$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4d58af25-f7ee-30be-8bbe-240b424b0891.roa File: 4d58af25-f7ee-30be-8bbe-240b424b0891.roa (raw, json) Hash identifier: gDot9i+QzhczsyosMQc7Jzx2bSRd2Lf8Eb4W340jNdc= Subject key identifier: 55:97:70:59:33:C6:58:CF:D5:9B:04:D7:6B:62:7D:F6:CA:5F:56:3C Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858486C2B28188A6A74E9D2BD8E80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4d58af25-f7ee-30be-8bbe-240b424b0891.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 54858 IP address blocks: 216.243.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:28:18:8a:6a:74:e9:d2:bd:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=c6925594-9910-4a57-a4e2-e78fd7cf4924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5d:34:e6:89:a9:f9:02:3b:cb:de:9a:cc:09: a6:90:14:55:f2:ca:0f:f9:2f:58:cb:0b:ba:53:fd: fe:51:22:71:7b:ef:0f:b4:95:30:f4:41:9e:9b:29: fb:be:70:e0:f1:06:23:cf:e8:82:5a:00:3e:54:b4: ba:da:08:20:ae:75:ad:20:57:5a:f4:a9:c4:da:6b: fa:2c:5b:94:28:6a:b0:97:71:ab:ad:56:77:3b:fd: 55:1c:4d:7c:65:a6:40:69:2f:10:2a:62:3b:97:cd: ac:b2:6e:d3:96:27:93:03:3c:41:3c:d4:c0:55:d5: fc:c8:07:35:0e:7b:41:d1:5a:72:ed:5f:02:0b:80: e0:01:84:4e:f9:f0:28:72:40:27:2f:69:e5:b4:b3: 14:7a:da:f7:64:9b:d4:09:65:f5:36:e5:30:f8:de: 6b:96:62:15:d8:69:3c:75:dd:3e:2d:8c:2e:54:a1: 39:f8:c5:b9:46:4b:12:9a:77:06:b4:2b:36:6f:38: 75:40:29:f7:02:15:63:94:a6:77:d3:3c:d7:3d:45: cd:84:91:f6:6b:c9:27:be:5e:e4:ae:0e:7a:83:f0: 6c:9c:8b:52:ac:72:10:d5:89:21:c6:2f:3d:b2:e2: 18:03:c0:4b:df:89:db:c8:d4:74:1e:3b:c5:7a:33: 99:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:97:70:59:33:C6:58:CF:D5:9B:04:D7:6B:62:7D:F6:CA:5F:56:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4d58af25-f7ee-30be-8bbe-240b424b0891.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 216.243.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:76:81:ff:7b:bd:5d:99:dd:72:17:90:68:5d:83:54:22:27: b3:db:65:0e:70:6b:a6:f8:51:b9:b6:23:3d:d0:a4:43:20:6d: f5:da:63:17:d0:0a:8e:30:da:d2:62:24:2b:9a:a0:d0:56:96: 80:cd:45:f6:c6:0c:f0:00:ce:08:44:5c:e8:ba:d5:a2:c6:c7: 97:5a:b9:29:b8:dd:cc:e7:6a:d1:e7:ec:d3:dd:85:33:be:63: 72:8f:5d:d1:f2:38:4d:9c:04:d3:78:11:cc:20:06:6f:31:27: e6:52:30:06:6d:45:40:26:b1:8e:b9:b6:80:fa:d1:a8:97:b0: 29:3f:75:dc:20:57:e2:8e:f5:d4:32:f9:69:2d:f6:f7:76:fd: fd:9f:65:ad:bf:13:ef:ab:fc:01:a0:08:56:4a:02:81:07:b9: 86:3b:60:9f:05:d7:e1:05:40:db:78:41:4c:cd:07:9a:90:e5: 90:d9:25:e2:6a:16:28:a7:1f:a8:24:51:a5:63:ae:ca:3d:96: f0:b4:c3:a7:fb:47:e2:58:ba:68:ff:8d:dc:0a:06:a9:65:30: c6:98:36:7c:f1:5c:8e:a1:bc:38:3e:e0:81:62:e9:27:af:bb: 9b:53:0a:32:2d:59:01:18:b6:62:f8:f6:ac:57:9c:51:99:53: 27:06:26:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKygYimp06dK9joAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk YzY5MjU1OTQtOTkxMC00YTU3LWE0ZTItZTc4ZmQ3Y2Y0OTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF005omp+QI7y96azAmmkBRV8soP+S9Yywu6 U/3+USJxe+8PtJUw9EGemyn7vnDg8QYjz+iCWgA+VLS62gggrnWtIFda9KnE2mv6 LFuUKGqwl3GrrVZ3O/1VHE18ZaZAaS8QKmI7l82ssm7TlieTAzxBPNTAVdX8yAc1 DntB0Vpy7V8CC4DgAYRO+fAockAnL2nltLMUetr3ZJvUCWX1NuUw+N5rlmIV2Gk8 dd0+LYwuVKE5+MW5RksSmncGtCs2bzh1QCn3AhVjlKZ30zzXPUXNhJH2a8knvl7k rg56g/BsnItSrHIQ1Ykhxi89suIYA8BL34nbyNR0HjvFejOZEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWXcFkzxljP1ZsE12tiffbKX1Y8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNGQ1OGFmMjUtZjdlZS0z MGJlLThiYmUtMjQwYjQyNGIwODkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2PMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZ2gf97vV2Z3XIXkGhdg1QiJ7PbZQ5wa6b4Ubm2Iz3QpEMgbfXaYxfQ Co4w2tJiJCuaoNBWloDNRfbGDPAAzghEXOi61aLGx5dauSm43cznatHn7NPdhTO+ Y3KPXdHyOE2cBNN4EcwgBm8xJ+ZSMAZtRUAmsY65toD60aiXsCk/ddwgV+KO9dQy +Wkt9vd2/f2fZa2/E++r/AGgCFZKAoEHuYY7YJ8F1+EFQNt4QUzNB5qQ5ZDZJeJq FiinH6gkUaVjrso9lvC0w6f7R+JYumj/jdwKBqllMMaYNnzxXI6hvDg+4IFi6Sev u5tTCjItWQEYtmL49qxXnFGZUycGJrU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:46:26 2025 by rpki-client