$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/65bc7bee-f047-3365-b535-203f0a0fbeb5.roa File: 65bc7bee-f047-3365-b535-203f0a0fbeb5.roa (raw, json) Hash identifier: fBRDQjS5I/Pnk6wC7LbST7SayhdG98z6ks7qtajKSic= Subject key identifier: B9:91:36:49:04:3F:73:A3:BE:34:30:5B:F9:5C:2C:7E:73:AD:AA:18 Certificate issuer: /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Certificate serial: 010D0C9F4328584835BA990369DEFD48A774E580 Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/65bc7bee-f047-3365-b535-203f0a0fbeb5.roa Signing time: Sun 15 Dec 2024 02:00:39 +0000 ROA not before: Sun 15 Dec 2024 02:00:39 +0000 ROA not after: Sat 15 Mar 2025 01:00:39 +0000 asID: 14618 IP address blocks: 170.200.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:35:ba:99:03:69:de:fd:48:a7:74:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Validity Not Before: Dec 15 02:00:39 2024 GMT Not After : Mar 15 01:00:39 2025 GMT Subject: CN=0308c08f-02d5-4740-814d-2f7b1d5904b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ce:2a:8b:1d:1c:a1:f8:2b:a6:6e:a1:3e:05: d1:f8:a0:76:dd:c9:75:75:a6:0a:47:0a:fa:05:d2: 1a:7d:bd:9c:4e:ad:a4:01:30:de:d5:f5:71:f7:ee: fa:4e:0f:04:c3:b0:66:b6:4a:ff:f6:bf:44:92:a2: f2:ef:b7:d2:55:bd:2e:7b:a4:f8:67:76:a2:7f:76: 92:70:82:ad:98:85:f4:cc:04:54:9e:0c:4e:90:25: 9b:25:76:8f:f9:13:8b:3c:9a:12:b4:81:77:0e:bc: 10:26:d0:ed:40:27:c2:79:64:ed:df:b8:5d:5f:c8: fb:55:f0:c2:ce:4c:15:86:63:57:60:06:a3:1f:8a: 4c:64:ac:04:ac:dc:ce:59:e8:f3:0d:4a:7f:f9:dd: fe:6a:94:8d:3e:c1:99:34:12:e6:08:c0:0a:48:77: bc:98:7d:a6:c5:fe:84:72:17:cb:7a:2b:65:79:9d: ac:0e:8d:c8:7e:4d:59:2f:f2:e4:47:97:e1:2d:0d: b8:92:d5:74:ad:20:25:7c:81:b5:fc:45:f7:76:f8: 6e:cb:1a:a2:2e:90:00:a5:08:49:f2:8d:76:9e:47: 93:a3:70:f1:b4:87:4c:6e:67:e2:95:83:d9:f9:42: 12:67:f5:2e:96:e4:2b:c4:02:60:7b:95:99:de:69: ea:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:91:36:49:04:3F:73:A3:BE:34:30:5B:F9:5C:2C:7E:73:AD:AA:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/65bc7bee-f047-3365-b535-203f0a0fbeb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl X509v3 Authority Key Identifier: keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer sbgp-ipAddrBlock: critical IPv4: 170.200.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:42:85:4f:d8:81:39:ab:be:ea:15:02:39:f3:05:f1:fe:1d: 7c:66:a2:bf:ec:51:62:31:cf:b7:ed:ef:b0:88:89:75:22:b0: 6f:14:02:db:be:95:52:f5:32:f0:df:b7:21:73:58:ea:db:6c: 76:72:98:57:17:a1:28:b2:9f:fe:da:85:ef:ce:0f:80:03:b7: 27:ac:1b:70:f1:6e:0c:73:74:1f:f4:50:99:05:0b:6d:f6:a3: cf:b6:37:00:a8:90:36:52:b8:a0:ca:a8:a2:bb:55:1f:71:ba: ed:8d:18:f8:c1:c6:1a:77:90:0a:39:f8:fc:59:de:eb:14:c1: 56:d5:71:e0:d8:f7:50:18:72:e0:dd:b1:de:f6:67:ac:e6:0a: 72:b8:4b:98:3d:e4:c8:63:62:b2:ce:3a:1b:ce:a3:e8:32:f3: 52:ba:e1:4f:9e:f8:48:c2:d9:09:71:d9:20:b7:86:d2:83:d6: 54:fb:86:44:dd:92:c9:bb:57:a4:35:17:fc:10:93:fd:70:98: 1c:bc:65:ad:be:12:32:0b:d4:e7:21:88:85:af:12:09:fb:11: d1:30:2e:e6:35:3c:eb:7e:aa:d9:5f:a3:7b:2a:89:43:82:3c: da:3b:74:f5:09:40:0d:e6:4e:aa:9c:7c:8d:6e:34:08:fb:6a: a1:8f:d5:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg1upkDad79SKd05YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4ZDZjNGMtZWI4Mi00M2YxLTgwY2MtODg0YzU2MGJk MGJkMB4XDTI0MTIxNTAyMDAzOVoXDTI1MDMxNTAxMDAzOVowLzEtMCsGA1UEAxMk MDMwOGMwOGYtMDJkNS00NzQwLTgxNGQtMmY3YjFkNTkwNGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM4qix0cofgrpm6hPgXR+KB23cl1daYKRwr6 BdIafb2cTq2kATDe1fVx9+76Tg8Ew7Bmtkr/9r9EkqLy77fSVb0ue6T4Z3aif3aS cIKtmIX0zARUngxOkCWbJXaP+ROLPJoStIF3DrwQJtDtQCfCeWTt37hdX8j7VfDC zkwVhmNXYAajH4pMZKwErNzOWejzDUp/+d3+apSNPsGZNBLmCMAKSHe8mH2mxf6E chfLeitleZ2sDo3Ifk1ZL/LkR5fhLQ24ktV0rSAlfIG1/EX3dvhuyxqiLpAApQhJ 8o12nkeTo3DxtIdMbmfilYPZ+UISZ/UuluQrxAJge5WZ3mnqoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmRNkkEP3OjvjQwW/lcLH5zraoYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThk NmM0Yy1lYjgyLTQzZjEtODBjYy04ODRjNTYwYmQwYmQvNjViYzdiZWUtZjA0Ny0z MzY1LWI1MzUtMjAzZjBhMGZiZWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E4ZDZjNGMtZWI4Mi00M2YxLTgw Y2MtODg0YzU2MGJkMGJkLzNhOGQ2YzRjLWViODItNDNmMS04MGNjLTg4NGM1NjBi ZDBiZC5jcmwwHwYDVR0jBBgwFoAUbov0feTbKCYpE02Ow50KF9xqsgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThkNmM0Yy1lYjgyLTQzZjEtODBjYy04ODRj NTYwYmQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqsiUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVChU/YgTmrvuoVAjnzBfH+HXxmor/sUWIxz7ft77CIiXUisG8UAtu+ lVL1MvDftyFzWOrbbHZymFcXoSiyn/7ahe/OD4ADtyesG3DxbgxzdB/0UJkFC232 o8+2NwCokDZSuKDKqKK7VR9xuu2NGPjBxhp3kAo5+PxZ3usUwVbVceDY91AYcuDd sd72Z6zmCnK4S5g95MhjYrLOOhvOo+gy81K64U+e+EjC2Qlx2SC3htKD1lT7hkTd ksm7V6Q1F/wQk/1wmBy8Za2+EjIL1OchiIWvEgn7EdEwLuY1POt+qtlfo3sqiUOC PNo7dPUJQA3mTqqcfI1uNAj7aqGP1fY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:47 2025 by rpki-client