$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/f12f5b3c-0dc6-32c3-845f-6ca9fef893a4.roa File: f12f5b3c-0dc6-32c3-845f-6ca9fef893a4.roa (raw, json) Hash identifier: XSy5ROEgUvISDjZh6Z+zo5IpMAQH9zAdEUUMkjI4qjQ= Subject key identifier: E1:A8:7A:1A:90:7A:85:D5:8F:65:08:DE:BA:AE:8F:C8:B4:25:4D:97 Certificate issuer: /CN=8765e137-e0cd-4574-8e57-7cf87cfec9de Certificate serial: 010D0C9F4328584894A5EF125FAF4B557BC38080 Authority key identifier: 01:12:D7:23:A4:71:90:CE:2A:E0:6E:19:7F:91:6C:84:0B:EB:E8:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/f12f5b3c-0dc6-32c3-845f-6ca9fef893a4.roa Signing time: Sat 18 Jan 2025 02:00:38 +0000 ROA not before: Sat 18 Jan 2025 02:00:38 +0000 ROA not after: Fri 18 Apr 2025 01:00:38 +0000 asID: 16509 IP address blocks: 168.100.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/8765e137-e0cd-4574-8e57-7cf87cfec9de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/8765e137-e0cd-4574-8e57-7cf87cfec9de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:94:a5:ef:12:5f:af:4b:55:7b:c3:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8765e137-e0cd-4574-8e57-7cf87cfec9de Validity Not Before: Jan 18 02:00:38 2025 GMT Not After : Apr 18 01:00:38 2025 GMT Subject: CN=2ec2763e-e5d5-4a77-a20c-5fdcd767e225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:55:f3:64:65:92:c2:a2:3b:35:ad:9d:7e:4d: 52:34:64:0b:91:69:0e:d9:2c:6a:cb:65:7b:00:25: fd:fe:ce:fa:de:a3:ad:2c:bc:6c:bd:31:79:33:3f: 13:2b:9f:b9:43:4b:1c:21:a9:f5:93:3a:ba:70:d6: dc:91:49:2b:b8:4d:e4:5d:3c:f2:e2:c6:8c:be:a8: 53:2b:a0:c7:9a:77:28:00:df:ce:ed:1b:ed:af:5f: 40:0f:2d:0d:fa:d8:42:38:85:8e:3a:71:14:7f:e8: 6f:08:cf:58:c9:ad:80:0d:09:8e:bf:89:74:5d:4e: ed:20:e7:2d:38:56:01:4a:c1:ac:43:df:6c:c6:a1: a3:95:eb:ac:d8:c4:fe:bf:c6:9f:e7:0c:2c:b3:19: 9e:3b:d5:22:53:3c:c2:6d:e5:44:0d:76:77:f8:d9: c5:90:2e:11:4b:98:63:0d:85:18:19:e5:35:db:1e: 22:4f:2d:02:f6:3a:21:9e:ef:ed:d7:05:97:14:eb: 2f:f3:27:3b:af:fe:dc:d8:ca:c5:2c:22:cc:9f:cd: 82:ec:0e:e6:7a:28:4b:14:f6:83:ac:c9:ca:45:ea: 36:3d:4e:ec:db:c8:39:6b:9e:5d:d7:c9:88:00:45: d7:83:bc:07:00:c0:2d:5e:da:58:f6:fd:58:e6:1d: 4a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A8:7A:1A:90:7A:85:D5:8F:65:08:DE:BA:AE:8F:C8:B4:25:4D:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/f12f5b3c-0dc6-32c3-845f-6ca9fef893a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/8765e137-e0cd-4574-8e57-7cf87cfec9de.crl X509v3 Authority Key Identifier: keyid:01:12:D7:23:A4:71:90:CE:2A:E0:6E:19:7F:91:6C:84:0B:EB:E8:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer sbgp-ipAddrBlock: critical IPv4: 168.100.