$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/867ba8c6-b8e0-3c0d-b890-3ac9aa19524a.roa File: 867ba8c6-b8e0-3c0d-b890-3ac9aa19524a.roa (raw, json) Hash identifier: IrYAAT1Tlx7CnhqURSZhVh5R5Ocgpqz1usUgAGjqcuU= Subject key identifier: 84:DE:E2:CC:B8:7C:75:47:BA:B3:5E:CB:56:D3:F8:AD:4A:98:4D:68 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F43285848C6E63360B8ED219522967940 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/867ba8c6-b8e0-3c0d-b890-3ac9aa19524a.roa Signing time: Wed 05 Feb 2025 02:00:39 +0000 ROA not before: Wed 05 Feb 2025 02:00:39 +0000 ROA not after: Tue 06 May 2025 01:00:39 +0000 asID: 14618 IP address blocks: 170.114.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:e6:33:60:b8:ed:21:95:22:96:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Feb 5 02:00:39 2025 GMT Not After : May 6 01:00:39 2025 GMT Subject: CN=d2a8907f-af66-4eff-a9bd-be14bdab9b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:be:4d:a6:02:95:e4:a0:c0:90:76:d3:ee:52: de:17:33:7c:83:f2:c6:ff:df:86:f8:06:47:41:84: e4:13:64:b8:19:66:b4:e6:2d:a9:62:5f:20:5d:e9: 7e:7d:30:ca:a4:72:73:c9:fc:0b:eb:d6:cf:79:3b: 8f:e8:a4:e8:58:e2:8e:89:79:31:c7:3c:4e:4e:e9: 7a:ac:f8:79:7d:18:11:4f:ee:50:a0:6f:8a:1b:5e: 04:87:10:aa:d5:69:95:64:95:f2:2a:ef:56:12:ea: 04:af:99:58:7a:be:4b:b2:cc:46:f0:49:19:e3:4d: 16:81:f1:55:0e:78:b5:e0:f7:f8:cd:61:1d:08:04: eb:4c:64:ea:6c:33:7d:87:b8:c7:19:ba:2d:01:9f: aa:4c:6e:4c:c4:25:74:dc:8f:51:c5:92:79:80:e3: c5:60:91:bd:2e:59:4d:2d:6a:3d:c1:20:16:a3:db: e1:74:aa:02:ef:18:74:ae:98:7d:0a:03:d7:ed:a2: 2f:f4:c7:a0:47:4c:a9:b3:07:67:2f:fc:50:d7:6d: 3b:b7:97:80:34:56:90:d9:81:66:36:0f:4c:45:4e: c6:e5:2f:6b:86:5f:76:9f:d4:5c:e4:b0:ed:3e:0c: 0f:cf:6b:17:a1:b5:f1:44:20:ec:87:c0:6b:c4:26: 15:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DE:E2:CC:B8:7C:75:47:BA:B3:5E:CB:56:D3:F8:AD:4A:98:4D:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/867ba8c6-b8e0-3c0d-b890-3ac9aa19524a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:42:2a:da:4b:c6:8c:ad:91:28:f2:81:64:24:90:a0:d2:d2: 5e:36:39:50:b2:5a:77:89:8c:a1:78:bd:fb:1f:f1:04:3b:77: 5d:e0:ff:d4:4c:0d:2a:a3:56:31:4f:49:9a:e5:07:5d:4c:d7: 0c:6e:c1:d4:2d:5c:21:f4:ee:6e:5f:f2:8f:c5:cf:32:38:87: 0a:b7:6a:ec:81:87:84:55:62:16:b5:76:d9:a2:41:9b:97:45: de:5d:7d:50:7b:34:6a:a9:38:4c:a7:ac:6b:c2:40:79:35:19: 21:41:54:b5:14:9b:3d:96:35:2b:c3:a1:41:84:dd:0e:6a:c0: 0d:70:d8:81:50:08:41:2d:5e:d3:27:af:f5:84:b7:27:c7:f4: 3d:21:52:4a:f5:d9:dc:ae:05:d9:b1:09:4e:c8:67:e9:1e:e0: cd:a8:bf:81:53:3c:4b:fd:37:76:b5:96:e2:9e:57:db:e3:34: 0f:38:4c:5a:9b:22:c6:c1:d2:bf:8c:db:43:58:fa:66:47:d8: 75:64:44:e1:86:bc:22:73:ca:ea:04:e9:e8:fc:e2:9b:74:5a: 4d:cb:ae:67:5d:97:ab:13:15:b5:b7:9c:74:f0:fa:1c:94:e3: 84:af:c2:eb:da:f1:0f:cf:74:c4:27:0d:11:f5:d8:89:1e:46: 62:28:fc:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5jNguO0hlSKWeUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk ZDJhODkwN2YtYWY2Ni00ZWZmLWE5YmQtYmUxNGJkYWI5YjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL5NpgKV5KDAkHbT7lLeFzN8g/LG/9+G+AZH QYTkE2S4GWa05i2pYl8gXel+fTDKpHJzyfwL69bPeTuP6KToWOKOiXkxxzxOTul6 rPh5fRgRT+5QoG+KG14EhxCq1WmVZJXyKu9WEuoEr5lYer5LssxG8EkZ400WgfFV Dni14Pf4zWEdCATrTGTqbDN9h7jHGbotAZ+qTG5MxCV03I9RxZJ5gOPFYJG9LllN LWo9wSAWo9vhdKoC7xh0rph9CgPX7aIv9MegR0ypswdnL/xQ1207t5eANFaQ2YFm Ng9MRU7G5S9rhl92n9Rc5LDtPgwPz2sXobXxRCDsh8BrxCYVEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITe4sy4fHVHurNey1bT+K1KmE1oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvODY3YmE4YzYtYjhlMC0z YzBkLWI4OTAtM2FjOWFhMTk1MjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnI9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlCKtpLxoytkSjygWQkkKDS0l42OVCyWneJjKF4vfsf8QQ7d13g/9RM DSqjVjFPSZrlB11M1wxuwdQtXCH07m5f8o/FzzI4hwq3auyBh4RVYha1dtmiQZuX Rd5dfVB7NGqpOEynrGvCQHk1GSFBVLUUmz2WNSvDoUGE3Q5qwA1w2IFQCEEtXtMn r/WEtyfH9D0hUkr12dyuBdmxCU7IZ+ke4M2ov4FTPEv9N3a1luKeV9vjNA84TFqb IsbB0r+M20NY+mZH2HVkROGGvCJzyuoE6ej84pt0Wk3Lrmddl6sTFbW3nHTw+hyU 44Svwuva8Q/PdMQnDRH12IkeRmIo/D0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:57 2025 by rpki-client