$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/c5228350-2799-3a43-abe9-42497ef211c0.roa File: c5228350-2799-3a43-abe9-42497ef211c0.roa (raw, json) Hash identifier: /37nQrxPaQjUw6ORLJcSFJs7LGnferzfXUkt8atxyHA= Subject key identifier: DE:67:FC:DB:16:59:20:97:22:6A:83:95:A1:08:55:D5:2A:6C:72:76 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F43285848100A8475A3697EC903F0E820 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/c5228350-2799-3a43-abe9-42497ef211c0.roa Signing time: Sun 01 Dec 2024 14:00:51 +0000 ROA not before: Sun 01 Dec 2024 14:00:51 +0000 ROA not after: Sat 01 Mar 2025 14:00:51 +0000 asID: 14618 IP address blocks: 170.72.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:10:0a:84:75:a3:69:7e:c9:03:f0:e8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Dec 1 14:00:51 2024 GMT Not After : Mar 1 14:00:51 2025 GMT Subject: CN=1a108f77-ac6a-4446-a474-ed550b7c21a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:8b:ad:09:3a:5b:4d:bf:d4:31:4f:e7:87:b2: f8:47:5e:db:81:16:7a:07:ad:ee:5b:b5:37:8b:a4: 70:13:5a:c7:d5:e2:0b:46:62:ba:6d:2b:e5:2a:5c: 98:85:ed:fd:a6:97:7c:b5:bf:17:93:f2:e0:90:b3: d8:bb:d3:5c:62:9b:4f:4b:41:7c:70:98:6f:96:92: 6f:db:f4:3e:c4:f9:3a:81:99:ad:e5:33:25:77:3e: f5:60:e6:6d:d9:1c:28:d1:33:c2:53:af:2b:83:a5: da:19:9d:b7:2d:f2:3a:a6:70:95:29:0b:f3:c4:4f: 15:48:73:c7:83:03:34:8a:7b:c2:e5:db:53:0e:0f: d5:6f:fe:51:3e:5a:9f:24:96:04:ea:6e:7e:f0:cd: a3:e5:5a:97:87:e7:db:c4:37:4a:78:05:94:f4:a1: 89:18:4b:bb:07:36:66:ba:60:b6:47:32:c8:93:13: e7:b8:bb:07:13:dc:a3:06:54:b1:2f:05:f4:8a:78: 93:ee:fe:c3:3b:d8:65:5d:03:92:19:02:b5:0a:6c: d3:5c:0a:86:ea:5c:18:6b:c7:68:70:88:96:cd:00: b5:b8:6f:ff:d1:72:30:5f:78:ef:89:27:da:f2:2b: da:8e:4e:df:b3:76:04:31:21:dd:19:4b:cd:f2:4a: c8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:67:FC:DB:16:59:20:97:22:6A:83:95:A1:08:55:D5:2A:6C:72:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/c5228350-2799-3a43-abe9-42497ef211c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 170.72.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:bc:48:07:ec:be:25:71:d7:52:bf:be:7e:5e:ad:75:98:f2: f8:a6:c1:9a:cb:4b:b7:f8:f3:ec:26:fe:b2:f7:79:ed:93:89: 44:ee:38:12:33:da:ac:a4:a8:90:1a:37:df:d7:27:8e:e2:e1: f0:71:79:49:74:02:44:1a:c2:3f:d3:da:0b:83:06:6e:5b:2b: 23:53:43:e3:e4:3d:a6:bb:d9:54:e2:a8:da:46:0a:b1:d3:d3: 00:3c:2d:b3:fe:e6:67:23:0f:ad:e2:2a:bb:92:30:f5:e1:ec: 8e:5b:01:96:ed:ba:67:a4:e1:dd:70:61:19:a6:0d:a9:61:d6: fb:0d:eb:2c:14:3e:11:9f:ec:b9:26:74:51:28:8c:21:9b:54: 40:60:29:b1:b0:88:78:a9:34:97:9d:29:50:f3:00:08:ce:af: a6:62:83:43:02:d0:31:7f:d7:5f:ed:76:9a:27:ef:b3:09:b7: 35:90:9e:25:a2:51:c5:85:18:75:8d:a2:7a:d4:37:32:94:85: 63:f4:e4:b2:35:ba:0c:08:39:d0:a4:60:e0:b6:7a:28:8d:2a: 5e:e4:4c:4a:b9:65:e8:02:2c:6a:a9:43:98:54:79:81:dd:7d: 08:87:b8:ac:f4:b8:a5:e5:6d:46:33:28:19:b2:55:22:8c:ae: 21:34:a7:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCoR1o2l+yQPw6CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk MWExMDhmNzctYWM2YS00NDQ2LWE0NzQtZWQ1NTBiN2MyMWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9outCTpbTb/UMU/nh7L4R17bgRZ6B63uW7U3 i6RwE1rH1eILRmK6bSvlKlyYhe39ppd8tb8Xk/LgkLPYu9NcYptPS0F8cJhvlpJv 2/Q+xPk6gZmt5TMldz71YOZt2Rwo0TPCU68rg6XaGZ23LfI6pnCVKQvzxE8VSHPH gwM0invC5dtTDg/Vb/5RPlqfJJYE6m5+8M2j5VqXh+fbxDdKeAWU9KGJGEu7BzZm umC2RzLIkxPnuLsHE9yjBlSxLwX0iniT7v7DO9hlXQOSGQK1CmzTXAqG6lwYa8do cIiWzQC1uG//0XIwX3jviSfa8ivajk7fs3YEMSHdGUvN8krIowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5n/NsWWSCXImqDlaEIVdUqbHJ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvYzUyMjgzNTAtMjc5OS0z YTQzLWFiZTktNDI0OTdlZjIxMWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqkjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAu8SAfsviVx11K/vn5erXWY8vimwZrLS7f48+wm/rL3ee2TiUTuOBIz 2qykqJAaN9/XJ47i4fBxeUl0AkQawj/T2guDBm5bKyNTQ+PkPaa72VTiqNpGCrHT 0wA8LbP+5mcjD63iKruSMPXh7I5bAZbtumek4d1wYRmmDalh1vsN6ywUPhGf7Lkm dFEojCGbVEBgKbGwiHipNJedKVDzAAjOr6Zig0MC0DF/11/tdpon77MJtzWQniWi UcWFGHWNonrUNzKUhWP05LI1ugwIOdCkYOC2eiiNKl7kTEq5ZegCLGqpQ5hUeYHd fQiHuKz0uKXlbUYzKBmyVSKMriE0p3Q= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:34 2025 by rpki-client