$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/3e608f82-082e-3625-8820-3883ef973c0c.roa File: 3e608f82-082e-3625-8820-3883ef973c0c.roa (raw, json) Hash identifier: rxp96qIC8W6MzRYSzQ4IiJmI5Ug5SviTWZPVV7QYo/k= Subject key identifier: 83:AF:C2:82:23:0A:28:2B:CA:94:B1:DD:74:B9:99:71:FE:61:FE:D5 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F43285848BBBB8863450F699679597DC0 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/3e608f82-082e-3625-8820-3883ef973c0c.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 13445 IP address blocks: 170.72.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:88:63:45:0f:69:96:79:59:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=73b4f856-9aa6-4a1e-a431-fd3a5fd1a97a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a5:ef:12:e6:63:9a:79:58:bd:27:8b:03:e7: cd:35:b9:b2:8a:8f:dd:97:73:7f:a5:d2:38:73:cb: d1:8f:5e:21:ff:dd:2e:40:4e:35:d2:cb:45:66:44: e5:ad:e9:43:ac:72:d0:25:08:c7:33:f5:06:b5:7b: 8a:ae:0f:ee:64:1a:e9:47:84:b7:49:23:ef:74:f7: 63:9b:2f:ee:8f:1c:f0:b0:7d:19:9e:f8:1e:30:a6: c3:e6:c4:4f:af:86:e8:c4:1a:44:3b:f3:5b:c8:17: 3a:d0:8d:46:bd:b0:3b:34:64:02:5b:0f:0f:8b:dc: 13:44:ed:55:93:cc:6d:82:b8:bc:8d:5c:ab:bb:2e: 1c:d7:ef:a4:ba:05:1d:2e:83:a0:c4:c5:ae:01:e1: c8:28:23:2f:9d:7e:23:5c:a6:04:3d:b6:4c:ea:3d: bd:c2:90:3c:a9:d9:76:46:9e:5e:f1:f1:58:ad:94: af:af:fd:3f:4c:45:11:5c:02:60:12:76:e5:65:2d: 8b:e5:9c:2c:1e:42:37:d7:8c:f0:41:90:bd:5a:2c: b9:f7:f7:10:4c:7c:06:28:25:8e:7a:5e:a4:9a:d6: 2e:44:e1:ee:f9:b3:9a:34:e5:13:98:96:e8:e5:c5: 9d:e6:39:d5:26:89:d3:46:8b:ea:7d:0f:4e:ce:af: ee:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:AF:C2:82:23:0A:28:2B:CA:94:B1:DD:74:B9:99:71:FE:61:FE:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/3e608f82-082e-3625-8820-3883ef973c0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 170.72.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:45:2e:23:46:d9:65:df:ab:e3:34:94:96:30:b0:66:cd:9f: 64:67:1f:9f:8c:ff:0b:d3:14:f2:13:8e:c5:6f:03:10:c4:b5: 60:33:c9:81:08:cf:fe:70:1c:cd:ca:d0:5a:31:f0:f3:56:62: f3:b5:8a:7a:55:c7:89:41:b9:a6:a3:7e:86:37:84:5a:a9:e6: e8:a4:07:1b:2e:cc:20:7f:0b:7f:74:6d:63:e4:0b:df:f4:da: 7f:24:f8:d0:4e:b8:14:9a:2a:05:73:33:6a:f0:c0:d6:56:7e: d2:36:27:93:73:9e:e3:48:50:a1:c8:e4:fe:98:31:a1:14:34: 1f:f3:1b:27:1a:89:4d:b9:e6:45:91:89:51:2e:64:d0:23:4a: 5e:bc:62:ec:88:1f:84:aa:a2:85:39:e5:81:8c:03:df:e2:86: 22:13:d4:cf:37:3d:01:94:1d:e6:34:ff:d3:fe:e2:e0:80:b6: cf:36:2f:8a:06:4d:1b:2a:7f:2f:da:d8:42:f6:b4:e9:7e:7a: 4f:4b:40:7c:91:2e:95:76:fa:a1:9f:4b:c1:85:84:e3:13:a7: 31:50:de:78:40:b4:d1:44:80:e3:e6:ce:47:ee:4c:71:23:e2: 23:59:de:b8:13:61:4f:aa:60:9c:6e:b0:3b:d8:96:ba:f2:ad: 0d:12:e2:08 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEi7u4hjRQ9plnlZfcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk NzNiNGY4NTYtOWFhNi00YTFlLWE0MzEtZmQzYTVmZDFhOTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKXvEuZjmnlYvSeLA+fNNbmyio/dl3N/pdI4 c8vRj14h/90uQE410stFZkTlrelDrHLQJQjHM/UGtXuKrg/uZBrpR4S3SSPvdPdj my/ujxzwsH0ZnvgeMKbD5sRPr4boxBpEO/NbyBc60I1GvbA7NGQCWw8Pi9wTRO1V k8xtgri8jVyruy4c1++kugUdLoOgxMWuAeHIKCMvnX4jXKYEPbZM6j29wpA8qdl2 Rp5e8fFYrZSvr/0/TEURXAJgEnblZS2L5ZwsHkI314zwQZC9Wiy59/cQTHwGKCWO el6kmtYuROHu+bOaNOUTmJbo5cWd5jnVJonTRovqfQ9Ozq/uBwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIOvwoIjCigrypSx3XS5mXH+Yf7VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvM2U2MDhmODItMDgyZS0z NjI1LTg4MjAtMzg4M2VmOTczYzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqkgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAEkUuI0bZZd+r4zSUljCwZs2fZGcfn4z/C9MU8hOOxW8DEMS1YDPJgQjP /nAczcrQWjHw81Zi87WKelXHiUG5pqN+hjeEWqnm6KQHGy7MIH8Lf3RtY+QL3/Ta fyT40E64FJoqBXMzavDA1lZ+0jYnk3Oe40hQocjk/pgxoRQ0H/MbJxqJTbnmRZGJ US5k0CNKXrxi7IgfhKqihTnlgYwD3+KGIhPUzzc9AZQd5jT/0/7i4IC2zzYvigZN Gyp/L9rYQva06X56T0tAfJEulXb6oZ9LwYWE4xOnMVDeeEC00USA4+bOR+5McSPi I1neuBNhT6pgnG6wO9iWuvKtDRLiCA== -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:25 2025 by rpki-client