$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/9346a099-c69f-3899-964e-256ab153b160.roa File: 9346a099-c69f-3899-964e-256ab153b160.roa (raw, json) Hash identifier: HySQmIHnPfnikP/uabp+JEElGZ32F2KvXFbtQW0Fvbk= Subject key identifier: B8:AD:D2:49:54:12:E7:C5:D9:FF:A1:BF:17:3A:5F:EE:78:5C:A3:2B Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858486C2B27F99C591A081100FAA0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/9346a099-c69f-3899-964e-256ab153b160.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 54858 IP address blocks: 172.92.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:27:f9:9c:59:1a:08:11:00:fa:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=a679dc09-6cf6-4461-8241-3fbfff1b0f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:48:2d:31:5d:8e:d6:42:c1:31:08:ba:40:3d: cb:19:b1:ed:96:d5:1f:43:51:98:1a:6a:91:ba:81: 79:60:b5:d9:a9:cc:81:8c:9d:93:cd:16:45:f1:68: 23:83:6b:65:f0:e5:b6:80:6d:e1:6a:38:2b:72:75: f8:a5:7e:72:36:6a:75:0f:59:5e:73:2d:f8:83:04: ec:a5:fb:54:0b:6f:b2:c3:56:39:37:6c:d2:fd:64: 34:36:23:dc:85:e6:35:0a:d2:be:48:0f:8d:5d:f5: 76:b8:d1:f2:13:17:0b:e6:35:c7:04:95:7f:4d:b1: 7c:eb:d1:6a:56:02:b9:38:34:0a:06:af:07:1b:9e: 3f:f4:d9:ac:4b:1d:7c:60:03:f5:6f:54:8a:ae:85: 4f:6f:c8:55:4e:0f:51:d4:82:34:f1:70:79:62:e3: 55:c4:f1:2a:ea:22:e0:a7:ce:1b:c1:4a:45:16:3c: 1b:6f:b8:d6:9d:0a:ef:57:a7:cb:a0:cf:a6:5c:f3: 1c:ff:fe:7a:0f:55:7d:62:63:2d:37:05:8d:55:eb: 5c:63:84:75:24:98:8d:76:0d:18:48:84:9c:5d:33: c0:de:55:1e:ff:27:5a:ca:d1:b1:7a:cb:76:5f:97: 50:0f:45:7b:f7:9c:e8:8a:2f:e5:cd:b6:cf:5d:e4: b2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AD:D2:49:54:12:E7:C5:D9:FF:A1:BF:17:3A:5F:EE:78:5C:A3:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/9346a099-c69f-3899-964e-256ab153b160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 172.92.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:9d:d6:0b:6f:a2:a0:74:1c:9f:06:17:36:92:26:d6:f4:70: 37:98:6c:83:14:90:1c:5f:b2:9e:49:e4:64:b2:fc:e3:f4:de: 3e:81:35:85:5c:c0:d9:89:3a:fe:86:8d:75:f4:19:8b:ff:52: 01:47:a1:94:54:6e:b0:79:8e:cd:f7:bf:7f:c6:ec:34:a0:64: b6:e3:38:29:ae:a6:85:b2:14:36:6c:5e:04:28:82:f6:9a:a2: 27:7f:eb:8e:29:53:f7:eb:8d:89:ef:5f:e3:7b:c8:7a:4e:77: 2d:18:8c:21:6d:9a:31:5d:17:82:1a:76:59:31:9f:2f:5f:70: b3:7d:94:1c:7d:99:93:6b:67:c3:c3:5c:7d:6c:00:f3:23:c3: 22:29:68:1b:d2:2f:3d:83:0d:ef:e0:38:92:32:fd:19:15:34: a4:08:92:47:65:57:28:e7:cc:2d:58:10:19:2d:5f:a7:ef:ff: d2:b8:46:80:03:f2:91:28:fd:a2:d9:34:eb:16:df:46:aa:40: 82:b8:66:81:37:f0:7b:52:01:72:4f:6f:f6:b5:3e:fa:92:b8: ec:29:8b:de:1d:33:0b:33:32:80:7b:07:de:6d:0a:e6:b5:4e: d3:64:c4:1a:dd:27:d1:d8:d4:05:70:e9:77:93:10:2f:e1:27: 69:99:28:e8 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhsKyf5nFkaCBEA+qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk YTY3OWRjMDktNmNmNi00NDYxLTgyNDEtM2ZiZmZmMWIwZjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UgtMV2O1kLBMQi6QD3LGbHtltUfQ1GYGmqR uoF5YLXZqcyBjJ2TzRZF8Wgjg2tl8OW2gG3hajgrcnX4pX5yNmp1D1lecy34gwTs pftUC2+yw1Y5N2zS/WQ0NiPcheY1CtK+SA+NXfV2uNHyExcL5jXHBJV/TbF869Fq VgK5ODQKBq8HG54/9NmsSx18YAP1b1SKroVPb8hVTg9R1II08XB5YuNVxPEq6iLg p84bwUpFFjwbb7jWnQrvV6fLoM+mXPMc//56D1V9YmMtNwWNVetcY4R1JJiNdg0Y SIScXTPA3lUe/ydaytGxest2X5dQD0V795zoii/lzbbPXeSyXwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLit0klUEufF2f+hvxc6X+54XKMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvOTM0NmEwOTktYzY5Zi0z ODk5LTk2NGUtMjU2YWIxNTNiMTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArFwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAXZ3WC2+ioHQcnwYXNpIm1vRwN5hsgxSQHF+ynknkZLL84/TePoE1hVzA 2Yk6/oaNdfQZi/9SAUehlFRusHmOzfe/f8bsNKBktuM4Ka6mhbIUNmxeBCiC9pqi J3/rjilT9+uNie9f43vIek53LRiMIW2aMV0Xghp2WTGfL19ws32UHH2Zk2tnw8Nc fWwA8yPDIiloG9IvPYMN7+A4kjL9GRU0pAiSR2VXKOfMLVgQGS1fp+//0rhGgAPy kSj9otk06xbfRqpAgrhmgTfwe1IBck9v9rU++pK47CmL3h0zCzMygHsH3m0K5rVO 02TEGt0n0djUBXDpd5MQL+EnaZko6A== -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:07 2025 by rpki-client