$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/ca67c6ed-51d5-3568-801d-7fd9c913f8bf.roa File: ca67c6ed-51d5-3568-801d-7fd9c913f8bf.roa (raw, json) Hash identifier: M+0uZgv6L4g5uJAvrvG64XnKQGisnrauiwB10xsk0ys= Subject key identifier: 9F:74:3B:08:E4:DE:DD:D6:02:85:70:0A:D9:68:7A:11:79:0F:9C:F9 Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F432858489E50A3063861DEA768028780 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/ca67c6ed-51d5-3568-801d-7fd9c913f8bf.roa Signing time: Tue 21 Jan 2025 13:07:05 +0000 ROA not before: Tue 21 Jan 2025 13:07:05 +0000 ROA not after: Mon 21 Apr 2025 12:07:05 +0000 asID: 40509 IP address blocks: 172.86.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Feb 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:50:a3:06:38:61:de:a7:68:02:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Jan 21 13:07:05 2025 GMT Not After : Apr 21 12:07:05 2025 GMT Subject: CN=be60c17f-8922-4480-bd11-aa1f82cff44b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ae:df:c9:ef:0a:45:c8:8f:60:35:2e:38:ed: 18:d8:dd:c1:d8:e4:de:2a:f2:50:b7:d4:9a:d2:b9: d1:9a:60:15:d0:3c:b8:26:20:91:66:c3:67:1f:2b: 51:ae:0e:88:5c:f7:11:8c:d5:fc:e7:24:bf:a7:dd: 28:26:e9:f5:ee:d5:f0:10:dc:09:53:71:fd:8c:ea: b0:d8:1a:76:de:a0:c3:59:f3:47:5f:c7:76:78:6d: 00:40:95:9c:42:98:f3:eb:ae:bc:eb:f3:f7:35:0d: fb:db:11:65:b6:93:09:fe:f8:34:9f:b7:c0:3c:7d: 11:ac:dc:e5:01:80:2e:46:1b:a1:c4:33:27:e8:60: ee:90:60:61:b5:f7:18:b6:ca:87:f1:a2:80:ad:b1: 8c:1d:dd:e4:ad:07:be:92:67:38:6a:b2:a6:85:08: 10:db:ff:a5:8b:82:bd:72:0c:5d:89:7b:87:01:c4: c5:f4:ff:f6:3a:8f:5d:e8:bd:d8:34:93:69:90:bd: 23:d9:74:62:b3:01:ca:90:be:39:09:b7:49:15:2c: fa:8e:b9:4d:5c:96:42:e1:29:31:6f:6a:27:f4:0e: 27:67:df:f3:d2:e6:d8:e9:0f:3f:0d:1c:0b:f0:4b: d8:61:62:58:ac:21:12:b5:7a:ee:b1:77:41:d6:10: c1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:74:3B:08:E4:DE:DD:D6:02:85:70:0A:D9:68:7A:11:79:0F:9C:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/ca67c6ed-51d5-3568-801d-7fd9c913f8bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 172.86.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:46:0c:a8:f7:9a:ca:21:ae:f1:77:37:a5:7d:70:aa:0d:0a: fd:f9:2b:84:0a:61:bc:d9:61:d8:90:df:73:47:8c:73:0d:d0: 10:3c:5c:86:d1:65:0f:8a:25:d6:4d:f0:cf:ca:3c:6e:8f:f2: 56:62:f4:ff:d1:f0:bd:2b:f6:13:4a:24:a7:19:10:db:bf:92: 95:8a:24:56:79:b1:e4:50:9e:a4:88:3b:a1:5a:42:81:77:22: cd:3c:6c:b9:60:9e:42:c0:75:85:3d:64:4a:26:3b:0c:24:74: 15:2a:19:15:b1:76:ab:97:2e:58:67:82:da:0a:be:5e:87:2e: 77:e4:7b:ba:fb:10:ee:9a:7b:a5:70:55:6d:67:a5:39:97:f2: a2:4a:b8:ec:d9:03:3c:1c:d8:23:1e:71:34:dd:4e:36:eb:11: b4:57:b5:5d:49:7b:26:27:fa:b0:72:1a:db:99:38:69:b6:2e: a8:f0:47:ac:35:ca:93:8f:df:62:9b:ec:fa:8c:82:b3:c0:54: bf:0f:89:c0:c4:39:bc:94:2f:0a:97:ee:97:53:6a:19:ad:8e: 8a:b2:3d:0f:4a:45:98:5a:1a:d3:8b:dd:9a:63:db:f2:0f:92: 1d:9f:62:0f:e5:0e:23:53:9e:4d:19:d8:14:72:43:05:15:90: 1d:f0:d8:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEieUKMGOGHep2gCh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI1MDEyMTEzMDcwNVoXDTI1MDQyMTEyMDcwNVowLzEtMCsGA1UEAxMk YmU2MGMxN2YtODkyMi00NDgwLWJkMTEtYWExZjgyY2ZmNDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK7fye8KRciPYDUuOO0Y2N3B2OTeKvJQt9Sa 0rnRmmAV0Dy4JiCRZsNnHytRrg6IXPcRjNX85yS/p90oJun17tXwENwJU3H9jOqw 2Bp23qDDWfNHX8d2eG0AQJWcQpjz66686/P3NQ372xFltpMJ/vg0n7fAPH0RrNzl AYAuRhuhxDMn6GDukGBhtfcYtsqH8aKArbGMHd3krQe+kmc4arKmhQgQ2/+li4K9 cgxdiXuHAcTF9P/2Oo9d6L3YNJNpkL0j2XRiswHKkL45CbdJFSz6jrlNXJZC4Skx b2on9A4nZ9/z0ubY6Q8/DRwL8EvYYWJYrCEStXrusXdB1hDBIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ90Owjk3t3WAoVwCtloehF5D5z5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvY2E2N2M2ZWQtNTFkNS0z NTY4LTgwMWQtN2ZkOWM5MTNmOGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtGDKj3msohrvF3N6V9cKoNCv35K4QKYbzZYdiQ33NHjHMN0BA8XIbR ZQ+KJdZN8M/KPG6P8lZi9P/R8L0r9hNKJKcZENu/kpWKJFZ5seRQnqSIO6FaQoF3 Is08bLlgnkLAdYU9ZEomOwwkdBUqGRWxdquXLlhngtoKvl6HLnfke7r7EO6ae6Vw VW1npTmX8qJKuOzZAzwc2CMecTTdTjbrEbRXtV1JeyYn+rByGtuZOGm2LqjwR6w1 ypOP32Kb7PqMgrPAVL8PicDEObyULwqX7pdTahmtjoqyPQ9KRZhaGtOL3Zpj2/IP kh2fYg/lDiNTnk0Z2BRyQwUVkB3w2Dw= -----END CERTIFICATE-----Generated at Sun Feb 2 16:03:28 2025 by rpki-client