$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/d8716edc-ee41-3971-9a86-d085801e0a2a.roa File: d8716edc-ee41-3971-9a86-d085801e0a2a.roa (raw, json) Hash identifier: LcCCQQxZx6VttwbO08rX5pDtCZ6PGgn2uFViGaN9SSk= Subject key identifier: 99:42:F5:E9:7B:BF:53:22:AE:FB:51:D7:8B:D2:AB:1E:F1:94:FE:C3 Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F432858484C1021C331D3AA5A5B7BC380 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/d8716edc-ee41-3971-9a86-d085801e0a2a.roa Signing time: Mon 23 Dec 2024 02:00:40 +0000 ROA not before: Mon 23 Dec 2024 02:00:40 +0000 ROA not after: Sun 23 Mar 2025 01:00:40 +0000 asID: 138195 IP address blocks: 161.129.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4c:10:21:c3:31:d3:aa:5a:5b:7b:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Dec 23 02:00:40 2024 GMT Not After : Mar 23 01:00:40 2025 GMT Subject: CN=75340100-3629-4d99-92ca-99459eb2ca3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c9:76:97:b7:70:09:5d:0e:f4:de:f5:08:56: 91:b3:b8:94:78:f1:f8:61:e5:30:45:c1:e6:c9:35: 5e:1c:4d:51:52:af:fb:e5:20:a9:ba:9c:6c:62:87: 2a:1d:5f:25:d1:86:25:94:ab:d8:62:91:b2:1c:e4: b2:65:88:6c:f8:9a:1b:ea:b9:e9:54:4c:2e:7a:2b: d7:e5:46:37:44:20:45:30:2e:d9:bf:1b:91:ac:32: a3:e8:80:5a:08:af:3a:e6:d6:ef:e6:45:d2:8b:bd: 96:a2:84:e3:bd:e4:d1:67:f7:43:f3:d6:05:f1:09: 19:e6:75:f1:a1:e3:a8:76:80:a3:be:c7:aa:43:dc: 0a:ef:91:a9:5d:03:b1:6c:88:34:2c:fb:12:67:1f: 89:1b:83:07:70:2a:2c:0b:e8:1c:52:c3:36:60:38: 16:7e:39:43:09:4f:c3:4e:ac:eb:b2:6a:c0:6c:88: f8:d6:b2:a4:45:32:b1:e7:b8:cb:fc:9b:13:2c:24: 89:a9:63:80:f8:cc:62:a8:af:43:49:73:c4:63:72: 47:84:c8:54:c0:ef:ba:60:1c:68:34:70:c6:32:f2: 47:21:d0:01:bf:8f:7d:a6:a9:53:51:94:ba:49:e7: cb:9a:bf:dc:c9:e8:d4:d2:dd:db:03:42:b8:c8:a4: 94:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:42:F5:E9:7B:BF:53:22:AE:FB:51:D7:8B:D2:AB:1E:F1:94:FE:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/d8716edc-ee41-3971-9a86-d085801e0a2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:87:80:14:2a:29:39:6b:97:43:be:85:04:2b:79:9b:2a:80: ab:6b:38:77:c8:94:f7:b0:71:b6:32:81:f1:82:0d:ca:73:35: 80:49:97:9f:6f:61:02:cb:f9:09:c8:33:21:4c:f7:cb:20:a9: 07:12:17:21:21:c2:a2:cb:0c:8a:6c:2a:44:ec:2a:e4:e2:54: b5:86:8f:63:1d:30:45:74:92:d7:df:d2:2e:b8:7a:17:2a:51: fe:49:4e:e2:fc:ed:ba:99:84:7c:f0:06:ca:fb:b3:c1:f7:d1: 31:2b:c1:51:4a:ab:fb:52:26:09:18:3a:38:68:18:d1:10:ba: 44:77:b7:3b:32:ce:93:41:a7:2a:18:cb:e2:3f:5e:87:66:9d: fa:6f:1e:db:a0:79:72:97:34:cc:e0:f7:a2:f5:7b:f7:38:6f: b7:ff:19:1f:a4:de:c6:a3:47:61:57:43:3d:ff:e1:18:52:03: cc:08:f0:0f:fd:d7:dd:58:2d:36:95:94:70:d3:90:9a:14:24: 8a:e3:69:ef:6c:82:15:c9:e0:69:80:d9:a1:93:d9:e6:1e:34: 70:c4:37:72:83:1a:bf:35:a7:7e:ff:59:45:f2:80:68:fc:dd: 3f:9f:9d:75:cd:2a:ab:b0:f6:44:89:cd:db:3a:1c:f3:38:b2: 8a:62:ed:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMECHDMdOqWlt7w4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk NzUzNDAxMDAtMzYyOS00ZDk5LTkyY2EtOTk0NTllYjJjYTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicl2l7dwCV0O9N71CFaRs7iUePH4YeUwRcHm yTVeHE1RUq/75SCpupxsYocqHV8l0YYllKvYYpGyHOSyZYhs+Job6rnpVEwueivX 5UY3RCBFMC7ZvxuRrDKj6IBaCK865tbv5kXSi72WooTjveTRZ/dD89YF8QkZ5nXx oeOodoCjvseqQ9wK75GpXQOxbIg0LPsSZx+JG4MHcCosC+gcUsM2YDgWfjlDCU/D TqzrsmrAbIj41rKkRTKx57jL/JsTLCSJqWOA+MxiqK9DSXPEY3JHhMhUwO+6YBxo NHDGMvJHIdABv499pqlTUZS6SefLmr/cyejU0t3bA0K4yKSUswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlC9el7v1MirvtR14vSqx7xlP7DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvZDg3MTZlZGMtZWU0MS0z OTcxLTlhODYtZDA4NTgwMWUwYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYEiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWHgBQqKTlrl0O+hQQreZsqgKtrOHfIlPewcbYygfGCDcpzNYBJl59v YQLL+QnIMyFM98sgqQcSFyEhwqLLDIpsKkTsKuTiVLWGj2MdMEV0ktff0i64ehcq Uf5JTuL87bqZhHzwBsr7s8H30TErwVFKq/tSJgkYOjhoGNEQukR3tzsyzpNBpyoY y+I/XodmnfpvHtugeXKXNMzg96L1e/c4b7f/GR+k3sajR2FXQz3/4RhSA8wI8A/9 191YLTaVlHDTkJoUJIrjae9sghXJ4GmA2aGT2eYeNHDEN3KDGr81p37/WUXygGj8 3T+fnXXNKquw9kSJzds6HPM4sopi7Ws= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:59 2025 by rpki-client