$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ee59bebf-617f-3e37-a938-9a81583fa157.roa File: ee59bebf-617f-3e37-a938-9a81583fa157.roa (raw, json) Hash identifier: 2c0aUJUdjhG0k3o4+YagSolxsVcfPLpNCjV2MscZOlE= Subject key identifier: E0:A9:D5:63:1C:A0:BC:F6:EB:FC:44:A5:EE:18:09:14:A8:9E:81:2D Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F432858488DAB4CDAF0220D13FAF3EC80 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ee59bebf-617f-3e37-a938-9a81583fa157.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 30103 IP address blocks: 149.137.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:4c:da:f0:22:0d:13:fa:f3:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=8cb0308d-2975-46f9-a5b6-48df24551162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:74:72:00:64:45:14:8e:64:d2:19:1e:49:77: b6:f5:b4:bb:fc:6d:3e:26:a2:74:9f:29:46:5c:27: 6f:ad:d1:f2:a8:33:f2:ae:0c:fb:d6:bf:14:41:4f: b1:09:ba:77:56:4c:b8:c6:4a:fa:88:ee:27:85:07: 3c:0c:f3:c0:ca:ac:d3:7d:39:ad:e3:7e:d3:64:22: 92:c5:85:6d:e3:0f:da:4a:dd:8c:86:72:ff:71:92: 7a:08:34:1b:ed:a4:2b:be:27:56:da:3f:e4:e1:75: dc:9f:c0:bf:8a:07:35:94:1a:1c:f0:a8:0d:04:a5: 67:b0:2e:93:69:5c:2f:11:68:2a:89:80:73:02:19: 77:c4:5d:c2:62:b6:c7:e8:c8:f9:64:94:53:6d:26: 9b:29:06:95:45:75:3f:84:ca:b2:c4:94:10:44:a3: ed:4f:52:5c:83:d6:3e:21:e0:f7:db:3f:b2:ab:6c: 6b:f6:5f:40:33:f1:c9:e5:73:f0:d2:92:16:ee:c5: c4:f8:17:51:46:8a:9a:cd:4d:e9:74:28:82:32:6c: b1:74:56:ec:7d:42:98:8e:fe:fa:63:fc:c7:b8:63: 55:33:90:28:54:fc:07:b3:9e:fc:fe:e5:49:3a:25: cb:8c:79:fc:d8:d6:09:12:5d:00:49:d3:74:6b:fa: 61:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A9:D5:63:1C:A0:BC:F6:EB:FC:44:A5:EE:18:09:14:A8:9E:81:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ee59bebf-617f-3e37-a938-9a81583fa157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 149.137.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:be:cd:7d:eb:e2:bc:e9:01:8e:7e:15:4e:d1:41:63:88:8c: 64:1e:b9:b3:30:2f:c2:59:79:41:17:57:83:e3:8a:19:d7:cc: 88:e5:fd:d9:39:21:23:ee:4e:01:eb:cf:a6:d7:97:bf:66:9d: 61:96:72:f1:57:87:02:6d:9d:8b:5d:65:01:db:64:fa:2b:7f: a2:36:14:73:d6:23:ab:75:6f:0b:2a:e3:58:02:69:4a:16:4a: 5a:d7:f8:95:c9:10:23:37:76:a9:6e:92:ce:82:18:92:20:c1: 41:4c:cd:da:18:fb:49:dc:2c:2c:79:55:19:6f:85:a4:94:70: 7d:ba:3b:3d:0b:c0:53:f9:68:bf:f2:ac:87:f4:f7:e4:83:4e: 4f:ec:8f:f8:8f:8d:58:18:a9:44:b2:63:50:d3:9b:5e:c9:da: 61:1c:4e:f3:c7:bd:22:ee:28:0a:b9:99:dd:26:52:b6:8e:72: 07:d3:80:eb:dd:de:59:98:0d:bd:ff:b9:fd:51:e5:5a:38:b8: dd:16:bd:1a:47:b7:f3:fb:7b:75:51:64:aa:4c:5c:a3:a8:f2: a5:a4:ab:40:d5:ce:0a:0e:6f:c3:b0:37:64:32:33:ac:9c:0b: 36:53:e0:2c:fd:9f:f4:2c:5d:a2:aa:a6:d4:60:1d:a3:95:50: e4:26:d9:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq0za8CINE/rz7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk OGNiMDMwOGQtMjk3NS00NmY5LWE1YjYtNDhkZjI0NTUxMTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXRyAGRFFI5k0hkeSXe29bS7/G0+JqJ0nylG XCdvrdHyqDPyrgz71r8UQU+xCbp3Vky4xkr6iO4nhQc8DPPAyqzTfTmt437TZCKS xYVt4w/aSt2MhnL/cZJ6CDQb7aQrvidW2j/k4XXcn8C/igc1lBoc8KgNBKVnsC6T aVwvEWgqiYBzAhl3xF3CYrbH6Mj5ZJRTbSabKQaVRXU/hMqyxJQQRKPtT1Jcg9Y+ IeD32z+yq2xr9l9AM/HJ5XPw0pIW7sXE+BdRRoqazU3pdCiCMmyxdFbsfUKYjv76 Y/zHuGNVM5AoVPwHs578/uVJOiXLjHn82NYJEl0ASdN0a/ph1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCp1WMcoLz26/xEpe4YCRSonoEtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZWU1OWJlYmYtNjE3Zi0z ZTM3LWE5MzgtOWE4MTU4M2ZhMTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClYkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHG+zX3r4rzpAY5+FU7RQWOIjGQeubMwL8JZeUEXV4PjihnXzIjl/dk5 ISPuTgHrz6bXl79mnWGWcvFXhwJtnYtdZQHbZPorf6I2FHPWI6t1bwsq41gCaUoW SlrX+JXJECM3dqluks6CGJIgwUFMzdoY+0ncLCx5VRlvhaSUcH26Oz0LwFP5aL/y rIf09+SDTk/sj/iPjVgYqUSyY1DTm17J2mEcTvPHvSLuKAq5md0mUraOcgfTgOvd 3lmYDb3/uf1R5Vo4uN0WvRpHt/P7e3VRZKpMXKOo8qWkq0DVzgoOb8OwN2QyM6yc CzZT4Cz9n/QsXaKqptRgHaOVUOQm2Ys= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:12 2025 by rpki-client