$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/021d6cbf-039b-30af-a009-f4e3934a9512.roa File: 021d6cbf-039b-30af-a009-f4e3934a9512.roa (raw, json) Hash identifier: vGYUXErjMm6v3JrPFQVX46lf4iWosj4mAFEyWrWR/8Q= Subject key identifier: DB:60:00:71:B0:AF:9C:D8:94:10:A6:D9:E6:14:0D:2A:74:76:39:ED Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858486C2B33BE1A5AF7796CAD9F80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/021d6cbf-039b-30af-a009-f4e3934a9512.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 54858 IP address blocks: 204.13.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:33:be:1a:5a:f7:79:6c:ad:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=e29990ff-15a3-4302-9944-483298ebbf0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:35:e4:ca:38:74:3c:7f:e2:18:89:30:ac:84: 96:94:ac:f1:3b:10:71:1a:98:7e:72:24:24:90:36: fc:4b:cc:8f:89:d9:52:62:37:e4:4e:ee:9e:1f:3e: 4d:af:6c:fe:ed:6d:a7:2f:8d:f9:7d:16:d8:1e:c1: 60:e9:96:d0:e5:28:e3:3e:cc:7d:9d:b9:23:c8:45: c1:0a:38:ae:b0:e9:15:8a:43:85:16:ac:04:ee:aa: b3:84:74:69:83:75:fd:28:b7:56:27:28:e2:96:d7: 71:1f:1c:24:71:16:d5:bc:aa:cc:c7:65:d6:fa:12: df:76:2c:00:b5:f5:a1:19:af:c6:ab:b7:ca:90:25: 99:e9:e6:99:a0:f9:d5:8f:77:6d:76:f5:3c:73:2a: 75:f4:46:e2:01:34:37:e8:76:85:f1:84:7f:6a:e1: c7:99:14:53:6d:3e:51:4d:9b:cb:e9:ab:f1:7b:da: 63:02:81:3d:c8:44:86:e7:32:7a:43:e8:38:c6:60: 54:7d:4f:42:e0:d1:d9:f7:08:4d:04:df:89:4d:61: 6a:4b:ff:92:61:b2:49:4e:b9:a4:a7:09:d3:fc:03: c4:65:38:2e:31:70:ff:a3:c2:b9:3e:fc:4f:6a:aa: 99:bc:42:9f:60:a8:2a:2e:73:84:26:91:ab:7e:27: af:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:60:00:71:B0:AF:9C:D8:94:10:A6:D9:E6:14:0D:2A:74:76:39:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/021d6cbf-039b-30af-a009-f4e3934a9512.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 204.13.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:22:b8:27:f8:c2:15:11:7b:2b:d7:1a:93:2c:1d:85:dc:7d: 9c:ac:38:28:15:9d:da:35:43:03:24:e7:a5:f3:a8:0c:32:6a: e0:b2:f1:b8:c2:a0:47:76:ef:b0:b1:9e:b7:44:aa:57:ca:c6: 05:df:26:7d:a3:87:34:95:1e:c1:3c:36:90:9e:39:72:82:63: 03:21:c8:83:60:b8:db:99:00:d3:75:eb:dc:e0:86:70:56:0d: 0f:93:96:10:3a:c8:3a:98:b9:78:f6:0c:79:be:53:39:90:4f: c0:f2:eb:da:9f:4f:3e:5f:e5:d7:a0:0f:38:18:f2:d6:1d:ec: 2d:b1:86:64:ab:a9:66:65:cd:89:06:ca:c0:f3:7d:ec:fe:56: ae:99:b0:97:4c:6a:66:0b:3c:a1:e8:7b:6a:84:fa:7a:6b:d5: e8:3c:fb:42:b1:fe:81:e7:ff:33:bf:2d:c3:4f:b1:1d:01:df: d1:72:fe:c2:47:f2:28:3c:dc:88:7f:93:4f:bf:59:73:1d:45: 36:e5:28:9d:de:5c:8f:ac:18:8f:02:2f:a6:e3:2e:1a:6c:f8: 97:3c:1c:da:5d:fd:cf:32:a4:aa:5b:62:08:3e:cf:3a:53:58: 5e:8e:0a:2d:75:22:6c:cd:e5:4f:d6:b2:63:2f:e1:cd:f8:dd: e8:60:9a:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKzO+Glr3eWytn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk ZTI5OTkwZmYtMTVhMy00MzAyLTk5NDQtNDgzMjk4ZWJiZjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjXkyjh0PH/iGIkwrISWlKzxOxBxGph+ciQk kDb8S8yPidlSYjfkTu6eHz5Nr2z+7W2nL435fRbYHsFg6ZbQ5SjjPsx9nbkjyEXB CjiusOkVikOFFqwE7qqzhHRpg3X9KLdWJyjiltdxHxwkcRbVvKrMx2XW+hLfdiwA tfWhGa/Gq7fKkCWZ6eaZoPnVj3dtdvU8cyp19EbiATQ36HaF8YR/auHHmRRTbT5R TZvL6avxe9pjAoE9yESG5zJ6Q+g4xmBUfU9C4NHZ9whNBN+JTWFqS/+SYbJJTrmk pwnT/APEZTguMXD/o8K5PvxPaqqZvEKfYKgqLnOEJpGrfievNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtgAHGwr5zYlBCm2eYUDSp0djntMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMDIxZDZjYmYtMDM5Yi0z MGFmLWEwMDktZjRlMzkzNGE5NTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzA1QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAiuCf4whUReyvXGpMsHYXcfZysOCgVndo1QwMk56XzqAwyauCy8bjC oEd277CxnrdEqlfKxgXfJn2jhzSVHsE8NpCeOXKCYwMhyINguNuZANN169zghnBW DQ+TlhA6yDqYuXj2DHm+UzmQT8Dy69qfTz5f5degDzgY8tYd7C2xhmSrqWZlzYkG ysDzfez+Vq6ZsJdMamYLPKHoe2qE+npr1eg8+0Kx/oHn/zO/LcNPsR0B39Fy/sJH 8ig83Ih/k0+/WXMdRTblKJ3eXI+sGI8CL6bjLhps+Jc8HNpd/c8ypKpbYgg+zzpT WF6OCi11ImzN5U/WsmMv4c343ehgmgM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:32 2025 by rpki-client