$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/7dd215c0-fd2a-348a-9985-b37243ff4da0.roa File: 7dd215c0-fd2a-348a-9985-b37243ff4da0.roa (raw, json) Hash identifier: kkPMHvBBaTA32XjAp4erIEAUShD6QkqKDWSja9oo9ok= Subject key identifier: 5A:BA:EA:AE:C2:74:F3:F2:EC:D9:56:03:2C:2F:F7:32:3C:C5:BB:93 Certificate issuer: /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380 Certificate serial: 010D0C9F43285848F9269BE2DF93675979DA4F00 Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/7dd215c0-fd2a-348a-9985-b37243ff4da0.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 16509 IP address blocks: 164.55.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:9b:e2:df:93:67:59:79:da:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=11dd55b2-c0a0-4d93-8437-1ba62ba2c66e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:88:6b:f0:54:1d:44:82:7a:6a:ed:68:9e:a7: 0a:bb:57:bf:21:3d:1d:33:96:2f:bf:48:c7:b2:d7: f8:4e:1f:21:c5:0f:4d:a2:65:63:fa:e8:d4:62:28: 5b:c7:c4:e4:06:a1:ae:75:fe:9f:23:71:d5:7f:2a: 4c:f4:1c:a1:76:f0:1e:cf:f8:34:eb:b8:7b:3f:35: 77:c0:60:ce:8c:87:c9:e6:8a:91:a9:7d:4e:dd:a9: 56:a4:ea:b4:d0:e5:ac:76:9d:b9:18:db:98:47:bd: 74:a9:51:1b:4e:06:5d:c2:2c:9d:ad:2e:70:8f:5f: b2:fa:ae:fc:39:e1:1f:ea:31:4d:19:48:50:9a:03: 94:c1:9e:36:dd:a5:c4:b8:fe:1f:92:a5:d9:6f:16: 78:71:b5:c8:19:1b:be:2e:37:e3:aa:a0:50:52:3a: f7:65:99:5a:60:eb:b4:ba:2e:6f:81:4a:63:3d:b5: 7f:b1:8d:c9:f9:c8:3e:f8:55:f4:82:1f:36:47:eb: 87:a9:e5:80:a0:f1:18:16:0c:3b:28:f3:a1:98:41: cc:68:ac:a0:fe:45:05:9d:d4:21:c1:49:37:15:06: 8d:ee:b7:3c:ee:7e:3f:13:44:29:f3:c0:f7:ab:6f: c5:33:48:27:fb:4d:d9:95:cc:68:6e:21:d6:4f:6c: 7a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BA:EA:AE:C2:74:F3:F2:EC:D9:56:03:2C:2F:F7:32:3C:C5:BB:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/7dd215c0-fd2a-348a-9985-b37243ff4da0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl X509v3 Authority Key Identifier: keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer sbgp-ipAddrBlock: critical IPv4: 164.55.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:34:c4:37:9a:f5:88:73:44:20:28:9f:c6:d4:7e:ae:5e:a1: dc:e4:fe:85:70:b8:c6:78:92:fd:ed:30:53:fc:ee:3c:83:33: 27:a2:a3:d1:e1:38:ab:1e:a0:34:fa:48:74:61:f6:af:04:a0: 09:02:e4:57:33:90:bd:02:1a:a8:08:84:b8:5c:a0:6b:39:e6: 95:fe:ae:64:37:23:c0:9c:5c:c4:73:9b:de:de:4c:89:5b:9c: 47:15:24:26:c8:4c:36:b1:bc:63:27:9b:4e:d8:89:ed:b7:c2: 10:a7:c1:e7:e0:e2:9d:21:fa:bf:fb:8d:9c:e6:0c:f7:d9:0f: f0:a7:b0:83:b6:da:30:c0:03:4c:88:e5:8c:fb:45:de:bc:90: 91:d7:6d:5d:69:3e:6f:a4:ff:71:96:cd:8f:59:ec:43:b5:74: bd:a8:61:7c:2d:87:98:d3:ed:27:1b:43:47:0f:39:a1:43:9e: a8:0d:6f:40:34:18:93:e8:70:ee:87:83:de:dc:45:14:50:34: aa:38:06:af:9c:10:83:67:50:9d:7f:5d:d1:b1:89:49:c2:c7: 7d:73:80:eb:a5:73:69:0d:dc:51:e5:92:3c:03:67:39:09:e1: d0:1d:90:5e:8f:b6:cd:4a:ca:2a:25:9f:ef:82:bd:66:91:54: 27:ab:aa:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5Jpvi35NnWXnaTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBjYTAyZTctN2ExMi00ZDkwLThmZWItOGYxMzBhYWVh MzgwMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MTFkZDU1YjItYzBhMC00ZDkzLTg0MzctMWJhNjJiYTJjNjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Yhr8FQdRIJ6au1onqcKu1e/IT0dM5Yvv0jH stf4Th8hxQ9NomVj+ujUYihbx8TkBqGudf6fI3HVfypM9ByhdvAez/g067h7PzV3 wGDOjIfJ5oqRqX1O3alWpOq00OWsdp25GNuYR710qVEbTgZdwiydrS5wj1+y+q78 OeEf6jFNGUhQmgOUwZ423aXEuP4fkqXZbxZ4cbXIGRu+LjfjqqBQUjr3ZZlaYOu0 ui5vgUpjPbV/sY3J+cg++FX0gh82R+uHqeWAoPEYFgw7KPOhmEHMaKyg/kUFndQh wUk3FQaN7rc87n4/E0Qp88D3q2/FM0gn+03ZlcxobiHWT2x66QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFq66q7CdPPy7NlWAywv9zI8xbuTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMGNh MDJlNy03YTEyLTRkOTAtOGZlYi04ZjEzMGFhZWEzODAvN2RkMjE1YzAtZmQyYS0z NDhhLTk5ODUtYjM3MjQzZmY0ZGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjBjYTAyZTctN2ExMi00ZDkwLThm ZWItOGYxMzBhYWVhMzgwL2IwY2EwMmU3LTdhMTItNGQ5MC04ZmViLThmMTMwYWFl YTM4MC5jcmwwHwYDVR0jBBgwFoAU7+jFlj49ZhUup1G+nGYMlTKJpFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMGNhMDJlNy03YTEyLTRkOTAtOGZlYi04ZjEz MGFhZWEzODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApDfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABY0xDea9YhzRCAon8bUfq5eodzk/oVwuMZ4kv3tMFP87jyDMyeio9Hh OKseoDT6SHRh9q8EoAkC5FczkL0CGqgIhLhcoGs55pX+rmQ3I8CcXMRzm97eTIlb nEcVJCbITDaxvGMnm07Yie23whCnwefg4p0h+r/7jZzmDPfZD/CnsIO22jDAA0yI 5Yz7Rd68kJHXbV1pPm+k/3GWzY9Z7EO1dL2oYXwth5jT7ScbQ0cPOaFDnqgNb0A0 GJPocO6Hg97cRRRQNKo4Bq+cEINnUJ1/XdGxiUnCx31zgOulc2kN3FHlkjwDZzkJ 4dAdkF6Pts1Kyioln++CvWaRVCerquA= -----END CERTIFICATE-----Generated at Fri Mar 14 09:45:49 2025 by rpki-client