$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ea2de2e4-c8fd-3e47-8a0b-f553e25f3261.roa File: ea2de2e4-c8fd-3e47-8a0b-f553e25f3261.roa (raw, json) Hash identifier: JSmIoBCOAUfCSM1mAe9aNHBGAxIoTTzwgYLrZ3YQH9Y= Subject key identifier: DC:C2:77:10:B4:0A:CF:AE:CD:D0:8A:EC:B7:7B:D1:93:B7:F4:5C:1D Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858486C2B3167971DCE36E067E6E0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ea2de2e4-c8fd-3e47-8a0b-f553e25f3261.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 11404 IP address blocks: 206.55.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:31:67:97:1d:ce:36:e0:67:e6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=af15d660-01cd-4ea6-bd99-e8d62bcb69d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ac:c3:20:18:93:ea:b3:be:99:e7:11:36:3f: be:a1:fb:50:37:3c:51:4d:a1:0b:99:f0:a5:11:2c: 4a:63:df:6e:49:45:b7:f2:d4:a6:ed:9c:f0:47:ae: 1a:e2:23:1b:15:2f:1f:77:fa:95:fd:be:9f:48:46: a1:98:54:40:dc:5c:56:0b:a8:f7:1c:6d:79:16:c7: 15:f5:93:8a:84:93:b4:79:6e:1b:37:57:cf:a4:c4: 26:08:ca:11:44:eb:86:3b:b3:8c:a1:0c:f8:98:bd: 7a:d2:ae:93:e2:d7:ab:5a:6d:47:88:3f:fe:f8:78: c8:b3:35:31:a7:45:e3:c3:14:7f:3f:36:d2:2a:8f: ee:44:c6:2f:78:2d:f4:76:a7:76:09:b4:28:b8:42: 44:c6:b5:14:71:fd:ba:dd:6c:f8:8f:a0:b0:d7:0a: 47:49:1c:b7:49:e1:4c:b5:4d:d5:dc:25:13:7e:ba: 85:7c:2d:9a:63:35:cd:60:5f:e9:e1:4e:62:29:d0: 20:16:f6:ec:9e:c2:2f:24:83:a7:5a:b3:49:d7:95: ba:c6:3c:db:ac:dc:75:66:37:86:8c:94:b0:37:6f: e4:49:4a:dd:30:4a:07:6e:ca:35:82:10:fc:03:64: 6b:5b:27:97:2f:d8:5f:12:18:5e:25:2e:58:a1:3c: 40:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C2:77:10:B4:0A:CF:AE:CD:D0:8A:EC:B7:7B:D1:93:B7:F4:5C:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ea2de2e4-c8fd-3e47-8a0b-f553e25f3261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 206.55.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:05:a2:1d:ca:c1:49:52:13:9d:54:8d:ee:c0:0e:78:d5:51: b8:6c:45:c6:19:ee:68:26:3c:23:04:88:20:73:a2:a2:59:a2: 53:d9:f8:42:cf:bd:ef:04:d1:93:d5:46:61:ca:a9:e9:3f:b0: d3:c9:db:bb:db:4c:39:12:e3:2a:1d:a6:c4:83:d1:1d:29:b9: a4:08:7b:4c:0e:a2:2d:2b:1b:67:65:f7:06:ee:02:98:d0:f3: 63:6c:37:f9:40:98:72:61:c1:64:db:ee:61:eb:3f:df:ab:91: 35:77:29:a4:22:f1:1d:55:5a:38:4a:6a:c6:25:f6:e5:dc:99: fe:34:d3:6b:dd:8f:eb:7f:99:72:de:81:85:f4:10:cf:a2:98: a1:1a:68:a6:f4:0e:ea:01:1e:19:ac:31:d3:7b:64:bd:3a:33: 62:cf:06:a0:d1:9b:bb:a6:69:c8:15:60:df:d6:e2:83:20:06: 7e:7a:0c:10:7f:3a:f8:f0:2e:d0:34:92:3a:6e:7e:45:0a:f0: db:1d:5e:20:e6:97:01:4b:0e:40:e6:97:75:66:d3:e5:a4:9a: 5b:7b:ae:44:38:76:b0:cb:5f:1e:30:2e:10:d4:73:17:63:a6: c4:e2:96:c9:14:9b:9a:0c:cb:f9:48:66:e2:1d:db:28:7c:ae: 48:83:97:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKzFnlx3ONuBn5uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk YWYxNWQ2NjAtMDFjZC00ZWE2LWJkOTktZThkNjJiY2I2OWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6zDIBiT6rO+mecRNj++oftQNzxRTaELmfCl ESxKY99uSUW38tSm7ZzwR64a4iMbFS8fd/qV/b6fSEahmFRA3FxWC6j3HG15FscV 9ZOKhJO0eW4bN1fPpMQmCMoRROuGO7OMoQz4mL160q6T4terWm1HiD/++HjIszUx p0XjwxR/PzbSKo/uRMYveC30dqd2CbQouEJExrUUcf263Wz4j6Cw1wpHSRy3SeFM tU3V3CUTfrqFfC2aYzXNYF/p4U5iKdAgFvbsnsIvJIOnWrNJ15W6xjzbrNx1ZjeG jJSwN2/kSUrdMEoHbso1ghD8A2RrWyeXL9hfEhheJS5YoTxAUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzCdxC0Cs+uzdCK7Ld70ZO39FwdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZWEyZGUyZTQtYzhmZC0z ZTQ3LThhMGItZjU1M2UyNWYzMjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzjesMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcFoh3KwUlSE51Uje7ADnjVUbhsRcYZ7mgmPCMEiCBzoqJZolPZ+ELP ve8E0ZPVRmHKqek/sNPJ27vbTDkS4yodpsSD0R0puaQIe0wOoi0rG2dl9wbuApjQ 82NsN/lAmHJhwWTb7mHrP9+rkTV3KaQi8R1VWjhKasYl9uXcmf4002vdj+t/mXLe gYX0EM+imKEaaKb0DuoBHhmsMdN7ZL06M2LPBqDRm7umacgVYN/W4oMgBn56DBB/ OvjwLtA0kjpufkUK8NsdXiDmlwFLDkDml3Vm0+Wkmlt7rkQ4drDLXx4wLhDUcxdj psTilskUm5oMy/lIZuId2yh8rkiDl7g= -----END CERTIFICATE-----Generated at Sun Feb 16 15:21:51 2025 by rpki-client