$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ddff14cf-541a-3e8a-a9fe-11e036c29959.roa File: ddff14cf-541a-3e8a-a9fe-11e036c29959.roa (raw, json) Hash identifier: 1jIIYtIkg3ToVwV81N3trUCVt13FFljGP7bF1T4L+vg= Subject key identifier: 61:D6:E1:1E:17:D8:A7:AB:57:3E:8F:92:95:93:BA:01:9A:0D:FD:30 Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Certificate serial: 010D0C9F43285848C2B649E2A3DC6BDD07B8A580 Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ddff14cf-541a-3e8a-a9fe-11e036c29959.roa Signing time: Mon 03 Feb 2025 14:00:52 +0000 ROA not before: Mon 03 Feb 2025 14:00:52 +0000 ROA not after: Sun 04 May 2025 13:00:52 +0000 asID: 400304 IP address blocks: 45.59.116.0/24 maxlen: 24 66.23.193.0/24 maxlen: 24 104.36.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:b6:49:e2:a3:dc:6b:dd:07:b8:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Validity Not Before: Feb 3 14:00:52 2025 GMT Not After : May 4 13:00:52 2025 GMT Subject: CN=5c2cda97-4d15-4131-aac2-cfc4e3f931da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7d:26:b9:d7:06:d3:22:f5:60:a9:2d:81:ea: 81:0a:26:f6:3e:25:8b:97:5e:2b:7d:eb:ba:8b:df: ff:a5:11:15:d8:c1:51:ed:80:6f:c5:38:90:39:df: 7d:58:16:cc:5b:e7:5d:c2:eb:24:06:61:41:5e:2c: f7:eb:67:90:f9:23:00:a8:68:b8:db:b9:38:38:50: 51:3a:77:e7:af:59:54:2e:b3:bd:fb:66:43:83:0d: 99:09:10:cd:c1:35:86:50:f6:8e:c3:75:d1:04:f0: 31:0b:3f:80:5a:ab:cb:c3:95:b8:9a:c7:86:64:0d: f5:88:c8:89:ba:f7:bd:d8:ae:15:ac:b7:b0:2c:e1: 72:fc:2f:af:01:f6:49:e2:22:af:8c:58:54:d2:94: 45:62:64:30:32:f1:a3:be:7d:2e:3a:a0:aa:c3:e6: c2:9f:04:3e:40:83:b4:97:9a:12:74:68:75:d3:39: 45:1d:ce:f9:31:58:1a:f5:cd:f3:17:a9:1d:56:c5: 68:c0:54:cb:59:aa:c9:c3:17:e0:f8:05:11:69:9c: 99:a5:b8:35:2f:17:0c:29:d6:c6:07:43:cc:3a:1e: 30:28:3a:40:ec:03:e9:ce:3e:fa:f0:72:47:7b:17: c0:85:2f:de:82:43:59:62:b0:13:9b:62:23:ac:d7: 3f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D6:E1:1E:17:D8:A7:AB:57:3E:8F:92:95:93:BA:01:9A:0D:FD:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ddff14cf-541a-3e8a-a9fe-11e036c29959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl X509v3 Authority Key Identifier: keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer sbgp-ipAddrBlock: critical IPv4: 45.59.116.0/24 66.23.193.0/24 104.36.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:a9:69:37:4d:3d:eb:b3:08:2b:c2:91:36:0d:0f:cd:d1:8f: d5:35:b6:fd:e2:4f:ef:b6:5e:48:d9:97:1c:d1:60:27:5f:4d: 8a:6b:b1:46:96:fa:ba:18:2e:6f:ac:d7:6b:f6:6f:a9:43:ee: e9:3e:6b:08:ad:28:e5:7e:0a:61:43:c9:0d:d0:eb:bd:70:68: af:e0:69:27:26:fd:4b:dd:c1:08:0d:96:77:c8:f4:03:b5:8a: 33:a6:2a:f9:0f:e7:93:60:42:32:f8:1d:59:ea:63:62:2e:dd: b0:35:53:58:65:53:0c:ad:1b:69:40:d8:cd:c6:ac:dd:29:59: 7e:19:4a:62:d7:99:7d:7f:d3:6a:0a:57:b3:0b:4a:55:9c:c5: 0e:99:11:af:95:7c:bc:ba:dd:76:e6:d1:d9:a3:42:2b:45:73: 19:8e:06:9a:43:43:1a:ac:fb:db:4e:2c:74:f3:8b:f7:ff:6f: 78:31:e5:fe:0b:f0:5e:4d:9e:5a:88:12:7b:9f:46:69:d4:dd: b1:df:19:6d:9c:0f:54:3c:84:af:c6:72:4b:ae:16:87:07:f7: 47:60:ee:26:fb:6d:5e:61:ba:70:0d:05:3b:e2:e7:2d:eb:53: 60:d0:11:52:9c:fd:09:92:e8:16:ab:10:f5:77:ca:7f:4d:7c: 7e:c9:55:84 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEjCtknio9xr3Qe4pYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3 Y2IzMB4XDTI1MDIwMzE0MDA1MloXDTI1MDUwNDEzMDA1MlowLzEtMCsGA1UEAxMk NWMyY2RhOTctNGQxNS00MTMxLWFhYzItY2ZjNGUzZjkzMWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhn0mudcG0yL1YKktgeqBCib2PiWLl14rfeu6 i9//pREV2MFR7YBvxTiQOd99WBbMW+ddwuskBmFBXiz362eQ+SMAqGi427k4OFBR Onfnr1lULrO9+2ZDgw2ZCRDNwTWGUPaOw3XRBPAxCz+AWqvLw5W4mseGZA31iMiJ uve92K4VrLewLOFy/C+vAfZJ4iKvjFhU0pRFYmQwMvGjvn0uOqCqw+bCnwQ+QIO0 l5oSdGh10zlFHc75MVga9c3zF6kdVsVowFTLWarJwxfg+AURaZyZpbg1LxcMKdbG B0PMOh4wKDpA7APpzj768HJHexfAhS/egkNZYrATm2IjrNc/rwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFGHW4R4X2KerVz6PkpWTugGaDf0wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0 OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvZGRmZjE0Y2YtNTQxYS0z ZThhLWE5ZmUtMTFlMDM2YzI5OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw OGUxYzdjYjMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALTt0AwQA QhfBAwQCaCRUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFSpaTdNPeuzCCvCkTYND83Rj9U1tv3iT++2XkjZ lxzRYCdfTYprsUaW+roYLm+s12v2b6lD7uk+awitKOV+CmFDyQ3Q671waK/gaScm /UvdwQgNlnfI9AO1ijOmKvkP55NgQjL4HVnqY2Iu3bA1U1hlUwytG2lA2M3GrN0p WX4ZSmLXmX1/02oKV7MLSlWcxQ6ZEa+VfLy63Xbm0dmjQitFcxmOBppDQxqs+9tO LHTzi/f/b3gx5f4L8F5NnlqIEnufRmnU3bHfGW2cD1Q8hK/GckuuFocH90dg7ib7 bV5hunANBTvi5y3rU2DQEVKc/QmS6BarEPV3yn9NfH7JVYQ= -----END CERTIFICATE-----Generated at Sun Apr 6 13:31:59 2025 by rpki-client