$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/59304871-6491-3b57-9f1f-0458b6b92c46.roa File: 59304871-6491-3b57-9f1f-0458b6b92c46.roa (raw, json) Hash identifier: A9o46cKFqv3ggpqw2deGld6AfEOseJoPnWN+vTdNkNc= Subject key identifier: 24:E3:8C:7A:BC:0F:E7:1A:94:9B:E7:A9:A5:29:B3:1C:01:58:8B:5D Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F432858487755DCE8423FF13E7DDA1380 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/59304871-6491-3b57-9f1f-0458b6b92c46.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 30103 IP address blocks: 149.137.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:dc:e8:42:3f:f1:3e:7d:da:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=8f953934-04f3-42e9-bfc6-62b8e7278aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7e:e8:94:00:f3:a5:1f:2d:5f:00:73:01:5c: 6f:bf:51:9a:91:30:ba:a7:13:08:25:b1:38:7a:f7: c2:2a:fd:b1:aa:2e:cf:63:a4:b8:aa:0c:e1:fd:7b: c6:62:0e:41:2d:48:40:26:6e:0b:a0:23:9a:d0:01: a9:3a:b9:1e:38:4c:f8:73:16:9f:c4:e7:15:89:42: 16:8f:b9:b2:f6:5c:2a:96:21:dd:ee:62:24:0f:3a: 5e:94:2f:be:0d:5e:9a:3d:cf:44:8a:ef:ec:3d:b1: 6c:6b:2f:02:d6:d4:18:6f:be:0a:56:7d:38:c3:7a: 98:b9:66:ab:66:59:79:5d:c7:07:f6:af:ae:6f:42: 3c:59:7b:48:85:22:2d:50:1a:e8:5b:c3:28:d1:d2: 05:be:11:38:b9:2f:99:a9:e4:8f:89:62:3b:35:4d: 3a:93:e3:9c:d5:4a:68:66:7a:dd:6c:67:af:11:07: 42:0d:fd:53:2f:fa:c6:80:1c:8e:e8:8c:e8:b2:44: 80:c7:b3:40:b5:91:13:94:0a:2e:56:c1:23:d2:ea: d9:41:80:1c:97:aa:3b:0e:fa:48:87:dd:d3:c1:8c: 7b:9b:82:89:21:da:08:6d:d4:34:20:fe:ca:a9:4f: 17:90:61:2a:88:a5:11:31:0a:b9:31:eb:a3:af:13: 6b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E3:8C:7A:BC:0F:E7:1A:94:9B:E7:A9:A5:29:B3:1C:01:58:8B:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/59304871-6491-3b57-9f1f-0458b6b92c46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 149.137.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:3f:73:43:7f:cf:ab:6b:d9:af:f4:5c:c9:df:a4:18:57:14: 2f:47:37:d5:19:e8:a1:0e:bd:78:bf:26:41:f8:67:24:f3:95: a0:37:0c:a2:27:0b:04:f1:35:4c:22:5c:44:ef:8d:f7:6b:b5: 4d:a6:a8:71:d7:28:8e:ac:0a:5b:70:81:fb:26:d6:86:63:82: 09:10:94:6c:2d:75:1e:35:3a:35:17:7f:11:92:8c:9b:4d:52: 34:45:ed:e9:ec:1a:d6:d4:1d:2e:01:79:c9:f9:24:2b:76:c0: f4:ec:89:ba:0b:fc:d0:3e:a2:b8:12:54:a0:bd:eb:fc:db:11: 31:b4:1b:bd:8a:69:a3:ea:99:b4:a0:69:08:6f:ca:7c:a9:9d: f5:59:db:2a:be:0c:be:2d:38:2d:90:a9:bd:ef:41:21:4d:3c: 1a:59:8a:54:d9:79:71:a8:cc:7d:40:25:a0:76:02:70:74:dd: 4c:cb:e5:53:eb:d3:ff:75:f8:ba:fd:24:e5:c1:0f:70:94:69: 55:46:2a:72:ff:fa:63:9f:42:51:ab:1a:e6:1e:d5:9b:cf:3d: b7:29:f7:0a:17:08:32:a8:48:f1:a4:df:51:e7:4a:92:ca:34: 25:9a:49:47:c4:97:ca:21:8a:8a:fe:e0:a4:16:29:47:45:aa: 59:7f:b5:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VdzoQj/xPn3aE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk OGY5NTM5MzQtMDRmMy00MmU5LWJmYzYtNjJiOGU3Mjc4YWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX7olADzpR8tXwBzAVxvv1GakTC6pxMIJbE4 evfCKv2xqi7PY6S4qgzh/XvGYg5BLUhAJm4LoCOa0AGpOrkeOEz4cxafxOcViUIW j7my9lwqliHd7mIkDzpelC++DV6aPc9Eiu/sPbFsay8C1tQYb74KVn04w3qYuWar Zll5XccH9q+ub0I8WXtIhSItUBroW8Mo0dIFvhE4uS+ZqeSPiWI7NU06k+Oc1Upo ZnrdbGevEQdCDf1TL/rGgByO6IzoskSAx7NAtZETlAouVsEj0urZQYAcl6o7DvpI h93TwYx7m4KJIdoIbdQ0IP7KqU8XkGEqiKURMQq5MeujrxNrHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTjjHq8D+calJvnqaUpsxwBWItdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvNTkzMDQ4NzEtNjQ5MS0z YjU3LTlmMWYtMDQ1OGI2YjkyYzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlYlBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKA/c0N/z6tr2a/0XMnfpBhXFC9HN9UZ6KEOvXi/JkH4ZyTzlaA3DKIn CwTxNUwiXETvjfdrtU2mqHHXKI6sCltwgfsm1oZjggkQlGwtdR41OjUXfxGSjJtN UjRF7ensGtbUHS4Becn5JCt2wPTsiboL/NA+orgSVKC96/zbETG0G72KaaPqmbSg aQhvynypnfVZ2yq+DL4tOC2Qqb3vQSFNPBpZilTZeXGozH1AJaB2AnB03UzL5VPr 0/91+Lr9JOXBD3CUaVVGKnL/+mOfQlGrGuYe1ZvPPbcp9woXCDKoSPGk31HnSpLK NCWaSUfEl8ohior+4KQWKUdFqll/taI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:31:39 2025 by rpki-client