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:85:82:87:0c:41:1f:d7:a6:8d:49:06:e4:4a:b8:fa:59:40: 95:b9:0a:e7:dd:a6:50:16:00:71:00:ff:97:68:c7:77:29:c7: 6d:e0:39:bd:5c:07:dd:d6:0d:8c:df:3a:08:b1:2a:c7:69:0e: 10:2d:38:a8:83:31:c9:ae:da:aa:13:0a:1f:20:41:21:4a:e0: f3:e0:aa:e6:82:40:88:05:08:87:c0:c5:60:7e:1c:97:35:13: 48:b0:1d:97:c8:81:ec:21:ab:25:5a:f1:97:47:25:0a:75:ab: 05:f6:d6:d8:03:49:85:03:02:54:6f:fc:9c:26:cb:76:f7:e0: 99:1d:df:e7:ff:41:2a:98:03:ff:f5:9a:5f:d0:17:44:b5:ca: 22:fa:33:f3:67:f9:3a:bc:99:e6:1f:b9:c0:fc:27:03:1d:af: 5d:77:61:62:4c:4f:42:f5:91:7d:32:37:51:9e:77:85:9b:d2: cd:50:f2:2f:c0:39:ef:3a:b8:67:af:95:cc:9c:54:8e:67:26: 9b:57:61:14:b8:c8:56:e4:a1:70:5c:9a:71:a2:02:6e:68:45: dd:4f:19:9f:9e:7d:cc:d9:0c:ec:dc:b2:75:18:f4:d8:16:2b: c3:22:f7:40:77:c4:4f:69:1b:3f:cf:e5:d3:b8:c1:91:df:43: 03:72:0c:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiUpe8SX69LVXvDgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODc2NWUxMzctZTBjZC00NTc0LThlNTctN2NmODdjZmVj OWRlMB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk MmVjMjc2M2UtZTVkNS00YTc3LWEyMGMtNWZkY2Q3NjdlMjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1XzZGWSwqI7Na2dfk1SNGQLkWkO2Sxqy2V7 ACX9/s763qOtLLxsvTF5Mz8TK5+5Q0scIan1kzq6cNbckUkruE3kXTzy4saMvqhT K6DHmncoAN/O7Rvtr19ADy0N+thCOIWOOnEUf+hvCM9Yya2ADQmOv4l0XU7tIOct OFYBSsGsQ99sxqGjleus2MT+v8af5wwssxmeO9UiUzzCbeVEDXZ3+NnFkC4RS5hj DYUYGeU12x4iTy0C9johnu/t1wWXFOsv8yc7r/7c2MrFLCLMn82C7A7meihLFPaD rMnKReo2PU7s28g5a55d18mIAEXXg7wHAMAtXtpY9v1Y5h1KswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGoehqQeoXVj2UI3rquj8i0JU2XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NzY1 ZTEzNy1lMGNkLTQ1NzQtOGU1Ny03Y2Y4N2NmZWM5ZGUvZjEyZjViM2MtMGRjNi0z MmMzLTg0NWYtNmNhOWZlZjg5M2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODc2NWUxMzctZTBjZC00NTc0LThl NTctN2NmODdjZmVjOWRlLzg3NjVlMTM3LWUwY2QtNDU3NC04ZTU3LTdjZjg3Y2Zl YzlkZS5jcmwwHwYDVR0jBBgwFoAUARLXI6RxkM4q4G4Zf5FshAvr6M8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NzY1ZTEzNy1lMGNkLTQ1NzQtOGU1Ny03Y2Y4 N2NmZWM5ZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGSlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISFgocMQR/Xpo1JBuRKuPpZQJW5CufdplAWAHEA/5dox3cpx23gOb1c B93WDYzfOgixKsdpDhAtOKiDMcmu2qoTCh8gQSFK4PPgquaCQIgFCIfAxWB+HJc1 E0iwHZfIgewhqyVa8ZdHJQp1qwX21tgDSYUDAlRv/Jwmy3b34Jkd3+f/QSqYA//1 ml/QF0S1yiL6M/Nn+Tq8meYfucD8JwMdr113YWJMT0L1kX0yN1Ged4Wb0s1Q8i/A Oe86uGevlcycVI5nJptXYRS4yFbkoXBcmnGiAm5oRd1PGZ+efczZDOzcsnUY9NgW K8Mi90B3xE9pGz/P5dO4wZHfQwNyDDE= -----END CERTIFICATE-----Generated at Fri Mar 14 08:41:38 2025 by rpki-client