$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/983ae15e-1db8-30c0-bc0d-198c56489ac3.roa File: 983ae15e-1db8-30c0-bc0d-198c56489ac3.roa (raw, json) Hash identifier: NvQYMOrpRdISWslebJZ9/PEOX7i3BpoUNxyfRH2ER6M= Subject key identifier: 5E:84:8B:38:D9:2A:95:4F:7A:7D:AF:21:AD:32:C1:21:B9:A5:F3:B9 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858486C2B3197DF353FDC9DEC1E80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/983ae15e-1db8-30c0-bc0d-198c56489ac3.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 11404 IP address blocks: 216.243.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:31:97:df:35:3f:dc:9d:ec:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=1bfd4673-6d76-45b7-8d65-eb2ec24bb09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e6:df:5d:1d:59:75:3b:6b:19:7f:20:7c:e5: 30:51:e8:f6:d8:87:ba:77:17:f3:d5:b0:d3:ed:f4: 27:a6:77:ea:85:98:3c:cb:0d:4b:e0:8f:2b:11:9b: 8a:b1:f6:8e:6b:0f:d6:24:ca:10:74:6f:ec:07:63: 4b:35:03:02:38:f2:f9:a1:aa:8f:7a:c3:63:3c:2c: 5a:13:76:c0:01:de:ad:b7:88:3b:20:b9:81:e1:d4: 75:d9:ce:f3:f7:0b:2b:0e:fe:70:49:1c:ad:14:3d: 06:94:57:64:89:0b:45:e1:31:43:86:37:82:df:ce: 07:08:92:32:a8:7a:21:fe:80:04:87:0f:e2:c5:99: c0:1e:10:4d:7b:e6:d4:53:0f:2a:47:22:18:61:8d: 6a:98:22:49:0a:26:ba:9f:29:67:37:2b:c0:97:5f: 56:bb:ca:ed:ad:16:3d:cc:bf:95:97:e7:ee:b3:db: 2c:de:13:1b:86:56:5c:0d:2a:bc:0d:49:51:36:06: 6f:84:2c:a8:d3:16:be:d9:af:ec:d8:05:af:0a:4a: 9e:b4:7d:71:85:70:9c:c9:e8:61:fe:23:61:a7:71: 88:d9:ae:10:b4:9c:1d:dd:16:d3:63:02:e9:43:d4: 2e:ab:4b:1a:ae:49:a4:c6:7d:48:8a:a7:a2:2e:39: 9c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:84:8B:38:D9:2A:95:4F:7A:7D:AF:21:AD:32:C1:21:B9:A5:F3:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/983ae15e-1db8-30c0-bc0d-198c56489ac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 216.243.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:04:89:d0:94:1a:78:17:00:9e:5e:65:e3:ad:f3:43:f3:63: c6:b6:9a:30:dd:9d:65:30:97:f9:c9:76:10:12:e4:8a:be:c3: 6b:27:71:55:e2:e7:91:e8:27:70:d3:17:b1:71:70:ab:1d:05: 16:ab:93:50:56:de:57:c1:f3:dc:0d:2c:e5:3b:38:95:03:07: 52:e5:d3:84:86:d8:13:95:66:80:86:20:01:f1:97:b9:1a:6d: e1:e7:f1:02:00:4a:61:ac:3b:4c:b9:27:72:51:67:92:bf:71: 47:23:a6:6c:e0:9b:60:d6:67:56:59:64:fe:ff:43:a2:80:b1: 1b:bf:ec:4c:15:83:84:12:38:30:c9:f9:2a:de:e4:c5:11:2f: 14:53:59:26:ac:22:2e:25:0c:70:77:43:4c:5b:7c:b7:27:31: 14:c4:bf:88:bc:c0:15:49:bb:01:fa:b5:78:c3:8e:b3:7b:86: 72:cb:af:c1:c9:32:1b:04:b9:51:96:67:02:56:85:eb:b9:cd: c1:65:b2:c5:9e:ac:55:75:db:a3:bb:89:07:82:ea:13:0a:b2: 56:64:ce:1e:05:0d:fc:46:27:ac:5e:05:49:bc:63:97:dd:6c: 7f:e4:33:99:4c:1c:e2:02:3e:9d:4b:11:fe:36:7d:77:fd:f7: cf:b6:35:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKzGX3zU/3J3sHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk MWJmZDQ2NzMtNmQ3Ni00NWI3LThkNjUtZWIyZWMyNGJiMDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+bfXR1ZdTtrGX8gfOUwUej22Ie6dxfz1bDT 7fQnpnfqhZg8yw1L4I8rEZuKsfaOaw/WJMoQdG/sB2NLNQMCOPL5oaqPesNjPCxa E3bAAd6tt4g7ILmB4dR12c7z9wsrDv5wSRytFD0GlFdkiQtF4TFDhjeC384HCJIy qHoh/oAEhw/ixZnAHhBNe+bUUw8qRyIYYY1qmCJJCia6nylnNyvAl19Wu8rtrRY9 zL+Vl+fus9ss3hMbhlZcDSq8DUlRNgZvhCyo0xa+2a/s2AWvCkqetH1xhXCcyehh /iNhp3GI2a4QtJwd3RbTYwLpQ9Quq0sarkmkxn1IiqeiLjmcfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6EizjZKpVPen2vIa0ywSG5pfO5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvOTgzYWUxNWUtMWRiOC0z MGMwLWJjMGQtMTk4YzU2NDg5YWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2PMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwEidCUGngXAJ5eZeOt80PzY8a2mjDdnWUwl/nJdhAS5Iq+w2sncVXi 55HoJ3DTF7FxcKsdBRark1BW3lfB89wNLOU7OJUDB1Ll04SG2BOVZoCGIAHxl7ka beHn8QIASmGsO0y5J3JRZ5K/cUcjpmzgm2DWZ1ZZZP7/Q6KAsRu/7EwVg4QSODDJ +Sre5MURLxRTWSasIi4lDHB3Q0xbfLcnMRTEv4i8wBVJuwH6tXjDjrN7hnLLr8HJ MhsEuVGWZwJWheu5zcFlssWerFV126O7iQeC6hMKslZkzh4FDfxGJ6xeBUm8Y5fd bH/kM5lMHOICPp1LEf42fXf998+2NfI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:31:39 2025 by rpki-client