$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/85d3f429-f3aa-3e05-8150-137b937decb4.roa File: 85d3f429-f3aa-3e05-8150-137b937decb4.roa (raw, json) Hash identifier: O/+CD2WAE0UJzYkg2wY+JK6BFgPhchrDVpNVRBi7HGc= Subject key identifier: 14:E6:F4:B9:B3:89:95:93:07:77:5F:E0:CC:B5:F3:DC:6A:8C:AD:DB Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F43285848854B487CF55D6F344E7DAD80 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/85d3f429-f3aa-3e05-8150-137b937decb4.roa Signing time: Sun 12 Jan 2025 14:00:53 +0000 ROA not before: Sun 12 Jan 2025 14:00:53 +0000 ROA not after: Sat 12 Apr 2025 13:00:53 +0000 asID: 213122 IP address blocks: 161.129.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:85:4b:48:7c:f5:5d:6f:34:4e:7d:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Jan 12 14:00:53 2025 GMT Not After : Apr 12 13:00:53 2025 GMT Subject: CN=9baff83d-4e46-471c-94a7-bb0a29f1aad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c4:7a:f2:ae:b9:5a:c8:2d:31:02:9d:2b:ea: 2f:b0:d6:61:a6:fc:24:bf:5f:3a:5f:9b:88:82:aa: 3e:73:68:a9:72:5d:13:cf:7a:ac:6b:e2:ca:cc:f6: 9f:b6:57:21:5f:31:bf:d8:45:d3:65:53:72:4b:60: a6:21:a2:8d:f4:31:36:38:04:af:dd:54:90:c3:13: 2d:0f:59:0f:e3:c8:cb:23:21:07:33:f8:b2:c9:ae: 03:c6:98:6c:84:52:46:74:16:06:ac:42:14:18:1e: 40:37:5d:47:25:2d:d4:b8:b2:ee:51:fb:e9:8c:45: a6:0b:21:ae:7d:81:18:3a:bc:7c:60:05:58:45:88: a8:bb:14:0c:02:f7:1d:db:34:47:80:ae:e8:43:df: 3f:12:5f:08:e6:6b:85:53:85:e6:8a:fb:5a:9b:e5: 41:a2:19:f7:1f:46:eb:4c:51:07:7c:c6:c5:6a:8b: 19:16:44:d0:22:93:59:83:4e:99:55:7b:f9:95:a7: c5:89:fe:cd:7c:60:c2:44:bd:a1:28:ee:b3:18:61: 38:9b:6f:5d:7a:30:0d:c2:06:09:4d:e7:79:cf:2e: a6:e5:e9:d7:2c:61:30:a8:8a:64:ca:e2:8a:99:b3: e7:94:58:6d:20:35:e2:08:cb:80:ba:b4:1e:e9:f2: 7d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E6:F4:B9:B3:89:95:93:07:77:5F:E0:CC:B5:F3:DC:6A:8C:AD:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/85d3f429-f3aa-3e05-8150-137b937decb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e6:9a:d8:66:8c:3d:ce:e5:be:a8:cd:e8:b6:47:f2:db:e7:32: d7:1d:d7:09:cd:f1:90:20:ba:a9:7c:a4:44:80:5d:4c:a8:ba: d0:96:b7:c2:fe:e1:8e:62:33:ec:d5:90:9f:7b:ed:0f:24:63: 6d:9b:9f:e5:0d:d3:6e:9d:dc:a2:ef:06:0a:84:bd:30:e6:33: cf:71:1c:00:15:6f:d0:0d:84:b6:5b:ed:c1:fe:ff:2e:4c:d5: 46:e4:e5:a3:d7:55:da:13:df:9b:b9:eb:cf:9a:6b:26:c9:1e: db:74:b1:fd:b6:9f:64:13:cf:2f:ee:5e:b3:91:36:68:0b:c5: 9d:d0:f1:9e:aa:7b:11:ba:19:a6:f6:67:42:1f:40:7e:45:9b: 59:43:54:ef:34:a2:c1:73:df:7e:94:38:e6:5b:57:c1:3e:f4: 52:05:03:6b:b4:47:e5:03:c5:11:0b:00:35:eb:a8:13:86:3b: c5:44:95:cb:89:65:2c:40:13:25:ee:b0:d2:de:28:d8:dd:01: 9f:92:a1:3b:42:85:14:3a:22:c2:73:be:4c:b5:e4:14:b4:d9: db:6e:f8:fd:a0:cf:50:ab:2e:fc:cc:80:8f:0f:24:b5:87:7e: 59:1d:7d:9d:4e:ce:87:99:8b:96:e3:e5:c8:ec:f5:d7:80:65: 85:d1:99:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFS0h89V1vNE59rYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk OWJhZmY4M2QtNGU0Ni00NzFjLTk0YTctYmIwYTI5ZjFhYWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8R68q65WsgtMQKdK+ovsNZhpvwkv186X5uI gqo+c2ipcl0Tz3qsa+LKzPaftlchXzG/2EXTZVNyS2CmIaKN9DE2OASv3VSQwxMt D1kP48jLIyEHM/iyya4DxphshFJGdBYGrEIUGB5AN11HJS3UuLLuUfvpjEWmCyGu fYEYOrx8YAVYRYiouxQMAvcd2zRHgK7oQ98/El8I5muFU4Xmivtam+VBohn3H0br TFEHfMbFaosZFkTQIpNZg06ZVXv5lafFif7NfGDCRL2hKO6zGGE4m29dejANwgYJ Ted5zy6m5enXLGEwqIpkyuKKmbPnlFhtIDXiCMuAurQe6fJ9aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTm9LmziZWTB3df4My189xqjK3bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvODVkM2Y0MjktZjNhYS0z ZTA1LTgxNTAtMTM3YjkzN2RlY2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYEvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOaa2GaMPc7lvqjN6LZH8tvnMtcd1wnN8ZAguql8pESAXUyoutCWt8L+ 4Y5iM+zVkJ977Q8kY22bn+UN026d3KLvBgqEvTDmM89xHAAVb9ANhLZb7cH+/y5M 1Ubk5aPXVdoT35u568+aaybJHtt0sf22n2QTzy/uXrORNmgLxZ3Q8Z6qexG6Gab2 Z0IfQH5Fm1lDVO80osFz336UOOZbV8E+9FIFA2u0R+UDxRELADXrqBOGO8VElcuJ ZSxAEyXusNLeKNjdAZ+SoTtChRQ6IsJzvky15BS02dtu+P2gz1CrLvzMgI8PJLWH flkdfZ1OzoeZi5bj5cjs9deAZYXRmco= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:00 2025 by rpki-client