$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/28342c55-d78a-3afd-bfe9-9f053e4b4116.roa File: 28342c55-d78a-3afd-bfe9-9f053e4b4116.roa (raw, json) Hash identifier: 1VhHsd5TOOH7KVf0eMr31pNBvLCmlZUEVsI+T7kFzRI= Subject key identifier: 1E:85:AA:75:30:B0:EC:79:92:3F:17:DB:94:C9:1A:36:33:50:92:39 Certificate issuer: /CN=d90d18d1-dead-4d11-bed3-243759e40831 Certificate serial: 010D0C9F43285848D64117DDE716A6FD4E0E0440 Authority key identifier: 61:32:55:2F:11:F0:26:05:2B:F5:5F:AE:CA:CA:C4:A7:9A:70:59:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/28342c55-d78a-3afd-bfe9-9f053e4b4116.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 16668 IP address blocks: 168.245.132.0/23 maxlen: 24 168.245.232.0/23 maxlen: 24 208.72.84.0/22 maxlen: 24 2610:178::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/d90d18d1-dead-4d11-bed3-243759e40831.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/d90d18d1-dead-4d11-bed3-243759e40831.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:17:dd:e7:16:a6:fd:4e:0e:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90d18d1-dead-4d11-bed3-243759e40831 Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=8d47eaf2-1ef1-406f-85dd-1a0117e7f6af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6d:66:6f:65:29:87:83:db:4c:f2:fa:f9:39: 49:7e:bd:e4:75:18:3b:4b:f3:71:77:8a:01:eb:5f: 2e:ac:d7:17:00:59:1f:df:a5:df:74:aa:7c:7b:19: 11:9e:2f:5c:c6:49:e3:4e:27:b6:22:e8:4a:0d:9c: c6:cb:3a:ce:37:e9:a3:b5:af:3e:e3:e2:ba:3e:af: 25:78:e3:59:f2:c2:16:d7:c6:7f:11:a7:11:05:9a: 80:dc:85:ae:9b:16:17:d0:ca:19:8b:fd:b8:6c:c0: 7f:78:13:e3:45:a9:fc:4b:be:0a:c3:fd:ff:b6:ed: 24:4e:53:1f:c9:dd:0e:28:92:d7:37:87:20:74:b6: 1f:51:80:d0:83:cc:a1:c9:da:95:60:8b:67:cd:3f: ec:e0:80:ae:f4:36:9c:4f:31:f4:4d:9a:a8:80:1c: 19:f4:d2:89:bf:4c:0a:25:4b:02:ee:19:89:6f:90: 7d:05:00:58:a3:17:fb:51:ce:8b:3b:3a:3f:ef:fe: 4f:17:c2:f7:ba:cc:24:c0:7c:46:b5:de:27:60:4f: 22:13:dd:9c:d8:84:6e:3d:4e:37:a3:59:7d:39:02: c5:50:0b:b4:b3:45:dd:66:89:c3:31:7d:70:fc:a8: 90:77:c7:2e:a3:31:fb:32:f9:bd:f2:6e:11:28:da: b0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:85:AA:75:30:B0:EC:79:92:3F:17:DB:94:C9:1A:36:33:50:92:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/28342c55-d78a-3afd-bfe9-9f053e4b4116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/d90d18d1-dead-4d11-bed3-243759e40831.crl X509v3 Authority Key Identifier: keyid:61:32:55:2F:11:F0:26:05:2B:F5:5F:AE:CA:CA:C4:A7:9A:70:59:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831.cer sbgp-ipAddrBlock: critical IPv4: 168.245.132.0/23 168.245.232.0/23 208.72.84.0/22 IPv6: 