$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/7055b94f-2272-3a0f-8c2f-5641abccd6c8.roa File: 7055b94f-2272-3a0f-8c2f-5641abccd6c8.roa (raw, json) Hash identifier: HLWGmFCNJKEqexSuDro9UqJiiEXvzO/v4ssPEa5WvhE= Subject key identifier: 67:E4:48:A8:D8:4B:73:8C:26:63:B6:23:46:3A:45:AC:A5:0A:71:57 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F43285848B8F0CBD29124A3938639BF00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/7055b94f-2272-3a0f-8c2f-5641abccd6c8.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 53813 IP address blocks: 165.225.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:cb:d2:91:24:a3:93:86:39:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=072d718d-0f57-4deb-98da-6a06d8be9953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6e:90:51:22:94:90:08:b0:7d:45:db:48:ea: 6b:a3:bb:00:77:c0:0a:82:47:51:08:ef:9f:e0:f0: 8d:ad:91:e6:62:a0:db:b3:ad:a1:9f:65:e4:e2:ff: 29:f9:72:5e:85:c0:31:97:af:9e:00:dd:59:01:02: 0b:62:57:5e:cc:07:ff:d0:49:ad:c1:ac:8d:49:84: 72:9e:da:bc:53:cc:25:a1:1d:b1:ad:eb:ea:eb:6e: da:76:de:3f:90:00:08:bf:98:21:b1:e6:96:a5:76: c6:4c:10:75:83:d4:b5:1e:e6:3e:7e:ea:e8:bd:da: 52:2a:a0:ae:92:8b:c0:6f:b4:cb:3b:22:32:17:d3: f7:84:42:23:2c:a8:4a:47:c0:1e:eb:f0:1e:49:3c: 16:14:72:a7:b4:e3:01:8f:7e:28:cf:7a:96:ba:e5: 77:7a:ae:b5:2e:a9:85:f5:9f:56:89:b9:c2:53:6b: 1a:eb:84:a2:38:a0:99:c0:2d:2a:38:6f:55:21:4d: fd:58:59:5b:d6:e1:2e:cc:48:1b:f1:de:3a:ca:70: d4:97:38:f4:41:47:5d:1a:c3:f6:3a:c5:fe:bb:33: 07:15:0a:43:a8:9a:54:cc:99:12:64:ef:aa:e8:0e: 8c:9b:3e:b3:95:cd:c7:6a:d4:75:b9:fb:6b:11:87: 82:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E4:48:A8:D8:4B:73:8C:26:63:B6:23:46:3A:45:AC:A5:0A:71:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/7055b94f-2272-3a0f-8c2f-5641abccd6c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:c4:49:47:10:10:55:6c:f7:7f:8e:6d:e4:e3:c1:22:55:18: 01:50:33:71:60:99:4e:35:71:9b:c9:a5:c5:e9:80:7d:43:b3: e0:71:f6:fa:ef:69:0f:01:af:4c:50:66:a8:31:1e:f1:66:9f: 65:71:d8:60:e2:89:6e:66:e1:55:44:cb:5d:fa:aa:28:eb:1e: 1e:18:d2:f8:e7:8a:8d:50:51:27:e6:b1:9b:5a:c0:4a:0c:2e: 59:23:71:39:ca:ab:f2:cd:3f:8d:80:4e:d9:7d:e2:a3:94:a2: 3f:6d:16:1b:38:c6:2d:4a:a0:f1:48:d8:c8:ea:43:84:eb:e7: 47:d9:86:ad:41:d3:28:e0:a9:b8:6c:6a:a5:f9:63:90:e8:a2: d6:70:c6:39:d5:7a:3a:f5:c2:cc:af:20:88:3a:ee:7b:13:59: 57:97:c8:0d:c1:4c:1a:53:37:76:53:bc:70:9b:17:74:c7:c6: b0:70:d0:6b:8d:35:c9:c0:36:ad:6a:f0:1e:e9:c4:d9:ac:d0: d8:e4:c1:bb:4d:eb:f2:70:b0:d0:b0:6d:97:1f:92:a7:49:b4: cc:05:2a:1b:c1:b4:88:19:5d:98:ac:ad:ee:12:b2:1a:ec:8c: 07:6d:2a:0f:8f:af:01:7e:d4:7c:69:03:01:0f:91:c5:94:d6: d3:ad:96:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48MvSkSSjk4Y5vwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk MDcyZDcxOGQtMGY1Ny00ZGViLTk4ZGEtNmEwNmQ4YmU5OTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW6QUSKUkAiwfUXbSOpro7sAd8AKgkdRCO+f 4PCNrZHmYqDbs62hn2Xk4v8p+XJehcAxl6+eAN1ZAQILYldezAf/0EmtwayNSYRy ntq8U8wloR2xrevq627adt4/kAAIv5ghseaWpXbGTBB1g9S1HuY+furovdpSKqCu kovAb7TLOyIyF9P3hEIjLKhKR8Ae6/AeSTwWFHKntOMBj34oz3qWuuV3eq61LqmF 9Z9WibnCU2sa64SiOKCZwC0qOG9VIU39WFlb1uEuzEgb8d46ynDUlzj0QUddGsP2 OsX+uzMHFQpDqJpUzJkSZO+q6A6Mmz6zlc3HatR1uftrEYeCgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfkSKjYS3OMJmO2I0Y6RaylCnFXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNzA1NWI5NGYtMjI3Mi0z YTBmLThjMmYtNTY0MWFiY2NkNmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpeF6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPESUcQEFVs93+ObeTjwSJVGAFQM3FgmU41cZvJpcXpgH1Ds+Bx9vrv aQ8Br0xQZqgxHvFmn2Vx2GDiiW5m4VVEy136qijrHh4Y0vjnio1QUSfmsZtawEoM LlkjcTnKq/LNP42ATtl94qOUoj9tFhs4xi1KoPFI2MjqQ4Tr50fZhq1B0yjgqbhs aqX5Y5DootZwxjnVejr1wsyvIIg67nsTWVeXyA3BTBpTN3ZTvHCbF3THxrBw0GuN NcnANq1q8B7pxNms0NjkwbtN6/JwsNCwbZcfkqdJtMwFKhvBtIgZXZisre4Sshrs jAdtKg+PrwF+1HxpAwEPkcWU1tOtlog= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:34 2025 by rpki-client