$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/3bfa061b-e17c-3190-b642-67068e27e58e.roa File: 3bfa061b-e17c-3190-b642-67068e27e58e.roa (raw, json) Hash identifier: KnfP03QvSiy/7iEys49A1rsnJScO3rQQ0pUmJKk8zd0= Subject key identifier: F4:A1:CA:47:BD:F6:09:FA:DD:A7:ED:2C:67:BD:03:BE:22:99:D8:E6 Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F4328584834555EF2DDCA49F1CE75D000 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/3bfa061b-e17c-3190-b642-67068e27e58e.roa Signing time: Sat 14 Dec 2024 14:00:52 +0000 ROA not before: Sat 14 Dec 2024 14:00:52 +0000 ROA not after: Fri 14 Mar 2025 13:00:52 +0000 asID: 3356 IP address blocks: 161.129.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:34:55:5e:f2:dd:ca:49:f1:ce:75:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Dec 14 14:00:52 2024 GMT Not After : Mar 14 13:00:52 2025 GMT Subject: CN=e66c657e-ee69-4271-92f1-a2c62442eccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:12:e6:2c:e1:d3:ef:2b:3e:b2:31:e7:44:15: a0:9e:b5:30:f4:50:72:81:ab:be:4d:a2:25:c8:32: 6e:65:84:93:21:7f:34:e0:ab:89:07:ab:80:46:f7: 0e:93:27:93:88:75:26:a3:40:44:d5:08:43:33:3e: 6c:89:58:80:06:65:83:86:47:f5:bf:25:e7:18:4d: d3:07:07:27:c8:46:fe:74:de:87:3f:47:e3:92:9e: 71:5b:73:b8:ba:1a:0a:01:15:ac:d7:da:12:e0:52: 38:39:a3:f7:ac:b3:13:77:e5:79:45:99:24:86:e2: 5f:4a:41:70:6e:0e:bf:ae:13:57:28:51:11:65:b9: cd:f1:ee:a8:fb:3f:c1:5c:a8:7d:8e:42:8a:85:54: 5f:cd:4b:60:7a:08:28:cd:4f:ce:bf:98:82:44:29: 20:a2:08:7a:50:e2:e8:31:f2:be:9f:de:4e:dd:d2: 47:ee:1d:7a:36:b1:dc:41:14:e7:82:b5:d8:fb:14: d3:84:a2:e3:3c:41:4f:79:23:06:78:38:6b:47:38: ea:1d:30:ef:b7:7d:a1:bc:ea:94:37:37:89:ac:63: 51:87:24:e0:29:47:aa:f0:20:df:ea:82:f7:ca:96: 75:5c:4b:7d:fa:2d:87:f0:fe:c2:a0:cd:f4:ef:21: 59:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A1:CA:47:BD:F6:09:FA:DD:A7:ED:2C:67:BD:03:BE:22:99:D8:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/3bfa061b-e17c-3190-b642-67068e27e58e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:6b:da:84:21:95:16:df:23:8e:50:bf:59:9b:46:76:c7:b1: 10:01:15:6f:60:44:7d:3e:9c:7f:1a:ad:31:b9:b2:d9:98:6b: a3:cf:85:5e:4a:8e:9d:bf:8c:c6:15:13:db:ef:94:d1:72:bf: 23:25:36:28:0a:b7:8d:3e:f7:8e:2c:1f:6a:94:52:2a:30:1c: da:fb:e9:7b:97:7e:b0:27:7c:92:1a:a9:89:45:7a:d4:cc:a4: 21:44:c9:70:dd:07:47:e9:32:aa:b2:4e:75:6c:b0:40:9f:da: c1:a7:2f:9a:e6:fc:6c:0e:07:63:b9:43:1d:3b:bf:c9:f5:27: a2:4d:4a:a0:28:32:76:65:d6:de:da:b7:85:23:7a:c6:51:c4: f5:bd:83:df:4a:8a:84:61:b8:63:be:55:d6:e1:1c:87:3c:40: a6:fb:aa:46:78:ff:b2:e3:ab:ed:2e:42:92:43:9c:7c:f6:e4: e5:b6:d6:78:90:da:89:1d:4f:f2:28:e9:2a:7a:74:2f:e3:ad: f7:15:8a:f4:83:59:0d:3c:79:16:9d:e5:e6:4d:d5:20:2b:fe: 68:aa:90:ce:c4:27:fc:ae:cc:f9:e6:61:eb:df:e4:aa:ca:26: 34:58:54:1b:1a:bc:0f:3b:5e:0a:5e:e8:db:b6:4f:09:8f:8a: 18:ea:a8:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg0VV7y3cpJ8c510AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk ZTY2YzY1N2UtZWU2OS00MjcxLTkyZjEtYTJjNjI0NDJlY2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxLmLOHT7ys+sjHnRBWgnrUw9FBygau+TaIl yDJuZYSTIX804KuJB6uARvcOkyeTiHUmo0BE1QhDMz5siViABmWDhkf1vyXnGE3T BwcnyEb+dN6HP0fjkp5xW3O4uhoKARWs19oS4FI4OaP3rLMTd+V5RZkkhuJfSkFw bg6/rhNXKFERZbnN8e6o+z/BXKh9jkKKhVRfzUtgeggozU/Ov5iCRCkgogh6UOLo MfK+n95O3dJH7h16NrHcQRTngrXY+xTThKLjPEFPeSMGeDhrRzjqHTDvt32hvOqU NzeJrGNRhyTgKUeq8CDf6oL3ypZ1XEt9+i2H8P7CoM307yFZqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPShyke99gn63aftLGe9A74imdjmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvM2JmYTA2MWItZTE3Yy0z MTkwLWI2NDItNjcwNjhlMjdlNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYEmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRr2oQhlRbfI45Qv1mbRnbHsRABFW9gRH0+nH8arTG5stmYa6PPhV5K jp2/jMYVE9vvlNFyvyMlNigKt40+944sH2qUUiowHNr76XuXfrAnfJIaqYlFetTM pCFEyXDdB0fpMqqyTnVssECf2sGnL5rm/GwOB2O5Qx07v8n1J6JNSqAoMnZl1t7a t4UjesZRxPW9g99KioRhuGO+VdbhHIc8QKb7qkZ4/7Ljq+0uQpJDnHz25OW21niQ 2okdT/Io6Sp6dC/jrfcVivSDWQ08eRad5eZN1SAr/miqkM7EJ/yuzPnmYevf5KrK JjRYVBsavA87Xgpe6Nu2TwmPihjqqHs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:03 2025 by rpki-client