$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/31157718-1d9b-3397-ac07-a6037d33d8f0.roa File: 31157718-1d9b-3397-ac07-a6037d33d8f0.roa (raw, json) Hash identifier: adE4sZBlvVJOFiwDljZJ6mD6LU4Fk2SPw45/2aOdyYE= Subject key identifier: 48:A1:5A:E3:8B:21:76:C3:0B:4F:77:3A:59:9C:EB:63:41:BB:F8:A7 Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F43285848854B3F3B6ED956DED70478C0 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/31157718-1d9b-3397-ac07-a6037d33d8f0.roa Signing time: Sun 12 Jan 2025 14:00:53 +0000 ROA not before: Sun 12 Jan 2025 14:00:53 +0000 ROA not after: Sat 12 Apr 2025 13:00:53 +0000 asID: 400618 IP address blocks: 161.129.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:85:4b:3f:3b:6e:d9:56:de:d7:04:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Jan 12 14:00:53 2025 GMT Not After : Apr 12 13:00:53 2025 GMT Subject: CN=14c66412-37bc-47aa-bfea-bdd310057419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:43:db:56:7d:d3:2c:aa:88:64:50:2a:0e:83: 4f:22:82:5f:c4:7a:c9:0b:92:30:c3:08:1d:b1:fd: 8e:53:3b:68:95:a4:58:a7:19:f1:bb:c1:78:25:4d: 71:7b:59:35:72:e2:fb:39:78:7b:4b:85:f6:26:2e: 60:a5:21:0d:bc:a8:e5:e0:52:b8:da:16:da:b4:be: 06:3d:8b:ad:e4:9f:01:21:1b:ef:ad:ed:51:b7:bb: 7f:33:9a:1d:70:7c:95:73:77:48:cf:f5:f1:bb:26: 18:b2:69:f6:c7:39:77:24:cd:65:08:d3:ac:c7:82: 95:bf:a9:74:75:37:d2:3b:19:bb:59:8d:2f:76:c3: f3:85:42:76:02:8d:f2:dc:43:1b:f4:41:f2:22:95: 06:f0:71:93:4b:f8:10:a7:2d:94:4a:1e:15:6b:80: c5:6d:b9:c7:bf:6c:39:26:ac:58:7f:ac:48:c5:5d: 4d:cc:64:32:a1:69:8f:83:e8:72:ad:bb:2c:ac:08: 79:fc:d7:15:e7:15:ef:39:87:82:ea:e8:ee:5b:19: 99:5f:28:38:a7:da:cd:a3:bf:60:ea:ff:bc:b8:19: 8b:af:c4:b7:a1:72:67:b5:4e:68:8b:5a:07:ce:21: c6:37:25:6d:0a:0e:39:7f:d3:8a:73:82:02:94:bf: f1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A1:5A:E3:8B:21:76:C3:0B:4F:77:3A:59:9C:EB:63:41:BB:F8:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/31157718-1d9b-3397-ac07-a6037d33d8f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption de:8b:fd:92:7a:6a:77:ab:45:28:00:80:fa:dc:3f:22:4e:19: d7:1d:fb:79:93:be:bb:6b:68:3e:c3:10:6c:bd:55:65:b9:a8: 54:8f:45:31:bd:30:a9:fd:6b:62:0b:52:69:12:e0:ba:07:0d: 98:71:f6:12:6b:a1:be:fa:b8:f9:e8:c6:6e:97:91:2a:a8:d4: 59:cc:0c:f1:32:7d:3c:77:4f:71:87:4b:18:a7:de:f5:17:c9: 49:bf:e3:1d:7c:30:78:cf:e3:12:79:e7:47:d5:1b:ed:9c:eb: 87:f7:0d:8e:90:a6:36:2d:63:f5:61:55:b8:a2:ab:c3:9d:e7: 95:c8:bf:31:4c:1f:b1:99:fd:d0:3c:db:c9:22:85:0e:05:de: 9f:a3:f1:51:71:98:af:39:d2:3c:b5:18:65:71:80:8d:c9:8b: 7c:2a:4d:ae:ce:c8:5f:3f:de:23:33:c7:26:0a:d1:3a:84:08: ff:d0:f1:c5:cb:f4:af:87:ed:5f:23:45:c5:bc:26:7e:35:bf: 3b:fd:c0:f4:f4:c1:75:de:be:2b:a8:30:85:78:e9:20:05:bd: c2:c4:ed:da:98:62:37:ef:a3:1c:68:31:2a:e5:47:14:04:4e: 62:1a:ff:e9:f8:ca:7b:ed:a3:89:11:2b:27:1d:f5:e8:7e:f4: e0:ba:a8:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFSz87btlW3tcEeMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk MTRjNjY0MTItMzdiYy00N2FhLWJmZWEtYmRkMzEwMDU3NDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUPbVn3TLKqIZFAqDoNPIoJfxHrJC5Iwwwgd sf2OUztolaRYpxnxu8F4JU1xe1k1cuL7OXh7S4X2Ji5gpSENvKjl4FK42hbatL4G PYut5J8BIRvvre1Rt7t/M5odcHyVc3dIz/XxuyYYsmn2xzl3JM1lCNOsx4KVv6l0 dTfSOxm7WY0vdsPzhUJ2Ao3y3EMb9EHyIpUG8HGTS/gQpy2USh4Va4DFbbnHv2w5 JqxYf6xIxV1NzGQyoWmPg+hyrbssrAh5/NcV5xXvOYeC6ujuWxmZXyg4p9rNo79g 6v+8uBmLr8S3oXJntU5oi1oHziHGNyVtCg45f9OKc4IClL/xpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEihWuOLIXbDC093Olmc62NBu/inMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvMzExNTc3MTgtMWQ5Yi0z Mzk3LWFjMDctYTYwMzdkMzNkOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYErMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN6L/ZJ6anerRSgAgPrcPyJOGdcd+3mTvrtraD7DEGy9VWW5qFSPRTG9 MKn9a2ILUmkS4LoHDZhx9hJrob76uPnoxm6XkSqo1FnMDPEyfTx3T3GHSxin3vUX yUm/4x18MHjP4xJ550fVG+2c64f3DY6QpjYtY/VhVbiiq8Od55XIvzFMH7GZ/dA8 28kihQ4F3p+j8VFxmK850jy1GGVxgI3Ji3wqTa7OyF8/3iMzxyYK0TqECP/Q8cXL 9K+H7V8jRcW8Jn41vzv9wPT0wXXeviuoMIV46SAFvcLE7dqYYjfvoxxoMSrlRxQE TmIa/+n4ynvto4kRKycd9eh+9OC6qLw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:51 2025 by rpki-client