$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cd78d3a0-ea22-32ae-bb00-5392c5a53573.roa File: cd78d3a0-ea22-32ae-bb00-5392c5a53573.roa (raw, json) Hash identifier: Nyd0AKq3NSTQ/okxJuliefreVSfSH7EPukp5H/CQg8k= Subject key identifier: 7D:C1:95:14:7C:35:41:3A:56:BC:FC:63:17:44:0D:DC:47:1F:1D:D7 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858486C2B33AB1E17BE1A07BB4380 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cd78d3a0-ea22-32ae-bb00-5392c5a53573.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 54858 IP address blocks: 204.14.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:33:ab:1e:17:be:1a:07:bb:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=d6a403f7-639f-45d1-a88c-97e8295fe992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:62:26:13:ff:76:7d:70:ad:34:64:bb:05:fe: dd:d1:f8:7f:ad:c6:9a:d4:0d:24:87:28:9a:d9:ba: 73:76:15:cb:d5:22:eb:c0:fd:95:14:fe:d0:f9:d3: 8e:86:a1:73:b2:c9:5c:40:26:f3:94:35:bf:68:f3: 5a:78:7d:9b:1f:39:e9:3f:9f:d2:ca:2a:4c:14:ab: da:1c:50:82:44:d0:19:73:bc:bb:0f:78:68:76:14: 64:fb:8e:7d:74:ac:28:a0:7c:be:54:40:c5:9b:66: f5:b4:cd:47:a0:dd:a7:a2:3c:e6:02:1a:7d:56:2d: 25:5d:2d:a7:64:aa:6e:30:c9:d5:93:ca:69:52:db: 93:62:25:29:d3:e1:26:ae:27:07:48:74:a5:a9:52: 96:f0:72:93:6a:12:d9:26:da:a6:3b:d5:1f:10:27: 4e:ce:fd:be:e6:46:e3:73:e8:95:ae:6a:76:d6:8b: bc:68:25:52:0b:44:96:dd:b2:98:30:b9:95:10:fb: 3a:4b:fd:bd:35:86:00:ca:28:86:69:3e:95:d5:77: 49:68:90:78:8f:3a:7d:c5:23:1a:07:61:8c:bf:6b: 97:2c:32:56:e6:8d:c0:eb:06:c6:61:e0:7b:de:ae: 94:0b:96:3a:d3:f4:f0:79:25:c0:48:9f:0e:bc:48: 35:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C1:95:14:7C:35:41:3A:56:BC:FC:63:17:44:0D:DC:47:1F:1D:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cd78d3a0-ea22-32ae-bb00-5392c5a53573.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 204.14.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:62:dc:23:97:32:b1:f1:25:a4:b3:6a:74:fd:14:dd:d4:44: 54:6f:0f:f6:8c:c6:c1:b1:de:a5:7a:73:90:53:83:4b:b2:b7: b0:d0:97:b9:a6:b8:94:46:58:cb:9f:62:25:e6:3d:1a:25:9e: b7:75:48:ed:d1:ba:49:98:61:15:e8:10:91:af:65:22:00:e6: b1:e8:53:b0:f0:2b:37:9b:59:21:22:3f:b4:3d:f8:34:d1:19: 54:33:29:d8:9a:e9:18:6e:69:d5:39:f6:0c:47:f9:32:85:8f: 16:77:e1:6e:18:e4:95:3c:9f:48:7e:89:55:ec:9b:be:f3:a9: 29:39:78:fc:24:44:9b:43:eb:40:7a:07:9f:f8:bc:73:02:84: 6e:b0:d8:4f:9d:39:fc:19:57:ea:f5:47:8c:08:ea:55:eb:5e: c1:15:38:1c:15:9e:f7:46:fc:50:92:c4:9e:62:4f:c8:73:ef: 01:e5:c8:af:03:9a:a6:28:48:1a:dc:dd:74:b6:0d:d9:24:52: dc:b6:05:04:71:28:06:02:6d:0e:e5:cc:48:22:5e:a1:6b:04: 52:3e:8f:bb:54:c1:62:d5:36:b1:35:63:e1:cc:43:c7:c6:15: e2:22:dd:31:cd:7f:2c:d7:0e:63:76:78:ed:1c:7f:d0:7b:5a: 6e:9c:1a:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKzOrHhe+Gge7Q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk ZDZhNDAzZjctNjM5Zi00NWQxLWE4OGMtOTdlODI5NWZlOTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGImE/92fXCtNGS7Bf7d0fh/rcaa1A0khyia 2bpzdhXL1SLrwP2VFP7Q+dOOhqFzsslcQCbzlDW/aPNaeH2bHznpP5/SyipMFKva HFCCRNAZc7y7D3hodhRk+459dKwooHy+VEDFm2b1tM1HoN2nojzmAhp9Vi0lXS2n ZKpuMMnVk8ppUtuTYiUp0+EmricHSHSlqVKW8HKTahLZJtqmO9UfECdOzv2+5kbj c+iVrmp21ou8aCVSC0SW3bKYMLmVEPs6S/29NYYAyiiGaT6V1XdJaJB4jzp9xSMa B2GMv2uXLDJW5o3A6wbGYeB73q6UC5Y60/TweSXASJ8OvEg1iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3BlRR8NUE6Vrz8YxdEDdxHHx3XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvY2Q3OGQzYTAtZWEyMi0z MmFlLWJiMDAtNTM5MmM1YTUzNTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzA4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIti3COXMrHxJaSzanT9FN3URFRvD/aMxsGx3qV6c5BTg0uyt7DQl7mm uJRGWMufYiXmPRolnrd1SO3RukmYYRXoEJGvZSIA5rHoU7DwKzebWSEiP7Q9+DTR GVQzKdia6RhuadU59gxH+TKFjxZ34W4Y5JU8n0h+iVXsm77zqSk5ePwkRJtD60B6 B5/4vHMChG6w2E+dOfwZV+r1R4wI6lXrXsEVOBwVnvdG/FCSxJ5iT8hz7wHlyK8D mqYoSBrc3XS2DdkkUty2BQRxKAYCbQ7lzEgiXqFrBFI+j7tUwWLVNrE1Y+HMQ8fG FeIi3THNfyzXDmN2eO0cf9B7Wm6cGiI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:32 2025 by rpki-client