2610:178::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:48:63:2d:4a:a3:33:69:d5:e1:d8:95:b9:8a:19:ba:58:ab: a5:87:4c:c3:b2:4c:be:3f:dc:59:95:5e:48:27:2e:80:e0:ab: 4c:8b:40:b3:21:c5:7d:b1:a1:0e:ad:68:55:d8:0c:f8:28:6b: ce:69:45:7e:4a:c5:5e:aa:81:7f:25:a9:76:82:60:5f:ca:b7: fd:79:fd:d5:14:d9:5f:66:0d:8c:1e:68:0b:46:5f:13:86:7d: 54:9c:18:21:96:15:e1:70:92:71:16:43:c6:97:b8:66:a9:90: 75:3c:35:03:5c:72:cd:a1:f9:0f:87:54:ac:6a:6b:dd:f0:d9: 5b:3c:fb:c4:4b:3e:36:6e:dd:c2:c3:96:ba:03:40:8b:1d:63: 31:6e:2f:04:a7:59:70:61:19:8d:6c:6e:ab:a7:4d:25:71:44: ad:ae:89:5d:cf:54:34:d6:0e:6a:b1:f4:0a:dd:e6:ed:d1:f0: 96:a1:5c:c6:24:36:c8:16:77:5e:eb:75:66:bd:ee:31:6e:40: 19:85:d8:e5:46:c1:6a:ea:91:da:6a:33:e0:7b:f4:c0:87:9a: 5b:8a:34:7b:0b:11:00:90:2d:95:5b:ba:e1:68:24:39:49:87: 87:c0:ee:c3:53:09:ec:04:67:06:f8:35:da:f1:ef:47:70:bb: a4:73:f4:b6 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEjWQRfd5xam/U4OBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDkwZDE4ZDEtZGVhZC00ZDExLWJlZDMtMjQzNzU5ZTQw ODMxMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk OGQ0N2VhZjItMWVmMS00MDZmLTg1ZGQtMWEwMTE3ZTdmNmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmG1mb2Uph4PbTPL6+TlJfr3kdRg7S/Nxd4oB 618urNcXAFkf36XfdKp8exkRni9cxknjTie2IuhKDZzGyzrON+mjta8+4+K6Pq8l eONZ8sIW18Z/EacRBZqA3IWumxYX0MoZi/24bMB/eBPjRan8S74Kw/3/tu0kTlMf yd0OKJLXN4cgdLYfUYDQg8yhydqVYItnzT/s4ICu9DacTzH0TZqogBwZ9NKJv0wK JUsC7hmJb5B9BQBYoxf7Uc6LOzo/7/5PF8L3uswkwHxGtd4nYE8iE92c2IRuPU43 o1l9OQLFUAu0s0XdZonDMX1w/KiQd8cuozH7Mvm98m4RKNqwrQIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFB6FqnUwsOx5kj8X25TJGjYzUJI5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kOTBk MThkMS1kZWFkLTRkMTEtYmVkMy0yNDM3NTllNDA4MzEvMjgzNDJjNTUtZDc4YS0z YWZkLWJmZTktOWYwNTNlNGI0MTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDkwZDE4ZDEtZGVhZC00ZDExLWJl ZDMtMjQzNzU5ZTQwODMxL2Q5MGQxOGQxLWRlYWQtNGQxMS1iZWQzLTI0Mzc1OWU0 MDgzMS5jcmwwHwYDVR0jBBgwFoAUYTJVLxHwJgUr9V+uysrEp5pwWbgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kOTBkMThkMS1kZWFkLTRkMTEtYmVkMy0yNDM3 NTllNDA4MzEuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBqPWEAwQB qPXoAwQC0EhUMA0EAgACMAcDBQAmEAF4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEtIYy1KozNp1eHYlbmK GbpYq6WHTMOyTL4/3FmVXkgnLoDgq0yLQLMhxX2xoQ6taFXYDPgoa85pRX5KxV6q gX8lqXaCYF/Kt/15/dUU2V9mDYweaAtGXxOGfVScGCGWFeFwknEWQ8aXuGapkHU8 NQNccs2h+Q+HVKxqa93w2Vs8+8RLPjZu3cLDlroDQIsdYzFuLwSnWXBhGY1sbqun TSVxRK2uiV3PVDTWDmqx9Ard5u3R8JahXMYkNsgWd17rdWa97jFuQBmF2OVGwWrq kdpqM+B79MCHmluKNHsLEQCQLZVbuuFoJDlJh4fA7sNTCewEZwb4Ndrx70dwu6Rz 9LY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:24 2025 by rpki-client