$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/50657a51-68a7-349d-b89d-b61b8fcb4f8a.roa File: 50657a51-68a7-349d-b89d-b61b8fcb4f8a.roa (raw, json) Hash identifier: APy5T5XIL4rOqcG4hvyq06YJisZXtjQtfzgKRqD7ZsQ= Subject key identifier: 33:D9:25:D7:83:4D:DB:E1:3E:81:95:0B:8F:49:C2:FF:92:A0:28:44 Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F43285848854B4849F90246B9F7462250 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/50657a51-68a7-349d-b89d-b61b8fcb4f8a.roa Signing time: Sun 12 Jan 2025 14:00:53 +0000 ROA not before: Sun 12 Jan 2025 14:00:53 +0000 ROA not after: Sat 12 Apr 2025 13:00:53 +0000 asID: 213122 IP address blocks: 161.129.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:85:4b:48:49:f9:02:46:b9:f7:46:22:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Jan 12 14:00:53 2025 GMT Not After : Apr 12 13:00:53 2025 GMT Subject: CN=780d88da-9836-40ed-82ec-2e057428b98f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:01:50:30:e3:1e:4f:cf:8f:8d:8d:2f:ce:6e: a7:3b:2e:7b:e3:41:ab:20:5b:2b:5a:4b:8f:42:2b: 3d:35:5c:74:28:43:c4:b2:47:fe:19:0e:51:b3:19: ef:b0:d7:a9:24:22:08:44:03:bb:ff:7b:9e:09:bb: f7:73:f7:71:87:b4:91:bd:2f:94:cf:8d:3c:3d:63: 75:67:ff:95:62:26:22:0b:4a:73:22:db:4a:0e:f8: e4:b5:41:ec:3b:ac:28:9b:ca:a9:0a:87:2d:d6:79: 70:9c:9f:3e:05:70:d1:c9:59:4f:7d:61:45:43:83: 32:7a:87:ff:f5:09:a4:3a:1e:5d:ce:a7:75:3c:a5: b6:df:06:b8:75:16:e8:14:e0:1f:64:8f:16:57:f8: c2:2c:85:67:04:e0:23:4a:ce:e0:10:b8:f4:97:c6: fd:12:b9:cd:c4:8f:19:f7:c9:2a:15:d5:a4:c3:38: 7a:d3:a9:bb:0c:f5:b3:cc:ca:b1:7c:7c:ff:64:b1: 30:45:d8:cb:b9:8e:09:8c:d3:0f:4d:03:8e:86:20: 26:31:31:fe:4b:1f:92:3b:27:10:09:40:81:20:d8: bc:8e:9e:c2:72:b9:eb:54:d5:1e:7f:c2:27:b7:b9: 41:2a:52:06:dc:a2:cf:69:9d:07:e8:21:23:94:ca: f3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D9:25:D7:83:4D:DB:E1:3E:81:95:0B:8F:49:C2:FF:92:A0:28:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/50657a51-68a7-349d-b89d-b61b8fcb4f8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:39:81:3e:bf:7a:bb:62:96:c4:8b:10:9c:8c:18:63:cd:d4: b8:72:50:c8:2f:ac:8a:cd:cc:41:c8:56:e5:cf:72:95:22:a8: 51:f5:f7:e8:ce:13:c6:85:f0:65:87:cf:36:a9:81:a6:99:46: f7:2b:a9:02:3c:7f:70:50:1b:16:21:ff:28:4c:2d:dd:84:03: d9:33:f5:31:53:cd:af:4f:71:6e:1b:b1:cb:8d:cd:47:9b:d3: 41:ca:5e:0b:62:ea:38:04:e8:d1:3c:b0:31:86:96:12:0d:68: b4:02:33:06:0d:ad:04:dd:33:14:46:5f:e8:98:4d:18:7a:5a: 96:67:25:f7:90:28:6c:ad:f3:e1:58:72:17:cc:24:63:ee:de: a8:53:6b:7f:61:93:74:a8:6d:6c:6f:f5:d4:f4:0a:21:a2:6a: 57:04:06:ee:41:db:69:37:93:d3:fd:ab:f3:e0:e9:17:05:72: 29:0f:90:b8:2a:10:2d:99:d2:57:ec:89:5a:87:fc:3c:60:31: 8f:92:75:ed:30:d7:66:99:e7:3e:cd:57:79:53:9f:4b:89:06: 50:19:d5:ab:63:c3:46:50:cc:29:58:3b:06:5c:97:b6:83:f6: 50:7d:52:74:20:fb:54:83:30:e2:ed:18:b6:a0:84:61:c4:e9: 37:fb:d9:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFS0hJ+QJGufdGIlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk NzgwZDg4ZGEtOTgzNi00MGVkLTgyZWMtMmUwNTc0MjhiOThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQFQMOMeT8+PjY0vzm6nOy5740GrIFsrWkuP Qis9NVx0KEPEskf+GQ5RsxnvsNepJCIIRAO7/3ueCbv3c/dxh7SRvS+Uz408PWN1 Z/+VYiYiC0pzIttKDvjktUHsO6wom8qpCoct1nlwnJ8+BXDRyVlPfWFFQ4Myeof/ 9QmkOh5dzqd1PKW23wa4dRboFOAfZI8WV/jCLIVnBOAjSs7gELj0l8b9ErnNxI8Z 98kqFdWkwzh606m7DPWzzMqxfHz/ZLEwRdjLuY4JjNMPTQOOhiAmMTH+Sx+SOycQ CUCBINi8jp7CcrnrVNUef8Int7lBKlIG3KLPaZ0H6CEjlMrzUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPZJdeDTdvhPoGVC49Jwv+SoChEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvNTA2NTdhNTEtNjhhNy0z NDlkLWI4OWQtYjYxYjhmY2I0ZjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYEsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABA5gT6/ertilsSLEJyMGGPN1LhyUMgvrIrNzEHIVuXPcpUiqFH19+jO E8aF8GWHzzapgaaZRvcrqQI8f3BQGxYh/yhMLd2EA9kz9TFTza9PcW4bscuNzUeb 00HKXgti6jgE6NE8sDGGlhINaLQCMwYNrQTdMxRGX+iYTRh6WpZnJfeQKGyt8+FY chfMJGPu3qhTa39hk3SobWxv9dT0CiGialcEBu5B22k3k9P9q/Pg6RcFcikPkLgq EC2Z0lfsiVqH/DxgMY+Sde0w12aZ5z7NV3lTn0uJBlAZ1atjw0ZQzClYOwZcl7aD 9lB9UnQg+1SDMOLtGLaghGHE6Tf72cg= -----END CERTIFICATE-----Generated at Fri Mar 14 10:58:42 2025 by rpki-client