$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c1723af3-a5bc-375f-9b91-229973f8f24b.roa File: c1723af3-a5bc-375f-9b91-229973f8f24b.roa (raw, json) Hash identifier: PuJ4ZMZTMnwiJPDtVcxWxb0S5pr74rzighs0wRwiPeg= Subject key identifier: 9E:23:1C:AD:FB:3E:AB:3B:67:7A:D2:6D:79:C2:37:61:79:79:72:51 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F43285848ADC6124F5E9207B1C0EED0C0 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c1723af3-a5bc-375f-9b91-229973f8f24b.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 16509 IP address blocks: 170.114.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:12:4f:5e:92:07:b1:c0:ee:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=c041b085-a187-44ad-b0ec-d86ce5fab1c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:af:fd:92:17:7c:ba:8f:20:b9:4a:65:9c:97: 80:1a:00:dc:8f:2c:ca:5f:c2:52:06:f6:ff:a6:08: 78:ba:d8:8d:35:85:5a:39:3f:04:86:99:2f:81:3a: 67:b1:f8:b8:db:3b:45:c2:6d:a6:65:89:e3:3b:34: e0:68:f6:04:20:12:06:aa:c8:5f:f3:42:39:17:c1: d7:de:f9:70:a6:87:68:65:5a:a8:b2:a8:95:82:91: 41:8e:1f:b8:15:13:b6:b3:b8:3b:29:54:13:b1:21: 1f:1e:3f:27:8f:25:40:e3:7b:a0:b6:ae:aa:43:80: 31:22:7a:66:ca:df:56:11:64:dd:28:23:34:d6:8e: 7a:d4:01:e3:13:dc:11:6f:dc:da:59:d5:c5:09:87: 43:b2:cc:a6:50:1c:ef:24:9a:f1:70:a6:ee:d7:79: 5b:50:07:c0:fa:b6:c7:50:74:8a:69:c1:bb:d9:a3: f1:ca:0b:34:e5:0d:64:d4:c2:ce:e4:9c:d4:9c:f8: 96:44:1d:ae:85:cf:4c:eb:4a:47:f0:d9:23:64:99: 67:ba:71:f1:16:9c:79:d6:f1:da:eb:7b:c2:17:69: a4:62:18:ed:d0:82:93:69:0f:d0:19:7b:78:26:08: 36:4e:4d:69:55:cc:f9:77:da:f6:a8:7a:6d:90:b0: 2f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:23:1C:AD:FB:3E:AB:3B:67:7A:D2:6D:79:C2:37:61:79:79:72:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c1723af3-a5bc-375f-9b91-229973f8f24b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:4b:7b:71:83:6b:24:52:a1:b7:c6:5d:46:1d:5e:3e:45:5c: 1b:43:82:92:19:43:5b:33:5b:7b:83:20:8b:78:14:7b:bc:fe: cc:93:7c:2b:11:2b:b1:76:23:dc:45:5b:c0:31:e7:d9:5e:89: b6:f7:7b:34:52:19:4a:44:9f:25:f1:ce:4f:33:84:d5:67:55: 4f:96:c3:75:e6:90:66:55:09:30:6e:61:a2:49:5c:f2:78:d1: 90:3a:e9:46:61:29:63:0b:ef:af:e7:41:d3:79:a1:62:fc:90: 13:51:99:9b:fa:81:2b:5f:3c:61:86:f4:cf:51:c6:67:fd:43: cb:09:5e:94:3f:73:2c:fd:7e:4a:34:51:70:5f:35:dc:46:a2: af:52:14:e1:42:ce:78:28:74:ed:35:b7:87:58:0c:a3:d5:65: 65:5b:5b:85:25:70:c3:76:8c:4f:5a:f5:a2:bd:4a:a8:21:1e: 30:7a:00:81:8a:08:62:28:98:7f:aa:37:90:09:ef:8c:33:c6: b8:28:17:df:3a:5b:87:87:4c:1f:17:97:ee:14:33:c5:e6:1b: fb:59:87:87:89:ef:1a:c8:16:d4:a2:6f:62:e8:ec:2c:d0:f8: 2e:58:9a:22:67:fa:15:4e:cc:8b:37:7b:29:13:2b:fe:59:d0: 2e:50:ed:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxhJPXpIHscDu0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk YzA0MWIwODUtYTE4Ny00NGFkLWIwZWMtZDg2Y2U1ZmFiMWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26/9khd8uo8guUplnJeAGgDcjyzKX8JSBvb/ pgh4utiNNYVaOT8EhpkvgTpnsfi42ztFwm2mZYnjOzTgaPYEIBIGqshf80I5F8HX 3vlwpodoZVqosqiVgpFBjh+4FRO2s7g7KVQTsSEfHj8njyVA43ugtq6qQ4AxInpm yt9WEWTdKCM01o561AHjE9wRb9zaWdXFCYdDssymUBzvJJrxcKbu13lbUAfA+rbH UHSKacG72aPxygs05Q1k1MLO5JzUnPiWRB2uhc9M60pH8NkjZJlnunHxFpx51vHa 63vCF2mkYhjt0IKTaQ/QGXt4Jgg2Tk1pVcz5d9r2qHptkLAviwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4jHK37Pqs7Z3rSbXnCN2F5eXJRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvYzE3MjNhZjMtYTViYy0z NzVmLTliOTEtMjI5OTczZjhmMjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnI1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5Le3GDayRSobfGXUYdXj5FXBtDgpIZQ1szW3uDIIt4FHu8/syTfCsR K7F2I9xFW8Ax59leibb3ezRSGUpEnyXxzk8zhNVnVU+Ww3XmkGZVCTBuYaJJXPJ4 0ZA66UZhKWML76/nQdN5oWL8kBNRmZv6gStfPGGG9M9Rxmf9Q8sJXpQ/cyz9fko0 UXBfNdxGoq9SFOFCzngodO01t4dYDKPVZWVbW4UlcMN2jE9a9aK9SqghHjB6AIGK CGIomH+qN5AJ74wzxrgoF986W4eHTB8Xl+4UM8XmG/tZh4eJ7xrIFtSib2Lo7CzQ +C5YmiJn+hVOzIs3eykTK/5Z0C5Q7c8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:10 2025 by rpki-client