$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/166b1825-3906-37ab-94ff-ae2de7b2ad49.roa File: 166b1825-3906-37ab-94ff-ae2de7b2ad49.roa (raw, json) Hash identifier: +2dMj4LEMm1zmXtOZv2YRnb+zVJQv9PbkyPZrw59Db8= Subject key identifier: E3:AC:26:1E:0A:05:CC:C3:04:9E:69:A4:CF:C7:34:E9:25:50:52:22 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F432858484C102DD6407CBADA01E3CD00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/166b1825-3906-37ab-94ff-ae2de7b2ad49.roa Signing time: Mon 23 Dec 2024 02:00:40 +0000 ROA not before: Mon 23 Dec 2024 02:00:40 +0000 ROA not after: Sun 23 Mar 2025 01:00:40 +0000 asID: 16509 IP address blocks: 170.85.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4c:10:2d:d6:40:7c:ba:da:01:e3:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Dec 23 02:00:40 2024 GMT Not After : Mar 23 01:00:40 2025 GMT Subject: CN=fe3f9c52-5045-4a64-a80c-0e097ac84b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f9:cd:01:c7:28:28:ac:8f:96:29:47:f4:f3: e0:28:0d:1e:9c:da:f9:9d:5e:93:f9:cb:fd:3d:59: ba:ea:df:bc:f5:4e:61:70:5b:87:76:e7:bc:a7:3f: ec:0f:98:c0:5d:70:c2:5a:9a:f6:6b:53:b6:b3:29: 67:53:08:b4:05:49:56:52:7d:85:8f:d6:c9:11:4d: b3:03:79:c9:7d:51:fc:d3:ae:dd:43:c9:48:da:50: 4d:9e:ed:d1:f0:9d:ee:c7:e6:b9:9f:02:9b:05:21: d2:89:8e:61:6e:85:ca:2c:ba:b7:45:0f:ff:7a:49: 85:58:05:0d:1a:51:bf:6d:1e:eb:3e:2a:82:bb:e6: 3a:07:b2:ef:3f:22:94:23:0a:28:a9:0f:1d:33:93: a7:09:e9:d3:51:bf:a6:55:ae:e1:8b:58:14:1d:9d: ef:6e:ab:9a:02:c7:58:88:1d:82:39:a2:57:7d:34: 1d:ea:a7:21:b0:47:f7:6e:b6:54:29:09:18:d8:e5: 99:a7:6a:7a:50:9d:83:1b:21:f0:b5:e3:d1:e0:e3: b0:59:50:f3:6a:4e:e2:cf:81:9f:40:49:12:ca:d4: d8:84:ee:1e:7e:a2:1b:b1:fe:96:d0:94:07:c4:b1: 9d:05:47:17:0b:3c:33:0a:35:90:de:fb:0c:79:24: e9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AC:26:1E:0A:05:CC:C3:04:9E:69:A4:CF:C7:34:E9:25:50:52:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/166b1825-3906-37ab-94ff-ae2de7b2ad49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:6f:37:7d:f4:90:29:9a:57:5f:c7:fc:a9:25:42:eb:5f:db: 31:f4:e0:04:ba:b3:fd:fd:b3:75:ae:e8:0d:9e:b6:a3:4f:86: ef:5f:93:da:9f:9b:19:4b:6c:73:d3:06:32:b8:0a:ad:73:8d: 38:d0:42:64:80:e3:2c:6e:a7:d7:18:37:0b:cd:ef:ff:23:1c: 74:ec:10:40:b0:9a:e0:b8:57:1a:84:cd:60:f7:5c:c0:1e:70: f5:84:05:9a:64:ba:b6:5a:58:25:b3:f5:e3:ee:48:13:61:4c: fa:cb:62:d5:c9:46:bd:5a:41:bf:aa:c3:1b:91:d1:4d:0e:7f: dc:6c:56:25:01:51:2a:15:b0:2f:1f:95:89:de:10:91:0c:f2: 37:70:c1:b3:b3:c0:06:b4:17:f7:cb:d5:35:d0:f0:5a:72:98: 79:dc:a5:6c:ba:57:f1:c6:40:c7:cb:e2:bc:68:e7:fb:f3:c6: 1a:29:ea:73:e1:ed:3b:69:1f:d6:e2:15:7c:43:7f:c9:17:5c: 99:f6:02:05:95:58:37:6b:72:e9:c4:99:ce:5a:01:fb:0d:ef: 59:61:19:5d:c4:65:89:1f:84:14:b2:c1:dc:ed:d4:93:d1:e0: 10:4c:77:77:e4:92:90:05:33:34:23:48:2e:4e:cb:b1:8d:10: 34:5d:f8:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEC3WQHy62gHjzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk ZmUzZjljNTItNTA0NS00YTY0LWE4MGMtMGUwOTdhYzg0YjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/nNAccoKKyPlilH9PPgKA0enNr5nV6T+cv9 PVm66t+89U5hcFuHdue8pz/sD5jAXXDCWpr2a1O2sylnUwi0BUlWUn2Fj9bJEU2z A3nJfVH8067dQ8lI2lBNnu3R8J3ux+a5nwKbBSHSiY5hboXKLLq3RQ//ekmFWAUN GlG/bR7rPiqCu+Y6B7LvPyKUIwooqQ8dM5OnCenTUb+mVa7hi1gUHZ3vbquaAsdY iB2COaJXfTQd6qchsEf3brZUKQkY2OWZp2p6UJ2DGyHwtePR4OOwWVDzak7iz4Gf QEkSytTYhO4efqIbsf6W0JQHxLGdBUcXCzwzCjWQ3vsMeSTpYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOsJh4KBczDBJ5ppM/HNOklUFIiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMTY2YjE4MjUtMzkwNi0z N2FiLTk0ZmYtYWUyZGU3YjJhZDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlUzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZvN330kCmaV1/H/KklQutf2zH04AS6s/39s3Wu6A2etqNPhu9fk9qf mxlLbHPTBjK4Cq1zjTjQQmSA4yxup9cYNwvN7/8jHHTsEECwmuC4VxqEzWD3XMAe cPWEBZpkurZaWCWz9ePuSBNhTPrLYtXJRr1aQb+qwxuR0U0Of9xsViUBUSoVsC8f lYneEJEM8jdwwbOzwAa0F/fL1TXQ8FpymHncpWy6V/HGQMfL4rxo5/vzxhop6nPh 7TtpH9biFXxDf8kXXJn2AgWVWDdrcunEmc5aAfsN71lhGV3EZYkfhBSywdzt1JPR 4BBMd3fkkpAFMzQjSC5Oy7GNEDRd+Is= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:25 2025 by rpki-client