$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c2cdaf5b-d1ce-3076-b920-488aaa5a28db.roa File: c2cdaf5b-d1ce-3076-b920-488aaa5a28db.roa (raw, json) Hash identifier: IVroC16OWcALGNOr9Tby0bGoZR7/Gun8NOyjHBDtSN8= Subject key identifier: 24:CB:4E:E8:82:77:C3:FB:9A:64:A9:DF:28:73:B4:A3:A1:76:5D:F8 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F432858491D717888FF444322E27DA080 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c2cdaf5b-d1ce-3076-b920-488aaa5a28db.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 134.224.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:78:88:ff:44:43:22:e2:7d:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=c824f819-a7f2-4c62-b81e-fadd337b207c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:17:72:e4:e6:9a:3f:f0:76:d6:16:fc:c3:bd: 36:92:01:38:42:1a:7c:8d:4b:52:87:4e:f0:55:54: 94:f5:85:3e:0d:16:98:07:60:5b:84:b0:59:0c:2d: 0c:b2:78:2b:ea:5a:e7:6f:88:b3:f7:37:aa:a3:63: 76:b6:70:30:9e:0d:7e:30:f7:4f:f7:95:40:f8:29: 9e:ef:bb:9b:ec:ae:c1:19:b4:7d:3f:c9:81:27:9c: c8:dc:7f:dd:ee:95:75:11:15:05:65:cb:47:60:2e: 6e:db:9e:c3:07:7e:a5:19:e3:70:5a:4d:c4:4a:b8: a3:9e:97:e5:ff:d1:99:20:84:e4:3f:30:d3:9d:1b: 14:b9:8d:cd:c9:16:fb:ae:f0:ac:7a:db:7d:32:de: 79:38:12:14:cf:16:ad:b4:1b:5c:99:d7:17:04:5c: e4:16:8b:de:8c:2e:8c:f2:17:76:9b:84:ec:67:40: 80:db:c4:d9:26:44:2a:41:bf:0b:7f:f1:45:5c:f1: bb:76:44:8d:3e:e7:38:62:0d:2e:e0:21:bc:ab:83: 4b:bf:9e:07:d8:dd:a3:3f:cb:6a:f3:43:9d:e4:7c: e0:60:90:04:d6:4d:df:7e:a6:03:33:31:1a:49:01: 69:39:2a:b8:f2:48:e9:2c:38:19:86:be:de:ac:03: f9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CB:4E:E8:82:77:C3:FB:9A:64:A9:DF:28:73:B4:A3:A1:76:5D:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c2cdaf5b-d1ce-3076-b920-488aaa5a28db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 134.224.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:d6:27:da:e1:52:63:4e:e3:b6:46:82:ac:51:0a:56:80:6b: 6f:e3:a4:85:7c:c1:df:02:8a:c0:6b:b1:10:f4:83:a2:3c:cd: 55:10:b4:72:ad:2b:d9:f5:bc:14:3a:4b:30:c1:64:c0:b9:98: df:9e:fb:40:49:76:38:9c:53:55:d2:db:1c:e1:2e:7f:9b:e3: c6:76:62:00:56:4a:c7:53:be:48:21:45:85:00:3c:bf:19:4c: 5e:28:14:d2:67:54:7a:cb:42:42:46:a4:e1:6b:7e:fa:4d:85: 65:86:55:42:61:3e:85:40:25:e4:51:0d:3c:33:ff:b8:b4:c6: 36:a0:26:45:37:5a:42:91:09:55:35:1d:4d:fd:b7:5b:48:ae: 22:f8:83:1e:0e:c0:ca:32:28:a7:3c:67:8e:52:46:a5:cb:10: f3:e7:c6:a4:b0:d2:20:d0:ed:90:06:76:dc:54:dc:79:eb:8f: 0d:6e:9c:72:be:73:c7:19:a5:6f:c0:7e:9c:0a:28:fc:f1:0f: 38:01:fc:0e:ff:b1:cb:bc:05:8d:b6:40:06:a7:58:e6:3c:b4: b1:64:20:73:8c:bf:d5:dc:25:67:0b:0a:01:1a:84:d6:76:6f: ac:4d:18:80:6d:1c:54:fa:de:31:7c:8d:97:bb:5a:03:19:7d: d3:37:13:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcXiI/0RDIuJ9oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk YzgyNGY4MTktYTdmMi00YzYyLWI4MWUtZmFkZDMzN2IyMDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hdy5OaaP/B21hb8w702kgE4Qhp8jUtSh07w VVSU9YU+DRaYB2BbhLBZDC0Msngr6lrnb4iz9zeqo2N2tnAwng1+MPdP95VA+Cme 77ub7K7BGbR9P8mBJ5zI3H/d7pV1ERUFZctHYC5u257DB36lGeNwWk3ESrijnpfl /9GZIITkPzDTnRsUuY3NyRb7rvCsett9Mt55OBIUzxattBtcmdcXBFzkFovejC6M 8hd2m4TsZ0CA28TZJkQqQb8Lf/FFXPG7dkSNPuc4Yg0u4CG8q4NLv54H2N2jP8tq 80Od5HzgYJAE1k3ffqYDMzEaSQFpOSq48kjpLDgZhr7erAP5VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTLTuiCd8P7mmSp3yhztKOhdl34MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvYzJjZGFmNWItZDFjZS0z MDc2LWI5MjAtNDg4YWFhNWEyOGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChuD4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvWJ9rhUmNO47ZGgqxRClaAa2/jpIV8wd8CisBrsRD0g6I8zVUQtHKt K9n1vBQ6SzDBZMC5mN+e+0BJdjicU1XS2xzhLn+b48Z2YgBWSsdTvkghRYUAPL8Z TF4oFNJnVHrLQkJGpOFrfvpNhWWGVUJhPoVAJeRRDTwz/7i0xjagJkU3WkKRCVU1 HU39t1tIriL4gx4OwMoyKKc8Z45SRqXLEPPnxqSw0iDQ7ZAGdtxU3Hnrjw1unHK+ c8cZpW/AfpwKKPzxDzgB/A7/scu8BY22QAanWOY8tLFkIHOMv9XcJWcLCgEahNZ2 b6xNGIBtHFT63jF8jZe7WgMZfdM3E5A= -----END CERTIFICATE-----Generated at Fri Mar 14 09:03:52 2025 by rpki-client