$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/eca12f89-04b2-3504-a940-6dd9edca63b4.roa File: eca12f89-04b2-3504-a940-6dd9edca63b4.roa (raw, json) Hash identifier: 6DQQgbfGfxFgvmHfqwag7rtG0rGGHmxgwrBUpyCll0A= Subject key identifier: 41:7D:E7:28:A5:E5:65:AE:92:04:1E:4C:CA:0D:D1:EA:4A:47:03:A6 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F432858488DAB4CF7AACCCAEBE1CA0800 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/eca12f89-04b2-3504-a940-6dd9edca63b4.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 30103 IP address blocks: 149.137.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:4c:f7:aa:cc:ca:eb:e1:ca:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=a8445b32-f059-495e-9d16-3de5981f99d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d7:96:51:65:19:3b:9f:07:bf:e7:04:bf:f7: a0:49:4c:d4:4f:fc:76:3f:a6:47:92:d8:43:17:b9: 2a:a0:0d:32:92:00:b8:73:0b:33:da:77:b7:7b:23: b0:94:16:f0:2f:19:5a:63:4d:f1:a5:27:b6:30:bf: 3a:e4:e3:eb:2b:f4:5e:2a:97:75:6d:9d:85:93:c9: 67:4d:d1:d6:6f:0d:70:bf:9a:6e:e6:79:9d:40:07: 32:d8:47:23:be:7f:47:9d:17:89:66:fe:98:e7:69: 1b:bc:15:12:65:b5:9c:8a:5d:2b:65:b3:75:a3:08: ff:c1:7b:b7:27:b8:f7:cc:f0:ee:d5:6f:98:62:ee: c7:30:ff:1e:ad:8f:18:51:b6:80:9e:c8:cd:d2:be: a2:34:64:89:10:91:fe:57:e2:24:bb:6d:05:a6:83: d7:72:98:0b:40:a1:a6:d0:90:40:ff:bd:03:09:94: 8b:9d:bb:96:48:60:18:ac:10:4b:fe:88:a9:19:6a: 48:21:b0:6b:08:b2:eb:42:5d:25:c9:13:6f:26:65: 22:8f:68:00:ae:e3:97:df:88:1f:1f:fa:83:08:c1: 4e:d5:1b:58:bd:b4:ee:5d:48:65:34:f8:e9:80:a3: 7a:0b:2d:d9:52:12:e8:7c:c1:d8:59:67:30:0d:b9: 65:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7D:E7:28:A5:E5:65:AE:92:04:1E:4C:CA:0D:D1:EA:4A:47:03:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/eca12f89-04b2-3504-a940-6dd9edca63b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 149.137.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:47:7e:84:00:1e:8a:4f:37:98:82:90:6d:33:56:1d:22:b1: 12:62:aa:1e:15:40:42:15:85:47:50:6a:5b:85:12:4d:3d:36: 69:0b:ae:e2:db:ed:10:1e:f6:07:e2:77:b0:74:dc:14:ec:47: 5f:d4:05:58:88:66:ce:75:ac:c7:53:ba:4f:89:4a:96:de:b2: ee:1d:7b:b4:65:57:75:fe:8c:e1:ef:6b:f9:ea:89:b1:2c:66: 0c:80:4d:f1:23:96:64:46:7d:10:03:0f:6b:38:aa:b9:c4:32: 74:fc:2b:bb:ab:a6:ed:90:2e:f2:4f:88:d2:16:ce:3e:e2:a8: d8:c8:25:55:74:5e:75:7b:c8:dd:8b:a6:05:13:40:24:bb:3d: b9:20:a5:26:d5:0f:b3:ec:a8:5c:d6:d3:55:8d:c8:ac:30:0d: f1:93:07:37:56:87:f7:60:94:3f:dc:9b:01:b5:bf:14:15:b8: a8:78:d2:77:6c:05:1b:c0:22:e3:9c:b3:2b:ea:11:91:f4:58: 09:e4:bb:56:ee:99:f3:e8:f6:ac:6f:f6:56:dc:b0:e4:9e:c5: 5a:55:ad:af:b1:a1:8b:8a:53:38:14:79:d7:f2:cb:60:cd:f3: 59:a2:e1:4d:91:7b:f6:cb:33:53:ff:77:65:a3:52:f5:b5:e0: 7b:7f:36:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq0z3qszK6+HKCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk YTg0NDViMzItZjA1OS00OTVlLTlkMTYtM2RlNTk4MWY5OWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqteWUWUZO58Hv+cEv/egSUzUT/x2P6ZHkthD F7kqoA0ykgC4cwsz2ne3eyOwlBbwLxlaY03xpSe2ML865OPrK/ReKpd1bZ2Fk8ln TdHWbw1wv5pu5nmdQAcy2Ecjvn9HnReJZv6Y52kbvBUSZbWcil0rZbN1owj/wXu3 J7j3zPDu1W+YYu7HMP8erY8YUbaAnsjN0r6iNGSJEJH+V+Iku20FpoPXcpgLQKGm 0JBA/70DCZSLnbuWSGAYrBBL/oipGWpIIbBrCLLrQl0lyRNvJmUij2gAruOX34gf H/qDCMFO1RtYvbTuXUhlNPjpgKN6Cy3ZUhLofMHYWWcwDbllpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEF95yil5WWukgQeTMoN0epKRwOmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZWNhMTJmODktMDRiMi0z NTA0LWE5NDAtNmRkOWVkY2E2M2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlYkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9HfoQAHopPN5iCkG0zVh0isRJiqh4VQEIVhUdQaluFEk09NmkLruLb 7RAe9gfid7B03BTsR1/UBViIZs51rMdTuk+JSpbesu4de7RlV3X+jOHva/nqibEs ZgyATfEjlmRGfRADD2s4qrnEMnT8K7urpu2QLvJPiNIWzj7iqNjIJVV0XnV7yN2L pgUTQCS7PbkgpSbVD7PsqFzW01WNyKwwDfGTBzdWh/dglD/cmwG1vxQVuKh40nds BRvAIuOcsyvqEZH0WAnku1bumfPo9qxv9lbcsOSexVpVra+xoYuKUzgUedfyy2DN 81mi4U2Re/bLM1P/d2WjUvW14Ht/Nug= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:55 2025 by rpki-client