$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/f63a9c1a-e317-37cb-b863-42b390358653.roa File: f63a9c1a-e317-37cb-b863-42b390358653.roa (raw, json) Hash identifier: yQp1qNm2Pto2sdk7tv5quCEKjY1twjQSUCBaE7X/BUM= Subject key identifier: 75:1D:19:2A:9C:E0:E2:93:A2:A7:DC:B2:AF:D8:DE:98:B7:52:B4:A4 Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F4328584913AC1BBCCA60F89E87C31D80 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/f63a9c1a-e317-37cb-b863-42b390358653.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 3356 IP address blocks: 161.129.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:1b:bc:ca:60:f8:9e:87:c3:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=b3123ce6-9865-4db2-bda0-4e1096af1b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:84:03:3e:a5:62:43:d8:49:9e:40:7b:96:f1: 49:c0:9d:a1:5b:7a:06:8d:cc:fa:af:f9:74:0a:f1: 45:d9:bd:23:25:12:3b:0a:8c:01:56:52:de:74:f1: b9:c5:02:6b:17:5b:5e:70:f7:32:72:6f:48:2d:97: 7d:53:bf:ab:36:ea:ca:8b:4e:e6:ad:0d:e9:33:65: 26:2e:96:49:ed:28:ad:a8:a8:44:dd:5c:09:8a:b1: 53:3d:d2:0e:23:d0:9e:39:4b:33:33:eb:d5:cd:a0: 46:b4:8d:73:77:30:55:75:a7:b2:76:d1:14:ea:ee: 02:a1:bf:9c:cd:a4:42:76:da:6c:fa:bb:7e:8f:f2: 90:24:7d:a4:cf:d1:21:4b:db:41:08:66:86:f4:23: 8c:a1:3c:14:39:c4:db:ad:4c:40:e8:c0:7e:a2:9f: 15:c3:5e:8a:18:c0:41:56:7b:99:c5:06:c8:8a:e8: 3a:5b:88:ef:b6:f4:2f:d0:04:23:c2:4f:81:ba:72: 1b:e7:b1:71:53:89:15:6d:0f:81:68:2b:f0:fa:ae: 55:cb:7f:8c:cc:36:70:aa:58:49:2c:b1:44:b0:eb: 02:89:9c:fb:b9:b1:7d:da:f1:67:30:5b:18:7f:78: 34:f1:49:97:f5:83:a3:74:97:cc:7a:10:28:50:2d: 9c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:1D:19:2A:9C:E0:E2:93:A2:A7:DC:B2:AF:D8:DE:98:B7:52:B4:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/f63a9c1a-e317-37cb-b863-42b390358653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:1a:0c:93:b9:31:65:55:6a:96:91:5a:93:66:48:74:18:a7: ad:55:91:f2:ee:4a:ab:08:ae:b5:6a:94:38:e9:46:d9:64:99: b3:e4:d3:01:e9:21:ad:f1:e9:9e:4d:c1:9e:b0:77:86:15:26: 3a:66:be:74:05:5d:33:43:ea:6e:2b:e7:a8:94:56:f2:c7:fb: b2:7f:9b:92:24:14:cf:58:fa:a0:06:da:e8:93:db:b3:7b:13: 5d:e0:83:c7:40:59:dd:74:82:de:d2:0f:60:29:dc:99:d0:63: 2c:0a:0a:c1:94:78:2b:46:0a:51:dd:8c:7b:0b:22:63:78:68: be:dd:26:0e:72:9f:ca:74:de:72:56:69:16:cf:31:e6:22:f3: 1e:74:5f:1f:5b:08:4b:24:a7:72:14:08:55:1d:d2:cb:d2:b8: 56:f3:be:b6:2e:c6:3c:47:67:e3:13:08:e5:bd:77:08:3e:c5: c4:a6:b1:d8:12:07:d5:9e:77:f5:1e:b2:c1:3a:34:49:01:23: 2c:56:0b:9b:4d:c8:76:85:25:a2:17:cf:e1:07:32:fb:c7:6d: df:97:2b:e1:70:c2:b2:69:b6:04:87:5c:df:fc:75:6f:95:04: 46:07:bd:4c:4a:63:1f:3a:32:cb:b4:f7:3d:b7:1a:d0:10:f0: f7:f7:11:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrBu8ymD4nofDHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk YjMxMjNjZTYtOTg2NS00ZGIyLWJkYTAtNGUxMDk2YWYxYjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIQDPqViQ9hJnkB7lvFJwJ2hW3oGjcz6r/l0 CvFF2b0jJRI7CowBVlLedPG5xQJrF1tecPcycm9ILZd9U7+rNurKi07mrQ3pM2Um LpZJ7SitqKhE3VwJirFTPdIOI9CeOUszM+vVzaBGtI1zdzBVdaeydtEU6u4Cob+c zaRCdtps+rt+j/KQJH2kz9EhS9tBCGaG9COMoTwUOcTbrUxA6MB+op8Vw16KGMBB VnuZxQbIiug6W4jvtvQv0AQjwk+BunIb57FxU4kVbQ+BaCvw+q5Vy3+MzDZwqlhJ LLFEsOsCiZz7ubF92vFnMFsYf3g08UmX9YOjdJfMehAoUC2cXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUdGSqc4OKToqfcsq/Y3pi3UrSkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvZjYzYTljMWEtZTMxNy0z N2NiLWI4NjMtNDJiMzkwMzU4NjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYEhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALcaDJO5MWVVapaRWpNmSHQYp61VkfLuSqsIrrVqlDjpRtlkmbPk0wHp Ia3x6Z5NwZ6wd4YVJjpmvnQFXTND6m4r56iUVvLH+7J/m5IkFM9Y+qAG2uiT27N7 E13gg8dAWd10gt7SD2Ap3JnQYywKCsGUeCtGClHdjHsLImN4aL7dJg5yn8p03nJW aRbPMeYi8x50Xx9bCEskp3IUCFUd0svSuFbzvrYuxjxHZ+MTCOW9dwg+xcSmsdgS B9Wed/UessE6NEkBIyxWC5tNyHaFJaIXz+EHMvvHbd+XK+FwwrJptgSHXN/8dW+V BEYHvUxKYx86Msu09z23GtAQ8Pf3EW0= -----END CERTIFICATE-----Generated at Fri Mar 14 08:38:01 2025 by rpki-client