$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/78f0722d-57e1-30e0-9060-df4d7fec3ed2.roa File: 78f0722d-57e1-30e0-9060-df4d7fec3ed2.roa (raw, json) Hash identifier: ooTARAmNzHxctRKkZ1MLOKD/RfmHbwTelULU1TAN6pI= Subject key identifier: C5:59:31:5C:E2:33:41:88:15:61:1C:23:F0:01:39:91:A2:87:50:35 Certificate issuer: /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380 Certificate serial: 010D0C9F432858480BDA78F798699514ED1CCE00 Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/78f0722d-57e1-30e0-9060-df4d7fec3ed2.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 14618 IP address blocks: 164.55.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:78:f7:98:69:95:14:ed:1c:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380 Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=2f6b9e7b-acaa-4735-8dba-f39339639cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:25:a8:28:1b:df:18:3e:55:dc:78:a5:65:30: d4:23:52:4d:92:fb:4f:a1:7c:49:0d:4f:9d:32:5f: c7:02:9b:c4:f6:66:df:16:c4:8d:d6:6f:90:fe:93: 98:6b:91:72:ad:d6:2f:56:be:28:59:b7:13:6d:17: 3d:3c:97:cc:dc:3a:52:8d:81:1d:19:e5:71:1f:d1: ee:0b:74:99:44:f3:6b:ba:d1:56:b2:8b:d3:a5:15: d9:3f:63:d6:d5:17:48:87:4a:9a:7c:d9:aa:bc:4c: 12:d8:61:7c:76:ef:02:ff:c1:3e:de:80:fd:ef:d2: 58:db:7f:39:0b:b0:13:6c:6d:b3:fc:c2:5e:a9:23: 99:d3:8f:d3:4b:6b:de:11:87:89:af:21:aa:35:ce: 22:ba:38:5e:4a:58:3b:f5:62:c9:9c:d6:04:f0:fe: 8c:1c:3d:4e:79:e1:34:b7:4d:f0:b1:3f:1f:52:26: b2:a9:09:dd:f9:e8:89:98:21:83:2d:ac:6a:11:1e: 9b:dc:c6:c8:ac:4e:70:11:d9:61:d5:73:d2:36:16: e3:f4:53:9d:7d:63:85:3d:2a:e4:33:ed:37:35:14: ee:a8:9b:9a:52:12:60:c8:79:6f:c1:7f:c9:c7:3f: 1c:57:1d:9f:ad:28:96:f3:69:97:54:ff:40:f2:45: 57:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:59:31:5C:E2:33:41:88:15:61:1C:23:F0:01:39:91:A2:87:50:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/78f0722d-57e1-30e0-9060-df4d7fec3ed2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl X509v3 Authority Key Identifier: keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer sbgp-ipAddrBlock: critical IPv4: 164.55.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:65:90:2f:8d:cf:6a:dd:0a:12:1f:9d:c9:40:57:7f:ba:60: 52:b0:ae:77:9f:aa:2d:dc:11:f4:24:15:a0:df:a6:a8:3a:53: a5:71:48:5b:5b:bc:77:75:c2:72:c4:16:de:b7:e9:06:25:a8: 8f:93:6b:31:f0:66:40:a9:16:61:52:12:d8:0b:99:e4:37:6b: 00:17:4d:1e:2e:ed:35:05:3b:c9:17:bf:ff:62:24:0f:2e:4f: 8e:90:c0:0f:46:26:a1:f5:6f:8c:6f:6f:e2:f7:64:53:ce:32: 40:ff:8c:eb:15:40:a1:00:3c:c7:29:32:d7:f1:33:66:dc:ad: 2e:c7:5d:ed:c7:a5:e2:3a:1d:f8:34:5b:53:ed:44:05:7b:75: f7:ff:a6:94:ce:92:3c:22:c7:ef:c7:9a:4a:c5:27:d6:3d:26: e9:83:58:4e:bb:b8:38:c1:22:de:6e:69:79:74:dc:77:0c:1e: 65:bc:8d:a7:46:4f:4b:0e:3f:b1:b2:33:38:7a:48:66:fd:83: 55:eb:7f:4a:6c:0e:a5:9e:39:e1:23:b5:dd:92:43:9d:8e:76: 63:d0:11:95:a7:4b:49:64:34:3b:19:6c:77:c0:54:76:b7:54: 1e:22:19:19:c9:e8:1c:d0:39:77:5e:a1:11:4a:45:bd:76:45: 39:b7:11:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgL2nj3mGmVFO0czgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBjYTAyZTctN2ExMi00ZDkwLThmZWItOGYxMzBhYWVh MzgwMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk MmY2YjllN2ItYWNhYS00NzM1LThkYmEtZjM5MzM5NjM5Y2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiWoKBvfGD5V3HilZTDUI1JNkvtPoXxJDU+d Ml/HApvE9mbfFsSN1m+Q/pOYa5FyrdYvVr4oWbcTbRc9PJfM3DpSjYEdGeVxH9Hu C3SZRPNrutFWsovTpRXZP2PW1RdIh0qafNmqvEwS2GF8du8C/8E+3oD979JY2385 C7ATbG2z/MJeqSOZ04/TS2veEYeJryGqNc4iujheSlg79WLJnNYE8P6MHD1OeeE0 t03wsT8fUiayqQnd+eiJmCGDLaxqER6b3MbIrE5wEdlh1XPSNhbj9FOdfWOFPSrk M+03NRTuqJuaUhJgyHlvwX/Jxz8cVx2frSiW82mXVP9A8kVXowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVZMVziM0GIFWEcI/ABOZGih1A1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMGNh MDJlNy03YTEyLTRkOTAtOGZlYi04ZjEzMGFhZWEzODAvNzhmMDcyMmQtNTdlMS0z MGUwLTkwNjAtZGY0ZDdmZWMzZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjBjYTAyZTctN2ExMi00ZDkwLThm ZWItOGYxMzBhYWVhMzgwL2IwY2EwMmU3LTdhMTItNGQ5MC04ZmViLThmMTMwYWFl YTM4MC5jcmwwHwYDVR0jBBgwFoAU7+jFlj49ZhUup1G+nGYMlTKJpFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMGNhMDJlNy03YTEyLTRkOTAtOGZlYi04ZjEz MGFhZWEzODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApDfhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRlkC+Nz2rdChIfnclAV3+6YFKwrnefqi3cEfQkFaDfpqg6U6VxSFtb vHd1wnLEFt636QYlqI+TazHwZkCpFmFSEtgLmeQ3awAXTR4u7TUFO8kXv/9iJA8u T46QwA9GJqH1b4xvb+L3ZFPOMkD/jOsVQKEAPMcpMtfxM2bcrS7HXe3HpeI6Hfg0 W1PtRAV7dff/ppTOkjwix+/HmkrFJ9Y9JumDWE67uDjBIt5uaXl03HcMHmW8jadG T0sOP7GyMzh6SGb9g1Xrf0psDqWeOeEjtd2SQ52OdmPQEZWnS0lkNDsZbHfAVHa3 VB4iGRnJ6BzQOXdeoRFKRb12RTm3EQA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:37 2025 by rpki-client