3-3c8d-bb19-a52fc768874c.roa (raw, json) Hash identifier: 6Rqgup+BdKdrTkc1IeDS06Q741liyAZkqq2p6Rc0rvA= Subject key identifier: 28:49:6B:E4:90:29:C6:B9:1E:81:6F:7B:A1:B6:26:49:6B:63:05:CE Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584867FAE5207E09043AF98177A0 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/cd2611c6-ffc3-3c8d-bb19-a52fc768874c.roa Signing time: Thu 02 Jan 2025 02:00:39 +0000 ROA not before: Thu 02 Jan 2025 02:00:39 +0000 ROA not after: Wed 02 Apr 2025 01:00:39 +0000 asID: 393878 IP address blocks: 170.133.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:67:fa:e5:20:7e:09:04:3a:f9:81:77:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Jan 2 02:00:39 2025 GMT Not After : Apr 2 01:00:39 2025 GMT Subject: CN=63fded5f-c973-4199-8a34-9c9ddf1720c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:89:3f:0a:13:45:36:d6:93:dd:09:4a:6f:ee: c1:84:f7:ca:10:ef:14:77:71:86:71:f2:25:72:ad: 76:aa:c1:d4:78:b2:39:79:cf:e6:11:ef:f2:93:8d: 09:99:2c:bb:3a:d6:64:a8:b7:73:e2:4b:55:ff:08: 92:04:b6:40:e7:10:5c:fb:1c:93:0e:fc:e7:6e:92: fa:8f:42:98:41:72:83:89:bc:40:1c:c6:52:b6:16: df:c7:a4:46:75:cb:15:50:39:62:16:4e:e4:e8:36: 03:a1:62:c6:d3:0c:e5:18:3f:b5:60:1d:14:96:2b: 11:8a:6d:19:93:12:73:2f:1c:26:dc:a6:93:ff:e6: e6:8a:2f:e0:27:54:52:a8:10:d2:c8:0d:1b:1a:3e: 73:74:8f:fe:e0:ef:3a:d6:b0:d8:4a:05:b1:97:1f: 9f:ab:16:f2:69:28:db:cc:bb:45:7e:25:28:ca:09: 51:9a:5b:f4:a1:88:a2:66:bd:a7:b7:f2:cf:de:64: d8:25:93:17:8d:dc:a9:ec:c7:d5:0a:dd:5f:6c:8e: 33:d9:e3:a9:e1:0c:2d:35:bc:68:70:c4:c2:f3:a2: d5:38:25:0f:ef:f9:e5:55:d1:fa:ab:b4:bf:ab:28: 04:47:28:49:6b:52:37:a7:63:a9:bb:ad:16:d4:11: e7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:49:6B:E4:90:29:C6:B9:1E:81:6F:7B:A1:B6:26:49:6B:63:05:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/cd2611c6-ffc3-3c8d-bb19-a52fc768874c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 170.133.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:ec:72:c4:4c:17:76:81:d1:96:d0:8e:a2:37:4d:2a:0b:b7: 78:3b:d8:20:a0:1b:09:fc:75:25:b3:39:42:a4:de:2a:b2:63: 6b:4c:42:0f:4d:97:54:18:5f:96:99:1a:18:56:65:47:40:47: 54:55:be:1f:ae:68:fe:a9:ac:f1:f6:18:01:22:c5:45:bf:c4: 01:47:f1:0a:40:17:00:24:72:ac:ee:d6:d0:d3:83:fa:fd:24: 33:c4:6c:ed:95:dc:43:48:ed:3f:3f:f6:ee:bf:13:73:f7:f6: 5d:f7:09:41:14:c7:0b:87:57:62:11:90:ee:3e:ac:29:92:78: 60:65:5c:eb:54:95:5b:45:7c:17:0d:0e:42:9d:38:e8:35:b3: c4:f6:2d:a9:d8:13:52:4b:1c:e8:26:b9:00:90:a3:cb:e4:1f: ad:af:f8:47:6f:59:0e:70:54:35:47:86:a8:e6:66:aa:72:a2: c0:a3:2e:b5:50:93:71:2b:ab:2a:a9:e4:21:00:66:cc:73:c0: 24:b6:f1:de:d0:84:f3:50:60:07:cc:65:78:4f:16:35:f5:00: c2:cb:3c:97:cf:b5:57:f8:6e:24:35:ac:71:20:d2:83:f8:b7: a4:ff:62:a9:c6:2e:08:a1:43:b4:fd:cb:6d:9e:48:3e:2c:5c: 6e:44:21:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhn+uUgfgkEOvmBd6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI1MDEwMjAyMDAzOVoXDTI1MDQwMjAxMDAzOVowLzEtMCsGA1UEAxMk NjNmZGVkNWYtYzk3My00MTk5LThhMzQtOWM5ZGRmMTcyMGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnok/ChNFNtaT3QlKb+7BhPfKEO8Ud3GGcfIl cq12qsHUeLI5ec/mEe/yk40JmSy7OtZkqLdz4ktV/wiSBLZA5xBc+xyTDvznbpL6 j0KYQXKDibxAHMZSthbfx6RGdcsVUDliFk7k6DYDoWLG0wzlGD+1YB0UlisRim0Z kxJzLxwm3KaT/+bmii/gJ1RSqBDSyA0bGj5zdI/+4O861rDYSgWxlx+fqxbyaSjb zLtFfiUoyglRmlv0oYiiZr2nt/LP3mTYJZMXjdyp7MfVCt1fbI4z2eOp4QwtNbxo cMTC86LVOCUP7/nlVdH6q7S/qygERyhJa1I3p2Opu60W1BHnYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChJa+SQKca5HoFve6G2JklrYwXOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvY2QyNjExYzYtZmZjMy0z YzhkLWJiMTktYTUyZmM3Njg4NzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqoXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnscsRMF3aB0ZbQjqI3TSoLt3g72CCgGwn8dSWzOUKk3iqyY2tMQg9N l1QYX5aZGhhWZUdAR1RVvh+uaP6prPH2GAEixUW/xAFH8QpAFwAkcqzu1tDTg/r9 JDPEbO2V3ENI7T8/9u6/E3P39l33CUEUxwuHV2IRkO4+rCmSeGBlXOtUlVtFfBcN DkKdOOg1s8T2LanYE1JLHOgmuQCQo8vkH62v+EdvWQ5wVDVHhqjmZqpyosCjLrVQ k3Erqyqp5CEAZsxzwCS28d7QhPNQYAfMZXhPFjX1AMLLPJfPtVf4biQ1rHEg0oP4 t6T/YqnGLgihQ7T9y22eSD4sXG5EIeI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:55 2025 by rpki-client