$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3539260d-5c7b-3ea4-bdf5-2f08e88b3415.roa File: 3539260d-5c7b-3ea4-bdf5-2f08e88b3415.roa (raw, json) Hash identifier: cu143ZX5JHEPbTto0VbFhWrfyvQIo+iPRRkjQFq8YS0= Subject key identifier: 5E:DE:A9:29:C3:76:A8:65:3C:4C:30:9E:EC:24:11:C9:DB:55:D3:7D Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F432858497DA4732671E5A143944BE430 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3539260d-5c7b-3ea4-bdf5-2f08e88b3415.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 14618 IP address blocks: 170.114.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:73:26:71:e5:a1:43:94:4b:e4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=5cb8ca09-cddd-44aa-ba49-26622051bf97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ab:46:b8:9b:c3:d4:89:4b:d4:39:4e:2a:3c: 4b:b4:92:3b:ae:a9:2b:3e:1c:35:0f:89:fa:f8:a9: 10:0b:a6:b0:84:9d:7e:5c:1b:93:f0:9d:71:aa:ea: d2:b1:aa:0f:3e:c2:0b:74:16:a8:f3:0a:ee:56:19: fe:85:8e:91:9f:3b:59:a4:9b:a7:2f:b8:72:d2:3a: 53:06:a0:57:b1:2b:7f:af:5f:04:11:0a:de:45:b6: 0b:53:20:75:ce:6c:ad:c2:86:ec:b4:99:5c:e7:95: 50:07:e0:67:3f:a7:42:62:21:f9:85:66:7f:18:3d: 82:4c:35:7c:af:50:5d:04:de:bd:87:3e:42:aa:fe: 96:d3:f4:e2:05:a2:5d:b5:ed:25:3a:b8:46:08:84: fb:2a:99:94:39:44:e7:f0:91:6c:45:bd:e1:f1:32: ae:45:1e:10:96:bf:c2:b9:5c:75:48:c7:ec:21:51: 44:e5:73:7c:6f:2f:d9:98:d8:4b:9c:9f:bf:98:c9: f0:2d:a7:bb:f3:0c:30:a7:b9:17:18:5b:6f:46:78: aa:0b:fe:41:55:c6:c6:5e:52:26:4e:3e:ea:69:91: ab:23:83:6d:bb:1b:8d:b9:71:1e:d8:10:3a:e9:0f: 30:b4:d7:34:cd:fb:cf:c8:34:88:a5:ad:84:b5:84: 80:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:DE:A9:29:C3:76:A8:65:3C:4C:30:9E:EC:24:11:C9:DB:55:D3:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3539260d-5c7b-3ea4-bdf5-2f08e88b3415.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:3d:c7:c2:93:fd:04:5f:53:05:11:97:8b:f8:db:cf:68:9a: 66:52:3f:50:c2:58:78:8f:7d:d0:fd:21:8f:7a:5b:8c:f1:17: 8b:2b:0c:68:77:14:49:d1:80:08:dd:e1:e1:f5:9c:87:44:7e: c4:68:0d:09:c1:f4:87:40:84:53:c4:c4:6b:d9:08:f8:0a:99: d2:1e:36:19:ed:19:0d:eb:0b:5d:79:4f:11:5b:79:ee:d6:07: 2a:80:3c:7f:8f:22:f4:7b:b4:b4:a1:f2:56:84:2f:b4:e3:fe: 9e:7e:2d:47:5b:30:1b:5e:47:72:a5:b7:5c:88:03:49:2b:c3: 50:dc:c9:ba:22:73:ba:ca:b9:78:a5:95:74:3d:44:fc:57:f9: 0c:d4:df:da:6f:73:54:6a:d2:33:e8:4d:5b:17:bd:80:3f:a8: 93:63:91:16:67:ca:ef:b7:ef:ba:d1:35:9b:bf:c3:5e:ea:a6: 5a:e6:f1:0c:c3:fc:18:d9:46:ab:38:0e:54:e4:e0:f5:a5:b5: 42:f3:c4:47:f5:b3:5f:3c:72:77:c4:3f:1a:b0:58:46:e0:2b: f3:21:20:de:5b:a7:85:14:db:21:cf:95:41:d0:ff:1f:91:b2: c8:84:e0:82:98:47:e3:58:35:36:a9:bc:7a:0d:42:9c:61:5b: ae:9b:54:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pHMmceWhQ5RL5DAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk NWNiOGNhMDktY2RkZC00NGFhLWJhNDktMjY2MjIwNTFiZjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjatGuJvD1IlL1DlOKjxLtJI7rqkrPhw1D4n6 +KkQC6awhJ1+XBuT8J1xqurSsaoPPsILdBao8wruVhn+hY6RnztZpJunL7hy0jpT BqBXsSt/r18EEQreRbYLUyB1zmytwobstJlc55VQB+BnP6dCYiH5hWZ/GD2CTDV8 r1BdBN69hz5Cqv6W0/TiBaJdte0lOrhGCIT7KpmUOUTn8JFsRb3h8TKuRR4Qlr/C uVx1SMfsIVFE5XN8by/ZmNhLnJ+/mMnwLae78wwwp7kXGFtvRniqC/5BVcbGXlIm Tj7qaZGrI4NtuxuNuXEe2BA66Q8wtNc0zfvPyDSIpa2EtYSAzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7eqSnDdqhlPEwwnuwkEcnbVdN9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMzUzOTI2MGQtNWM3Yi0z ZWE0LWJkZjUtMmYwOGU4OGIzNDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABA9x8KT/QRfUwURl4v4289ommZSP1DCWHiPfdD9IY96W4zxF4srDGh3 FEnRgAjd4eH1nIdEfsRoDQnB9IdAhFPExGvZCPgKmdIeNhntGQ3rC115TxFbee7W ByqAPH+PIvR7tLSh8laEL7Tj/p5+LUdbMBteR3Klt1yIA0krw1Dcyboic7rKuXil lXQ9RPxX+QzU39pvc1Rq0jPoTVsXvYA/qJNjkRZnyu+377rRNZu/w17qplrm8QzD /BjZRqs4DlTk4PWltULzxEf1s188cnfEPxqwWEbgK/MhIN5bp4UU2yHPlUHQ/x+R ssiE4IKYR+NYNTapvHoNQpxhW66bVB0= -----END CERTIFICATE-----Generated at Sat Apr 26 13:20:31 2025 by rpki-client