$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a241197b-e65d-33eb-be13-27c2b4ede840.roa File: a241197b-e65d-33eb-be13-27c2b4ede840.roa (raw, json) Hash identifier: SjUNPkamkcSM0fXQVLlFrZ3xrFjGl0/2zSSGCnn9M5A= Subject key identifier: 45:6E:F3:CB:07:1D:50:06:5B:53:B8:3A:1E:E2:B0:B6:A8:AF:7D:E4 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F43285848DEEA228F6F3E6A68E6526880 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a241197b-e65d-33eb-be13-27c2b4ede840.roa Signing time: Thu 13 Feb 2025 16:28:06 +0000 ROA not before: Thu 13 Feb 2025 16:28:06 +0000 ROA not after: Wed 14 May 2025 15:28:06 +0000 asID: 31898 IP address blocks: 170.114.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:ea:22:8f:6f:3e:6a:68:e6:52:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Feb 13 16:28:06 2025 GMT Not After : May 14 15:28:06 2025 GMT Subject: CN=acd4bf81-0692-4134-bfd6-c758639d2ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:91:aa:9e:1d:5c:52:7f:22:f6:f5:73:57:96: fc:a8:f8:e0:60:7a:f2:e1:60:c2:62:4d:cc:f0:bb: 86:c4:3f:37:1e:03:a6:5b:e0:c9:25:ca:ff:35:26: 3e:37:22:8d:2f:ab:17:e1:57:89:0b:09:2a:53:af: 60:ed:d1:3b:f4:91:ee:a9:fe:fb:72:a4:ce:02:b0: 28:ce:f5:1c:65:7f:31:23:3d:cf:b8:50:e8:90:d0: 82:3e:23:f5:1a:b3:58:cc:3e:b5:8d:59:c1:a6:40: b1:87:e0:97:06:fb:57:1a:34:6c:b1:9d:01:c9:cf: 50:0f:1f:cc:74:55:8a:6f:e6:af:a3:2f:34:9a:13: 4b:6d:f5:d8:b8:79:63:55:61:10:66:a1:9b:18:cc: 03:51:63:e7:2c:46:1b:13:a5:84:10:05:7b:da:54: 1c:ad:82:74:1e:3a:13:61:a7:93:6e:b2:88:62:f8: 88:a3:4b:43:e8:e0:f9:12:0a:89:87:24:eb:94:84: 3f:64:a8:bd:6c:f8:4b:0d:9d:2c:2f:2c:08:31:fd: 61:0e:8c:f0:4a:52:80:db:cd:11:fe:9a:ed:ae:9d: 13:31:88:4f:8d:4a:67:fa:95:98:a7:88:06:04:2f: 47:b7:28:74:58:0e:0a:e5:5d:fb:2c:e4:0a:39:bc: 03:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6E:F3:CB:07:1D:50:06:5B:53:B8:3A:1E:E2:B0:B6:A8:AF:7D:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a241197b-e65d-33eb-be13-27c2b4ede840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:57:ef:5d:e5:17:1f:29:2c:63:54:9c:27:58:aa:d8:d1:93: d1:27:d8:19:4b:80:a1:bf:ad:e6:0f:04:a5:04:88:07:3d:c3: 74:df:79:20:ee:1f:6c:4b:97:11:5b:76:c3:2f:68:88:35:05: 58:6c:57:e4:cd:0e:92:ea:06:7a:19:e9:ce:bf:fd:28:18:8b: 33:38:5a:ba:d1:eb:e2:6e:2e:d8:14:3b:a4:c3:2e:72:d3:95: bd:54:54:f1:94:cc:cc:a4:5c:df:1f:76:c0:30:da:04:84:04: 66:21:d3:a3:8a:69:82:73:23:b1:e7:05:1c:53:07:46:42:9a: 70:e3:07:d9:a7:f1:ce:97:be:91:57:20:96:2b:26:14:14:f6: 5d:89:4b:46:c2:18:c8:75:b3:90:c7:bc:85:5a:81:cd:0f:9f: 56:95:a1:7f:80:fb:23:5a:ea:ca:55:21:4d:b4:b0:fe:49:45: ed:d2:bf:e3:a5:e8:15:78:3a:ce:fd:a9:80:35:39:ed:ca:09: 65:5a:83:7e:4e:1d:0a:a6:13:e1:53:ce:9c:8f:16:37:d4:4b: a3:93:08:4a:11:02:57:9f:c9:7f:13:a5:7e:80:e1:d2:56:96: b3:20:89:b6:2e:37:ae:90:79:4d:4a:cb:57:4e:2b:21:77:e0: 5b:e4:c1:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEje6iKPbz5qaOZSaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDIxMzE2MjgwNloXDTI1MDUxNDE1MjgwNlowLzEtMCsGA1UEAxMk YWNkNGJmODEtMDY5Mi00MTM0LWJmZDYtYzc1ODYzOWQyZWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5Gqnh1cUn8i9vVzV5b8qPjgYHry4WDCYk3M 8LuGxD83HgOmW+DJJcr/NSY+NyKNL6sX4VeJCwkqU69g7dE79JHuqf77cqTOArAo zvUcZX8xIz3PuFDokNCCPiP1GrNYzD61jVnBpkCxh+CXBvtXGjRssZ0Byc9QDx/M dFWKb+avoy80mhNLbfXYuHljVWEQZqGbGMwDUWPnLEYbE6WEEAV72lQcrYJ0HjoT YaeTbrKIYviIo0tD6OD5EgqJhyTrlIQ/ZKi9bPhLDZ0sLywIMf1hDozwSlKA280R /prtrp0TMYhPjUpn+pWYp4gGBC9Htyh0WA4K5V37LOQKObwDWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVu88sHHVAGW1O4Oh7isLaor33kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvYTI0MTE5N2ItZTY1ZC0z M2ViLWJlMTMtMjdjMmI0ZWRlODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxX713lFx8pLGNUnCdYqtjRk9En2BlLgKG/reYPBKUEiAc9w3TfeSDu H2xLlxFbdsMvaIg1BVhsV+TNDpLqBnoZ6c6//SgYizM4WrrR6+JuLtgUO6TDLnLT lb1UVPGUzMykXN8fdsAw2gSEBGYh06OKaYJzI7HnBRxTB0ZCmnDjB9mn8c6XvpFX IJYrJhQU9l2JS0bCGMh1s5DHvIVagc0Pn1aVoX+A+yNa6spVIU20sP5JRe3Sv+Ol 6BV4Os79qYA1Oe3KCWVag35OHQqmE+FTzpyPFjfUS6OTCEoRAlefyX8TpX6A4dJW lrMgibYuN66QeU1Ky1dOKyF34FvkwQY= -----END CERTIFICATE-----Generated at Sun Apr 6 06:01:16 2025 by rpki-client