$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/e1d1fff1-9b27-33f2-b1dd-138e62de358e.roa File: e1d1fff1-9b27-33f2-b1dd-138e62de358e.roa (raw, json) Hash identifier: sEeVfXlXV/Ysl91oYrft/39JV347neJJFmQZTL/bo6o= Subject key identifier: 2D:98:79:21:C2:67:20:D5:63:87:3D:F6:A6:6F:AF:17:A7:40:0F:D2 Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F43285848854B485E0C42365DB2705180 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/e1d1fff1-9b27-33f2-b1dd-138e62de358e.roa Signing time: Sun 12 Jan 2025 14:00:53 +0000 ROA not before: Sun 12 Jan 2025 14:00:53 +0000 ROA not after: Sat 12 Apr 2025 13:00:53 +0000 asID: 931 IP address blocks: 161.129.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:85:4b:48:5e:0c:42:36:5d:b2:70:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Jan 12 14:00:53 2025 GMT Not After : Apr 12 13:00:53 2025 GMT Subject: CN=f21da460-a185-4a49-a374-85528f7a16ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:76:c6:fa:c1:87:f6:2e:40:18:fd:9a:93:c5: 92:90:a3:55:50:bf:fd:0e:e4:c8:06:e4:8b:0f:e2: f5:59:d4:50:0e:71:37:65:b5:83:31:3e:65:2f:21: 8f:90:2d:ef:11:eb:70:3d:03:a3:d8:98:95:65:af: 78:14:da:01:81:25:95:68:26:bb:da:e6:65:d2:02: 08:c5:8f:61:76:d3:92:3d:b6:0e:7b:6e:dc:76:b0: cb:ae:8d:7a:20:96:69:61:14:4a:c2:9d:ce:fc:a3: ed:af:27:c1:19:46:6e:e4:ab:18:71:63:7c:de:14: 5c:a1:31:b6:2a:e1:94:28:6e:cd:27:b9:10:8a:82: d6:89:83:0a:38:c1:1c:a3:d1:d9:84:7a:5c:31:51: fb:bf:79:d2:c3:f4:f5:c1:c6:39:fe:40:3a:e6:27: 11:b9:8b:48:48:aa:42:9c:8d:75:a4:c0:7b:a9:2c: 79:04:31:8b:c9:66:69:11:a5:77:34:bf:df:e3:fd: 7f:88:e8:6f:a0:73:e7:8d:4f:ef:5c:a3:8b:4f:5e: 22:6f:2b:a8:b0:1c:2a:b2:0b:6c:8c:64:f9:0a:f5: 59:3a:6f:fe:c4:6c:31:af:7f:dc:6a:cf:46:2c:b7: 8b:c1:6c:7d:a4:3a:e3:a4:8d:a3:82:bd:60:a4:5b: 8d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:98:79:21:C2:67:20:D5:63:87:3D:F6:A6:6F:AF:17:A7:40:0F:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/e1d1fff1-9b27-33f2-b1dd-138e62de358e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:ec:d4:82:af:72:56:9f:b4:7d:3d:dd:7b:2c:f9:7f:f5:f8: 45:97:b3:94:79:b9:a8:17:ac:8e:1f:97:6b:52:1f:96:03:fa: c7:fb:62:01:4a:5f:12:11:f1:a6:df:22:a4:d8:cc:6c:a4:02: 2b:e0:36:66:18:a3:7a:70:ae:dc:2d:de:0b:2a:ff:66:a0:19: 0d:b2:7f:5a:7f:12:bf:b9:13:75:0d:fe:60:73:4b:30:07:24: 03:93:5a:f4:04:a2:f7:46:51:bd:b8:1f:de:30:4b:58:4a:f0: a0:1c:cb:65:50:bf:e7:ef:74:23:c0:8e:12:4e:60:45:41:a6: c9:f8:f9:19:35:b2:0e:03:ec:f9:0c:74:35:b4:2a:a2:c8:7d: 9e:7c:a2:2a:c7:80:8d:83:8d:ab:22:6f:94:d9:7f:c2:5f:1a: 59:9f:9d:fb:28:e2:5d:59:88:c5:41:95:63:c5:80:be:99:e4: 05:bc:51:18:c4:b5:18:ac:d4:21:b0:8f:7a:e3:87:d9:28:27: 0b:c5:fc:7b:05:95:df:40:34:ae:69:0f:7a:f9:68:4a:cf:62: 69:54:b2:46:b1:f3:60:a8:cf:52:50:c1:fc:8d:12:52:89:32: 62:cb:ef:bd:67:04:39:58:31:a6:f5:42:05:fb:dc:5d:1a:0b: 8f:3d:f9:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFS0heDEI2XbJwUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk ZjIxZGE0NjAtYTE4NS00YTQ5LWEzNzQtODU1MjhmN2ExNmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznbG+sGH9i5AGP2ak8WSkKNVUL/9DuTIBuSL D+L1WdRQDnE3ZbWDMT5lLyGPkC3vEetwPQOj2JiVZa94FNoBgSWVaCa72uZl0gII xY9hdtOSPbYOe27cdrDLro16IJZpYRRKwp3O/KPtryfBGUZu5KsYcWN83hRcoTG2 KuGUKG7NJ7kQioLWiYMKOMEco9HZhHpcMVH7v3nSw/T1wcY5/kA65icRuYtISKpC nI11pMB7qSx5BDGLyWZpEaV3NL/f4/1/iOhvoHPnjU/vXKOLT14ibyuosBwqsgts jGT5CvVZOm/+xGwxr3/cas9GLLeLwWx9pDrjpI2jgr1gpFuN2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2YeSHCZyDVY4c99qZvrxenQA/SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvZTFkMWZmZjEtOWIyNy0z M2YyLWIxZGQtMTM4ZTYyZGUzNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYEsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJns1IKvclaftH093Xss+X/1+EWXs5R5uagXrI4fl2tSH5YD+sf7YgFK XxIR8abfIqTYzGykAivgNmYYo3pwrtwt3gsq/2agGQ2yf1p/Er+5E3UN/mBzSzAH JAOTWvQEovdGUb24H94wS1hK8KAcy2VQv+fvdCPAjhJOYEVBpsn4+Rk1sg4D7PkM dDW0KqLIfZ58oirHgI2Djasib5TZf8JfGlmfnfso4l1ZiMVBlWPFgL6Z5AW8URjE tRis1CGwj3rjh9koJwvF/HsFld9ANK5pD3r5aErPYmlUskax82Coz1JQwfyNElKJ MmLL771nBDlYMab1QgX73F0aC489+S4= -----END CERTIFICATE-----Generated at Fri Mar 14 09:51:39 2025 by rpki-client