$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/11f24f9b-8bee-3b72-adf1-f7a6486b7777.roa File: 11f24f9b-8bee-3b72-adf1-f7a6486b7777.roa (raw, json) Hash identifier: 9qIHrdgoL2ewFIZZ6q9FhX5fVwtUMuQ/EMZhMA2egBc= Subject key identifier: 96:39:C1:F5:D4:5B:87:EA:28:81:17:4D:0B:89:F6:94:C7:3A:D7:69 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858486C2B277FA7DF43A44A76C980 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/11f24f9b-8bee-3b72-adf1-f7a6486b7777.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 54858 IP address blocks: 174.127.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:27:7f:a7:df:43:a4:4a:76:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=ca039a08-5f3e-4efc-9208-05d11c85fe67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e6:4b:be:6e:f9:1c:ec:d6:23:e7:ad:33:bd: cd:be:0b:14:f2:99:56:39:a4:ab:ec:45:c8:43:2c: c8:95:c9:85:44:bb:dc:ce:2a:4e:1f:06:de:d2:d1: 29:83:5f:b9:8b:84:4f:80:51:21:d5:7e:af:ab:86: ba:21:c1:dc:07:73:87:4a:45:67:de:cb:d0:f9:06: 26:b3:7b:ed:8f:a7:1f:c2:6c:5e:6e:f0:bd:c5:22: fd:bb:4c:ad:f6:ec:4d:eb:0d:3c:3b:67:9e:f8:5c: 4c:92:3c:3e:9c:8e:ff:d1:60:56:bf:f9:be:18:06: 3d:d8:6d:11:e5:0d:ef:0f:ac:f6:39:36:cd:2f:c9: f5:aa:73:b8:4e:fd:28:3b:80:63:31:a1:c0:f2:93: 26:5a:c8:e5:d6:d3:dd:74:a8:66:8c:90:56:27:a8: 07:83:41:41:a6:07:83:d3:48:c1:f0:63:e0:53:ef: 8c:f5:f8:73:a2:bc:b6:9b:fe:7e:4b:e3:7a:20:a9: 31:8d:92:cd:bd:da:11:58:ba:b6:5f:42:db:91:2b: f1:b8:98:7d:f0:69:09:6a:de:39:2c:28:7e:8d:8f: 0f:37:b9:f4:ff:dd:63:b9:aa:f5:58:1c:88:62:6f: b8:e7:00:87:24:5f:82:b6:4e:91:e5:9c:45:29:f8: b6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:39:C1:F5:D4:5B:87:EA:28:81:17:4D:0B:89:F6:94:C7:3A:D7:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/11f24f9b-8bee-3b72-adf1-f7a6486b7777.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 174.127.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:b0:0d:82:8c:a0:49:5b:db:57:c3:f0:83:ee:a1:a0:62:24: e1:cc:27:36:dc:6f:b0:3c:b9:a3:cd:b4:0b:b6:31:84:a3:3a: 26:fe:c1:47:4d:3f:37:ec:44:30:a9:04:61:76:20:80:66:8c: c0:d4:37:e7:49:db:e7:bc:c7:d5:4d:21:8b:23:05:1f:a9:c0: 2a:90:eb:e3:e7:c3:17:b1:db:8d:77:6c:67:4e:23:ef:37:aa: b9:bd:51:e5:1c:c6:58:f2:1a:99:97:30:0b:71:9b:d9:de:1c: fc:4b:78:79:5d:61:61:ef:56:1e:10:6b:6a:20:e3:55:e1:d5: ce:32:a8:5b:f6:11:b1:1c:1a:8b:7a:8e:35:7e:bd:f7:d3:48: c1:b6:6c:d2:f3:a7:4d:b7:99:d5:7e:7a:e4:59:69:16:2c:41: 61:2f:eb:7a:cf:60:92:ff:d4:0d:ea:15:f4:61:7b:56:73:40: 23:c7:68:d4:6f:55:d3:d6:72:fa:9a:a4:64:fd:01:28:bf:41: 94:ae:9d:1c:da:77:a3:d2:94:af:80:9f:23:3a:28:b3:c9:7a: 55:af:1b:47:8d:97:da:a3:e8:c1:ea:bf:e0:80:74:b6:29:e2: 49:4e:21:04:69:fa:39:ed:e4:cd:1e:7e:56:63:87:02:da:e6: a3:1e:ea:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKyd/p99DpEp2yYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk Y2EwMzlhMDgtNWYzZS00ZWZjLTkyMDgtMDVkMTFjODVmZTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuZLvm75HOzWI+etM73NvgsU8plWOaSr7EXI QyzIlcmFRLvczipOHwbe0tEpg1+5i4RPgFEh1X6vq4a6IcHcB3OHSkVn3svQ+QYm s3vtj6cfwmxebvC9xSL9u0yt9uxN6w08O2ee+FxMkjw+nI7/0WBWv/m+GAY92G0R 5Q3vD6z2OTbNL8n1qnO4Tv0oO4BjMaHA8pMmWsjl1tPddKhmjJBWJ6gHg0FBpgeD 00jB8GPgU++M9fhzory2m/5+S+N6IKkxjZLNvdoRWLq2X0LbkSvxuJh98GkJat45 LCh+jY8PN7n0/91juar1WByIYm+45wCHJF+Ctk6R5ZxFKfi22QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJY5wfXUW4fqKIEXTQuJ9pTHOtdpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMTFmMjRmOWItOGJlZS0z YjcyLWFkZjEtZjdhNjQ4NmI3Nzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrn+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+wDYKMoElb21fD8IPuoaBiJOHMJzbcb7A8uaPNtAu2MYSjOib+wUdN PzfsRDCpBGF2IIBmjMDUN+dJ2+e8x9VNIYsjBR+pwCqQ6+Pnwxex2413bGdOI+83 qrm9UeUcxljyGpmXMAtxm9neHPxLeHldYWHvVh4Qa2og41Xh1c4yqFv2EbEcGot6 jjV+vffTSMG2bNLzp023mdV+euRZaRYsQWEv63rPYJL/1A3qFfRhe1ZzQCPHaNRv VdPWcvqapGT9ASi/QZSunRzad6PSlK+AnyM6KLPJelWvG0eNl9qj6MHqv+CAdLYp 4klOIQRp+jnt5M0eflZjhwLa5qMe6o8= -----END CERTIFICATE-----Generated at Fri Mar 14 10:39:38 2025 by rpki-client