$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/01844c74-2602-37e4-ab14-a01f52a17442.roa File: 01844c74-2602-37e4-ab14-a01f52a17442.roa (raw, json) Hash identifier: jazekMBsdq40yOSsKHLLP5CIf8MYiWpRvjz2ESSWLZM= Subject key identifier: C7:DE:C1:C8:12:1A:96:2C:74:CD:72:0B:5C:6E:B2:87:B3:8D:80:8A Certificate issuer: /CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Certificate serial: 010D0C9F432858487325AEE70968989F79A26300 Authority key identifier: C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/01844c74-2602-37e4-ab14-a01f52a17442.roa Signing time: Mon 06 Jan 2025 02:00:40 +0000 ROA not before: Mon 06 Jan 2025 02:00:40 +0000 ROA not after: Sun 06 Apr 2025 01:00:40 +0000 asID: 16509 IP address blocks: 170.89.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:73:25:ae:e7:09:68:98:9f:79:a2:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Validity Not Before: Jan 6 02:00:40 2025 GMT Not After : Apr 6 01:00:40 2025 GMT Subject: CN=4b5c9ae3-84c7-44df-8a07-cbb07a024c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f4:71:45:fc:df:7d:3b:3d:e2:76:81:83:ae: 55:b9:44:74:78:b4:6d:80:2c:48:69:e1:d6:2d:71: b3:4c:36:64:ae:f4:e4:8c:59:b1:ad:67:1b:6e:98: 5e:57:06:d3:88:35:79:1b:60:61:31:c3:13:46:cd: 1a:94:65:1a:cc:89:16:20:53:6b:fd:76:7c:3c:9d: 97:4d:b0:f6:b6:44:91:c4:cc:b7:57:04:96:9a:2f: d8:97:ba:cc:36:e9:ba:51:51:a8:ad:b9:b1:b6:09: 59:d5:4b:03:f1:3f:3f:8a:82:8d:cf:21:60:6f:f5: 0a:6a:4c:6f:d7:d5:62:61:bb:4b:3f:25:7a:5f:ce: b5:a0:25:46:a8:2b:ba:a8:76:9d:72:75:e6:77:db: 4a:52:2b:f8:ba:e5:21:c4:e5:7b:fc:45:22:32:23: be:23:f8:82:b4:39:a5:17:4a:a0:3b:17:fa:32:35: b0:f2:1d:52:b9:3b:6a:9e:f4:a0:62:a6:7a:97:84: c1:66:36:e0:0f:7c:ba:6d:5d:ac:fe:bd:f7:2a:bd: a0:48:a2:38:31:59:8c:03:a5:7d:da:3a:be:03:74: ab:e3:5f:7b:7e:94:2d:9e:01:3d:76:62:6f:c6:46: cc:26:ea:87:d7:dc:dc:6f:21:60:76:d4:80:21:be: 2f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DE:C1:C8:12:1A:96:2C:74:CD:72:0B:5C:6E:B2:87:B3:8D:80:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/01844c74-2602-37e4-ab14-a01f52a17442.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl X509v3 Authority Key Identifier: keyid:C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer sbgp-ipAddrBlock: critical IPv4: 170.89.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:3d:55:7a:68:19:0d:aa:e8:d1:27:e2:fc:33:2b:40:b3:f1: 0a:74:88:e6:47:87:5d:e6:23:f3:12:97:44:62:e5:a9:cd:98: 51:22:19:97:06:86:75:26:00:2a:37:0c:7b:12:96:e5:21:4c: 4a:7d:50:49:e7:cf:ed:e6:d8:d6:82:b5:bd:3a:59:eb:3d:18: a5:0f:94:84:27:0b:af:80:99:15:bf:cf:d1:55:c9:b0:57:45: 0b:6b:c8:06:08:eb:00:a8:b6:0b:99:3f:04:3f:c5:ac:15:11: 40:e0:74:fe:26:e6:28:e9:f4:68:8b:0b:da:b1:e5:1b:41:64: 2a:63:5a:ae:f7:0b:f2:4d:71:ee:32:16:87:61:4d:29:f2:fe: 56:60:cf:ef:c9:e2:f1:7b:63:ee:0c:df:a5:9a:c1:57:ff:55: d1:ce:89:a0:8a:ac:f7:a4:61:86:aa:1b:a0:f7:2d:a2:b2:ad: 74:4e:f8:d7:d5:f9:fd:28:0f:b5:04:9c:cb:b8:42:59:76:fb: 9d:26:0b:56:ea:04:69:6d:ad:39:49:68:02:5b:c1:91:87:d2: 83:11:42:88:be:13:10:c0:05:ff:7d:4c:16:7e:05:55:d2:c2: 57:cb:57:2c:b5:69:2e:22:29:69:33:c2:31:a4:00:2e:de:23: a8:03:96:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhzJa7nCWiYn3miYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUzZmYxMGQtOWFjNS00NmE5LThlYjQtODIzMDI3NjA3 Y2ExMB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk NGI1YzlhZTMtODRjNy00NGRmLThhMDctY2JiMDdhMDI0YzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/RxRfzffTs94naBg65VuUR0eLRtgCxIaeHW LXGzTDZkrvTkjFmxrWcbbpheVwbTiDV5G2BhMcMTRs0alGUazIkWIFNr/XZ8PJ2X TbD2tkSRxMy3VwSWmi/Yl7rMNum6UVGorbmxtglZ1UsD8T8/ioKNzyFgb/UKakxv 19ViYbtLPyV6X861oCVGqCu6qHadcnXmd9tKUiv4uuUhxOV7/EUiMiO+I/iCtDml F0qgOxf6MjWw8h1SuTtqnvSgYqZ6l4TBZjbgD3y6bV2s/r33Kr2gSKI4MVmMA6V9 2jq+A3Sr4197fpQtngE9dmJvxkbMJuqH19zcbyFgdtSAIb4vGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfewcgSGpYsdM1yC1xusoezjYCKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNm ZjEwZC05YWM1LTQ2YTktOGViNC04MjMwMjc2MDdjYTEvMDE4NDRjNzQtMjYwMi0z N2U0LWFiMTQtYTAxZjUyYTE3NDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmUzZmYxMGQtOWFjNS00NmE5LThl YjQtODIzMDI3NjA3Y2ExL2JlM2ZmMTBkLTlhYzUtNDZhOS04ZWI0LTgyMzAyNzYw N2NhMS5jcmwwHwYDVR0jBBgwFoAUxf1vzdJ0mgAFn0XVSeFHrl2VZcYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNmZjEwZC05YWM1LTQ2YTktOGViNC04MjMw Mjc2MDdjYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqlkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL89VXpoGQ2q6NEn4vwzK0Cz8Qp0iOZHh13mI/MSl0Ri5anNmFEiGZcG hnUmACo3DHsSluUhTEp9UEnnz+3m2NaCtb06Wes9GKUPlIQnC6+AmRW/z9FVybBX RQtryAYI6wCotguZPwQ/xawVEUDgdP4m5ijp9GiLC9qx5RtBZCpjWq73C/JNce4y FodhTSny/lZgz+/J4vF7Y+4M36WawVf/VdHOiaCKrPekYYaqG6D3LaKyrXRO+NfV +f0oD7UEnMu4Qll2+50mC1bqBGltrTlJaAJbwZGH0oMRQoi+ExDABf99TBZ+BVXS wlfLVyy1aS4iKWkzwjGkAC7eI6gDlos= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:36 2025 by rpki-client