$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f7580811-5ea7-31f7-a991-c96a57af8a8c.roa File: f7580811-5ea7-31f7-a991-c96a57af8a8c.roa (raw, json) Hash identifier: 1g6aWKeHmpRJEsv10/ebaGi0+1anXfTYxxiA5hdIc+4= Subject key identifier: D9:F4:E1:93:FA:D4:0D:84:E5:9B:43:68:12:A6:29:00:02:22:F1:A2 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584883E5BC6EC6D86099F819E5D0 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f7580811-5ea7-31f7-a991-c96a57af8a8c.roa Signing time: Sun 12 Jan 2025 02:00:38 +0000 ROA not before: Sun 12 Jan 2025 02:00:38 +0000 ROA not after: Sat 12 Apr 2025 01:00:38 +0000 asID: 14618 IP address blocks: 170.114.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:83:e5:bc:6e:c6:d8:60:99:f8:19:e5:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Jan 12 02:00:38 2025 GMT Not After : Apr 12 01:00:38 2025 GMT Subject: CN=1e6ea032-c62c-40a3-823a-c3cf7cf397a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:72:e4:3f:ae:68:f3:24:eb:fd:0f:d8:b5:a8: 89:b1:93:d5:b7:e1:e1:55:20:32:64:a2:12:94:23: 4f:0d:10:e7:1a:43:9b:2e:b6:77:02:77:d2:d0:b8: 9a:72:86:28:7b:da:59:84:e4:6c:05:f7:d7:80:45: fc:d4:6e:0f:3a:71:4a:ad:b0:8e:7e:81:1d:0c:f5: 9f:84:35:19:94:46:b3:82:41:d9:2d:55:a3:1a:5f: 3f:86:ea:de:41:e9:cf:e9:35:db:c4:dc:b2:64:24: 57:e5:44:ed:ec:0f:d9:08:b7:44:df:26:e5:97:41: 8e:da:bf:42:11:12:4f:a5:63:ed:7b:dd:87:4d:46: 88:79:8b:01:e9:9b:a0:4b:f6:c6:9d:a1:a0:d6:39: e5:07:79:97:11:2f:d0:3a:0b:94:be:f2:57:5e:c7: 65:8b:ce:8f:0e:4a:ee:b8:6c:5f:da:05:89:8f:69: d4:f2:04:b0:4c:f4:d2:32:8a:ed:d1:42:9b:39:ff: 42:90:89:1d:ea:35:5d:53:62:d9:45:0a:38:84:df: 61:e0:e9:50:85:2d:6e:17:7d:b4:74:df:b3:d8:d1: 95:1e:ff:8a:2a:38:2a:24:eb:5f:cf:f0:93:2d:fc: 97:2e:6e:d2:a7:88:ed:dc:98:0d:0c:3b:ce:0b:86: c1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F4:E1:93:FA:D4:0D:84:E5:9B:43:68:12:A6:29:00:02:22:F1:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f7580811-5ea7-31f7-a991-c96a57af8a8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:44:88:a4:6a:e7:ac:fe:3b:df:75:cc:4f:19:c3:9d:75:e9: b5:52:ac:1f:ab:b8:e4:9f:5d:76:00:f1:e7:24:14:6a:b9:33: f6:66:86:4b:90:79:32:e2:93:3e:85:fc:60:82:f8:e8:a6:18: 66:f4:c6:6f:a9:97:d4:7c:2d:68:93:d2:25:7a:b8:65:f8:22: 80:5a:51:8a:aa:a1:14:d2:37:b1:90:6d:5b:9f:8f:29:f1:b7: e5:7f:9f:7e:4b:38:61:1d:09:d8:fd:da:5d:08:cb:78:ef:77: e5:1f:a3:59:ff:53:b9:8b:26:05:f8:bb:14:48:59:10:54:44: 02:d8:9f:79:99:cb:4c:9a:02:ec:c6:4b:90:b4:85:29:15:2d: 14:49:7a:57:6f:03:d2:36:b3:4a:21:57:1a:26:7b:de:6d:7c: 6d:f8:b8:fc:a8:7e:f1:4e:95:5d:36:da:3c:22:ee:88:9d:94: 1d:02:14:80:7a:8a:ec:14:bd:52:f5:bb:c3:41:5f:a6:fa:5c: 76:4c:4b:12:46:53:21:e8:58:c9:bf:62:08:b7:8b:48:21:85: 83:1d:18:56:f1:f3:af:3b:fc:d5:e8:2b:7e:aa:fb:58:e1:1c: 24:69:50:d4:0e:cd:6d:4e:f4:29:01:67:e0:4e:d6:db:55:42: af:f7:a0:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiD5bxuxthgmfgZ5dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDExMjAyMDAzOFoXDTI1MDQxMjAxMDAzOFowLzEtMCsGA1UEAxMk MWU2ZWEwMzItYzYyYy00MGEzLTgyM2EtYzNjZjdjZjM5N2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXLkP65o8yTr/Q/YtaiJsZPVt+HhVSAyZKIS lCNPDRDnGkObLrZ3AnfS0LiacoYoe9pZhORsBffXgEX81G4POnFKrbCOfoEdDPWf hDUZlEazgkHZLVWjGl8/hureQenP6TXbxNyyZCRX5UTt7A/ZCLdE3ybll0GO2r9C ERJPpWPte92HTUaIeYsB6ZugS/bGnaGg1jnlB3mXES/QOguUvvJXXsdli86PDkru uGxf2gWJj2nU8gSwTPTSMort0UKbOf9CkIkd6jVdU2LZRQo4hN9h4OlQhS1uF320 dN+z2NGVHv+KKjgqJOtfz/CTLfyXLm7Sp4jt3JgNDDvOC4bBIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNn04ZP61A2E5ZtDaBKmKQACIvGiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZjc1ODA4MTEtNWVhNy0z MWY3LWE5OTEtYzk2YTU3YWY4YThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnJZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZEiKRq56z+O991zE8Zw5116bVSrB+ruOSfXXYA8eckFGq5M/ZmhkuQ eTLikz6F/GCC+OimGGb0xm+pl9R8LWiT0iV6uGX4IoBaUYqqoRTSN7GQbVufjynx t+V/n35LOGEdCdj92l0Iy3jvd+Ufo1n/U7mLJgX4uxRIWRBURALYn3mZy0yaAuzG S5C0hSkVLRRJeldvA9I2s0ohVxome95tfG34uPyofvFOlV022jwi7oidlB0CFIB6 iuwUvVL1u8NBX6b6XHZMSxJGUyHoWMm/Ygi3i0ghhYMdGFbx8687/NXoK36q+1jh HCRpUNQOzW1O9CkBZ+BO1ttVQq/3oHg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:31 2025 by rpki-client