$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/845c934e-982e-391f-9cb4-1e7d4935e5ac.roa File: 845c934e-982e-391f-9cb4-1e7d4935e5ac.roa (raw, json) Hash identifier: ll/XHj/EbVgsozPlVZNiI1adkeMuSlFRvNtHRvSjt4k= Subject key identifier: A9:50:9C:A0:6F:38:CD:FC:B7:A1:84:93:E8:0B:73:5A:2D:35:A0:EE Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858486C2B2565DDB5B5E9F4E2C0D0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/845c934e-982e-391f-9cb4-1e7d4935e5ac.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 11404 IP address blocks: 162.208.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:25:65:dd:b5:b5:e9:f4:e2:c0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=94c4191a-89f8-41f5-94ca-a3478535887b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:67:db:2e:3c:3a:60:33:e8:c2:48:0c:9a:e2: 80:12:a6:ae:2f:c9:c0:fd:1f:21:d7:67:ab:7b:bd: d1:c8:f6:d2:85:82:a8:d3:19:18:fd:54:09:71:fd: 53:3d:11:14:df:70:78:bd:ed:31:6b:7f:b5:6b:6e: 9a:e4:5e:88:b7:7a:4e:3e:e2:fe:34:09:da:b0:7a: c0:33:3c:29:a6:5a:43:ae:b9:f3:6f:7a:03:0c:24: 16:a0:f9:b6:24:6d:9c:ce:4b:fd:d9:22:06:ca:00: 29:1a:24:30:f9:e2:a8:48:85:71:25:bd:ec:78:c6: e6:93:dd:b0:40:18:6b:69:5f:5e:0a:84:f9:56:34: 96:c8:00:f8:58:d1:a5:ca:06:55:bb:ac:bd:41:30: 46:ba:88:25:bf:00:6d:24:c2:b6:f1:88:21:a6:55: 71:8c:a5:20:f3:7e:9c:d6:99:29:64:a6:8f:b2:35: a4:cc:38:ce:f0:d0:9c:07:33:95:2c:c6:61:79:ca: b6:a6:68:5a:49:b5:17:7a:a8:40:12:bb:d1:b1:db: 43:d5:7f:5b:da:5d:56:29:4a:01:84:cd:ed:95:9f: 87:2d:c0:8f:5e:b6:f9:86:54:22:50:1f:fb:50:a8: 21:ac:77:e1:f9:ca:9c:90:1e:a4:cc:da:d8:ae:55: c9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:50:9C:A0:6F:38:CD:FC:B7:A1:84:93:E8:0B:73:5A:2D:35:A0:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/845c934e-982e-391f-9cb4-1e7d4935e5ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 162.208.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:ca:cd:14:ea:fa:d1:33:c4:ba:74:e3:f3:30:85:9d:f9:32: 41:f8:e5:36:62:42:5c:ad:6d:6d:4b:03:e8:5b:0c:26:1e:64: 0d:c9:cc:06:64:d5:9e:48:fb:42:96:12:a9:22:21:c0:67:76: bf:1f:55:ea:57:f8:66:bb:64:fc:45:d3:19:f8:8d:ad:d1:73: f5:9c:9f:cb:c2:2a:b4:f6:79:77:bb:60:5e:ea:66:55:b2:bd: ff:df:97:40:e6:f1:93:23:58:ba:31:ca:c0:e3:56:af:63:a5: af:95:d7:da:cd:db:1d:18:86:17:78:cf:08:ca:8e:7e:ce:bb: 68:a1:9f:9a:07:43:ab:96:22:d0:9a:47:2d:ee:24:29:28:e3: fa:96:7b:7e:93:8f:c1:a1:96:0f:ae:48:68:53:91:8b:5b:ec: 04:5c:d2:1f:6d:e1:a3:03:ed:b2:d4:2c:3c:cf:5c:3f:ae:52: 89:31:85:11:ec:5c:81:cb:3a:55:c1:85:29:37:78:70:4c:01: 5c:30:83:6f:1f:8f:c9:75:b7:f5:f3:ca:22:1c:26:26:d6:22: 8b:2f:29:3b:53:89:ee:7a:1f:57:e5:d1:47:76:15:34:94:db: 45:7e:38:11:33:1d:92:a8:7d:61:7e:cc:53:2c:3e:69:7c:cb: 7e:3f:e1:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKyVl3bW16fTiwNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk OTRjNDE5MWEtODlmOC00MWY1LTk0Y2EtYTM0Nzg1MzU4ODdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWfbLjw6YDPowkgMmuKAEqauL8nA/R8h12er e73RyPbShYKo0xkY/VQJcf1TPREU33B4ve0xa3+1a26a5F6It3pOPuL+NAnasHrA MzwpplpDrrnzb3oDDCQWoPm2JG2czkv92SIGygApGiQw+eKoSIVxJb3seMbmk92w QBhraV9eCoT5VjSWyAD4WNGlygZVu6y9QTBGuoglvwBtJMK28YghplVxjKUg836c 1pkpZKaPsjWkzDjO8NCcBzOVLMZhecq2pmhaSbUXeqhAErvRsdtD1X9b2l1WKUoB hM3tlZ+HLcCPXrb5hlQiUB/7UKghrHfh+cqckB6kzNrYrlXJ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlQnKBvOM38t6GEk+gLc1otNaDuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvODQ1YzkzNGUtOTgyZS0z OTFmLTljYjQtMWU3ZDQ5MzVlNWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvKzRTq+tEzxLp04/MwhZ35MkH45TZiQlytbW1LA+hbDCYeZA3JzAZk 1Z5I+0KWEqkiIcBndr8fVepX+Ga7ZPxF0xn4ja3Rc/Wcn8vCKrT2eXe7YF7qZlWy vf/fl0Dm8ZMjWLoxysDjVq9jpa+V19rN2x0Yhhd4zwjKjn7Ou2ihn5oHQ6uWItCa Ry3uJCko4/qWe36Tj8Ghlg+uSGhTkYtb7ARc0h9t4aMD7bLULDzPXD+uUokxhRHs XIHLOlXBhSk3eHBMAVwwg28fj8l1t/XzyiIcJibWIosvKTtTie56H1fl0Ud2FTSU 20V+OBEzHZKofWF+zFMsPml8y34/4Ss= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:45 2025 by rpki-client