$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/fdcabc1d-ba6b-38a1-a128-114e1e407717.roa File: fdcabc1d-ba6b-38a1-a128-114e1e407717.roa (raw, json) Hash identifier: GsuAnkCbbkPHVjfcusWd3Xw5wFbgvJPhFeoEH3n5QdM= Subject key identifier: 23:AA:BD:E3:0E:C7:F5:BE:70:51:2D:7B:70:45:12:56:18:F5:57:01 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F432858486695AE9BF6881F5C0368DBB0 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/fdcabc1d-ba6b-38a1-a128-114e1e407717.roa Signing time: Wed 01 Jan 2025 14:00:53 +0000 ROA not before: Wed 01 Jan 2025 14:00:53 +0000 ROA not after: Tue 01 Apr 2025 13:00:53 +0000 asID: 16509 IP address blocks: 170.114.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:66:95:ae:9b:f6:88:1f:5c:03:68:db:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Jan 1 14:00:53 2025 GMT Not After : Apr 1 13:00:53 2025 GMT Subject: CN=50113ca2-9e12-4edf-abf5-4a624bb8c622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f2:7c:c6:6d:3d:6a:ee:d6:a2:c4:00:74:1f: a2:70:70:70:dd:16:98:88:f0:8d:22:ca:7b:af:ac: ed:fd:68:a9:76:fe:e5:37:78:1e:14:3a:9a:83:50: e9:59:f0:06:03:98:3c:0a:92:8a:4c:79:29:f7:49: 66:63:6d:d1:a7:e5:40:a2:69:68:a6:96:0f:ff:d9: 6b:97:88:b2:cc:88:3d:f7:4f:dd:a6:77:14:22:b2: 2b:34:3f:06:9b:83:1d:f0:bc:d1:30:0b:1a:2d:5e: 85:c0:0a:df:cc:b3:75:81:61:03:5d:9a:60:c0:a1: 89:ba:1e:1e:ea:6d:7b:88:fc:f7:fd:76:b2:ed:e6: 0b:37:74:92:6a:ad:5c:3b:7b:fc:eb:e7:fa:bb:e5: 94:a6:c3:e0:2a:c1:c9:7d:29:23:c4:76:f7:43:19: bb:df:50:5b:39:fa:51:1b:e5:a7:83:41:1d:bb:81: 4e:f9:9b:24:f1:b7:9f:44:27:43:a4:70:27:5a:7a: bc:fd:bc:b8:97:77:37:51:a6:db:7f:38:7f:7d:28: a7:84:a6:23:8b:e3:eb:ef:c8:cd:0e:e7:62:40:00: 28:e3:ab:90:01:35:b8:4d:c3:fe:a4:a6:cc:26:76: a8:e8:32:9e:a9:a2:ee:73:09:35:0c:08:23:7d:d6: f2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:AA:BD:E3:0E:C7:F5:BE:70:51:2D:7B:70:45:12:56:18:F5:57:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/fdcabc1d-ba6b-38a1-a128-114e1e407717.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:a0:db:30:b0:53:84:4e:fb:03:36:a1:1e:80:c0:9a:3d:25: 75:85:bf:4f:82:c4:04:4e:7c:27:d9:5e:1c:02:7d:d3:0d:ab: ea:6f:71:58:85:03:9b:52:cb:d7:38:28:49:80:10:b3:d0:99: ab:c3:8a:cb:3e:8f:d8:29:25:2b:8d:6d:e7:cc:69:f2:96:93: 46:f1:cd:90:b8:0f:67:53:33:b1:65:f6:67:ae:a3:3d:da:8f: 56:16:43:52:81:50:a6:49:4f:e1:af:cd:6f:01:a7:19:05:2a: d4:1c:f0:ec:5c:18:c6:a5:de:37:de:f0:46:ef:78:79:85:89: 11:6c:7d:a8:ea:01:37:1a:f3:01:89:61:9e:2f:6c:b2:30:aa: 7e:4d:86:fe:bb:87:bb:06:44:44:c5:7d:33:18:25:55:4d:42: c4:19:7f:27:9d:af:2d:5f:ba:41:33:ed:ec:7c:13:69:89:98: 55:c8:29:93:2b:a2:cd:49:55:38:10:be:06:33:db:b2:03:cb: 95:ee:0f:18:c1:ea:4f:af:7c:c1:62:07:25:32:95:5b:01:24: 30:c1:66:92:73:b5:ab:88:63:19:45:df:a3:8b:7c:dc:8e:02: ee:56:9d:1c:62:c0:ac:15:6e:f5:fe:42:d4:85:c5:65:80:8f: a2:fe:06:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmla6b9ogfXANo27AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk NTAxMTNjYTItOWUxMi00ZWRmLWFiZjUtNGE2MjRiYjhjNjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfJ8xm09au7WosQAdB+icHBw3RaYiPCNIsp7 r6zt/Wipdv7lN3geFDqag1DpWfAGA5g8CpKKTHkp90lmY23Rp+VAomloppYP/9lr l4iyzIg990/dpncUIrIrND8Gm4Md8LzRMAsaLV6FwArfzLN1gWEDXZpgwKGJuh4e 6m17iPz3/Xay7eYLN3SSaq1cO3v86+f6u+WUpsPgKsHJfSkjxHb3Qxm731BbOfpR G+Wng0Edu4FO+Zsk8befRCdDpHAnWnq8/by4l3c3Uabbfzh/fSinhKYji+Pr78jN DudiQAAo46uQATW4TcP+pKbMJnao6DKeqaLucwk1DAgjfdbyOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOqveMOx/W+cFEte3BFElYY9VcBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZmRjYWJjMWQtYmE2Yi0z OGExLWExMjgtMTE0ZTFlNDA3NzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnIqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+g2zCwU4RO+wM2oR6AwJo9JXWFv0+CxAROfCfZXhwCfdMNq+pvcViF A5tSy9c4KEmAELPQmavDiss+j9gpJSuNbefMafKWk0bxzZC4D2dTM7Fl9meuoz3a j1YWQ1KBUKZJT+GvzW8BpxkFKtQc8OxcGMal3jfe8EbveHmFiRFsfajqATca8wGJ YZ4vbLIwqn5Nhv67h7sGRETFfTMYJVVNQsQZfyedry1fukEz7ex8E2mJmFXIKZMr os1JVTgQvgYz27IDy5XuDxjB6k+vfMFiByUylVsBJDDBZpJztauIYxlF36OLfNyO Au5WnRxiwKwVbvX+QtSFxWWAj6L+Bj0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:03 2025 by rpki-client