$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d8a8de41-f511-3076-8f1b-f9b1ad4fec20.roa File: d8a8de41-f511-3076-8f1b-f9b1ad4fec20.roa (raw, json) Hash identifier: wg/CetNeLY4EdbtXr35Op0Q63fE2cihqeM1tzE2+Qc8= Subject key identifier: AF:2D:03:19:2F:97:C2:D9:55:33:1F:D0:23:3C:D2:CA:15:CA:76:AF Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F43285848653040CCAA1C091990D0AE00 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d8a8de41-f511-3076-8f1b-f9b1ad4fec20.roa Signing time: Wed 01 Jan 2025 02:00:40 +0000 ROA not before: Wed 01 Jan 2025 02:00:40 +0000 ROA not after: Tue 01 Apr 2025 01:00:40 +0000 asID: 14618 IP address blocks: 170.114.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:65:30:40:cc:aa:1c:09:19:90:d0:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Jan 1 02:00:40 2025 GMT Not After : Apr 1 01:00:40 2025 GMT Subject: CN=0d1a6aa3-531e-4168-b8fe-ecdaf174d8e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:03:56:31:17:5d:ec:1b:f7:b2:3f:e2:89:2a: 60:34:3a:70:23:2e:ab:6e:88:3a:7f:ed:0e:47:3f: 27:3b:8e:25:7d:6e:1a:ee:8d:62:79:45:f1:24:a3: 50:f2:28:61:e1:c5:18:e5:2a:3d:9e:18:4f:c3:cc: db:c9:9b:c6:4b:15:48:a9:d6:10:d9:f3:30:6c:0a: 5d:fd:44:eb:3e:31:e2:62:b1:3f:1f:24:c2:75:ba: d5:7d:b4:bd:61:d9:e5:4a:f0:ec:31:67:70:73:7b: 2a:77:9d:ea:b9:e9:76:c7:a3:3b:0f:36:91:c7:09: 5e:bb:df:da:0f:10:ff:b2:6f:d4:f3:0f:4b:75:27: f0:d2:65:a8:e0:d7:d0:c9:7f:40:a2:d4:d9:cd:8c: db:12:16:ee:db:df:15:6d:83:a9:7e:d9:7d:6f:64: a4:44:89:fc:84:4a:d8:18:8c:30:81:e8:64:29:73: b3:5c:f0:78:b2:32:ef:e4:e0:07:73:08:e0:54:5a: 61:0c:3f:60:f9:1e:ea:54:20:dc:53:ef:89:9b:24: d9:db:8f:3c:e8:d5:2f:da:26:8b:77:e3:27:cd:38: 26:e4:f4:5e:88:cc:ca:6c:89:86:9b:3b:9b:66:3e: cd:59:f3:24:27:dc:4b:23:ff:75:36:95:e6:79:f5: 51:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2D:03:19:2F:97:C2:D9:55:33:1F:D0:23:3C:D2:CA:15:CA:76:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d8a8de41-f511-3076-8f1b-f9b1ad4fec20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:06:fb:56:dd:04:cf:13:a1:63:e3:75:7c:ab:4f:cb:da:54: 44:c2:e4:fc:9a:f7:a9:e3:19:7d:71:0f:01:de:02:9d:9c:31: 1b:36:90:8c:26:f9:f2:cb:27:06:4e:27:4e:8c:24:21:7f:eb: 75:8c:24:ad:5a:60:2d:42:24:5e:79:d0:79:08:e0:de:ea:cb: ab:39:12:92:60:2b:64:c6:c5:0a:b4:2f:02:d4:b4:55:1b:ba: 7c:45:a0:6f:45:ce:30:a4:16:76:79:c9:db:e9:30:e4:32:07: 89:89:38:42:c9:ee:c5:01:0e:53:ce:3e:6e:c5:ef:f6:6c:d2: eb:1b:fa:5e:6e:9e:f2:27:1b:0e:a7:03:67:af:72:91:32:d0: f2:e9:5a:64:18:33:b1:0b:ba:10:3d:2a:b9:25:a7:74:5c:87: 73:32:e0:63:1c:b1:35:76:7c:30:12:37:e4:e9:8f:02:e5:69: 99:c8:96:eb:c4:04:a3:75:c5:b5:46:f2:3c:9a:62:18:d3:98: 4b:23:42:38:0e:c4:7c:10:5f:c1:b8:e2:0c:54:41:41:38:a7: 5e:41:b5:16:40:ba:6c:28:82:d5:e3:4f:e2:71:bb:aa:c2:9c: 7d:89:87:a4:16:c6:34:d2:dc:53:5b:35:ad:68:21:7f:31:08: f0:d8:ea:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhlMEDMqhwJGZDQrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDEwMTAyMDA0MFoXDTI1MDQwMTAxMDA0MFowLzEtMCsGA1UEAxMk MGQxYTZhYTMtNTMxZS00MTY4LWI4ZmUtZWNkYWYxNzRkOGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQNWMRdd7Bv3sj/iiSpgNDpwIy6rbog6f+0O Rz8nO44lfW4a7o1ieUXxJKNQ8ihh4cUY5So9nhhPw8zbyZvGSxVIqdYQ2fMwbApd /UTrPjHiYrE/HyTCdbrVfbS9YdnlSvDsMWdwc3sqd53quel2x6M7DzaRxwleu9/a DxD/sm/U8w9LdSfw0mWo4NfQyX9AotTZzYzbEhbu298VbYOpftl9b2SkRIn8hErY GIwwgehkKXOzXPB4sjLv5OAHcwjgVFphDD9g+R7qVCDcU++JmyTZ24886NUv2iaL d+MnzTgm5PReiMzKbImGmzubZj7NWfMkJ9xLI/91NpXmefVRUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8tAxkvl8LZVTMf0CM80soVynavMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZDhhOGRlNDEtZjUxMS0z MDc2LThmMWItZjliMWFkNGZlYzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnJUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsG+1bdBM8ToWPjdXyrT8vaVETC5Pya96njGX1xDwHeAp2cMRs2kIwm +fLLJwZOJ06MJCF/63WMJK1aYC1CJF550HkI4N7qy6s5EpJgK2TGxQq0LwLUtFUb unxFoG9FzjCkFnZ5ydvpMOQyB4mJOELJ7sUBDlPOPm7F7/Zs0usb+l5unvInGw6n A2evcpEy0PLpWmQYM7ELuhA9Krklp3Rch3My4GMcsTV2fDASN+TpjwLlaZnIluvE BKN1xbVG8jyaYhjTmEsjQjgOxHwQX8G44gxUQUE4p15BtRZAumwogtXjT+Jxu6rC nH2Jh6QWxjTS3FNbNa1oIX8xCPDY6rE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:44 2025 by rpki-client