$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/96ce3e89-656f-3a76-b18d-33ba1bb341c2.roa File: 96ce3e89-656f-3a76-b18d-33ba1bb341c2.roa (raw, json) Hash identifier: pAP300xbBx+Kb1+fm9ze6TQmzOM4P9Gavn5i020sGZ0= Subject key identifier: 93:71:EE:3B:F8:02:17:A1:9C:30:E5:DB:1E:FD:E6:B1:28:16:CA:2C Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584889039E7415F022CBB5CA7480 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/96ce3e89-656f-3a76-b18d-33ba1bb341c2.roa Signing time: Mon 13 Jan 2025 21:59:55 +0000 ROA not before: Mon 13 Jan 2025 21:59:55 +0000 ROA not after: Sun 13 Apr 2025 20:59:55 +0000 asID: 8987 IP address blocks: 170.85.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:89:03:9e:74:15:f0:22:cb:b5:ca:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jan 13 21:59:55 2025 GMT Not After : Apr 13 20:59:55 2025 GMT Subject: CN=263bdf59-c4be-45e3-a0f3-1992ee4b1485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:53:07:21:0c:28:dd:b3:34:03:6d:0c:72:c7: 3f:ab:eb:6f:47:88:68:40:eb:13:a9:06:6d:f5:3b: 4d:80:37:cf:74:51:b8:2b:7e:e3:e0:da:b5:26:b7: eb:9d:f7:c7:82:e1:ce:4e:cd:31:66:54:1e:a7:22: 7e:d9:ab:eb:d0:74:d0:bc:6b:73:58:33:69:d4:d9: bd:7b:62:a2:0e:56:fc:bd:45:87:f9:77:ea:a5:8e: 97:9e:91:99:e5:2d:e8:38:d9:25:b0:9b:0a:5c:ab: 6e:dc:6d:71:28:1e:e8:45:2a:c6:b5:09:5f:4e:f9: 0b:fa:94:1e:9d:5e:97:15:66:24:38:83:0a:4c:e8: f1:3b:b6:b6:b7:2a:23:56:23:17:bc:13:cb:98:a0: cd:2e:e1:0b:4c:f7:6e:0a:3a:3b:63:05:6d:ca:97: 81:03:4b:78:cd:a8:fc:8c:de:2d:3b:9a:53:a9:1b: 2d:cc:56:a7:2a:ed:68:39:75:cf:0b:e1:bd:78:46: b9:ae:09:7e:b2:1c:e0:d2:f6:a0:80:de:14:80:ba: 39:b3:f6:84:fd:b0:74:aa:ac:15:3e:e2:48:8a:b3: 75:36:d4:eb:88:15:77:aa:cb:66:2e:e6:82:9f:72: 18:7b:1f:46:7a:5e:7b:6f:91:cb:f3:ef:8f:e1:e1: a3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:71:EE:3B:F8:02:17:A1:9C:30:E5:DB:1E:FD:E6:B1:28:16:CA:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/96ce3e89-656f-3a76-b18d-33ba1bb341c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:05:41:39:14:46:10:a6:69:9b:9b:e4:16:ab:2d:d2:96:3b: 0d:05:58:dc:de:23:6c:17:08:90:95:0c:c7:87:f6:74:41:c4: 60:36:69:0b:9c:d3:9a:26:b8:9b:aa:1c:d8:0b:35:92:ff:6c: c9:55:be:fb:8c:85:e6:c0:fe:98:37:c9:c1:f0:35:ab:30:2c: 93:f9:90:a0:2d:eb:32:3e:99:e8:af:1e:50:d9:9f:26:87:47: 21:54:64:ba:4a:84:52:80:a4:85:49:a0:e7:ff:3c:56:95:be: 1a:a6:3e:1a:ef:66:44:bf:34:50:29:63:b7:e3:fd:72:75:9a: 64:3a:d5:8b:a8:fe:8a:4e:ef:9b:04:e9:52:13:52:2d:e6:d5: 81:77:82:41:13:c8:87:33:9c:6a:fe:24:98:d5:d3:c4:ec:d5: 57:72:96:4b:39:31:93:31:71:09:b1:b5:d9:bd:b8:c0:b9:ea: 9d:54:de:7b:fb:dd:ef:19:98:cf:da:88:8a:ab:8c:15:15:31: a5:91:e1:d9:22:67:c0:31:09:83:64:69:87:92:6a:d6:fc:f6: 10:77:af:d3:d5:6d:2f:fc:7a:59:da:42:ac:bd:1c:d3:aa:7a: 58:5c:e9:b6:a2:71:fd:8f:a0:a3:c7:1a:bf:e8:2c:ea:4b:50: e3:b1:3b:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiJA550FfAiy7XKdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDExMzIxNTk1NVoXDTI1MDQxMzIwNTk1NVowLzEtMCsGA1UEAxMk MjYzYmRmNTktYzRiZS00NWUzLWEwZjMtMTk5MmVlNGIxNDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFMHIQwo3bM0A20Mcsc/q+tvR4hoQOsTqQZt 9TtNgDfPdFG4K37j4Nq1JrfrnffHguHOTs0xZlQepyJ+2avr0HTQvGtzWDNp1Nm9 e2KiDlb8vUWH+XfqpY6XnpGZ5S3oONklsJsKXKtu3G1xKB7oRSrGtQlfTvkL+pQe nV6XFWYkOIMKTOjxO7a2tyojViMXvBPLmKDNLuELTPduCjo7YwVtypeBA0t4zaj8 jN4tO5pTqRstzFanKu1oOXXPC+G9eEa5rgl+shzg0vaggN4UgLo5s/aE/bB0qqwV PuJIirN1NtTriBV3qstmLuaCn3IYex9Gel57b5HL8++P4eGjNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNx7jv4AhehnDDl2x795rEoFsosMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvOTZjZTNlODktNjU2Zi0z YTc2LWIxOGQtMzNiYTFiYjM0MWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAFQTkURhCmaZub5BarLdKWOw0FWNzeI2wXCJCVDMeH9nRBxGA2aQuc 05omuJuqHNgLNZL/bMlVvvuMhebA/pg3ycHwNaswLJP5kKAt6zI+meivHlDZnyaH RyFUZLpKhFKApIVJoOf/PFaVvhqmPhrvZkS/NFApY7fj/XJ1mmQ61Yuo/opO75sE 6VITUi3m1YF3gkETyIcznGr+JJjV08Ts1Vdylks5MZMxcQmxtdm9uMC56p1U3nv7 3e8ZmM/aiIqrjBUVMaWR4dkiZ8AxCYNkaYeSatb89hB3r9PVbS/8elnaQqy9HNOq elhc6baicf2PoKPHGr/oLOpLUOOxO2c= -----END CERTIFICATE-----Generated at Wed Feb 5 15:53:33 2025 by rpki-client