$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/1273ba93-8d4f-3616-a6f4-93e0f63eee61.roa File: 1273ba93-8d4f-3616-a6f4-93e0f63eee61.roa (raw, json) Hash identifier: P1cCFWhSnTvkCj+IP2BR4ualTFgR8wnVJS6jut0f1tE= Subject key identifier: A4:FE:9E:36:F0:8F:88:76:44:A5:05:F5:2E:6B:61:73:D1:BD:D7:49 Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Certificate serial: 010D0C9F4328584832F02C1F397D4F3D9B706B00 Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/1273ba93-8d4f-3616-a6f4-93e0f63eee61.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 15347 IP address blocks: 63.161.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:2c:1f:39:7d:4f:3d:9b:70:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=41a067b9-52ba-43bc-95f7-36057bd5eeca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:29:7e:16:0d:68:9c:d2:9f:44:68:78:84:e6: b9:a2:87:9a:4f:64:6f:eb:d6:80:27:c5:6e:a8:b1: 62:c0:be:7f:77:03:7a:7d:e2:61:35:a9:91:d0:32: 09:b5:a9:aa:62:5b:a8:74:22:ad:49:c7:e9:f8:c3: f2:11:da:f8:ec:49:11:dd:09:5c:f3:ed:6e:8b:47: 10:5c:66:92:7c:3a:dd:09:a0:58:6f:1f:48:76:bb: 48:03:96:cb:91:fc:06:b1:4e:a1:dc:6a:de:57:0b: d6:57:bd:e8:0d:f4:8d:08:5f:ce:ab:39:90:fd:06: e7:0c:3d:ab:65:15:61:54:f2:ec:d9:29:26:fa:ec: 1f:87:80:6c:61:22:5c:cc:a7:e6:ba:c2:cf:58:1b: 2c:0a:d1:39:5b:2d:52:8b:8b:ba:5f:a3:b6:1f:2b: 6b:45:11:04:a6:4b:be:5d:b5:4a:2b:7f:f5:f0:15: 15:d0:8f:13:48:07:b2:26:b9:25:a7:a7:f3:09:13: 17:44:5e:77:dd:a9:a2:1c:6f:0a:43:bd:57:2a:02: 77:58:b0:a0:40:1a:25:48:be:95:27:fb:9c:bd:49: a6:f9:4b:b0:b0:f7:0a:5b:54:56:da:1b:fc:8a:32: 89:34:f5:89:8a:1a:cb:dd:1e:4a:5b:ff:68:5e:8e: 8f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FE:9E:36:F0:8F:88:76:44:A5:05:F5:2E:6B:61:73:D1:BD:D7:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/1273ba93-8d4f-3616-a6f4-93e0f63eee61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl X509v3 Authority Key Identifier: keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer sbgp-ipAddrBlock: critical IPv4: 63.161.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:c5:b9:b2:73:42:48:84:f5:b6:5f:a5:8b:b6:58:94:a1:24: 2f:0c:3b:0a:24:bd:8a:3a:e0:d3:55:8f:ce:ad:23:23:19:da: 51:09:ea:c9:0e:02:c0:5e:99:fc:fa:19:fb:81:12:07:48:a2: 3b:6b:d6:38:2c:d2:84:4a:0a:e9:a9:f0:8a:b6:b7:56:04:69: 6b:cc:32:de:b5:39:93:3b:ab:e0:bc:61:f9:02:85:36:2e:c5: 89:69:85:d2:da:4e:84:fb:8a:1b:be:13:ba:16:18:35:b7:17: 3a:1c:d0:a3:1e:53:7e:d2:b6:81:90:05:ec:6c:57:94:68:c9: d1:0f:88:49:83:f9:56:6e:f7:e5:2f:57:19:7e:71:00:7d:a6: b2:c9:74:62:22:79:87:f7:e1:d2:8c:f2:f0:c5:b5:4e:fd:85: 40:16:39:5f:3a:c2:71:9c:3c:66:6e:db:35:23:47:30:fd:52: b7:37:48:96:b8:d0:24:b2:b5:bc:86:5b:b9:51:fa:2c:d2:ec: 59:87:64:4d:d4:f4:4d:f0:61:3b:7b:83:c5:2b:a4:e5:0a:88: 94:27:b1:95:fd:63:8b:a3:04:a1:13:cf:a9:2f:66:ce:f6:77: 44:de:b1:0c:be:bb:32:b7:f6:93:44:31:58:e2:a2:2d:8c:82: 8e:27:96:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8CwfOX1PPZtwawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk ZjZkMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk NDFhMDY3YjktNTJiYS00M2JjLTk1ZjctMzYwNTdiZDVlZWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSl+Fg1onNKfRGh4hOa5ooeaT2Rv69aAJ8Vu qLFiwL5/dwN6feJhNamR0DIJtamqYluodCKtScfp+MPyEdr47EkR3Qlc8+1ui0cQ XGaSfDrdCaBYbx9IdrtIA5bLkfwGsU6h3GreVwvWV73oDfSNCF/OqzmQ/QbnDD2r ZRVhVPLs2Skm+uwfh4BsYSJczKfmusLPWBssCtE5Wy1Si4u6X6O2HytrRREEpku+ XbVKK3/18BUV0I8TSAeyJrklp6fzCRMXRF533amiHG8KQ71XKgJ3WLCgQBolSL6V J/ucvUmm+UuwsPcKW1RW2hv8ijKJNPWJihrL3R5KW/9oXo6PlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKT+njbwj4h2RKUF9S5rYXPRvddJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvMTI3M2JhOTMtOGQ0Zi0z NjE2LWE2ZjQtOTNlMGY2M2VlZTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCP6GkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXFubJzQkiE9bZfpYu2WJShJC8MOwokvYo64NNVj86tIyMZ2lEJ6skO AsBemfz6GfuBEgdIojtr1jgs0oRKCump8Iq2t1YEaWvMMt61OZM7q+C8YfkChTYu xYlphdLaToT7ihu+E7oWGDW3Fzoc0KMeU37StoGQBexsV5RoydEPiEmD+VZu9+Uv Vxl+cQB9prLJdGIieYf34dKM8vDFtU79hUAWOV86wnGcPGZu2zUjRzD9Urc3SJa4 0CSytbyGW7lR+izS7FmHZE3U9E3wYTt7g8UrpOUKiJQnsZX9Y4ujBKETz6kvZs72 d0TesQy+uzK39pNEMVjioi2Mgo4nljo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:41 2025 by rpki-client