$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/78a16fa9-f66c-3976-86e1-3415db2599a7.roa File: 78a16fa9-f66c-3976-86e1-3415db2599a7.roa (raw, json) Hash identifier: /2jEdrK2qqLSj6T8VQqaGqqIEvpUSkwzQqv9CnYISG8= Subject key identifier: A4:79:3E:73:1E:44:7E:68:63:C6:A0:2B:60:69:73:16:EC:50:E9:88 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F432858486695AEB82ECE37A7C209C900 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/78a16fa9-f66c-3976-86e1-3415db2599a7.roa Signing time: Wed 01 Jan 2025 14:00:53 +0000 ROA not before: Wed 01 Jan 2025 14:00:53 +0000 ROA not after: Tue 01 Apr 2025 13:00:53 +0000 asID: 16509 IP address blocks: 170.114.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:66:95:ae:b8:2e:ce:37:a7:c2:09:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Jan 1 14:00:53 2025 GMT Not After : Apr 1 13:00:53 2025 GMT Subject: CN=071de726-1736-4b1e-8f6a-5980431402b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ef:5e:6b:aa:3e:35:30:42:19:d9:d4:ac:db: f8:dd:28:db:9c:65:95:53:f1:dc:ff:91:20:e5:29: 4c:1a:21:df:f1:7a:eb:e6:9f:fb:d8:08:19:7b:0b: 9a:c7:75:bf:89:2c:3d:47:78:5b:6d:71:36:52:7a: d6:3c:93:c3:2b:28:cb:30:64:62:84:c1:ef:55:f2: d7:90:04:2f:78:e2:8c:bf:1a:43:df:00:22:59:56: d1:3e:bb:60:64:6f:39:16:bf:fd:58:a8:fb:9f:9c: e0:0f:fa:e4:90:f7:53:84:65:0f:6d:96:2d:af:d7: ea:cf:a7:06:a9:6a:c3:6b:49:6a:72:93:c0:a6:98: d7:18:d2:22:27:51:0f:6f:9b:66:f8:c0:33:1a:48: 9c:ea:08:95:5b:56:f9:63:33:2f:e8:1e:c9:40:c9: 95:24:5b:4d:c3:fe:76:46:64:44:1b:f0:7f:76:24: 33:78:98:55:72:7a:6d:fd:f0:f7:ff:cf:d9:ca:79: 6c:4f:ef:c3:f0:28:35:43:4d:6f:b2:5e:88:92:e1: b2:92:1c:21:20:0d:8b:90:b0:47:38:2d:55:19:58: 0e:bf:3d:e3:3f:ea:ee:1b:bb:6a:24:1c:7f:9b:c0: e7:35:32:3c:af:f8:98:83:03:fa:24:10:f7:a6:d9: b7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:79:3E:73:1E:44:7E:68:63:C6:A0:2B:60:69:73:16:EC:50:E9:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/78a16fa9-f66c-3976-86e1-3415db2599a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:63:49:a4:29:02:0e:01:e4:4a:c8:94:04:91:74:6f:18:53: fd:ee:1e:f3:bf:20:26:32:a7:d4:ae:ea:bd:b2:44:b3:d3:1f: a6:ba:f2:16:f2:f1:df:05:e3:93:13:e9:e4:18:fd:1f:f5:2a: 2b:0d:96:b2:ed:19:d3:60:6d:f3:1c:1c:59:20:40:0d:39:90: dd:d1:7b:3e:11:8f:8c:d8:80:7a:7e:d2:ec:e4:2d:6d:6e:70: a1:c0:12:cf:b5:f5:d4:53:67:dc:9e:04:c9:e6:90:9c:38:87: 0b:01:bd:8b:0f:da:ee:5d:58:c2:37:69:a5:48:46:a2:61:cc: 37:ca:23:f0:9f:c4:03:a6:6e:05:0c:81:e5:2f:c2:96:85:cb: 7c:4e:ab:ab:ab:6f:5f:46:1e:15:fa:b5:43:4d:c2:b5:9b:28: c6:90:8c:0a:fd:c7:6b:3d:9c:a6:5e:39:1d:54:06:bc:cd:22: c4:d9:af:24:a3:66:72:af:85:80:60:49:25:25:33:0e:17:63: e9:bf:b6:76:05:1a:76:0d:b7:17:74:51:5c:cc:ea:1a:ad:2b: c4:f0:cb:22:fb:f8:40:35:ee:c1:d9:b9:a5:fd:aa:7f:85:93: 42:f1:fb:ec:29:f7:7c:33:ae:e3:d1:cd:8c:48:2c:3d:4f:b9: bd:58:83:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmla64Ls43p8IJyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk MDcxZGU3MjYtMTczNi00YjFlLThmNmEtNTk4MDQzMTQwMmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO9ea6o+NTBCGdnUrNv43SjbnGWVU/Hc/5Eg 5SlMGiHf8Xrr5p/72AgZewuax3W/iSw9R3hbbXE2UnrWPJPDKyjLMGRihMHvVfLX kAQveOKMvxpD3wAiWVbRPrtgZG85Fr/9WKj7n5zgD/rkkPdThGUPbZYtr9fqz6cG qWrDa0lqcpPAppjXGNIiJ1EPb5tm+MAzGkic6giVW1b5YzMv6B7JQMmVJFtNw/52 RmREG/B/diQzeJhVcnpt/fD3/8/ZynlsT+/D8Cg1Q01vsl6IkuGykhwhIA2LkLBH OC1VGVgOvz3jP+ruG7tqJBx/m8DnNTI8r/iYgwP6JBD3ptm3CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKR5PnMeRH5oY8agK2BpcxbsUOmIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvNzhhMTZmYTktZjY2Yy0z OTc2LTg2ZTEtMzQxNWRiMjU5OWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnIrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFjSaQpAg4B5ErIlASRdG8YU/3uHvO/ICYyp9Su6r2yRLPTH6a68hby 8d8F45MT6eQY/R/1KisNlrLtGdNgbfMcHFkgQA05kN3Rez4Rj4zYgHp+0uzkLW1u cKHAEs+19dRTZ9yeBMnmkJw4hwsBvYsP2u5dWMI3aaVIRqJhzDfKI/CfxAOmbgUM geUvwpaFy3xOq6urb19GHhX6tUNNwrWbKMaQjAr9x2s9nKZeOR1UBrzNIsTZrySj ZnKvhYBgSSUlMw4XY+m/tnYFGnYNtxd0UVzM6hqtK8TwyyL7+EA17sHZuaX9qn+F k0Lx++wp93wzruPRzYxILD1Pub1Yg28= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:40 2025 by rpki-client